last executing test programs: 22.687338837s ago: executing program 0 (id=778): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0x20000401) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) sendmmsg$inet(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c9", 0x5}], 0x1}}], 0x1, 0x4044805) recvfrom(r4, 0x0, 0x0, 0x40010061, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2ff3428d, 0x3}, 0x80) setns(r2, 0x66020000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x6, &(0x7f0000000280)={&(0x7f00000001c0)="852d43bc81524c092c99321fa9c73a0251c92e3375fa9cc4d84e4b465287f3cd29c7937effeaf57e42bd1d71f5ad52922c66c9dc60bd4dc96b154b6762649dd565ef6120896b4187be7070f98cda33b022e3d4c850994ec959f901461a9fb55fd2a272b39ba5e3b087d9503331ea8d49054feb87491ccab14fdb8664c2f8c0f577482b33702df5bba54e25a3e06896237ce7f878ef304a753e4f24a8616f2d5c469b2343b2131fd2e5395566ec3b483b0100490b", 0xb4}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) umount2(&(0x7f0000000040)='.\x00', 0x2) 22.631237647s ago: executing program 0 (id=779): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setuid(0xee01) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0xa5, 0x4) (async) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 22.626887997s ago: executing program 0 (id=780): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = dup2(r0, r0) write$UHID_INPUT(r1, &(0x7f0000000680)={0x8, {"63bb98e982b63fce08b9e66c0420d6c919edc5c1fcc9ca0d27930eaeaa0be5ac8426ae743dd6b69063ef36fdc2344171eca9fd6e62895e2794601e1a5b070c36afa6c14e03b0600aeee743ab62134285aeabb929265e158f3cfda967f65e07403ef1c5bddde2ab640d576903bba752fbb57fe40df583f5098ab09f4764339f8b01a3b1cc27a0318868daa44c32649420df5c0c27abe5131c06d17a743ed9382468065b6e85d31abe0ded394a5fbfc669259fb802db980173663eb673c4cbb703c9da025bfcc76733d84bd0ebf1a1f5ad7fdb12b239f822f2f6dfa13c3bc97abe56bccc257e1857926b95bcb952a535017f3fefa841589751b0d1ed2b75c9e316b12e0d113eca326da7c9a330dd56d887ca4745a7809b1e52249846e55a02ef95487a3b2f70b2adbecd6ddf3ecbf2618da645fa8bcc128e0404e52416a0db0f643d41adebfc8e6334d28d5d7f4c4890cf3eb450c025283696b38f7e49cfec8859bc0b5bc19019f6247258f27ff26eeccd4bfa3b1af1beee8a9ee2b71220de2ad7ce87d736bee56bb2f7221ba08de2d5cbe986c8ca005fa4ec08ca0352c1f605fa953c1190a926557fe2a706e3aba4eec5a9db46b3ddddef7ef4a1cc6fb905e6b6c93018cd6c40ef0fa94b8cf2b8d6a0f9961933e3d497e47b6cc1501f548e28c3509418317513072f86dfd6a41c3130f1eaf9d3648e1f03f3239cd50d02d10eab96d1c89b29ae0eb1367fcdd450534a90f349492a1cfdf3d71b8b0af9df91ce898253bf2719c0025a538a7e8e850d01e77ae3d1ae7c722ae3b1299e73bd0111dd9dd39219e68ce056d8fa186a1aa21f949d99ec73d58189f6a072cc416d0f40f38ad79ed37665f63e4f99fb836aa6b6a24682cd588a5a271db781069d8bd81b70f4f96e78f1a84f527ad5df7a4762501781ccf639c01c0d0012153d77a79a188571aad4cc7b616992d34c766565037cb4a64f6637eebeb6927d8b0ffd41b2e42cb76f9923958942fdd65ea587170c009c35ae3d0d50614a7ac04892f1255761a29c48e55a84051f4d56110e8283e9ae08205cbbc31789300d010153147d545598f846685937a8de10e05ce635ccc93a344a4ed4a4342b2274f0edf3929f0857136af5a546f18431cb23ec77fb9ad53f4e659406f8203cb3f83af5c6b95700cb58a347094fc7d30596796ee2f018f203911d8c7cd4717edd9027c5268d34fdb8d0c3abab2a3e08ee31c043a3a99845960b3ad07e1f6e94b71ad7957f5685593bff1c81b23d0a3818f58b97c0d18fec65c1b6ee853b8b7fad53379feb7f5657c78d582fb7f2c82350df8d70958abf3769573ac26bfaf4b2f71d2252964552ee5d39c00111f751e4e229ea700b026c2e802f26f3898ae28313e0e08d70c66642e4cf240de4fcf3bc14419ddbe91fd3fb234b286512e6ba28f228175963cf7989e4444531ec64ea6d0812b508e4feb86c1afe733ef945362727d2b2accca03ab37f0464621c40e4233bcbbf7ddfab683f01ee2d9ed979ded6ff9e8d730bcb89c3988fe27dc67b0c286c3ad81199e2ea88f1b65277ab976fcac628324f7ce4c2279d9962e628a68380301410f59976e17f8eac1a0dd5c72731df0abcca3d823b67ce195efaf898e071ef0aa5552405648641b6e3ed302eb0351bca1e2a0a7ed3a1ca039548076cc76cd5854e4f0a052275ec652744a38d73511af1525ab20299002bf32ed995e15feaf046b71ed500ec0991a3bc8d599b5178029aaaf00d96da879f7429956b7a3331d58eb5bf08b829b659659b1a47a41801bc2757da5291b9ec8095f6fd318e4723bbc6758dbfc8d3f63d8a94ac69db23a0ff859ec40526b19d98d16e0d618fce7925fd305734e3ad3b50b5b2a2706da22f9dfb14526e0503cae19e3612f95d7ffd2355af9bf68fb538cbb9ec9e41dd043c356d3c2b2517373f20e9fdbad0e2404ddba784198449aefd5be8e8368a5cd1a5f420010387397e3992f9a2bf54c74c59fd02f734c5d7577ab533ad64f318d4946a2a006b0f7c052fdfe5fdec3df702b5cb9539001b2371d732e88f121d79eaa5fcfd4b74dd3e03db46af10d26fe1956283da34f5034a47300b65c4adf804761705c8dc36755b5a2708ad256ecb64d46a6d8e326ac29d833f495563aed0f7fae0850d2da03f5e0ff143b295530d0fc869e14a97ec6411c92243bb5761f825403e41dd180bd312b73030fd8ca5a3bac005c9e9f5aac6715532ccbfc4f7974312e259058ba11e9b25910a75c2969e6429b7713bd6fe71420026160a0349f9b38672263aaf126b7018997c10ebd9022b4b0d4feb75202ade83513e9428f700070a67208d5451babefc2d01c04b04776e800c71b49de1aef0788028bf977b39329d4bf78a7603004f9af00a98b173e0ff4040cf423b994ef904f7e6315ca884acc1c9defee4b5e5dd4a0f7094ceb8b8a1f91bba0df3e5ebbfbd918760bde69a9712756d40a571773fb216496a60bc45d9756622aa1e013cd9e29bdeeb9b559d7b99f0358cb83ce8963e4e43de9e6a1b9863cf66d35c37a661d4fb566bf738e08061e35a33a44aeffe12f4167294ed4357103185f8fcee0cbf1b48d3ec8be641f433c3a073da0340a1f9f4a7f6553072ca75e8700fc4935947517ff7a68f093bb765e6dec815288f2b2e81bb0c0834d740d741389bc86edb3e66552411bd54b525cc4a93eeb07b47dc7c1c23aca18986cf80306550e5893467f94de3b362bb711a9e1e0886060ce6b2ba5a1e5fd290d8b930c1a1a6256d92b58766a9f636f351e53c76ae0b6d61b1853925e1e3ec2d8bc5fa9d70621768fe93daa6f759cb58148946ee3bbc117a1e6af9508a292011aee6f00f7865746a49cfb9674af7cf53d51a6edf9022162d7d4209c180dbd8d94d9f3164856f8cd360596d7036d2f0bbe4063e60cdb1483a76aa3d1aab663e661976e3e4be8f28a894362f1d5adb1f8df1ba6f15f9622f714966e723f6f95a564b155fa152d2de9ca0c4e142490aa526286dabfaf69eb004f2683895318cf99d190421463076b57a3a584e723c136e005a177f181f51a69b80936f9753b0b6600f752b9534889877ec9d0e49dce7a439cd99b1da35f0f203245af903c2a64a01209bd10f59de84784ee7d9d06522a8cb435f2b56fb51b890ddab4e047794d0391f9df38c62232c974034d777b909dbec35962c1a2bc4b4d226fbc1dc66425d43c79496b8a2d99dc06a97ea211022a55a434c32e799ee6874b9e4c0c300fc6baf53165a3d21ccbc64268139eff3dd845d850f680f62692472b1aa68de05048ba95cdd21f86ec09634f9343cc57b684dd8fe2beb50246301a0e7464d7987ba976466672091c017636b4b2b02c50f914ef7d2e406952d0b0ec733de122421e775c0be8c3d11cd52d55666c6648f0028c4da1e7be87c7ad5c0a4784c4c65e4d100b2586b4905111c3fb35b9cdb4283de97f8554239cb080e8bd918e591b53f31181704428222e9fa844b4b75d9f0aa52b085b98581b0d86e0713a47d6994dd6d56800c1ba163f2c4c094cf4400721534e9855febe7867a129e7473bc51fa235b9361bbb6c6926b104de83a2048a58fc9fece5d65b39e3ea8e5847225f10980e3b27e13730dd48dbf5cfb29414a6aba37efbd958f8c09488f2d6dea5fa61bd3df0b102280acd8727ad123068c516037d15d9f32a3cc5db47f3bb59ef285c6ef9b79fbbfee3a63b699ce4a70a1ae9770560e6d7ed446b1b4d745e0ae54ed83a1e86a9b9703498b04badf6f20a04f48f712a359c6fcec0ac2168d4c01a3e10ff63e8edd50015fa60ba27d55dba76aa741035ef26cc7814367418d891943bfd23bde35e20eb4e48b9de7ab2b9df928dbc0e4574084af3c78c19aff76b4840a0a7da3efc98adbccb2268ee9416bf2efa5a84c6eb1988b33c0b4995f41273edc5423cc94f8fb8a801c0e12898b1182052de2c89561fb6d90fc825d14714333230b4bd9cb1e6a2f750c7dc221336b4bf6562b29aff6dd3eca092546503aa67745c1fe8a700f5a881cef2c74276ea2c2d76024aecc40a74f9bd79d264cf81fc868b7a294142434c95b6e36513fa64c891496e994f5bc48f2d6d4511e0d882e3064af93db066283d911687d703c6b62e743e0602645f0abff13acf5292d901a897e544d82bb0037e8f45bcb594a87803d695c7843178d093b5284090c43659c2820f162d868c4598c59415bcbadd8b51c08cf638ad607c7144a1196acaedf0aaf1d49c335a416ccc1c10acb97f1653c18130b32417d0d4472574687e733618eb858d377a8fec61ce19045ddf44cbbdd02815f33bac4e93a3456892b9aeca171a338445ffadf99a37d907af706a860e71c24ce5dfb5f84a3ebdf4e7b85d6c5b0d4e0d4c482a9bb117ea2bccde5da207ea7ea5af6e810cffa410e9601cbe89a2af3bcfbbbb81088f66de106e8eb0f8618686df780a063728ae7689a171bd5b1cb3d9394799c13093055c66494ae1a36c9799a1fe683989cf210e35af7abdd27cb080217c06b37677157d88526c74c331d6be9b525aa21eda40345a9da060fe97a050458f7f13fd77b449e081dd857b3064bc091487046e7999f3e0d19a0ac5b2da29faab7ce266e0b10a04ecc761bcf7f59f8145b678e6b13b9cc842058e3f2091d28094ac11fcd0fa41863e9043d0e09f86099d7d59b6a8e9d24f8866b7e66fe9dd4bd3e689cd39e1fc0f371d7c6899b997ef828b73a6349e0f65114f67c5de4f226a1714dc4e960709d06dc64c642b8a07a882033334147453f56552d27015e5bfb0d268ae00b5a7b5e1da98a57fa1d30219fc350190bf5876a6364fc5d52ba3c73b9d14bbfcda200f3e55d384e41fdc294bfbe2993f047fa5eecaae4e8c1ae0e3b99aa5792f2240eff0fce1f197fe9a26827c68cacdeb70c2f76ac73bf6cfc85228c4a3acf56b7ff717bfb1aad5b738e9bedededae87c95218f0272b6085e36bfb546c4fd3c9c1ab08bc7d550c0e437183ffd1fdbfd16d1ebc9577fa063558feae45971767c553081497de6bdf632f727aa04d624e28086129226f2c6ad9372aeac272409af4f7e8df7fc434443482076c3848156f64e7e83157a01fb6d139b8e3422ecdce07240beac1e8065bb975f8fd59e3ef5b095cb7b724ed0fc655fa1073f1311ff95023d88b1c4ba2e80404e0ba2ec8eb741b40b00489b8952cc89d55748099a2eabd898602616a0d5d446ede0ad1b430d063b9814e6e6a33fdff15dd96594167e5a56fe9b72bd28504676898693181ba278c3433a400dbb7b94473a69d24e0d614a24b98131761bcfad8d4697da32dadad593d1f9a8896d0cc79990623158900f7dfdc90b6ad9e426129fe7d8ae1d705ebc5d9a40500675b7cd7164588446b0865312946a4e35cc42e23a042b4d4efb8050cc998b1ef9eed54596934cb71928c39ca6ca76a47fac6df7025f8bb3333b827339336f5f81f708f71d621b224076e837b748837fdcdbbef352b31cd3fa9bd39e1c0f18f0b1accf864d79e02481b02bc6aae751aa0292a1ecf4d5aaa4bc7cc8a88ed47d11287ca08e7a1d99df99764be133a01a475607e1ec7621c4e9d38d405349d7fd81658e76a413695807c1f791a31d356882bd33175b59f9066b78c75a92ceaae400d59f98763c264a690bc61c6810792514d8b33b1d77494456074f9e20a2ab6fc7814be0eb51548224eefec7b4f5a3005f7c1e512c93b2dc5e13f1df13eda3b7c6191860310373a16343969f810d3d8b4d41f81da657a7f6d4ed117e61c3e59bd51571c302aa9c3cefe0ebe", 0x1000}}, 0x1006) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xea) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 22.626619338s ago: executing program 0 (id=781): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x38}, 0x40000000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000300)="120000001200e7ef007b00000000000000a1", 0x12, 0x4040094, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') setresuid(r1, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x38}, 0x40000000) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendto(r2, &(0x7f0000000300)="120000001200e7ef007b00000000000000a1", 0x12, 0x4040094, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) (async) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') (async) setresuid(r1, r1, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) 22.626398487s ago: executing program 0 (id=782): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000000c0)=""/130) 22.520588069s ago: executing program 0 (id=783): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) close_range(r1, 0xffffffffffffffff, 0x0) 22.47158321s ago: executing program 32 (id=783): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) close_range(r1, 0xffffffffffffffff, 0x0) 4.849693587s ago: executing program 4 (id=1154): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in6=@loopback, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0xfffffffffffffffe}, {0x0, 0x200000, 0x7}, {0x40000, 0xeffffffd, 0xae8}, 0x0, 0x3504, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}]}, 0x10c}}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000680)={0x0, 0x6, [0x6, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0xffff]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1bb30100000002000000010000000c00060002"], 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x48c4) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1bb30100000002000000010000000c00060002"], 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x48c4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r5) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r6, 0x7adab3cb125c37a1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40405}, 0x20) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf7}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf7}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000180)={0x0, 0x4}, 0x2) (async) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000180)={0x0, 0x4}, 0x2) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r8, &(0x7f0000000040)="0e00", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) sendto$inet(r8, &(0x7f0000000040)="0e00", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) read$eventfd(r2, &(0x7f0000000080), 0x8) (async) read$eventfd(r2, &(0x7f0000000080), 0x8) 4.784049678s ago: executing program 4 (id=1155): syslog(0x9, &(0x7f0000000040)=""/100, 0x64) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x800000}}], 0x18}, 0x4044) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000180)=0x3, 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x4, 0x1c}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 4.768726588s ago: executing program 4 (id=1156): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x8, 0x6b, {0x6b, 0x19, "72f8202b5d76232ce263d695401b79abd715db54d83487f2629cec135722dc18ff8cdd7d427347d2bd3fc9e8f5cb68fdff83c1f0db8eacfe84db933e8472780835ab53f8147ad40ddf2c907fa135b7d4e2687043d2ff99ff9f3565b3524bc7baf343dcb3ae42baee79"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}}, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x40, 0xc, 0x4e, "7d0689ea0efd92992510da12ca9bd3657de56edc22e53d796ec41a107dc5c3cb4d4f4711ca5934e28fba00e34bdc31632c65adf890301061a0248c33cff62a5dd612d2e60b30b9667a9625887938"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000240)={0xc0, 0x5, 0x3, "352b9e"}, &(0x7f0000000280)={0x40, 0x5, 0x1, "f1"}}) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x40, 0x22, 0x33, {0x33, 0xf, "b700f423fddf816103f45aa625bf5e2ab86777241d6a16a017623e0e55e33cf63748fa684701db65d4033407a6be67b5e9"}}, &(0x7f0000000340)={0x0, 0x3, 0x92, @string={0x92, 0x3, "8aee6b22cada5aa149845977e2a73eef1eb3391f9c7f0d7f0e4294a20245f01807bf226a69600a112754bdfa12a90580dc9d8a475cc621945b575bdd59f1676cbd96a108603b3e3f7f285ec700267fcea1e1d1f59c90c4055e6e96d8903db513168c5c951ca1f05870af6184794f4ed3140cfd1fd8ede221b23cf6ee133bc2fc5b9286e6ce88fb89b521b1c71b731bc3"}}, &(0x7f0000000400)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xf9, 0xf, 0x2}, @ptm_cap={0x3}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc0, 0x7e, 0xd6, 0xc6, "2fb89e2a", "6515e5e5"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x1, 0x0, 0x0, 0xc, 0x7ff, 0x9}}}, &(0x7f0000000940)={0x84, &(0x7f0000000500)={0x40, 0x17, 0x72, "247a8885f8d5028d20b7abc8caadb57ab74295c6d62e3d0ab7938f52c57e2bb4b2659c34faa886bef348f1b0134484bc237e86a2af85113d6828b0f6f2e7cba16593e5781e7003e34a291615af2e1b4c38b08e301bc46550dcf2041a8406a7f7746e62abed7c2051725ca266878ab74ed662"}, &(0x7f0000000580)={0x0, 0xa, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x2, 0x8}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000006c0)={0x40, 0x9, 0x1}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ad90"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000780)={0x40, 0x13, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x17, 0x6}, &(0x7f0000000800)={0x40, 0x19, 0x2, "e688"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x2}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0xf}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xbd}}) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000b80)={0x14, &(0x7f0000000a00)={0x40, 0xc, 0x83, {0x83, 0xb, "1282d9fbb47be19490f957bb001899ac0acf8ed01f07a874b874f27f21ad4557ffbaf497dcc932e04dcdddf651eaaa13247452b2fcd753a0e400b7e76c43f2625e7070535312b59d33f0deed58e044f90a6bb44bcfeee6119b05c00112f3f72cb398854c6e072db6ed3db6a11099414318234aee9b0a9b61a4313fd034833f48d3"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x8c, @string={0x8c, 0x3, "d344215857369ed8bd4aded6f7e8b37446dd38a1e5ebe9eb71f908b13f426ca8e76ff03f430f3c8a02e2ec969a31621e925c2772af4ea9e4d5d87a9659408a2d40bf0c75d97c1878a3ff7de5453667f754b8d247721d8a0ffa46af69404d58afae9c6db0508eda07eb4744e9e1aa52de902342caf4a2ec70cb3c605aa8c632f5e4d363771dd11c1338e6"}}}, &(0x7f0000000dc0)={0x2c, &(0x7f0000000bc0)={0x20, 0x30, 0xc5, "9d8c66ade7466fbbc3c8eb4c78b240e623ce4386b7581e8a4f0e98f633b383d54102e1990c0cbc78927f0cf6b208baa67ef079c67a00bb57f8935981678c88f2b47b5b87e667bf13c244570fc07f49860bc8fab9d450311538b4e331a5804b68e7c77f4dd0b6da416088c7155696dc052e2cc606c6c4217d604e580044d6ddd94d5ecf8846fea7dea55c117f9d34ca63075c75dd53db56571bd702bb28efd140574e6832c8889e4ce7243a549be011f99760f52aedf2fca711b7f70ee2d773fae42e1b2e64"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x9f}, &(0x7f0000000d40)={0xc0, 0x5, 0x2, '4!'}, &(0x7f0000000d80)}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000e00)='./binderfs2/binder1\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000ec0)={0x14, 0x0, &(0x7f0000000e40)=[@enter_looper, @exit_looper, @dead_binder_done], 0x12, 0x0, &(0x7f0000000e80)="09976fd3c5110899eb666f6c6476c8d6ce94"}) mount(&(0x7f0000000f00)=@rnullb, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)='romfs\x00', 0x202c000, 0x0) close_range(r1, r1, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001100)={0x58, 0x0, &(0x7f0000000fc0)=[@increfs_done, @clear_death={0x400c630f, 0x3}, @enter_looper, @enter_looper, @enter_looper, @enter_looper, @acquire={0x40046305, 0x3}, @free_buffer={0x40086303, r2}, @acquire, @release={0x40046306, 0x3}], 0x90, 0x0, &(0x7f0000001040)="8a37771a173432fe8149df322fbe1e46683a3d92ce96c5b7f816409f46be5b340f0e62a04a5e85d2c44071c9ff6a829b678b7cb724a9e748c86b936c159539e033725ab940067a56d8506519754bb72e0cf2254c25aff38187c48d0c8985fb1fb2c7eda404dc092004d08d7088753c2f32b6f72f60cffcf62077630730d92aeb280201ce324049567b489e8e21118e65"}) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000012c0)={0x1, 0x1, 0x1000, 0x55, &(0x7f0000001140)="a81f8be4cc5ff62b8f619c97fa68a7624525f8f5ab7189619a2c93305dc3a8f70513ad0e5cd4db41f8d7f6de0b32d6efe38a74f2812a2df20e6d7185714a8fa783757e4225c3c50fe9800dcdf67d09df1036649171", 0xf4, 0x0, &(0x7f00000011c0)="93f8005cfb4530a1f81fd087e4821071570537327110c88c80e8d56724e33979cd4fa1fca591da1cc6b8968926528755eee35f94b58313690369c1bd32e63201e8374256f88531ae5d1f02707143c2ffe7fa367c36a054d3571d2643f3c3a986b753f0cd2bcb0b050025f8586f91e171fc05a344fb1fb30bdb2cbf5fb1dfc4a461fb3f967b47f4364abc577401c83a201515f5fd7544f841655e2012880540a99451c4e55ad31d46f6e8a528f2fc628c1ad7367814f7de669f096b751d19a417888d5f4e019362ac16feaced4bbe1ff40927d5a639f4337cbc161b47f9c24447a56fa0cdac9f27930b2fd71e6fa8f162f5b25b8c"}) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000001440)={0x14, &(0x7f0000001340)={0x40, 0x23, 0xb1, {0xb1, 0x1, "fe23ce201ee7cc31355f91293f1f136df77bec68aa9cecdf580b6208b043bfa4e40528c361c8d7e7c8f7367ff2b5500a9c508c8ffd9d151a120593f444e11ef589b9f5078d869e762a5d059069d44d375e144db0699fd51c364f5602110a12c0f4e5bf63f082041c40c43f17cbc5f07f5ea5eda281f2784b4df6bfc9337b2b30deb2633f638fbda2de286d0a3aa86e9270ce3504f09ad192ca77955d40344d9cba9ee9944e54a50b84f42fadee1c14"}}, &(0x7f0000001400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}}, &(0x7f0000001a00)={0x1c, &(0x7f0000001480)={0x60, 0x31, 0xd7, "7905ddc775aa47f70af508e6834bafc45ba43c598828319a501ccf9cd0edef989a98aed7e61468ff3aa4a156817f2c1f6dbd333443349e9f676e22018d98c489dc58a0d7d9f8e838732e8092c915ecdfdf43bc65048118eb63d5861f3f998076544b8d8d36a2512d1569777253094b4d660a1dfa45019ed0176a460998ddad4c7fa477a72d397417f5e5b43b382f7fbe46b14288a1da2c526e90865d78f51fbef19e74393c8ad86162f18b513e0c49bcb2c9ea929f20b3d4def35a71b5eaf6e20d0b29a6fb3563637334abe87112ecdca44e9ab0cc3a8f"}, &(0x7f0000001580)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000019c0)={0x21, 0x0, 0x3, "7326e6"}}) eventfd2(0x2, 0x40000) syz_usb_control_io$rtl8150(r0, &(0x7f0000001c00)={0x14, &(0x7f0000001a40)={0x0, 0xe, 0xf0, {0xf0, 0x22, "a88ed5600b9ac6e5830399d4d2cf90b6b101eb5563d010074b9e96727a1dc2728ef81da116aee6ee38360642be46e59c07a720896ef8ac6a7944e19ede712caf6fd1b6a40663655861e4d14bcc4a5c7fce020281cfc98e68e7727369a5132146106bb56fac413542ccb0edd476c142fc1c115bf6f6355b2883cf539700853700706be063f7ca905dd58ce6decc15f6ca87ed222e1977f63e3a76518820d76c8ce1f84312b2a50a427425503b9d39170a9f371b6ab267e5cd89210a7d55aadca6a26927215005a88b8ed8118c132868f785a664120e858e9202f26323594e0484323889061fb346ce6a355470dbba"}}, &(0x7f0000001b40)={0x0, 0x3, 0xba, @string={0xba, 0x3, "71c878293351066d6656c598a6b800c15959fc457adb0b7d0d56f21a5856bd4ae74073d01fcdb02ee0ffaf4b0c77bd71167f004f9f68c0ff6a2460594467e9dba7b8ad23dfda4ae063fab252cd991d9deee2d99a1ba9df04510ac24ad276ea9c5990ae076532960ba68607c392ee483c0f39f537652f31a86b4c1a9a22fd4e274884b8ea8d614f2c784e9faeb4618dfba7421882f80cf08df3f20b7fa0c947a27b4a1dac977cb478b235d6cf95371beb240b391162762731"}}}, &(0x7f0000001dc0)={0x2c, &(0x7f0000001c40)={0x40, 0x23, 0x5a, "206fe280d284fc539a0358e4f0af1315b99493b20a52e74a364015b0511978edd18202b73ca5e8c5e37a1ac4eae13427923f3d1307531a4816144ff0727b438419fe4c26c32236815cb9b376af322af66ec3cc6d9104eb980f4a"}, &(0x7f0000001cc0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001d00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001d40)={0xc0, 0x5, 0x2, 'p5'}, &(0x7f0000001d80)}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001e00)={0x2, {{0xa, 0x4e23, 0xe0ab263, @remote, 0xea3}}, 0x1}, 0x90) syz_usb_ep_write(r0, 0x7f, 0xce, &(0x7f0000001ec0)="1a1bef3df66ba722c36791ebbf343cb55c82176aa0ef83fc3cee8e6c641fbaee7180eca9dfaf750e7b4eff45fd91559e983a9dbbed99a1f9d4e990d6a6b90ecf7d765f2d680360ac1be3c95569a63fcb567f28a139f2a61befc27a8157bbfdc405e4bbdcbb4071ea467b717f2049b2d1246343c9c80fb62747d38bd8131174a6dbbe2c7790eb779cb88f79b0406b24e74d2fb9a3da60110d3a08c97c6dffdd23c5e1d4c6b4dbb58546d45881ba6de31db6affaebba2feb5dbd82b51e1fcf0a8d53277754d4cf7451a5cc21a8eec5") ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000001fc0)) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002000), 0x42000, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SEND(r5, 0x40489426, &(0x7f0000002080)={{r6}, 0x6, &(0x7f0000002040)=[0x0, 0x9, 0x9, 0x1, 0x8, 0xc], 0x80000001, 0xa}) getresuid(&(0x7f0000002100), &(0x7f0000002140)=0x0, &(0x7f0000002180)) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000502, r7, &(0x7f00000021c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000002200)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000002240)={0x1d, r8}, 0x10) fcntl$dupfd(r3, 0x406, r1) r9 = syz_usb_connect$uac1(0x4, 0xfd, &(0x7f0000002280)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xeb, 0x3, 0x1, 0xd7, 0x0, 0xb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x1}, [@feature_unit={0xd, 0x24, 0x6, 0x6, 0x1, 0x3, [0x9, 0x1, 0x3], 0x1}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x9, "3b6e3d24da5a"}, @feature_unit={0xf, 0x24, 0x6, 0x9, 0x1, 0x4, [0x4, 0x9, 0x8, 0x8], 0x5}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x2, 0x6, [0x4, 0x1, 0x7, 0x9, 0x1, 0x1], 0x2a}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x305, 0x3, 0x4, 0x29}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x2, 0x80, '<'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x4, 0x8, 0x80, "", "996c"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xff, 0x2, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x9, 0x9, {0x7, 0x25, 0x1, 0x1, 0x0, 0x7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xfff9, 0x10, 0x7, "2f01055b47dcf943"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x3, 0x9, "e81ebd"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2, 0x4, 0x80, 0x5}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x6, 0x200, 0x4, "af"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xc5, 0x80, 0x0, {0x7, 0x25, 0x1, 0x1, 0x2, 0x5}}}}}}}]}}, &(0x7f0000002600)={0xa, &(0x7f0000002380)={0xa, 0x6, 0x200, 0x7, 0x7, 0x5, 0x8, 0x17}, 0xc, &(0x7f00000023c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0xc, 0x2, 0x6}]}, 0x4, [{0x4, &(0x7f0000002400)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000002440)=@lang_id={0x4, 0x3, 0x1007}}, {0x62, &(0x7f0000002480)=@string={0x62, 0x3, "e0b9dfd51658eead54282d7b99eef9d8c907643c9247263e80f49b39539af232cff0d304c5d80ec433a395481ec2a70fefa58fb022ec27cd25119b6e29b07be65d059030382117a3348c4f53124ecb6a55938ecba30ae11d53b9de3cc31a0fad"}}, {0xcc, &(0x7f0000002500)=@string={0xcc, 0x3, "2baa8449dc42053f35c4d604256cf8811b49fa7647f7aaec69fd02ae7b5cb71ea6ff48d207b36f33f7e881b8cee64700c8399362dd7edc09cbde4aa499b2aa28bbe0df83954724de3faf7c946ed80a82e8d0e188679cf96b2bf940db61e9d07be645fbc2156a1d17fdcf576375c6791abf2ddd2a824647006026fb82fc456dd2f4c491ef499399488a2b3d9cc05d211210fac097832a41eb0bce6549a9bfb7afe4cd26202aff14e0e0a3eec9be128797f88714b50792df541c34d8146610cd32838b9967f4f06aee76f1"}}]}) syz_usb_control_io$uac1(r9, &(0x7f0000002780)={0x14, &(0x7f0000002680)={0x40, 0x11, 0x81, {0x81, 0xd, "eb9e482f5c187774ca1b2c0dbf839c1c6a92c297f77abb84e6fc1bc0967d8bfc73cc1a2d91dc926ee19e6eba014e930fa28838b488a1da4d6df7114e802112a970a1f887c4eed99cbb4890c4307267178f637be002f91362a0dad5022413c553adb80ea71060b283acd028fd39cde3a5ec76abedacf0597a88661c72f5e8ce"}}, &(0x7f0000002740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441e}}}, &(0x7f0000002a40)={0x44, &(0x7f00000027c0)={0x40, 0x5, 0xb5, "d96010a535c0903b1046ca0172b4ce372c3068a2aa2bc6d2a04fc5c0d1a374628293e0475ca9a82eca819e89ce1f9ed5f08d3e2af4d0668b0ae931349cce83f2f0c40ef7d8d3bdbff70d1928488cf114b76cfe73bdfd66f2dfe5886c0da400428ebf0885c8a715f109c66df39695b21f1e944d77a1cabc5400a45b0874c7f3e91357d243c76df67cd54967d8efe52710ac1377b5af90565404d808ac74b81a13637dd8c254f48063ff768cfd8c96650ef103403011"}, &(0x7f0000002880)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000028c0)={0x0, 0x8, 0x1, 0x30}, &(0x7f0000002900)={0x20, 0x81, 0x1, "1f"}, &(0x7f0000002940)={0x20, 0x82, 0x1, "9c"}, &(0x7f0000002980)={0x20, 0x83, 0x3, "e851ef"}, &(0x7f00000029c0)={0x20, 0x84, 0x1, "84"}, &(0x7f0000002a00)={0x20, 0x85, 0x3, "053d8b"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000002b40)={0x14, &(0x7f0000002ac0)={0x0, 0x0, 0x10, {0x10, 0x23, "7c8ddf3b9c132dc26fe89c5fcc1f"}}, &(0x7f0000002b00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002e40)={0x44, &(0x7f0000002b80)={0x40, 0x0, 0xf9, "0517acb5083a3381f4d05f854a7781a0b1270aa9a7721ff6d93e1606d5048659afa80671e9f8692434acc774db6518799791995d0ddb0bc6303632857127d95526b6735bff6c5f99b98062384cb77c309f934ad5270793b10644d64e2ad97dee572c354a5f80584506146613b8533fd69be81ee82838b2e7b536b58f5de05f5f049b2ea28c6894e987a4bc65d10a8c370d1f0f03cd6c4eb3f312eadf7dc1b44d301b12e669e09f2f24db1ba0972fae33eb608619da63753d11c7c257dfb78b2ebe9f82440ab0c566ddecf1e70069168e445f5fa4ab450f39ab571cd93e8dff78737ea82ecfdc267249755d956859af565f02371c6340bd51a3"}, &(0x7f0000002c80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000002cc0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000002d00)={0x20, 0x80, 0x1c, {0x9, 0x0, 0x4, 0x1, 0x2040, 0x7ff, 0x8, 0x1, 0xa8b, 0xfff0, 0x0, 0x2}}, &(0x7f0000002d40)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000002d80)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000002dc0)={0x20, 0x87, 0x2, 0xf4}, &(0x7f0000002e00)={0x20, 0x89, 0x2, 0x1}}) 1.969424602s ago: executing program 4 (id=1176): prctl$PR_MCE_KILL(0x21, 0x1, 0x1) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000081c09668800000000000109022400010000000f0904000004030000000921faff0890a98b1e09058103ff03c9ff"], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x200000, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xffff8000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 1.918907673s ago: executing program 1 (id=1177): write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000010c0)={0x8, {"df1fa9059a4c091c758cd7b7a6be81449507952dd472d854ef991ad8df47e6c2aa1e4dd11341fd14ab425baeeb5c4649c921a4509c62d9f69473bf86458a6e1a0e91a8347616ac37c34bc740129ea5730b5085e153d178b5cfca0478c31e7ef042478c964585d1a75c6b22753c8f9e7b57ad1ce14bac64d7163d852a43d52c008b011a001ffa220f58b199b293a48d9fc1a6c32208fe5cf9a3fcfb7f7c2f4fe6e4edab580fc50cd220c0d443918a1404aac8272d7834e3265dd2c452a6e262bac7a485d5bc5662a8a2a1f7a7e153f6b4657e1441193767d7293760fc02c62a9279766b2c5bbb182227813fbf0d059a01bc49e5ef5527d29862f10c2483c1ef0afb01443ab66a84349b9e5e760afad00677597de307bb9d3c56849963588c3aaebd80440c3e57cec4cd58aed7d4c072f1300ae49df51930f7811d4334c1908fa9b1548527c7f220051c12f54a8ab71acf2629e5689cc2c25d6bdc9f04e1d9b8f85f8c070705ca9cef7a2d17562b71cc0cd1ffac12c851983c86adc52eb41386f43b74e21edf0d437d2f33468bdca5dbdabe1d14efae2a0732828821c39a67c14bba0239b711db56865be2f3334832842ad5f4b30457d540bd107e75aa510b94f26f9dd510cf76c2778878b259896e9155fea5c2f055f2a9e749380d691f2c03505a7971f8c94765d18a69de5430e18c5b961320702d938ccb78e449ba00317981151563e2287a88066d2161e5966b403449472af1529d1138fd97d59cdb44117713fac7cbcc5f89776bd09d51cf4f3f1e2f41d8c280125d09a2e45a57c9572e35e4ff421e9834ac31b2e26eab7a514540e987b98cccfd910eccdc1cc8b266f6f9efd02f7fb4a5de38e9439445c2621e4d00f5b9dc7add1e8c889506f69e1134772b1ed1bf54c565447fe25cb08afa5d4f15e0c57e80b803d8f1eeb98b164abfe96b66528b065b61cb7d4ac9346140dbcc9c3fe38c88899126515f5bb651c723c672618af98a287d9d2932f4b23aef86eca08b7e20bd344ed8b50da3f62fb56e1d5718a5e1eb78010198e3eba10eacccc5f71e9b79f6254008ce86e85a8380c77148416c2f363966ac8c4d28db441535244a3c43dc160ba0e5d9317408c7f92607d8cf1ce647b446b3d9f43eb6f0d2f876f5283ce1023437b3aecbcc9f18f9e2b9959b6e337d9835858be1a3685d6459ea7ec9ee97466bcd0f23be06f26d6a5c40412dc16ff751322dad2a5327c3836c6e526cb3363b52e135bc83a6ecd2fd11dbcd4401f83348a2ebe4376cdab7110364810fbcc6d884bde661c3161d4019a40fa49b088d70a1be20eae73944433119e51350ceee4dc8b8cca81d4eaa0e19393a59a346e85725790b5368b686281ed4f4c61e74524a2365044aee60a9c6c1e4c16182aa5e2d01b27d0bfb997f9b0a8f2d3a6c08540cf3aa848abaa68508cff887c731d5ac544dab9beac1b9318d08ab9c65fc46c30477f7762b01f77ae6d908a4c11f4d1352d983295e8c8bfd77594e24ad9bc072d8f09b90ebe75e5ee3f32352f0662105286705c21c8c20fd80a55578ccb50c9bc70963ad6ad59ca499d7e66e00e2ab1612ce723b3085a49d5dad9ea6886b1e140d088a2fc583c72e6bd4fa80691a378096c4c94c0559d5753c111b411da506810b915244d03f8f3532e547e763c32d54fb85b66fc9d06f916f855a8d965e28d48a02b08afc07afebaa3a2b08b542d083932b00a20f3c63100d2c6739301280c0c676b101a0595f55985c96ff1298dec918af67e5e6a69eeba42311faa227012b1731d9a36cc587b0c95af4fb948cf70faf6dbe28ce53ee07c5e39c94c7aabe5e36e573fcfb46770bf9b0cf1dfef0f5d1ec811420a91fb432696cc6a930403f0a47a1b138370182bab3e677a63d527dabeadaf23473d6886c0ab0b81b708bdf182b6870d44805e7a47d47169db939e442d52db6f0fb92b0e1bacffb30ab44bfc222b2b44b6ca48d6c9684b57775a45266c854bc6424043ab701634befa9a6fb3ab4cd787718d2f8ee6f1ecab0dd8bd9841a4016dd2674a7ed9a8bd0c6b1525b73c0c994d92ed0c2dcfccbc69bbb58ce2026bc305eb54f2e726f17a87e7569780cd57560bc25b628350d1e07347e310bb409686295390d3417669cc1180ece5fb64dd696c9a8fdc4de054833b595aab472ccd551c48aa50acbe2e340074c627b44d8673a66451cfefd20fe1ef6380d931583aff1c765b2cc9f2acda5963c73433ff451855f0f09c97af34e2e272cda9e6d0bfa1ebd34d0801dc54313b21246a6899e945e7def195c903c0237804c45373465d6045b95023774ac28e47c9a00fde9bacda3e1f2f30c97bac273bd50f957119ba5db12d7f8a204c5e5a8621235172a5764e4a84b83621eaa24b53b55caab23a2ba90950438d07893c4969766e927a08e7eee80b2c21841c480fad1a95d696e413204c45ed26d208a9a714e06d96cdb28b0ecf5e17c7e994669981298ade90ed09fc16616fb2c6447295f24da85b316455bad32d4c84366fcae8325dc3c235a3b04455f99188f34645fd5ca13be7e3f757d604ecb3a91b5050decf54a1de60f70d8094aa2a92d0b2987384e08b8ce598b35b19221c50765fcc0ccb82e1a3c5bef5c366c06adf56d9e0448d04e2d05b59ee59e8a82bc814978ba3fa73f095555f65dbc2dd0de212274d997fe2a0ba36d19d9d3ffa10d0d30257b46e26d8fd1e96bceee4d01a6257603816ba3fd8f039fb34dde121359b356ea3c8be6b490e101054a99587fd3f06dce633f25c635e2d78b128ed89aebdd4dc0aa624fd14b2cfdce446ee91363a3d310c0b0a61568208b20f57d7169ec3e04a43f12e7f359403530e51411f91c337ffc925941b893e89ddc4916da390ee99c8212da3cb0b409cd565b39d3a67cb5ddf2cd74357837afe323d0dd74305cf58b002bfb9122e1dea5fca5dc159ef9ac00ccae8b615ec229bc84d0952f00cade3b2930bcb780136dd8c2edcaea9f55dc6e01bed8db878dd189328625df69cb8cfab5d1bade7a02a0d28befa929308d87632db8c28b0aba4e2dbd30c30249cfdb422192cfcf0cbe20271d0ba039b16ead37feca118255b0cfc63af12efd56ca2019c532a8977e9cfc0f99d10a12e394777899feee9d2c5b197f9664c78872db642c7006e38c6bfe6948ae8f6e24dad1608976a426fc50ce34e6ca722660dc20fa5e95847e019f6c7abb31fc0854690bf104e94da1251c0a83979a148d60955c3adea4b2cdaf0c64b78a576cde1b1309877c6018aa4026d855984c44dceb96bfbd7a5ded9f1e92e1a6f11628943c479e7d7f267279026a8fbd0756e99bbe911c92f36a65c0230f48d1fa5b4637ab2b2d2f26648955973c342ab2336f209fb2e3bcd91c85e3b417aae80d8e78e6bff7f9fff15a8b9bce9cf9421550eb3d7563c1428d7019ae0ca9f0c9be06c67b66ab77da04ca5ae1d888db17ac5cce9dc1feb9d4aaf8ca83409d910cbf22715e35ab4c37be1e0e02f7c584529bf5375c8dce65def032d8a52ea782b010dc5391986693fdd90507050e970f6c8321828f0f32e8028605bd87938c22b8a0b5b8bf28060297fedf01287b90a30c2d090f0f1cae1d61dc41743456b5fd0b89e2336d0c3485c90942e3d793e4ef3b429de6457906f0574826c2687b8b52d523ddba2eef4f3a92ce3a0e93b486b26cc6e79399fe2986a221be38596d5babc5edec6bfa95dac59c8f85c3a678b7f7e5ae43722071ba14c9b1383fc6054c4501800e6d43c61b67c0afa791bb5becc78e0cdd6cec161bec84ff1c551cbdb07b9f3ebb2c00dc6e0fc20f3bfc7b0dcfd2ac4d8f9cf67b308ab20435871162ecf5b3d99927b83d17db27d568d1a60acd6e1b3e454750c8003747ed8fd8ec7dfa6557de8b9f608c1a56c80ba8f464b0e8f5af6d41a055db6741d61f6cd5d611cdb736898ec1bb417edf1f00511640dd445ce8f391e4b616f2271b5c308899a6188db2a5ff1321f3b02695fbda301260b1ce7da1eda9bbdfe799b1390f256f43924d37e9d20c0a204b677aceed4dbeb84ac0389f95031b0a1049992852b90f3221016e9dc3efe803091b8a8c6f605d7677de425f0279cb8ff114a440415273b3dc6e823d1b228d347a419129c9e280ecdda1de4ec5eb59da85d9e21e9c46af4d3d92b9a43471a833b4986cab729657874d6e82f52757ea92f801032d74fb208a55a0cd0894c74821a95fb0178e8a1f4d9616a8e749bac66a20d3b4445b4c85bdb4b67ca9b62b0648c10029a1792ba689773c7ba7c9c914c44e5de3392556010da0b1b4b634bc0601524246a0794dad5fede46393572b83bafa528a18cbd457dd6f501b0a64f01961622ae63a6a337f5e2a6b29a8dd5ba1f0588f16c8d4805ebae262df5af57e412273e572b74014340752fed0596b611b3d084ded7f8b74e14bdb0261ee58552b210da74779297a35a0d52e2e78add30c97206bf7cc01a3b713738367249270860014bb1ee62419e657a218b12024609b9424d289b7ec325d0c3fb3c5bb08f3dba81518a81d2d30fb3600aa59a038cd70d2ba57ba2ae4cb03b232125c6f6122ecc558959088f11b73d7823b4f107ab43802367211e85654906b939896b6558c80e2d2e0825bd616a8728443c25915a3422235460046f795e85705167a37d4caa583d4116c1e35a063d0e04dff43522b38378b04467c278aaf9a54a1befdba10689a952228f3e971de244c8b8e6152b5b81a99a918751257b079c48249b4473ee8bb47209abebd383047b092d020fa4a5aa9644905de8c172601be89875f1b27a29a1d274e3e96cb5225a7c3f5f3d20e6b1e4929037701c2214d2e88d42e8bcec6bcbdb567d2fd130469e2f12555ce4e4f6d99c6f42d0b945c78a5da01842c2e80e6fb9ea07705abeaa8cc77525bbe23fdebf2ae40fad63d631d386f471d9021d07aed45e32a8b41417b9175725ee82cb1dedafcd6d1db64cf504605796a3307e8b344c79cdacbd6416e0d71e65ba1ae6606bcb5ff1fa18664e5053de8f7cbbed6f7bba1f172dc4f1d36c5870ca28ebf5d9e84d73ee119552bb971ad55930a9a4de1973c1bd40646d745b0fd8907b8817b886d4a6784406e2f93dbc835458d59fe791bc24b91a0b9e028b64029137d5b0237192a5abf15be46d1f9644805dc004cacebaae97e2c3a7714e6221cdf8a9ee29deda7401912eda9c176c2ce5ae3eb70cd492f636eab81214cb95831b1892dbf1f4bd37e3b535bcde7ccc14b1ad41070c3530b7d3542409baf7776346de6486c8833e81e2cebe7f6c6aa2d65abb0ea450a9239286a750bde394b66e7f4f09cb9f1e5e511e4cd4355b5fef99a05cf6e2cc699f8e3fbebc2bc7168f8259dcbce9b0d85ce7f890d28e28121d22cee4e7d567b1e64d22d509dbd65905ede21c43b91914f75ccd53ee001504921f66dc47b84b63315602ffc8d2dadf4c0becf48439d8354a825722997b16bde47b3de9438644e69f0a53d9ae8e1b3d69e214be8cf7b33bf1b0942278910e53e3177fddd22dfd74885498f60798e261ff8a89b301437d8b132261109dbd4ccb6a420d7f0f33977bf169b298bf012f54d052420109b05097761a575c55bfbe6ce020c78f072e90640e6923b7384a27e799ce145652eb9d50d59ea0a4d69415a38ffd54f9488e389b08227b4f83e0d9e89a02138ba1b098e3396b12a2d96580cc11f9573c3b75976a74db70ef8d2ac37a6234e68531fdcc68c8e26ef8f473b624c6a7c52cc4cb497ac26458534f8d1aff9742eeb124c68482a5f5fa86ab3baf5", 0x1000}}, 0x1006) r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0', 0x3a, [0x50, 0x4f, 0x46, 0x50, 0x43]}, 0x34) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x0) (async, rerun: 32) ioprio_set$pid(0x2, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x10000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000004, 0x40010, r5, 0x9) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r6, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) (async) writev(r5, &(0x7f0000003200)=[{&(0x7f0000002100)="d4f6a9ce5ceda6367ca031dad9eb21430c4353773a3644569186567d8c2a4b7371d1285db1a9a67c7d676942f4bb4129a281dbeb39a6d7ef63fab0d9f6bdc52726a3bbd1ec72f684a73b316aeb41eff09d7ece94e4cb59a5f59c2af0e920f86295ef05e91ccfd98966fa0e392a78f801b03e8c7fb605d5758e33bdaf5ec6c4caa13637b7a76aaffbd760729b388ddf79e72977312d632c8547577e9d834a3e86545307b3fab34c21a1f39dfb98e6018ffa57c81f134c53cd323c872f029cb12de279d630d9d1faaf15fc67f2dceef9b15879acea13ef227c77264bc927a99c753390fe4af49226f80502177a3651a59e772810f1520c4584f868e8829f5bccb4b9a6a1472c392cec41e6e63ce637b3740d52b83632883c7cb23e615106c98a4463d9be235e32a102a8cec293b030908d1cacfa4cc02e2bae7f38862c2e4103d2de160d81f87e525d406ffe617f0b69cfd47e36fed2b383ef836c844fb3c9068d262f903434b5b32cc1e6994a38e7bd5fe51a52eeccb307e93ffd64a44385f61e4c65f5649de2cbe865aa9248d7024cc95cc14d9611dca9d5b6227c3459a8f1cb581f5f296f2ad83a01314477f4e6fb439f9098b0dd8a471f39937eeb1b50d9c88a74661d5c4fa8bd5c7475de43e6decf15c8ee9506831507a1facdfeec567c0823098675f76bce70a858f2561eca686f9aa74dc5ba676f6f6364b6e03f4a8905d8abd678b539734a0dabeebef435b5fe66718fd0ec75ba78fc4bb118a5302ddce5e911ddc12e70a0cf5cfbb82ca0d61336ad16f33238cf6b36f3b10415b1ac8af9d39683096cfde9e1ea9d0c92de45fff275539a7b1a523300bfd4f92b86953dc57e4d92eb79e90090b5475e3ad50d12d17aa7cb6a780b45b217632574845b2e310e770497732f8450a940586084af989f28502f0a75d12ee2158489069d29726d1893390907605010e88c687648998e4a27b343f4c9cfced62c222d97ec489033a47ab480b613ae1947cda86314518a0717f31c2331c436f01923d3a507b17f064d8096ffb57eed671495058ccccf64319b3bb3d824f115c827f675a15c50bdc3a15a487807881062005f4ec641d9845da0cbe9c40806a58695dbf05aa56297783ca169a2e725d074643e8e079fe2865592d325cce3abe8c61a262362c9160aa434f70b855831d56e4e6de855bb5024b209c4e8904ff0f552ca6c3d675e93ffa594bd7fd3a7079419e6fcbb30defaa3907db47f1b28f69c3ff1074d27c51970ec8f9d05fd0c7bb41375ab1455051277db2b5b3832c222aebdd6d56f9963568dafada949ad5dd2129ee1760394706cfdf1a31665ed8df7e4bd953740317cd6c0bedb5be7f8a8f591b570765b15544c2eaa85924768879f53ac7dec102e5a329eeffc7b91ffef1a2ae18362fad5f1d10e4153e49172a98a350fe448eead7d98288390c4abddb05ef2470c9eea5c9c9ff04e5b5237d3c026c2a4e0ec7b9ea00964f8c4be27396dc66219fc731fd73975786066d2a8ecb8eec6ca41632ae483a7068fdb07cb909a545440b97144edcb38b0b1f1f9b272f5c79439242ead32dfc028cf89817a220399fea1408860721d5df9703565a9f58e2004dfcbffa1ec5ebbe08ca15a75ad8bc9c5f83aa934edfed94f1e0283d03ecc78b1a8c579c0c5028f0b4a71af64a42fac03995be2684ede634903024725630090d2d173daa1892aae317b3e3602ded78d879a04f372153e8fa73a65a6c56004eda8a91995ebdf70837e3d228929ba970cf0fcecd64d94ddf2d2c63f2c8606d01dfd3f650c6897ff643e26d48dee99d3f99a1d9b4cbf37460ce24f37d4b874ad7f351e6a3a36d7a52cd294c810d2eee76e400a7189508ff02a117bece1e259fda4b67c3ccf192688b87bc5e0fcd25d6ba556db6047eff6b4e8d8a1cb8fdfef82b01c7b362f12a03e88fb520c3a72bafb052a959973f4ee0b631ec89b72468228a91f937d31e306d5b4d536129e07901a5e94691d590641cee4117260c72759597390df1e5d0cfd04087d84150e09286fa2e6ff15adcf7b162642140f5a40b49525fece06984ac6e1de08ddc0821bcd6b94a9b9cd2f0a8084cd3eaf30be512bd473cc78a1511a382faf7b37d86ba3d2dcb9001d542debf0f1e85ea9985bbbecdc46c9c7d25b6fb0eb6ba27f7088dae3d8e2bcdeb668a1d803fc55e13d397a7b90b7b63054dc7e3b0e06cabeaa1ecd606a3e34a595c54f8b24d4d757270f785a8e3a1abdf682b7aac28e190ef77de0d17428853adf36a50af896facfaa716f7be8a0b53a244ff46d8fdc6c6965766c8f4e74f7281a218bae402ed757a4430d32e0bdaa0b81141194f86f5be287c3abb4488bc21b079c091c7b4d143b08ba8bc07fe129d6cc483d8ae8d474ed792b57c1aeadb44951634bd735b5ba6f7dc881fef004db0a2ec2dfae3c3ef6cb96897c434d93c73f56670b6823da4e3e426a77aaed707474b86f1b693c6459e00aa56cddf4996c0722d53f19117fcd7ebba8a9704a8e61c59714f2ed80fd33cf59fdffeb98e0e024aa3aa94e14356ea5c795ecdb74aab430b858f2cb8735789417401851091751ba23c6f1bdcab5413064707fd24e12e74d3b81a5c00ea211fae151ca10667e3607944317949d9454593a7e83b1ef7167eb4647cea46e36bdcf5c980a427583be5187e3873b79722ba33e1eeb1a0f8493616250f831db12c39f687732f5a120c71c94d2a301be09eb48c4691ca958ff08ffeb20c391d5f713f438db18f666d5bc891dbc3ff173c176407c581ada72ca29eb78630389603107c6a9f0827c041b99747d22b0ea115b07913edd0ca5ed6d2645703a6de11cf81060dc4afb920882d991cdbfb0ea4d4dd7baa731ffc55184798b652fd343218f03e38cc4d11912308d777366900914c211422a99b1941197aee6bdf5018b2c1c122f27e262586f1e64815fc3d87798c5e4a853696becc5d690f30b3efe206c46ed1a9b08435b8c4e303b7a267297a86d4ca9559c3ea6573045096303f403003f14c4e214615c93ab4f1e54e720d1a1c418fa09d7139afa2bb3122d061e95424430d6c20b7f555843292927b2db1c05b36aebafe0d1c02fbcdebe9e4c7c6690d817e2c5a43a91d1de39e735912abb28d0c6bd66a85700971b0fe0d91229cecedf2adbb7e9e8694e69f3430d041243b73789ac0ab723633aae261b898fb6a85a6d3e8e54e9915530af892de17957e92f3134191a680a7b733258a6da0b4a99bfc23a50e5fff3ad7305cecaeeb10609f8dbff81ac0dc3c11dee3bbc395215cc470a8ea7cca6ddff28d9d6054ec95d24657b5a549a9f8c4fc8e3921df17a2c14dcf2a6ef4ebf465f8632deb3c84b57109f3ac4a8c245798de9ed14c8506d13f294dc3da6a75588d6863755f0430d5208386ee4db59ceefd60748db077646b3a7071a592f3a21291db24be6d6d91ec3e94b8375954742ddcd68409164abcd73eabf17ad4b3c79f1383f66c37202b6e11afae43151604955290239c9802e043699f2e69f225670eacc84556c97c4604da240fa8368f9a203f7ede2cb56930536ed567bd7f1233cacc48402cabbed2d9175b245b502f87193ea5438ae754ea50b2de042266df5325e70502fbc766219fdbd5a3502b7a900d965779cf1472ef23a663a00a2a9712e8ac7ddb763b9deea3d26274f9bcc85d84bcb6d4e1e473fbcaa791d76db379f963195d2a27560dca2657a62b3ac4e204d8597e300bd43e29b8e79a0a21d506d935e8cbe7764882ee07627b5a61e673f59ea996d351e13e544987f254a9e0cbdbc275ff46bca3bca4fbe4b6debc3ac98a50eeef3433ff215d83f302f389d109e8a9e6a1c997c0c8b1d641c570bc003e87a204869856f2676f7b9e15a0ea91366c2a5e9d551581e674fd6d85e0ae1a8fa690be4f73868999de2f68fe770d0467478f85c3b160cf3096f223ba1c06686d2f5fddc8062c069086a93224dc9277ba7320265c88d1fe407796034fda6008c154c33f68c601095898be8cb9d8510b9a0926928cf6bdffe4b4035f29ec4acac609492c57503d2ec499593979466deefb6162d7c7af77c00c096a5d9ab5290f69fa911a5c72a48506c263b243c9c04924d14faf89db1cbacf4e9a487559f24ca5e30557c7bfa339eda43adbe32434eea0e1d591273443a6ddc4269fdfa809f38ac490cf0438788bbb5f7649a3e14da116cdf059520d1f6073d6ce8de6af3e16056171788573161cd799f10f9f895b168587051a780be75b334c9fff1503eea03e25699ac31b159cf651af7ddf2b83a1bc92387be30de0f41b860cc41135c0618885245619ccd7bb7c07c5ae2524e0ca200c32e3c4344d5c31fe9848d067f1b88c4fc5c049f920e4ee93d13531a9cc956fd0018b84bf9f7d4f6d62d28c520ed0a5ca38a560b9bc17304822e8b6d75b5d0e80d5916c740bfc019db0a45dc4968d660490082b4296dcba5ccc3861bd1bf8528fe1a61d483a1ab6a69e496593e53ad92277a72958ef9f99e2f50df87f74895f8e9f73333deb41289176ad50ecd0fd3c35ae8c661918b792986bc8674d6b83ecedddfde92b9e8645e1b71c74deb62fb5ff176e995de15d9a3cce5898188444ef4b5a4d6ffbcb990adf0c7c59f17fcf1c1420abfdc9fd25af8cc48253cee4ba7bf0ab58d17fbec241e236665c9b665d3c1d8127b016fd0241af791fb7ab16da4a227bc62fa19d907d52598b1ed1352f41d210c97c1b36b4bbad8cbde9caf93814b6ae63256f7b0759ebf16725dfb45c4c008e410f0b49395b7ec661599966762825400c66d188ecae326becf4cd3fb87c6e5ead97888a9c72aadfd580e04c40f0963aec910d40e74440601c12d1c5dd4d15cf5a6c1e5192a365234811b6af8f440fb5049dd758d4539d421eea334a3a92a8bae6d3706cbfda71caffe3becbcc5e9f0d663bede914c10ce5f67d804cc58e8df82a609db09548b993fad63517db01059ea139b608b0ac248543a28a652a37e49321fd1335b94d35baff909ed010b0f1a557e03160cae9d61c943a5db27f7f1cbfaf914a0b7a21b83bda579a3c8d1b2c76d334cf8770e9003d6fbef5c11c3bcbaaf14935be653a6e51f90479f7caa646fc88d5637679f15b9ca1b1d87b375d7e41618e3afc61690969c092a97170fe747c715eefff54bf6832e7a71a0aef0b4c8b59c93e9cf4f473d09111e5875fc4bf4222d1e4e4bc9b1af3b04d7298d890c65674d5b1e23f8b258591b5ef7725ad5ea1440a0b9ba1001647bfaa208745497ca515be59ee891c767608e6359048bb783a176adf6c6e5d9b2618b48a4c31d0fea738b8d2ba93718d4557b389889f5560241572aaa8673bd6f2f98ecb7ff0fd78acb80a2945a29391328db32713b4b8d767c65fe8546e4ab3e30bdc619c1c565f8e1b60f8e9035345ae83e195e1af6d5d0aa8db2fc0415bd8c4a0b90dc9f27c328b0031162d21bda768c588434aa05796091afd04cec94446dabbea843913ded6f2ea42c28925f6b5edf060a692e727f8d722e13d0d3e539f7fb65bf8f6ad9e7fac2c885bf231043877fa92bde445017702bafb66cf0a574dfeef725704c931d588ce4e1899a05a17c8ed8b46babd8f3f297bd450c93c1b7c8cab617a3bb3263b9fa05f5334f71fd68791490096af7a89790be747369cbb88537ac615fe0ca71a25d1afe57bef192d60b708f0db3cc80beb383609c9fee3d19958297966d5b514ca9033d44d5bdc6f2f04a03e5ac400a28d4a9f52fd994fd5a01cb10d51b65d63be3b36bc983ee005b3c6ca983df", 0x1000}, {&(0x7f0000003100)="5ca094a1daa00494c1c142e6b602d55877b368bc5190affc3aae5d0d8caf81ae3c4b639d6c95632eb1b5fed6d7294fab8062e22ce0bfeff366b5ac", 0x3b}, {&(0x7f0000003140)="5842ed31bb39d72fc035a185e13161203e7a8786cecb72ee69f79c750987611da0552d0fc1fccdb4131a836e063da2000bc684be0b9cc0968b93703696a11bb102e5e5e21b4828afbf6b98ac5f67e083bd090a7b6d0b22245854d1f44e2fb2a37a2acfe805eb7f45f52ce3eab53efa1fc05e3423a743c2b008c1965504d75c2cbf94d07b68492070a0cddbe39a1c96c032e80c0fa1839452469635f3790af14245", 0xa1}], 0x3) (async, rerun: 64) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (rerun: 64) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0x6000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x6000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0xfe, 0x2, 0xa, 0x0, 0x0, 0x80}, {0x8080000, 0x6000, 0xa, 0x6, 0x5, 0x0, 0x3, 0x2}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_GET_SREGS2(r9, 0x8140aecc, &(0x7f0000000300)) (async, rerun: 32) write(r2, &(0x7f0000000400)="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", 0x1f000) 1.867200554s ago: executing program 1 (id=1178): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 1.866325044s ago: executing program 1 (id=1179): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)=@secondary) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.866152474s ago: executing program 1 (id=1180): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x6, 0x0, &(0x7f0000000300)=[@request_death={0x400c630e, 0xfffffffd}], 0x0, 0x0, 0x0}) umount2(&(0x7f00000003c0)='./cgroup\x00', 0xd) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x6, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@access_any}, {@ignoreqv}, {@aname={'aname', 0x3d, './binderfs/binder1\x00'}}, {@cache_loose}], [{@obj_type={'obj_type', 0x3d, './binderfs/binder1\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, './binderfs/binder1\x00'}}, {@euid_eq={'euid', 0x3d, r3}}]}}) 1.865762124s ago: executing program 1 (id=1181): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x82801, 0x0) write(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x4c) fcntl$setstatus(r2, 0x4, 0x4400) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x4000000000000003}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @fda={0x66646185, 0x4, 0x0, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) open(&(0x7f0000000080)='./file0\x00', 0x40000, 0x8) 1.848137104s ago: executing program 1 (id=1182): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYBLOB="041e97"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/93, 0x5d}, {&(0x7f0000000640)=""/103, 0x67}], 0x3}, 0xc}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000080)={0xd, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e000000200"/88], 0x290) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000040)={'veth1_to_bond\x00', {0x2, 0x0, @empty}}) recvmmsg(r3, &(0x7f0000001d40)=[{{&(0x7f00000001c0)=@phonet, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/71, 0x47}, {&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f00000004c0)=""/63, 0x3f}], 0x4, &(0x7f0000000540)=""/98, 0x62}, 0x2}, {{&(0x7f00000005c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000640)=""/196, 0xc4}], 0x2, &(0x7f0000000780)=""/88, 0x58}, 0x1}, {{&(0x7f0000001880)=@l2, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001900)=""/228, 0xe4}, {&(0x7f0000001a00)=""/124, 0x7c}, {&(0x7f0000001a80)=""/182, 0xb6}, {&(0x7f0000001b40)=""/35, 0x23}, {&(0x7f0000001b80)=""/97, 0x61}, {&(0x7f0000001c00)=""/85, 0x55}], 0x6, &(0x7f0000001d00)=""/57, 0x39}, 0xc}], 0x3, 0x1, &(0x7f0000001e00)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 1.179375297s ago: executing program 2 (id=1186): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) mount(0x0, 0x0, 0x0, 0x10, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @random="43907396624f"}, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x1501, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000280)=@sg0, 0x0, &(0x7f0000000340)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') fcntl$getown(r0, 0x9) r5 = socket$packet(0x11, 0x2, 0x300) bind$packet(r5, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x82, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000003c0)=@req={0x2, 0xa74a, 0x7ff, 0x8000}, 0x10) preadv(r4, &(0x7f0000003940)=[{&(0x7f00000002c0)=""/57, 0x39}], 0x1, 0x32, 0xfffffffe) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r7 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) recvfrom(r8, &(0x7f0000000580)=""/214, 0xd6, 0x10001, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom1\x00', 0x402, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x100, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000001940)=""/4104, 0x1008, 0x1, 0x20003f}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000000)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 1.168548207s ago: executing program 2 (id=1187): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0xffffffffffffffc0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) 1.157376817s ago: executing program 2 (id=1188): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="100000011a000100fdffffff01dcdf254f4fa71509c6e1150d45a96c216a7d2d9d92a3a1bd7850"], 0x10}], 0x1, 0x0, 0x0, 0x4080}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1.107316258s ago: executing program 2 (id=1189): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904"], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x24048004}, 0x4020) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0xffffffffffffffaa, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 687.168317ms ago: executing program 4 (id=1190): close(0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2002b000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5a", 0x4c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x8, 0x0, 0x0, 0x1, 0xe, "0062ba7d02000000000000f7ffffff00"}) dup2(r1, r0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0xfff) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x440, 0x0) fcntl$setlease(r9, 0x400, 0x2) fadvise64(r5, 0xa, 0x5, 0x0) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close_range(r10, 0xffffffffffffffff, 0xeb048e6f64d1583d) 683.511557ms ago: executing program 4 (id=1191): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0x3, 0xffffffffffffffff, 0x0}]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6085, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0022d8"], 0x0}, 0x0) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 598.403828ms ago: executing program 2 (id=1192): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x4, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1b10) getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) mkdir(0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000401008020000000000000109022400010000800f06040004020300030009210000050122070009058103ff03ff000e"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, 0x0, 0x0, 0x80) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='@\v\a\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r5, 0x66020000) mount(0x0, 0x0, &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) umount2(&(0x7f0000000040)='.\x00', 0xa) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, 0x700}) r6 = socket$netlink(0x10, 0x3, 0xe) sendmsg$netlink(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c000000000000f7ffffffff"], 0x24}], 0x1}, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x5) 479.75921ms ago: executing program 3 (id=1196): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x32, 0x0, &(0x7f0000004840)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$inet_int(r0, 0x0, 0x32, 0x0, &(0x7f0000004840)) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) (async) connect$netlink(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) 371.903623ms ago: executing program 3 (id=1197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"]) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000100)={0xfe, 0x0, [{0x80000008, 0x0, 0x1, 0x4, 0xffffffff, 0x0, 0xeb}]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c6503002c63616368653d6e6f6e652c6e6f647874656e642c00"/36]) 175.146786ms ago: executing program 3 (id=1198): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f00000001c0)=ANY=[@ANYBLOB="7365636c6162656c2c0091d6298d9ee228a6cf688e27a3ef81b41a43501975554adb2b0d0fb04202204f2cf6a37087d04bf92a"]) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hostfs\x00', 0x10000, &(0x7f0000000180)='binder\x00') 174.836936ms ago: executing program 3 (id=1199): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = socket(0x1, 0x2, 0x0) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000001f80)=""/4102, 0x1006) (async) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) (async) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/142, 0x8e}], 0x1) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) (async) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'xfrm0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0089061327c9167c643c4a1b7880610cc966", 0x27, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r6 = socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) (async) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000a80)={0x82c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc00000}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0x3, 0xf, 0xfffffffa}, {0x4, 0x9, 0x3, 0x8001}, {0xd, 0x9, 0x53, 0x1}, {0x2, 0x1, 0x5, 0xc565}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x58ee}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}, {{0x8}, {0x270, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x365f, 0x80, 0x80, 0xc20}, {0x2, 0xf5, 0x6, 0x1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7fff, 0x4, 0x10, 0x5}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x82c}}, 0x40810) (async) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4000, 0x6}) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) (async) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000300)={0x1f, 0xfffe, 0x1}, 0x6) (async) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom1\x00', 0x801, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x900, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) 173.082916ms ago: executing program 3 (id=1200): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socket(0x400000000010, 0x3, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x1, 0x3003fffd, 0x1, 0x2, 0x7f, 0x0, 0x1, 0xfffffffd}}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)="eb5085e9827789d6774f934628458532f6b0cf5a4aedba6d63fcfb0ff4920a71fbbf17360fe0d28cf6", 0x29}, 0x68) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) copy_file_range(r4, 0x0, r4, 0x0, 0x101, 0x0) dup(r3) (async) r5 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r7 = syz_io_uring_complete(0x0) syz_kvm_setup_cpu$x86(r7, r6, &(0x7f0000714000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="d9fe66baf80cb852f9ff85ef66bafc0c66b8bce866efb933400000e1e13266baf80cb8e7482f8def66bafc0cec8fc978e11c340f005e0064360fabe70f01c4660f15910080000066baa000b00aee", 0x4e}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xffff8000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xffff8000) unshare(0x62040200) (async) unshare(0x62040200) r8 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x84) openat$cgroup_ro(r9, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0) (async) openat$cgroup_ro(r9, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) 77.599048ms ago: executing program 2 (id=1201): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf, 0x80, 0xff}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0x40095505, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000280)='/dev/ashmem\x00') 0s ago: executing program 3 (id=1202): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = epoll_create(0x7) r3 = epoll_create1(0x0) r4 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000080)={0x1008}) r6 = epoll_create1(0x80000) r7 = socket(0x840000000002, 0x3, 0xff) close_range(r6, 0xffffffffffffffff, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="c0020000420001070400000000000000ad02"], 0x2c0}], 0x1}, 0x800) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f00000002c0)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x7ffd, 0x9, 0x80000000, 0x0, 0x2b3], 0x5, &(0x7f0000000040)=[{}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) bind$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084524, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, 0x0, 0x0) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) personality(0x8001a0ffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, &(0x7f0000000480)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r10, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r10, 0x0, 0x0) listen(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 43.943084][ T957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.994918][ T958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:138 [ 44.066892][ T960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 44.328486][ T46] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 44.479677][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 44.490841][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 44.503790][ T46] usb 2-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 44.512970][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.522056][ T46] usb 2-1: config 0 descriptor?? [ 44.527477][ T960] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 44.536053][ T46] usbhid 2-1:0.0: can't add hid device: -22 [ 44.542512][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 44.737229][ T46] usb 2-1: USB disconnect, device number 11 [ 44.757758][ T987] netlink: 5 bytes leftover after parsing attributes in process `syz.2.212'. [ 45.372567][ T995] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.372738][ T995] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 45.756910][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 45.756942][ T549] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.350966][ T1008] rust_binder: 97: no such ref 0 [ 46.356246][ T1008] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 46.363561][ T1008] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 46.388793][ T1010] fuse: Unknown parameter 'rVo|mode' [ 46.715371][ T1023] binder: Binderfs stats mode cannot be changed during a remount [ 46.720080][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 46.720106][ T36] audit: type=1400 audit(1759735935.813:283): avc: denied { remount } for pid=1022 comm="syz.0.225" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 46.757500][ T1025] binder: Unknown parameter 'fscontext?}' [ 47.044532][ T808] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 47.200098][ T808] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 47.208656][ T808] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 47.221124][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 47.232599][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 47.244143][ T808] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 47.257739][ T808] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 47.260462][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 47.268036][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.286756][ T1037] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.286787][ T1037] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.287841][ T808] usb 1-1: config 0 descriptor?? [ 47.305680][ T1032] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 47.328478][ T1041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.231'. [ 47.338042][ T36] audit: type=1400 audit(1759735936.416:284): avc: denied { ioctl } for pid=1040 comm="syz.3.231" path="socket:[7283]" dev="sockfs" ino=7283 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.396011][ T36] audit: type=1400 audit(1759735936.474:285): avc: denied { create } for pid=1044 comm="syz.3.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 47.445529][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 47.453518][ T10] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 47.465090][ T1053] Zero length message leads to an empty skb [ 47.472359][ T10] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 47.482103][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.517262][ T36] audit: type=1400 audit(1759735936.581:286): avc: denied { create } for pid=1057 comm="syz.3.236" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 47.539450][ T36] audit: type=1400 audit(1759735936.581:287): avc: denied { bind } for pid=1057 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.574020][ T36] audit: type=1400 audit(1759735936.639:288): avc: denied { validate_trans } for pid=1059 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 47.628857][ T1062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'. [ 47.639716][ T1062] bridge_slave_1: left allmulticast mode [ 47.645886][ T1062] bridge_slave_1: left promiscuous mode [ 47.652478][ T1062] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.661995][ T1062] bridge_slave_0: left allmulticast mode [ 47.668621][ T1062] bridge_slave_0: left promiscuous mode [ 47.675303][ T1062] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.698829][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.728114][ T808] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 47.745851][ T808] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 47.768089][ T808] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 47.791883][ T10] usb 2-1: string descriptor 0 read error: -71 [ 47.804730][ T10] hub 2-1:32.0: USB hub found [ 47.816444][ T10] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 47.867601][ T10] usb 2-1: USB disconnect, device number 12 [ 47.992945][ T1032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.003215][ T1032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.012380][ T63] usb 1-1: USB disconnect, device number 8 [ 48.810321][ T36] audit: type=1400 audit(1759735937.847:289): avc: denied { setopt } for pid=1104 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.817409][ T1105] random: crng reseeded on system resumption [ 48.831920][ T36] audit: type=1400 audit(1759735937.856:290): avc: denied { read append } for pid=1104 comm="syz.0.250" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 48.861740][ T1107] rust_binder: Write failure EFAULT in pid:183 [ 48.862701][ T36] audit: type=1400 audit(1759735937.856:291): avc: denied { ioctl open } for pid=1104 comm="syz.0.250" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 48.910568][ T1109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.251'. [ 48.920657][ T1109] bridge_slave_1: left allmulticast mode [ 48.933356][ T1109] bridge_slave_1: left promiscuous mode [ 48.939190][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.947373][ T1109] bridge_slave_0: left allmulticast mode [ 48.953447][ T1109] bridge_slave_0: left promiscuous mode [ 48.959983][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.000068][ T36] audit: type=1400 audit(1759735938.032:292): avc: denied { nlmsg_write } for pid=1120 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 49.052282][ T1124] netlink: 32 bytes leftover after parsing attributes in process `syz.2.256'. [ 49.350540][ T1137] rust_binder: Write failure EFAULT in pid:166 [ 49.600972][ T10] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 49.670403][ T1156] overlayfs: failed to clone upperpath [ 49.677328][ T1156] overlayfs: failed to clone upperpath [ 49.766572][ T1172] syz.2.274 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.785342][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 49.790815][ T1174] 9pnet_fd: Insufficient options for proto=fd [ 49.791762][ T549] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.799414][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 49.817127][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 49.830866][ T10] usb 2-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 49.840624][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.856627][ T10] usb 2-1: config 0 descriptor?? [ 49.862196][ T1139] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 49.873404][ T10] usbhid 2-1:0.0: can't add hid device: -22 [ 49.879939][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 49.978875][ T1189] netlink: 144 bytes leftover after parsing attributes in process `syz.0.281'. [ 50.078195][ T1139] netlink: 32 bytes leftover after parsing attributes in process `syz.1.261'. [ 50.091385][ T9] usb 2-1: USB disconnect, device number 13 [ 50.114471][ T1205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26626 sclass=netlink_route_socket pid=1205 comm=syz.0.285 [ 50.156878][ T1212] rust_binder: Write failure EINVAL in pid:217 [ 50.289548][ T1225] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.296294][ T1225] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:230 [ 50.364077][ T1239] rust_binder: Write failure EFAULT in pid:242 [ 50.475624][ T1251] tipc: Enabling of bearer rejected, failed to enable media [ 50.656578][ T1286] tmpfs: Bad value for 'nr_inodes' [ 50.892098][ T1303] rust_binder: Write failure EFAULT in pid:259 [ 51.127417][ T1324] netlink: 108 bytes leftover after parsing attributes in process `syz.2.325'. [ 51.143526][ T1324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'. [ 51.651176][ T1345] netlink: 'syz.1.331': attribute type 8 has an invalid length. [ 51.940632][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 51.940653][ T36] audit: type=1400 audit(1759735940.905:316): avc: denied { create } for pid=1351 comm="syz.2.335" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.963285][ T1356] bpf: Bad value for 'uid' [ 51.969483][ T36] audit: type=1400 audit(1759735940.905:317): avc: denied { read } for pid=1351 comm="syz.2.335" name="file2" dev="tmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.974763][ T1357] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 51.997307][ T36] audit: type=1400 audit(1759735940.905:318): avc: denied { open } for pid=1351 comm="syz.2.335" path="/146/file2" dev="tmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.997875][ T1356] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.005635][ T36] audit: type=1400 audit(1759735940.905:319): avc: denied { ioctl } for pid=1351 comm="syz.2.335" path="/146/file2" dev="tmpfs" ino=800 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 52.005670][ T36] audit: type=1400 audit(1759735940.915:320): avc: denied { unlink } for pid=290 comm="syz-executor" name="file2" dev="tmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 52.086364][ T1360] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 52.106865][ T1361] 9pnet_fd: Insufficient options for proto=fd [ 52.119535][ T36] audit: type=1400 audit(1759735941.071:321): avc: denied { shutdown } for pid=1362 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 52.233367][ T1376] netlink: 'syz.1.342': attribute type 12 has an invalid length. [ 52.241520][ T1375] netlink: 'syz.1.342': attribute type 12 has an invalid length. [ 52.280628][ T1382] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.287060][ T36] audit: type=1400 audit(1759735941.238:322): avc: denied { setopt } for pid=1385 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.372161][ T36] audit: type=1400 audit(1759735941.336:323): avc: denied { read } for pid=1391 comm="syz.0.346" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.376808][ T1392] incfs_lookup_dentry err:-13 [ 52.396594][ T36] audit: type=1400 audit(1759735941.336:324): avc: denied { open } for pid=1391 comm="syz.0.346" path="/79/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.426193][ T36] audit: type=1400 audit(1759735941.336:325): avc: denied { ioctl } for pid=1391 comm="syz.0.346" path="/79/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.483391][ T1396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:273 [ 52.524902][ T46] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 52.563994][ T1399] exFAT-fs (rnullb0): invalid boot record signature [ 52.572671][ T1399] exFAT-fs (rnullb0): failed to read boot sector [ 52.579066][ T1399] exFAT-fs (rnullb0): failed to recognize exfat type [ 52.586243][ T1400] exFAT-fs (rnullb0): invalid boot record signature [ 52.593000][ T1400] exFAT-fs (rnullb0): failed to read boot sector [ 52.599745][ T1400] exFAT-fs (rnullb0): failed to recognize exfat type [ 52.688139][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 52.695670][ T46] usb 2-1: config 1 has an invalid interface number: 6 but max is 2 [ 52.704302][ T46] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.714636][ T46] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 52.723998][ T46] usb 2-1: config 1 has no interface number 1 [ 52.730731][ T46] usb 2-1: too many endpoints for config 1 interface 6 altsetting 6: 61, using maximum allowed: 30 [ 52.742313][ T46] usb 2-1: config 1 interface 6 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 61 [ 52.756042][ T46] usb 2-1: config 1 interface 6 has no altsetting 0 [ 52.765484][ T46] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.775018][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.783539][ T46] usb 2-1: Product: 迱￸ꁬﾨ䴧顣 [ 52.789112][ T46] usb 2-1: Manufacturer: ⭜퇗㰅ރ䅩 [ 52.795074][ T46] usb 2-1: SerialNumber: 뛗䄄⠭ὀퟟ迷⦻䞼뽨⽹ౢ蚊䶨郀≂楔驰㬦ꨂ逤⍬⑂氣豾㿛牮﯎鹠얲椛﮳˂ቓὧ歚Ҧ蝛捗័⮮㾁꟞눠눻艘픕뼪䓾∸곴 [ 53.027261][ T46] usb 2-1: 0:2 : does not exist [ 53.036370][ T46] usb 2-1: USB disconnect, device number 14 [ 53.182429][ T1404] 9pnet_fd: Insufficient options for proto=fd [ 53.412911][ T1408] rust_binder: 281: no such ref 2 [ 53.464733][ T1409] SELinux: policydb version 238389911 does not match my version range 15-33 [ 53.473978][ T1409] SELinux: failed to load policy [ 53.479088][ T1410] SELinux: policydb version 238389911 does not match my version range 15-33 [ 53.488148][ T1410] SELinux: failed to load policy [ 53.642686][ T1418] input: syz0 as /devices/virtual/input/input7 [ 53.653183][ T1419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.662064][ T1419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.715751][ T1422] 9pnet_fd: Insufficient options for proto=fd [ 53.860442][ T46] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 54.024622][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 54.035966][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 54.049882][ T46] usb 2-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 54.059782][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.069414][ T46] usb 2-1: config 0 descriptor?? [ 54.078161][ T1413] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 54.088645][ T46] usbhid 2-1:0.0: can't add hid device: -22 [ 54.088756][ T1446] tipc: Enabling of bearer rejected, failed to enable media [ 54.094677][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 54.119144][ T1449] netlink: 165 bytes leftover after parsing attributes in process `syz.2.365'. [ 54.301508][ T46] usb 2-1: USB disconnect, device number 15 [ 54.301552][ T1481] 9pnet_fd: Insufficient options for proto=fd [ 54.624111][ T31] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 54.778158][ T31] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 54.787821][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.797013][ T31] usb 1-1: config 0 descriptor?? [ 54.817395][ T808] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 54.842361][ T1506] binder: Bad value for 'max' [ 54.861448][ T1509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.975809][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 54.982274][ T1516] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.988623][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.010993][ T808] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 55.015246][ T1517] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false [ 55.020488][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.029270][ T1516] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.038454][ T808] usb 4-1: config 0 descriptor?? [ 55.213551][ T31] nintendo 0003:057E:200E.0003: unknown main item tag 0x0 [ 55.220970][ T31] nintendo 0003:057E:200E.0003: unknown main item tag 0x0 [ 55.228377][ T31] nintendo 0003:057E:200E.0003: unknown main item tag 0x0 [ 55.235754][ T31] nintendo 0003:057E:200E.0003: unknown main item tag 0x0 [ 55.243225][ T31] nintendo 0003:057E:200E.0003: unknown main item tag 0x0 [ 55.250426][ T31] nintendo 0003:057E:200E.0003: unknown main item tag 0x0 [ 55.257809][ T31] nintendo 0003:057E:200E.0003: unknown main item tag 0x0 [ 55.266873][ T31] nintendo 0003:057E:200E.0003: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0 [ 55.336546][ T31] nintendo 0003:057E:200E.0003: Failed charging grip handshake [ 55.344213][ T31] nintendo 0003:057E:200E.0003: Failed to initialize controller; ret=-110 [ 55.356017][ T31] nintendo 0003:057E:200E.0003: probe - fail = -110 [ 55.363191][ T31] nintendo 0003:057E:200E.0003: probe with driver nintendo failed with error -110 [ 55.414451][ T1543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 55.426304][ T1543] bridge_slave_1: left allmulticast mode [ 55.428944][ T1487] 9pnet_fd: Insufficient options for proto=fd [ 55.432747][ T1543] bridge_slave_1: left promiscuous mode [ 55.440744][ T31] usb 1-1: USB disconnect, device number 9 [ 55.445335][ T1543] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.461566][ T1543] bridge_slave_0: left allmulticast mode [ 55.467279][ T1543] bridge_slave_0: left promiscuous mode [ 55.473294][ T1543] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.474590][ T808] greenasia 0003:0E8F:0012.0004: unknown main item tag 0xd [ 55.488396][ T808] greenasia 0003:0E8F:0012.0004: item fetching failed at offset 4/5 [ 55.497367][ T808] greenasia 0003:0E8F:0012.0004: parse failed [ 55.503853][ T808] greenasia 0003:0E8F:0012.0004: probe with driver greenasia failed with error -22 [ 55.603291][ T1546] tipc: Enabling of bearer rejected, failed to enable media [ 55.699987][ T1553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.400'. [ 55.710414][ T1553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1553 comm=syz.2.400 [ 55.738088][ T1557] overlayfs: failed to clone lowerpath [ 55.772828][ T1559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 55.847355][ T10] usb 4-1: USB disconnect, device number 7 [ 55.983426][ T1566] rust_binder: inc_ref_done called when no active inc_refs [ 55.999546][ T1568] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 128, size: 255) [ 56.007447][ T1568] rust_binder: Error while translating object. [ 56.019130][ T1568] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.025852][ T1568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:297 [ 56.226134][ T1574] binder: Bad value for 'stats' [ 56.286706][ T1577] __vm_enough_memory: pid: 1577, comm: syz.3.409, bytes: 18014402804453376 not enough memory for the allocation [ 56.314672][ T1580] rust_binder: 157: no such ref 1 [ 56.577174][ T1602] fuse: Unknown parameter 'Plfqʣ1 >+5*ˡCؑm- )yk-\>҃j sldeTğ1Z%' [ 56.585734][ T1604] input: syz0 as /devices/virtual/input/input9 [ 56.656873][ T1607] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.678493][ T1607] rust_binder: 239: no such ref 0 [ 56.690608][ T1607] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 56.697905][ T1607] rust_binder: 239: no such ref 2 [ 56.703599][ T1607] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 56.717377][ T1612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.803687][ T1612] rust_binder: Write failure EFAULT in pid:241 [ 56.829995][ T808] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 56.879960][ T1616] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 4294967293 [ 56.903864][ T1619] tipc: Enabled bearer , priority 0 [ 56.912610][ T1619] tipc: Disabling bearer [ 56.992451][ T808] usb 4-1: Invalid ep0 maxpacket: 16 [ 57.134758][ T808] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 57.286873][ T808] usb 4-1: Invalid ep0 maxpacket: 16 [ 57.292595][ T808] usb usb4-port1: attempt power cycle [ 57.307164][ T63] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 57.327413][ T389] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 57.459467][ T63] usb 1-1: Using ep0 maxpacket: 32 [ 57.466452][ T63] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.479613][ T63] usb 1-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 57.489090][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.489794][ T389] usb 2-1: Using ep0 maxpacket: 32 [ 57.498544][ T63] usb 1-1: config 0 descriptor?? [ 57.508557][ T389] usb 2-1: config index 0 descriptor too short (expected 57820, got 36) [ 57.517110][ T389] usb 2-1: config 189 has too many interfaces: 168, using maximum allowed: 32 [ 57.526383][ T389] usb 2-1: config 189 has an invalid descriptor of length 0, skipping remainder of the config [ 57.537271][ T389] usb 2-1: config 189 has 0 interfaces, different from the descriptor's value: 168 [ 57.547359][ T389] usb 2-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.00 [ 57.556558][ T389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.642000][ T808] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 57.662617][ T808] usb 4-1: Invalid ep0 maxpacket: 16 [ 57.771395][ T1626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.780582][ T1626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.789130][ T1626] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 57.798911][ T808] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 57.807261][ T389] usb 2-1: string descriptor 0 read error: -71 [ 57.814598][ T389] usb 2-1: USB disconnect, device number 16 [ 57.825084][ T808] usb 4-1: Invalid ep0 maxpacket: 16 [ 57.830949][ T808] usb usb4-port1: unable to enumerate USB device [ 57.918481][ T63] wacom 0003:056A:030A.0005: hidraw0: USB HID v0.07 Device [HID 056a:030a] on usb-dummy_hcd.0-1/input0 [ 58.140326][ T1622] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 58.149498][ T63] usb 1-1: USB disconnect, device number 10 [ 58.351720][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 58.351741][ T36] audit: type=1400 audit(1759735947.206:342): avc: denied { mounton } for pid=1650 comm="syz.1.435" path="/85/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 58.424950][ T36] audit: type=1400 audit(1759735947.285:343): avc: denied { name_bind } for pid=1655 comm="syz.1.436" src=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 58.455528][ T1656] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 58.584482][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.584519][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.595418][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.615549][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.635270][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.641912][ T1669] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 58.648938][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.657524][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.677793][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.684520][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.691189][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.697987][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.704699][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.711698][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.724299][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.731059][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.747425][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.754117][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.760890][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.771241][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.780326][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.798150][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.804870][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.818284][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.825008][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.838545][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.845321][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.852338][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.859086][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.865910][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.873001][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.879760][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.886555][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.894901][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.902334][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.919658][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.926439][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.939919][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.946737][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.960197][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.972856][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.979999][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.000760][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.007477][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.020502][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.031173][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.040442][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.058651][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.065570][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.081836][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.088783][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.095704][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.102833][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.109611][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.116754][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.123735][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.130365][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.137273][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.144160][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.151084][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.158173][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.165119][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.171793][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.179265][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.186031][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.192823][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.239119][ T1682] rust_binder: 274: no such ref 1 [ 59.251009][ T1682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:274 [ 59.266664][ T1684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:276 [ 59.386806][ T36] audit: type=1326 audit(1759735948.232:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1661 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd44b8eec9 code=0x7fc00000 [ 59.441917][ T1695] incfs: Error accessing: ./file7. [ 59.447326][ T1695] incfs: mount failed -2 [ 59.463579][ T36] audit: type=1400 audit(1759735948.301:345): avc: denied { mount } for pid=1696 comm="syz.2.450" name="/" dev="configfs" ino=2207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 59.489312][ T36] audit: type=1400 audit(1759735948.301:346): avc: denied { search } for pid=1696 comm="syz.2.450" name="/" dev="configfs" ino=2207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.512673][ T36] audit: type=1400 audit(1759735948.301:347): avc: denied { setattr } for pid=1696 comm="syz.2.450" name="/" dev="configfs" ino=2207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.538075][ T63] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 59.565152][ T36] audit: type=1400 audit(1759735948.400:348): avc: denied { accept } for pid=1704 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.585384][ T36] audit: type=1400 audit(1759735948.400:349): avc: denied { read } for pid=1704 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.711192][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 59.722729][ T63] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 59.737823][ T63] usb 2-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 59.747570][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.760403][ T63] usb 2-1: config 0 descriptor?? [ 59.778616][ T1688] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 59.787374][ T63] usbhid 2-1:0.0: can't add hid device: -22 [ 59.809242][ T63] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 59.884954][ T36] audit: type=1400 audit(1759735948.726:350): avc: denied { create } for pid=1740 comm="syz.2.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 59.886737][ T1720] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 59.913258][ T1720] rust_binder: Write failure EINVAL in pid:324 [ 59.993552][ T389] usb 2-1: USB disconnect, device number 17 [ 60.885463][ T1749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'. [ 60.931361][ T36] audit: type=1326 audit(1759735949.753:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1758 comm="syz.2.475" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd44b8eec9 code=0x0 [ 61.032312][ T1775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.477'. [ 61.041666][ T1775] tipc: Enabling of bearer rejected, failed to enable media [ 61.157519][ T389] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 61.309123][ T389] usb 2-1: Using ep0 maxpacket: 32 [ 61.315778][ T389] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.326897][ T389] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.338146][ T389] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 61.347506][ T389] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 61.355896][ T389] usb 2-1: Product: syz [ 61.359707][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 61.360413][ T389] usb 2-1: Manufacturer: syz [ 61.374655][ T389] hub 2-1:4.0: USB hub found [ 61.511344][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 61.517801][ T10] usb 4-1: config 10 has an invalid interface number: 129 but max is 3 [ 61.526151][ T10] usb 4-1: config 10 has an invalid interface number: 62 but max is 3 [ 61.534391][ T10] usb 4-1: config 10 has an invalid interface number: 78 but max is 3 [ 61.542698][ T10] usb 4-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 61.553337][ T10] usb 4-1: config 10 has 3 interfaces, different from the descriptor's value: 4 [ 61.562515][ T10] usb 4-1: config 10 has no interface number 0 [ 61.568717][ T10] usb 4-1: config 10 has no interface number 1 [ 61.575048][ T10] usb 4-1: config 10 has no interface number 2 [ 61.581682][ T10] usb 4-1: config 10 interface 129 altsetting 163 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 61.582389][ T389] hub 2-1:4.0: 2 ports detected [ 61.593918][ T10] usb 4-1: config 10 interface 129 altsetting 163 has a duplicate endpoint with address 0xE, skipping [ 61.609972][ T10] usb 4-1: config 10 interface 129 altsetting 163 bulk endpoint 0x1 has invalid maxpacket 1023 [ 61.620577][ T10] usb 4-1: config 10 interface 129 altsetting 163 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 61.632868][ T10] usb 4-1: config 10 interface 129 altsetting 163 endpoint 0x82 has invalid maxpacket 10357, setting to 1024 [ 61.645160][ T10] usb 4-1: config 10 interface 129 altsetting 163 bulk endpoint 0x82 has invalid maxpacket 1024 [ 61.656408][ T10] usb 4-1: config 10 interface 129 altsetting 163 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 61.667898][ T10] usb 4-1: config 10 interface 129 altsetting 163 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 61.681476][ T10] usb 4-1: config 10 interface 62 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 61.694876][ T10] usb 4-1: config 10 interface 78 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 61.708187][ T10] usb 4-1: config 10 interface 129 has no altsetting 0 [ 61.715274][ T10] usb 4-1: config 10 interface 62 has no altsetting 0 [ 61.722172][ T10] usb 4-1: config 10 interface 78 has no altsetting 0 [ 61.731504][ T10] usb 4-1: New USB device found, idVendor=13b1, idProduct=001e, bcdDevice=c6.28 [ 61.740910][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.749801][ T10] usb 4-1: Product: 秷磳ꚕ쬾꩹࿎骇퀉敹璡ᶬꌻ䚙믻㍴蚢❪쵝쾧裶ᡪ쭇눠꾁感갍鯩Ꮾ쭡픔︡셍ᔮ煥龁傝蠪ᎉጩꖅᮚ財⬜ᱮ퇩 [ 61.768489][ T10] usb 4-1: Manufacturer: Х [ 61.773023][ T10] usb 4-1: SerialNumber: ꬵ틢瞢꽼庁಺⾝आ缦紇丸鐜㐦챜㊝왒㽨溋嶟밳䱣Ⰹ悟눪둎ᦷ楘菀⦯좊틀꙽換쐎ﺸㄍ땞㥞虐䒨접﯇葭䞒䐕㿁ꡈퟯ刴ὁ䤪끔鼢䫑牉蹶㢩熼⮽쉙녬⬑쯸蠆䵳鵨৛地闱缟Ṝ瞠ᑫ莑⊑塊䟶鰣弟㧭̭⤗歿ී鴂곭뭎싳參鼒骊꿅溠㿋쐝᜻ꆰ莲蔺휱້⭣ꎞਸퟸ풌 [ 61.810912][ T1786] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 61.818665][ T1786] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 62.119841][ T1788] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 62.234392][ T1786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.244040][ T1786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.260408][ T10] usb 4-1: USB disconnect, device number 12 [ 62.777433][ T1791] netlink: 32 bytes leftover after parsing attributes in process `syz.3.481'. [ 62.789578][ T1792] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 62.798571][ T1792] rust_binder: Write failure EINVAL in pid:205 [ 63.118608][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 63.131185][ T549] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.675918][ T1808] rust_binder: Error while translating object. [ 63.676036][ T1808] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 63.687128][ T1808] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:345 [ 63.728238][ T1813] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.797767][ T1813] rust_binder: Error in use_page_slow: ESRCH [ 63.797798][ T1813] rust_binder: use_range failure ESRCH [ 63.804252][ T1813] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 63.810081][ T1813] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 63.819005][ T1813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:349 [ 63.828739][ T1813] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 63.840503][ T1813] rust_binder: Read failure Err(EFAULT) in pid:349 [ 63.849141][ T1815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:222 [ 63.874561][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 63.874588][ T36] audit: type=1400 audit(1759735952.662:356): avc: denied { create } for pid=1816 comm="syz.3.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 63.917908][ T36] audit: type=1400 audit(1759735952.672:357): avc: denied { sys_admin } for pid=1816 comm="syz.3.490" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 63.945362][ T1821] rust_binder: Write failure EFAULT in pid:228 [ 63.988221][ T389] hub 2-1:4.0: set hub depth failed [ 64.010133][ T389] usb 2-1: USB disconnect, device number 18 [ 64.050426][ T36] audit: type=1400 audit(1759735952.840:358): avc: denied { create } for pid=1829 comm="syz.1.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 64.099937][ T1843] netlink: 3 bytes leftover after parsing attributes in process `syz.2.497'. [ 64.136561][ T36] audit: type=1400 audit(1759735952.919:359): avc: denied { write } for pid=1844 comm="syz.2.498" name="file0" dev="tmpfs" ino=1191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.219455][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 64.243649][ T1848] batadv_slave_0: mtu less than device minimum [ 64.373489][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 64.383670][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 64.390979][ T389] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 64.395779][ T10] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 64.411493][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.419711][ T10] usb 4-1: Product: syz [ 64.424201][ T10] usb 4-1: Manufacturer: syz [ 64.429052][ T10] usb 4-1: SerialNumber: syz [ 64.437317][ T10] usb 4-1: config 0 descriptor?? [ 64.443322][ T1823] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 64.450692][ T1823] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 64.563723][ T389] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.589005][ T389] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.599695][ T389] usb 2-1: config 0 interface 0 has no altsetting 0 [ 64.606492][ T389] usb 2-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 64.616142][ T389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.626361][ T389] usb 2-1: config 0 descriptor?? [ 64.661269][ T1823] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 64.669554][ T1823] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 64.852949][ T389] usbhid 2-1:0.0: can't add hid device: -71 [ 64.868022][ T389] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 64.871946][ T36] audit: type=1400 audit(1759735953.653:360): avc: denied { read } for pid=1859 comm="syz.0.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.880640][ T389] usb 2-1: USB disconnect, device number 19 [ 64.898639][ T1862] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 65.007427][ T1874] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.007528][ T1874] rust_binder: Failed to allocate buffer. len:1192, is_oneway:true [ 65.096781][ T1882] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.105434][ T1882] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:306 [ 65.105832][ T1883] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 65.143079][ T1885] rust_binder: Write failure EFAULT in pid:309 [ 65.172339][ T36] audit: type=1400 audit(1759735953.950:361): avc: denied { mounton } for pid=1890 comm="syz.2.514" path="/file0" dev="rootfs" ino=7123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 65.202615][ T1892] overlay: ./file0 is not a directory [ 65.220697][ T1891] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 65.224195][ T36] audit: type=1400 audit(1759735953.999:362): avc: denied { create } for pid=1894 comm="syz.2.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 65.279110][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 65.292237][ T1899] tipc: Started in network mode [ 65.298301][ T1899] tipc: Node identity 4, cluster identity 4711 [ 65.307861][ T1899] tipc: Node number set to 4 [ 65.394578][ T1917] netlink: 44 bytes leftover after parsing attributes in process `syz.2.525'. [ 65.450594][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 65.457286][ T9] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 65.465920][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.476116][ T9] usb 1-1: config 0 has no interface number 0 [ 65.484139][ T9] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 65.493349][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.501393][ T9] usb 1-1: Product: syz [ 65.505768][ T9] usb 1-1: Manufacturer: syz [ 65.510405][ T9] usb 1-1: SerialNumber: syz [ 65.516140][ T9] usb 1-1: config 0 descriptor?? [ 65.724790][ T1878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:369 [ 65.726877][ T9] usb 1-1: USB disconnect, device number 11 [ 66.076042][ T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 66.229904][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 66.239682][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.248130][ T31] usb 2-1: Product: syz [ 66.255101][ T31] usb 2-1: Manufacturer: syz [ 66.260291][ T31] usb 2-1: SerialNumber: syz [ 66.357236][ T36] audit: type=1400 audit(1759735955.120:363): avc: denied { write } for pid=1935 comm="syz.0.534" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 66.468095][ T36] audit: type=1400 audit(1759735955.229:364): avc: denied { remount } for pid=1944 comm="syz.0.537" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.643893][ T330] tipc: Left network mode [ 66.649725][ T330] veth1_macvtap: left promiscuous mode [ 66.655708][ T330] veth0_vlan: left promiscuous mode [ 66.705674][ T36] audit: type=1400 audit(1759735955.477:365): avc: denied { mounton } for pid=1952 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 66.777642][ T1952] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.785211][ T1952] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.792558][ T1952] bridge_slave_0: entered allmulticast mode [ 66.799285][ T1952] bridge_slave_0: entered promiscuous mode [ 66.806138][ T1952] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.813367][ T1952] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.820601][ T1952] bridge_slave_1: entered allmulticast mode [ 66.827162][ T1952] bridge_slave_1: entered promiscuous mode [ 66.841748][ T1956] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.851684][ T31] usb 2-1: USB disconnect, device number 20 [ 66.913939][ T1952] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.921038][ T1952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.928673][ T1952] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.936109][ T1952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.985014][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.003437][ T10] Error reading MAC address [ 67.009174][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.024562][ T10] usb 4-1: USB disconnect, device number 13 [ 67.041755][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.049554][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.066568][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.073704][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.107799][ T1952] veth0_vlan: entered promiscuous mode [ 67.136675][ T1952] veth1_macvtap: entered promiscuous mode [ 67.459916][ T1993] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.460056][ T1993] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 67.524342][ T1995] netlink: 'syz.0.552': attribute type 4 has an invalid length. [ 67.583600][ T1995] rust_binder: 11: no such ref 1 [ 67.604293][ T1995] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 67.900425][ T808] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 67.934153][ T2010] rust_binder: Failed to allocate buffer. len:4294971144, is_oneway:false [ 67.934189][ T2010] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 67.943980][ T2010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:17 [ 67.972717][ T1986] netlink: 'syz.2.549': attribute type 3 has an invalid length. [ 68.000453][ T1986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'. [ 68.083464][ T2020] raw_sendmsg: syz.2.560 forgot to set AF_INET. Fix it! [ 68.098079][ T2020] 9pnet_fd: Insufficient options for proto=fd [ 68.104486][ T808] usb 4-1: Using ep0 maxpacket: 32 [ 68.119141][ T808] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.129330][ T808] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 68.142402][ T31] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 68.151316][ T808] usb 4-1: config 0 interface 0 has no altsetting 0 [ 68.160029][ T808] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 68.169864][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.179508][ T808] usb 4-1: config 0 descriptor?? [ 68.244137][ T2040] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 68.246576][ T2040] @0: renamed from bond_slave_1 [ 68.344824][ T2041] tipc: Enabling of bearer rejected, failed to enable media [ 68.365343][ T31] usb 2-1: config 1 has an invalid interface number: 253 but max is 1 [ 68.379125][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.389520][ T31] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 68.399851][ T31] usb 2-1: config 1 has no interface number 2 [ 68.406563][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.417796][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 68.428188][ T31] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 68.438490][ T31] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.451991][ T31] usb 2-1: config 1 interface 1 has no altsetting 0 [ 68.460514][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.470200][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.478751][ T31] usb 2-1: Product: syz [ 68.483165][ T31] usb 2-1: Manufacturer: syz [ 68.488718][ T31] usb 2-1: SerialNumber: syz [ 68.499063][ T31] cdc_ncm 2-1:1.253: CDC Union missing and no IAD found [ 68.506168][ T31] cdc_ncm 2-1:1.253: bind() failure [ 68.604200][ T808] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 68.617942][ T808] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints? [ 68.730548][ T2068] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30 [ 68.744869][ T2070] tipc: Enabling of bearer rejected, failed to enable media [ 68.782069][ T2074] netlink: 9 bytes leftover after parsing attributes in process `syz.0.576'. [ 68.791265][ T2074] 0{: renamed from gretap0 (while UP) [ 68.798491][ T2074] 0{: entered allmulticast mode [ 68.803930][ T2074] A link change request failed with some changes committed already. Interface 30{ may have been left with an inconsistent configuration, please check. [ 68.821871][ T2001] exFAT-fs (rnullb0): invalid boot record signature [ 68.829023][ T2001] exFAT-fs (rnullb0): failed to read boot sector [ 68.835747][ T2001] exFAT-fs (rnullb0): failed to recognize exfat type [ 68.843656][ C1] hid-thrustmaster 0003:044F:B65D.0006: URB to get model id failed with error -71 [ 68.843708][ T9] usb 4-1: USB disconnect, device number 14 [ 68.902503][ T2008] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.902628][ T2008] rust_binder: Failed to allocate buffer. len:160, is_oneway:true [ 68.909853][ T372] usb 2-1: USB disconnect, device number 21 [ 68.998099][ T2076] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 69.007520][ T2076] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 69.016518][ T2076] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 69.024660][ T2076] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 69.111164][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 69.111184][ T36] audit: type=1400 audit(1759735957.859:370): avc: denied { setattr } for pid=2097 comm="syz.0.583" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.157136][ T2100] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 69.170605][ T2103] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.180545][ T2103] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 69.401059][ T2105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.586'. [ 69.420298][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 69.469097][ T2107] netlink: 'syz.1.587': attribute type 13 has an invalid length. [ 69.477413][ T2107] erspan0: refused to change device tx_queue_len [ 69.484791][ T2107] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 69.624945][ T2114] overlayfs: failed to clone upperpath [ 69.754215][ T2127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.593'. [ 69.818241][ T2128] fuse: Bad value for 'group_id' [ 69.823990][ T2128] fuse: Bad value for 'group_id' [ 70.125230][ T36] audit: type=1400 audit(1759735958.862:371): avc: denied { getopt } for pid=2132 comm="syz.1.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.131566][ T2135] netlink: 48 bytes leftover after parsing attributes in process `syz.1.595'. [ 70.706193][ T36] audit: type=1326 audit(1759735959.438:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2142 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607f78eec9 code=0x7ffc0000 [ 70.714968][ T2144] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 70.730780][ T36] audit: type=1326 audit(1759735959.438:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2142 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607f78eec9 code=0x7ffc0000 [ 70.738818][ T2143] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 70.764137][ T36] audit: type=1326 audit(1759735959.448:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2142 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f607f78eec9 code=0x7ffc0000 [ 70.771769][ T2144] rust_binder: Write failure EINVAL in pid:343 [ 70.796315][ T36] audit: type=1326 audit(1759735959.448:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2142 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607f78eec9 code=0x7ffc0000 [ 70.805375][ T2143] rust_binder: Write failure EINVAL in pid:343 [ 70.827700][ T36] audit: type=1326 audit(1759735959.448:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2142 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f607f78eec9 code=0x7ffc0000 [ 70.860139][ T36] audit: type=1326 audit(1759735959.448:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2142 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607f78eec9 code=0x7ffc0000 [ 70.862202][ T2148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.884378][ T36] audit: type=1326 audit(1759735959.448:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2142 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f607f78eec9 code=0x7ffc0000 [ 70.884415][ T36] audit: type=1326 audit(1759735959.448:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2142 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 70.897983][ T2150] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.920998][ T2148] rust_binder: Failed to allocate buffer. len:216, is_oneway:true [ 70.942983][ T2150] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 70.948906][ T2148] netlink: 'syz.0.599': attribute type 27 has an invalid length. [ 71.122236][ T2168] rust_binder: Write failure EFAULT in pid:70 [ 71.137138][ T2170] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 71.145102][ T2172] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.167865][ T2174] 9pnet_fd: Insufficient options for proto=fd [ 71.180040][ T2172] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 71.183922][ T2174] 9pnet_fd: Insufficient options for proto=fd [ 71.238394][ T2181] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.397857][ T2184] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 71.504494][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 71.504494][ T549] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 71.610520][ T2194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.611783][ T2194] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 71.737383][ T2204] tipc: Enabled bearer , priority 0 [ 71.835776][ T2201] tipc: Disabling bearer [ 71.892410][ T808] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 72.016840][ T2213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 72.026663][ T2213] bridge_slave_1: left allmulticast mode [ 72.032500][ T2213] bridge_slave_1: left promiscuous mode [ 72.038771][ T2213] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.048986][ T2213] bridge_slave_0: left allmulticast mode [ 72.054824][ T2213] bridge_slave_0: left promiscuous mode [ 72.060730][ T2213] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.069643][ T808] usb 4-1: No LPM exit latency info found, disabling LPM. [ 72.082205][ T808] usb 4-1: config 13 has an invalid interface number: 203 but max is 0 [ 72.096772][ T808] usb 4-1: config 13 has no interface number 0 [ 72.109889][ T808] usb 4-1: config 13 interface 203 altsetting 0 endpoint 0x4 has invalid maxpacket 32, setting to 8 [ 72.132670][ T808] usb 4-1: config 13 interface 203 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 72.156877][ T808] usb 4-1: config 13 interface 203 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 8 [ 72.180450][ T808] usb 4-1: config 13 interface 203 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 8 [ 72.205542][ T808] usb 4-1: config 13 interface 203 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 72.217644][ T808] usb 4-1: config 13 interface 203 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 72.233006][ T808] usb 4-1: string descriptor 0 read error: -22 [ 72.239660][ T808] usb 4-1: New USB device found, idVendor=10c5, idProduct=ea61, bcdDevice=bd.16 [ 72.249091][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.257946][ T2218] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.260616][ T2218] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.268363][ T2218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82 [ 72.417604][ T2231] rust_binder: 91: no such ref 3 [ 72.432897][ T2231] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 72.440632][ T2231] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 72.448029][ T2231] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 72.455198][ T2231] rust_binder: 91: no such ref 0 [ 72.482303][ T2235] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.482442][ T2235] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 72.571986][ T9] usb 4-1: USB disconnect, device number 15 [ 72.624444][ T2244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.631'. [ 72.751659][ T808] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 72.903714][ T808] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 72.916796][ T808] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 72.926421][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.935470][ T808] usb 1-1: config 0 descriptor?? [ 73.102567][ T2248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=2248 comm=syz.3.632 [ 73.120954][ T2248] 9pnet_fd: Insufficient options for proto=fd [ 73.283309][ T2261] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.283687][ T2261] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 73.292119][ T2261] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.301188][ T2261] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 73.322198][ T2263] SELinux: Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped). [ 73.347360][ T808] dragonrise 0003:0079:0006.0007: unknown main item tag 0x0 [ 73.355095][ T808] dragonrise 0003:0079:0006.0007: unknown main item tag 0x0 [ 73.362622][ T808] dragonrise 0003:0079:0006.0007: unknown main item tag 0x0 [ 73.370193][ T808] dragonrise 0003:0079:0006.0007: unknown main item tag 0x0 [ 73.377752][ T808] dragonrise 0003:0079:0006.0007: unknown main item tag 0x0 [ 73.395132][ T808] dragonrise 0003:0079:0006.0007: hidraw0: USB HID v1.02 Device [HID 0079:0006] on usb-dummy_hcd.0-1/input0 [ 73.418776][ T808] dragonrise 0003:0079:0006.0007: no inputs found [ 73.425477][ T808] dragonrise 0003:0079:0006.0007: force feedback init failed [ 73.435277][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 73.527539][ T2269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.550232][ T2238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.565784][ T2238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.596146][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 73.602743][ T9] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 73.613042][ T9] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 73.623023][ T9] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.637458][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 73.645907][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 73.655125][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.663420][ T9] usb 4-1: Product: syz [ 73.667651][ T9] usb 4-1: Manufacturer: syz [ 73.672270][ T9] usb 4-1: SerialNumber: syz [ 73.734381][ T808] usb 1-1: USB disconnect, device number 12 [ 73.891039][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 74.092910][ T9] usb 4-1: USB disconnect, device number 16 [ 74.102871][ T9] usblp0: removed [ 74.115672][ T2296] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.118177][ T2296] syzkaller1: entered promiscuous mode [ 74.131480][ T2296] syzkaller1: entered allmulticast mode [ 74.138873][ T2296] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 74.176876][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 74.176898][ T36] audit: type=1326 audit(1759735962.889:407): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2301 comm="syz.2.649" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd44b8eec9 code=0x0 [ 74.228657][ T2308] fuse: Unknown parameter '|u_:f' [ 74.520813][ T808] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 74.672801][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 74.684981][ T808] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 74.698227][ T808] usb 2-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 74.707916][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.717013][ T808] usb 2-1: config 0 descriptor?? [ 74.722635][ T2316] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 74.730850][ T808] usbhid 2-1:0.0: can't add hid device: -22 [ 74.737899][ T808] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 74.872515][ T31] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 74.935302][ T2315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.944098][ T2315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.953189][ T10] usb 2-1: USB disconnect, device number 22 [ 75.025202][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 75.036314][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 75.049441][ T31] usb 4-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 75.058580][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.067502][ T31] usb 4-1: config 0 descriptor?? [ 75.072939][ T2318] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 75.081425][ T31] usbhid 4-1:0.0: can't add hid device: -22 [ 75.087471][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 75.284259][ T9] usb 4-1: USB disconnect, device number 17 [ 75.535000][ T36] audit: type=1400 audit(1759735964.242:408): avc: denied { unmount } for pid=2319 comm="syz.1.654" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.902530][ T2324] tipc: Started in network mode [ 75.907713][ T2324] tipc: Node identity d6758deb0d19, cluster identity 4711 [ 75.915071][ T2324] tipc: Enabled bearer , priority 0 [ 76.158439][ T31] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 76.248846][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 76.248874][ T549] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.310482][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.321829][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.331763][ T31] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 76.341256][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.350052][ T31] usb 4-1: config 0 descriptor?? [ 76.510000][ T352] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 76.594661][ T2331] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=2331 comm=syz.1.659 [ 76.637478][ T36] audit: type=1400 audit(1759735965.347:409): avc: denied { create } for pid=2336 comm="syz.1.661" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 76.672332][ T352] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 76.690643][ T352] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.701459][ T352] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.711367][ T352] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.722011][ T352] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.732139][ T352] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.742666][ T352] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.752664][ T352] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.768217][ T352] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.782878][ T352] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.793356][ T352] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.805239][ T352] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.815673][ T352] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.825504][ T352] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.835792][ T352] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.840545][ T2355] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 76.845075][ T36] audit: type=1400 audit(1759735965.547:410): avc: denied { read } for pid=2354 comm="syz.1.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.874496][ T352] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.885081][ T352] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.895498][ T352] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 76.907110][ T352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 76.909307][ T2357] fuseblk: Bad value for 'fd' [ 76.917247][ T352] usb 1-1: SerialNumber: syz [ 76.964724][ T31] hid-led 0003:27B8:01ED.0008: probe with driver hid-led failed with error -71 [ 76.976062][ T31] usb 4-1: USB disconnect, device number 18 [ 76.977051][ T2324] tipc: Disabling bearer [ 77.130818][ T2329] binder: Unknown parameter 's [ 77.130818][ T2329] cbeu' [ 77.141181][ T352] usb 1-1: cannot find UAC_HEADER [ 77.148413][ T352] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 77.158614][ T352] usb 1-1: USB disconnect, device number 13 [ 77.167418][ T351] udevd[351]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.587078][ T2390] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 77.595265][ T2390] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 77.604180][ T2390] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 77.612463][ T2390] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 77.622619][ T36] audit: type=1326 audit(1759735966.333:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2389 comm="syz.3.679" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d1498eec9 code=0x0 [ 77.657858][ T2392] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.717929][ T36] audit: type=1400 audit(1759735966.423:412): avc: denied { getattr } for pid=2391 comm="syz.0.680" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 77.724450][ T2394] deleting an unspecified loop device is not supported. [ 77.724979][ T36] audit: type=1400 audit(1759735966.423:413): avc: denied { read write } for pid=2389 comm="syz.3.679" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 77.783014][ T36] audit: type=1400 audit(1759735966.423:414): avc: denied { open } for pid=2389 comm="syz.3.679" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 77.808569][ T36] audit: type=1400 audit(1759735966.423:415): avc: denied { ioctl } for pid=2389 comm="syz.3.679" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 77.973426][ T2406] netlink: 124 bytes leftover after parsing attributes in process `syz.2.683'. [ 78.496490][ T2409] rust_binder: 2408 RLIMIT_NICE not set [ 78.547249][ T2408] rust_binder: Write failure EINVAL in pid:270 [ 78.721693][ T2435] x_tables: duplicate underflow at hook 4 [ 78.928579][ T2452] fuse: Bad value for 'fd' [ 79.093507][ T36] audit: type=1400 audit(1759735967.788:416): avc: denied { map } for pid=2458 comm="syz.0.701" path="socket:[14391]" dev="sockfs" ino=14391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.100957][ T2459] 9pnet_fd: Insufficient options for proto=fd [ 79.213169][ T2474] veth1: entered allmulticast mode [ 79.272378][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 79.272398][ T36] audit: type=1400 audit(1759735967.977:419): avc: denied { connect } for pid=2473 comm="syz.0.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.286849][ T9] rust_binder: 2407: removing orphan mapping 0:1168 [ 79.324935][ T2490] netlink: 'syz.2.710': attribute type 27 has an invalid length. [ 79.394312][ T36] audit: type=1400 audit(1759735968.097:420): avc: denied { read write } for pid=2491 comm="syz.3.712" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.412507][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.419227][ T36] audit: type=1400 audit(1759735968.097:421): avc: denied { open } for pid=2491 comm="syz.3.712" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.431430][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.458340][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.466191][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.473915][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.481610][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.489117][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.496998][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.504532][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.512105][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.519644][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.527432][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.535336][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.543255][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.550785][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.558303][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.566058][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.573882][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.581819][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.589765][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.597858][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.605853][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.614286][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.622564][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.631216][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.639612][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.647417][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.655416][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.662966][ T10] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 79.670817][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.680066][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.688304][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.695919][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.704230][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.712083][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.720626][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.728345][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.737248][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.745193][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.752928][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.760930][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.768374][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.776362][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.784036][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.791826][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.799715][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.807508][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.815175][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.823021][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.830609][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.838327][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.846085][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.853837][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.861324][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.869483][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.877221][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.884996][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.895261][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.903228][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.911133][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.919143][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.926999][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.934676][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.942191][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.949827][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.958132][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.966172][ T10] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 79.975502][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.983095][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 79.990916][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.999001][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 80.006645][ T10] usb 4-1: Product: syz [ 80.011009][ T10] usb 4-1: Manufacturer: syz [ 80.015811][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 80.023239][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 80.030787][ T10] usb 4-1: SerialNumber: syz [ 80.036276][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 80.044033][ T10] usb 4-1: config 0 descriptor?? [ 80.048762][ T2473] veth1: left allmulticast mode [ 80.049211][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 80.061979][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 80.069842][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 80.077935][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 80.086006][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 80.094110][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 80.102325][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 80.110268][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 80.118156][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 80.126335][ T9] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 80.139297][ T9] hid-generic 0003:0008:000F.0009: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 80.185254][ T2515] Invalid ELF header magic: != ELF [ 80.185653][ T36] audit: type=1400 audit(1759735968.884:422): avc: denied { module_load } for pid=2514 comm="syz.0.721" path="/55/bus" dev="tmpfs" ino=314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 80.260364][ T2524] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 80.279916][ T2524] overlay: ./file0 is not a directory [ 80.376106][ T10] usb 4-1: bad CDC descriptors [ 80.381951][ T10] usb 4-1: unsupported MDLM descriptors [ 80.389485][ T10] usb 4-1: USB disconnect, device number 19 [ 80.962979][ T36] audit: type=1400 audit(1759735969.651:423): avc: granted { setsecparam } for pid=2566 comm="syz.3.739" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 81.310842][ T2573] 9pnet_fd: Insufficient options for proto=fd [ 81.384374][ T2588] overlayfs: failed to clone upperpath [ 81.412510][ T2587] rust_binder: Write failure EFAULT in pid:284 [ 81.412671][ T36] audit: type=1400 audit(1759735970.100:424): avc: denied { setattr } for pid=2586 comm="syz.3.746" name="" dev="pipefs" ino=14665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 81.477916][ T36] audit: type=1400 audit(1759735970.160:425): avc: denied { write } for pid=2590 comm="syz.1.742" path="socket:[14670]" dev="sockfs" ino=14670 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.841126][ T2628] overlayfs: failed to clone lowerpath [ 81.970895][ T2647] tipc: Cannot configure node identity twice [ 81.974769][ T2649] overlayfs: failed to resolve './file0': -2 [ 82.000221][ T2653] overlayfs: failed to clone upperpath [ 82.040127][ T2657] 9pnet_fd: Insufficient options for proto=fd [ 82.061822][ T36] audit: type=1400 audit(1759735970.748:426): avc: denied { nlmsg_read } for pid=2658 comm="syz.0.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 82.509017][ T2696] rust_binder: Write failure EFAULT in pid:288 [ 82.543159][ T44] bridge_slave_1: left allmulticast mode [ 82.570728][ T44] bridge_slave_1: left promiscuous mode [ 82.576418][ T2699] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.576447][ T2699] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.583236][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.597984][ T44] bridge_slave_0: left allmulticast mode [ 82.603879][ T44] bridge_slave_0: left promiscuous mode [ 82.609812][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.653272][ T36] audit: type=1400 audit(1759735972.338:427): avc: denied { append } for pid=2709 comm="syz.3.790" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.755374][ T44] veth1_macvtap: left promiscuous mode [ 82.761133][ T44] veth0_vlan: left promiscuous mode [ 82.832294][ T2727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:304 [ 82.839527][ T2722] netlink: 'syz.1.793': attribute type 7 has an invalid length. [ 82.857430][ T2722] netlink: 'syz.1.793': attribute type 5 has an invalid length. [ 82.866480][ T2722] netlink: 17 bytes leftover after parsing attributes in process `syz.1.793'. [ 82.891929][ T2717] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.899494][ T2717] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.907240][ T2717] bridge_slave_0: entered allmulticast mode [ 82.913883][ T2717] bridge_slave_0: entered promiscuous mode [ 82.914682][ T2730] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 82.922548][ T2717] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.934996][ T2717] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.942574][ T2717] bridge_slave_1: entered allmulticast mode [ 82.949593][ T2717] bridge_slave_1: entered promiscuous mode [ 82.971486][ T2737] rust_binder: Error while translating object. [ 82.971528][ T2737] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.978489][ T2737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:309 [ 83.032172][ T2717] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.048914][ T2717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.056457][ T2717] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.063818][ T2717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.090530][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.100562][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.107656][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.119248][ T2745] rust_binder: Write failure EFAULT in pid:311 [ 83.151784][ T2717] veth0_vlan: entered promiscuous mode [ 83.172576][ T2717] veth1_macvtap: entered promiscuous mode [ 83.252523][ T2761] binder: Unknown parameter 'subj_role' [ 83.311353][ T2767] rust_binder: Error in use_page_slow: ESRCH [ 83.311378][ T2767] rust_binder: use_range failure ESRCH [ 83.317508][ T2767] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 83.323108][ T2767] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 83.331387][ T2767] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:4 [ 83.440845][ T36] audit: type=1400 audit(1759735973.128:428): avc: denied { append } for pid=2771 comm="syz.4.808" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 83.540512][ T31] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 83.690384][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 83.696859][ T31] usb 4-1: config 1 interface 0 altsetting 63 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 83.708880][ T31] usb 4-1: config 1 interface 0 altsetting 63 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.722873][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 83.731854][ T31] usb 4-1: New USB device found, idVendor=1477, idProduct=1026, bcdDevice= 0.40 [ 83.741802][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.751578][ T31] usb 4-1: Product: 〉 [ 83.756050][ T31] usb 4-1: Manufacturer: ї [ 83.760836][ T352] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.768570][ T31] usb 4-1: SerialNumber: 雞⨉꽀祤ӯቃﮟลᵷ倴銢㕩魍짞㎌ᛔ䨡꥛鵋಼Ԉ鯴⻙欭퓜肑ꕴ⣳⟵덒ꦙ晿陵蟾︪梇㚐췍쭷桇ᫍꉻ朵픫啞숋摠Ჯ需폱ӹ⌏䊯륮븦騲榟㽆귖燣詢逢橎旫嶖鄙哔돶弑흄扏螯䴥㼯滨톘畋ᔭ눍㼩悮ꌷꠖ䁂ꊺ᠄ꔈↃ [ 83.930351][ T352] usb 5-1: device descriptor read/64, error -71 [ 84.022757][ T31] usbhid 4-1:1.0: can't add hid device: -71 [ 84.029066][ T31] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 84.051496][ T31] usb 4-1: USB disconnect, device number 20 [ 84.180437][ T352] usb 5-1: device descriptor read/64, error -71 [ 84.313433][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 84.313452][ T36] audit: type=1400 audit(1759735973.998:432): avc: denied { getattr } for pid=2807 comm="syz.1.820" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 84.420352][ T352] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.550380][ T352] usb 5-1: device descriptor read/64, error -71 [ 84.790589][ T352] usb 5-1: device descriptor read/64, error -71 [ 84.826821][ T36] audit: type=1400 audit(1759735974.508:433): avc: denied { map } for pid=2847 comm="syz.1.835" path="socket:[16461]" dev="sockfs" ino=16461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.885476][ T2856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.834'. [ 84.897017][ T36] audit: type=1400 audit(1759735974.578:434): avc: denied { append } for pid=2844 comm="syz.3.834" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.921847][ T352] usb usb5-port1: attempt power cycle [ 85.002537][ T2866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'. [ 85.023048][ T2871] tmpfs: Unknown parameter '' [ 85.112941][ T2890] capability: warning: `syz.2.850' uses 32-bit capabilities (legacy support in use) [ 85.134237][ T2895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.851'. [ 85.270408][ T352] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 85.291724][ T352] usb 5-1: device descriptor read/8, error -71 [ 85.422139][ T352] usb 5-1: device descriptor read/8, error -71 [ 85.499479][ T2904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'. [ 85.511141][ T2904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'. [ 85.586607][ T2906] rust_binder: 372: no such ref 0 [ 85.591867][ T2906] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 85.599287][ T2906] rust_binder: 372: no such ref 2 [ 85.604603][ T2906] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 85.619848][ T36] audit: type=1400 audit(1759735975.298:435): avc: denied { lock } for pid=2907 comm="syz.3.856" path="socket:[16540]" dev="sockfs" ino=16540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 85.620747][ T2908] rust_binder: Write failure EFAULT in pid:374 [ 85.665492][ T352] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 85.680361][ T36] audit: type=1326 audit(1759735975.358:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2909 comm="syz.3.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1498eec9 code=0x7ffc0000 [ 85.705651][ T36] audit: type=1326 audit(1759735975.358:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2909 comm="syz.3.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1498eec9 code=0x7ffc0000 [ 85.711837][ T352] usb 5-1: device descriptor read/8, error -71 [ 85.731223][ T36] audit: type=1326 audit(1759735975.358:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2909 comm="syz.3.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f0d1498eec9 code=0x7ffc0000 [ 85.762513][ T36] audit: type=1326 audit(1759735975.358:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2909 comm="syz.3.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f0d1498eec9 code=0x7ffc0000 [ 85.786368][ T36] audit: type=1326 audit(1759735975.358:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2909 comm="syz.3.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f0d1498eec9 code=0x7ffc0000 [ 85.792838][ T2917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.859'. [ 85.810582][ T36] audit: type=1326 audit(1759735975.358:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2909 comm="syz.3.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f0d1498eec9 code=0x7ffc0000 [ 85.841679][ T2919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'. [ 85.901475][ T352] usb 5-1: device descriptor read/8, error -71 [ 85.927298][ T2921] tipc: Cannot configure node identity twice [ 85.941318][ T2921] rust_binder: 381: no such ref 0 [ 85.946670][ T2921] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 85.954301][ T2921] rust_binder: 381: no such ref 2 [ 85.959854][ T2921] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 86.010481][ T352] usb usb5-port1: unable to enumerate USB device [ 86.037686][ T2931] rust_binder: 391: no such ref 0 [ 86.043252][ T2931] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 86.051268][ T2931] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 86.130334][ T2948] fuse: Bad value for 'fd' [ 86.130334][ T2949] fuse: Bad value for 'fd' [ 86.139255][ T2950] binder: Unknown parameter 'conext' [ 86.385867][ T2954] fuse: Unknown parameter '/dev/net/tun' [ 86.392354][ T2954] /dev/loop2: Can't lookup blockdev [ 86.399984][ T2954] netlink: 124 bytes leftover after parsing attributes in process `syz.2.873'. [ 86.452386][ T2961] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 86.452419][ T2961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:398 [ 86.492917][ T2967] rust_binder: Write failure EFAULT in pid:400 [ 86.688414][ T2997] netlink: 32 bytes leftover after parsing attributes in process `syz.3.888'. [ 86.724361][ T3002] cgroup2: Unknown parameter 'freezer' [ 86.730853][ T3002] FAT-fs (rnullb0): bogus number of reserved sectors [ 86.738183][ T3002] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 86.764559][ T3008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'. [ 86.900440][ T3012] rust_binder: Error while translating object. [ 86.900475][ T3012] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 86.907191][ T3012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:416 [ 87.431561][ T3031] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 87.668509][ T3037] __vm_enough_memory: pid: 3037, comm: syz.4.904, bytes: 18014402804453376 not enough memory for the allocation [ 87.683147][ T3042] binder: Unknown parameter '00000000000000000000' [ 87.800641][ T3063] binder: Unknown parameter 'seOܺ3D2xq"rN.Br$"ga(\ΗiKy_a4(Q0#:k4@W]`vƄQFSߤ' [ 87.833104][ T3052] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 87.980911][ T3065] binder: Bad value for 'stats' [ 87.986046][ T3065] syz.4.911 uses obsolete (PF_INET,SOCK_PACKET) [ 88.330451][ T389] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 88.482452][ T389] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.492892][ T389] usb 5-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 88.502341][ T389] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.511398][ T389] usb 5-1: config 0 descriptor?? [ 88.562411][ T3094] 9pnet_fd: Insufficient options for proto=fd [ 89.415135][ T36] kauditd_printk_skb: 66 callbacks suppressed [ 89.415155][ T36] audit: type=1400 audit(1759735979.098:508): avc: denied { setopt } for pid=3145 comm="syz.3.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 89.595659][ T3157] 9pnet_fd: Insufficient options for proto=fd [ 89.649381][ T3172] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 89.657286][ T3172] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 89.712218][ T3182] netlink: 'syz.2.949': attribute type 13 has an invalid length. [ 89.758512][ T36] audit: type=1400 audit(1759735979.438:509): avc: denied { setattr } for pid=3185 comm="syz.2.951" name="PACKET" dev="sockfs" ino=17049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.920433][ T31] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 90.071563][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.082068][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 90.089273][ T31] usb 4-1: language id specifier not provided by device, defaulting to English [ 90.099750][ T31] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 90.109744][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.118411][ T31] usb 4-1: Product: syz [ 90.123099][ T31] usb 4-1: Manufacturer: ޿ṕ즒꡴婵皰磈㠁缥鉓堫췟芄嶦ꓡ᧼啠㌂座∺티먌ꭖ쓻╝㈺﵁債隥굄糶䵎孜 [ 90.137281][ T31] usb 4-1: SerialNumber: syz [ 90.350896][ T31] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 90.363793][ T31] usb 4-1: USB disconnect, device number 21 [ 90.436804][ T36] audit: type=1400 audit(1759735980.118:510): avc: denied { map } for pid=3220 comm="syz.1.962" path="socket:[17087]" dev="sockfs" ino=17087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.444368][ T3221] __nla_validate_parse: 4 callbacks suppressed [ 90.444398][ T3221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.962'. [ 91.056225][ T389] usbhid 5-1:0.0: can't add hid device: -71 [ 91.063806][ T389] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 91.078431][ T389] usb 5-1: USB disconnect, device number 6 [ 91.109198][ T3262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 91.109419][ T3262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:45 [ 91.151450][ T352] rust_binder: 3265: removing orphan mapping 0:4096 [ 91.520342][ T389] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 91.671571][ T389] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.682302][ T389] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.693423][ T389] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.703374][ T389] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.712277][ T389] usb 5-1: Product: я [ 91.716854][ T389] usb 5-1: Manufacturer: ﹌쨌픋⍺枍땧漴鶾￑杉༘ꌛ賅ꋔ꘼㿏┘腌왈铩ୀ靌䓜䙤뛇狲ᐵ竴螑ᑕ᳟➬ᡂﭠ砀蛒ꪬ걉挒杩鴸ꩩ⢠ [ 91.735173][ T389] usb 5-1: SerialNumber: syz [ 91.893193][ T3298] SELinux: security_context_str_to_sid () failed with errno=-22 [ 91.945004][ T389] usb 5-1: 0:2 : does not exist [ 91.952086][ T389] usb 5-1: USB disconnect, device number 7 [ 91.961754][ T351] udevd[351]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 92.160382][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 92.290368][ T9] usb 4-1: device descriptor read/64, error -71 [ 92.456668][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.456699][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.461603][ T3304] rust_binder: 55: no such ref 2 [ 92.463452][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.470346][ T3304] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 92.475764][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.484361][ T3304] rust_binder: 55: no such ref 2 [ 92.491366][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.501196][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.508232][ T3304] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 92.511649][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.523319][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.523313][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.523342][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.542869][ T9] usb 4-1: device descriptor read/64, error -71 [ 92.542901][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.556240][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.556535][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.569337][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.569335][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.569366][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.589450][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.596437][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.596453][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.596471][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.616113][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.616116][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.616142][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.636121][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.636116][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.636148][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.656188][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.663004][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.663276][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.677338][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.683949][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.684214][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.697412][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.704341][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.711178][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.717387][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.724470][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.731239][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.737674][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.744718][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.752623][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.757800][ T3310] overlay: ./file0 is not a directory [ 92.759015][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.766156][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.777308][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.784639][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 92.799642][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.799691][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.804886][ T3303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.812309][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.818911][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.828808][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.835500][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.842398][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.848729][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.854996][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.861265][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.867367][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.873522][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.879660][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.886195][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.893489][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.899882][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.906486][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.912930][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.919229][ T3304] rust_binder: Write failure EINVAL in pid:55 [ 92.940332][ T9] usb 4-1: device descriptor read/64, error -71 [ 92.954738][ T3326] overlayfs: failed to clone upperpath [ 92.963062][ T3326] overlayfs: failed to clone upperpath [ 93.095945][ T3332] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2581 sclass=netlink_tcpdiag_socket pid=3332 comm=syz.4.1002 [ 93.125322][ T36] audit: type=1400 audit(1759735982.808:511): avc: denied { bind } for pid=3336 comm="syz.4.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 93.177649][ T36] audit: type=1400 audit(1759735982.858:512): avc: denied { connect } for pid=3340 comm="syz.4.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 93.200390][ T9] usb 4-1: device descriptor read/64, error -71 [ 93.230289][ T36] audit: type=1400 audit(1759735982.908:513): avc: denied { lock } for pid=3345 comm="syz.4.1006" path="socket:[17255]" dev="sockfs" ino=17255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 93.310636][ T9] usb usb4-port1: attempt power cycle [ 94.084976][ T3381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1016'. [ 94.122513][ T36] audit: type=1400 audit(1759735983.808:514): avc: denied { ioctl } for pid=3388 comm="syz.4.1018" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 94.147655][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 94.177675][ T36] audit: type=1400 audit(1759735983.858:515): avc: denied { audit_read } for pid=3396 comm="syz.4.1020" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.200194][ T9] usb 4-1: device descriptor read/8, error -71 [ 94.222975][ T3408] sit0: entered promiscuous mode [ 94.229189][ T3408] netlink: 'syz.4.1022': attribute type 1 has an invalid length. [ 94.237081][ T3408] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1022'. [ 94.246670][ T3408] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.246699][ T3408] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.254033][ T3408] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.261097][ T3408] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.268067][ T3408] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.275033][ T3408] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.281615][ T3408] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.288441][ T3408] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.295236][ T3408] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.302388][ T3408] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.309595][ T3408] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.316824][ T3408] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.324182][ T3408] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.330800][ T3408] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.332871][ T9] usb 4-1: device descriptor read/8, error -71 [ 94.363357][ T3412] netlink: 'syz.4.1023': attribute type 4 has an invalid length. [ 94.378995][ T3412] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 94.379032][ T3412] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:113 [ 94.389492][ T3412] binder: Bad value for 'stats' [ 94.596350][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 94.638844][ T9] usb 4-1: device descriptor read/8, error -71 [ 94.771483][ T9] usb 4-1: device descriptor read/8, error -71 [ 94.782067][ T36] audit: type=1326 audit(1759735984.468:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3431 comm="syz.1.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607f78eec9 code=0x7fc00000 [ 94.830329][ T36] audit: type=1400 audit(1759735984.508:517): avc: denied { create } for pid=3436 comm="syz.1.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 94.890838][ T9] usb usb4-port1: unable to enumerate USB device [ 94.953879][ T36] audit: type=1400 audit(1759735984.638:518): avc: denied { getopt } for pid=3448 comm="syz.3.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.092463][ T3465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=3465 comm=syz.1.1040 [ 95.105900][ T3465] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1040'. [ 95.159857][ T3471] tipc: Enabling of bearer rejected, failed to enable media [ 95.237518][ T3483] overlayfs: missing 'lowerdir' [ 95.290665][ T3463] rust_binder: 485: no such ref 0 [ 95.296320][ T3463] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 95.318422][ T3463] veth1: entered allmulticast mode [ 95.358887][ T36] audit: type=1400 audit(1759735985.038:519): avc: denied { listen } for pid=3462 comm="syz.3.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.379444][ T3462] veth1: left allmulticast mode [ 95.553858][ T3504] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.553886][ T3504] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.561314][ T3504] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.567384][ T3504] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.574365][ T3504] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.580475][ T3504] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.587358][ T3504] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.603091][ T3504] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.603109][ T3504] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.609601][ T3504] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.631389][ T3508] rust_binder: Read failure Err(EAGAIN) in pid:135 [ 95.671851][ T3510] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 95.678887][ T3510] rust_binder: Error while translating object. [ 95.691708][ T3510] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 95.698013][ T3510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:137 [ 95.834076][ T3515] rust_binder: Error while translating object. [ 95.843661][ T3515] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 95.850587][ T3515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:142 [ 95.959173][ T3539] rust_binder: Failed copying remainder into alloc: EFAULT [ 95.969353][ T3539] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 95.977393][ T3539] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 95.987773][ T3539] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:490 [ 96.024530][ T3547] @: renamed from vlan0 (while UP) [ 96.042867][ T3547] rust_binder: Error while translating object. [ 96.042932][ T3547] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.053888][ T3547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:492 [ 96.079344][ T3551] overlay: ./file0 is not a directory [ 96.117792][ T36] audit: type=1400 audit(1759735985.798:520): avc: denied { mounton } for pid=3550 comm="syz.3.1071" path="/164/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 96.308396][ T36] audit: type=1326 audit(1759735985.998:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3571 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1498eec9 code=0x7fc00000 [ 96.332417][ T36] audit: type=1326 audit(1759735985.998:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3571 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1498eec9 code=0x7fc00000 [ 96.368522][ T36] audit: type=1326 audit(1759735986.048:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3571 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1498eec9 code=0x7fc00000 [ 96.392506][ T36] audit: type=1326 audit(1759735986.048:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3571 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1498eec9 code=0x7fc00000 [ 96.428414][ T36] audit: type=1326 audit(1759735986.118:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3571 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1498eec9 code=0x7fc00000 [ 97.088042][ T3607] SELinux: security_context_str_to_sid () failed with errno=-22 [ 97.319112][ T3612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=3612 comm=syz.1.1091 [ 97.880356][ T389] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 98.031613][ T389] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 98.043181][ T389] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 98.053274][ T389] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 98.062675][ T389] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.276323][ T389] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 98.284511][ T389] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input14 [ 98.298335][ T389] usb 5-1: USB disconnect, device number 8 [ 98.602539][ T3705] overlayfs: failed to clone upperpath [ 98.765200][ T3714] tipc: Enabling of bearer rejected, failed to enable media [ 99.458181][ T3733] netlink: 'syz.2.1133': attribute type 1 has an invalid length. [ 99.466794][ T3733] netlink: 'syz.2.1133': attribute type 2 has an invalid length. [ 99.631468][ T3745] xt_NFQUEUE: number of total queues is 0 [ 99.716435][ T3756] 9pnet_fd: Insufficient options for proto=fd [ 99.722612][ T3760] overlayfs: failed to resolve './bus': -2 [ 99.774709][ T3769] tipc: Enabling of bearer rejected, failed to enable media [ 99.800711][ T3767] x_tables: duplicate underflow at hook 1 [ 100.122353][ T3782] 9pnet_fd: Insufficient options for proto=fd [ 100.165053][ T36] kauditd_printk_skb: 96 callbacks suppressed [ 100.165072][ T36] audit: type=1400 audit(1759735989.848:622): avc: denied { ioctl } for pid=3789 comm="syz.4.1154" path="socket:[19610]" dev="sockfs" ino=19610 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.171182][ T3791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1154'. [ 100.206894][ T3790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1154'. [ 100.231986][ T3795] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 100.390361][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 100.480441][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 100.518984][ T3808] overlayfs: failed to clone upperpath [ 100.550334][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 100.557859][ T10] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 100.566640][ T10] usb 4-1: config 0 has no interface number 0 [ 100.572922][ T10] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 100.583237][ T10] usb 4-1: config 0 interface 196 has no altsetting 0 [ 100.591740][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 100.601123][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.609267][ T10] usb 4-1: Product: syz [ 100.613676][ T10] usb 4-1: Manufacturer: syz [ 100.618507][ T10] usb 4-1: SerialNumber: syz [ 100.623856][ T10] usb 4-1: config 0 descriptor?? [ 100.629566][ T3788] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 100.633028][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 100.647372][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.656755][ T9] usb 5-1: Product: syz [ 100.661108][ T9] usb 5-1: Manufacturer: syz [ 100.666066][ T9] usb 5-1: SerialNumber: syz [ 101.049035][ T10] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 101.058418][ T10] ipheth 4-1:0.196: probe with driver ipheth failed with error -22 [ 101.276169][ T36] audit: type=1400 audit(1759736246.965:623): avc: denied { ioctl } for pid=3796 comm="syz.4.1156" path="socket:[19252]" dev="sockfs" ino=19252 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 101.278856][ T9] (unnamed net_device) (uninitialized): Assigned a random MAC address: ee:dc:95:8b:fe:39 [ 101.313799][ T9] rtl8150 5-1:1.0: eth1: rtl8150 is detected [ 101.327520][ T36] audit: type=1400 audit(1759736247.015:624): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 101.349568][ T36] audit: type=1400 audit(1759736247.025:625): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.371343][ T36] audit: type=1400 audit(1759736247.025:626): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=3362 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.394094][ T36] audit: type=1400 audit(1759736247.025:627): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3362 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.419964][ T36] audit: type=1400 audit(1759736247.025:628): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3362 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.444063][ T36] audit: type=1400 audit(1759736247.066:629): avc: denied { read } for pid=3821 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.467798][ T36] audit: type=1400 audit(1759736247.066:630): avc: denied { open } for pid=3821 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.494598][ T36] audit: type=1400 audit(1759736247.066:631): avc: denied { getattr } for pid=3821 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.518106][ T149] usb 5-1: device reset failed [ 102.525779][ C1] usb 5-1: eth1: intr status -71 [ 102.531399][ C1] usb 5-1: eth1: intr status -71 [ 102.537231][ C1] usb 5-1: eth1: intr status -71 [ 102.542349][ C1] usb 5-1: eth1: intr status -71 [ 102.547691][ C1] usb 5-1: eth1: intr status -71 [ 102.552847][ C1] usb 5-1: eth1: intr status -71 [ 102.558116][ C1] usb 5-1: eth1: intr status -71 [ 102.563650][ C1] usb 5-1: eth1: intr status -71 [ 102.568907][ C1] usb 5-1: eth1: intr status -71 [ 102.574349][ T389] usb 5-1: USB disconnect, device number 9 [ 102.580519][ C1] usb 5-1: eth1: intr status -71 [ 103.148578][ T31] usb 4-1: USB disconnect, device number 26 [ 103.179587][ T3901] rust_binder: Write failure EFAULT in pid:516 [ 103.180889][ T3899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1182'. [ 103.283989][ T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 103.434204][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 103.446048][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 103.461017][ T10] usb 5-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 103.470491][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.480241][ T10] usb 5-1: config 0 descriptor?? [ 103.486337][ T3882] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 103.496027][ T10] usbhid 5-1:0.0: can't add hid device: -22 [ 103.502602][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 103.522053][ T31] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 103.672213][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 103.683832][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 103.696888][ T31] usb 4-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 103.701174][ T3882] overlayfs: failed to resolve './bus': -2 [ 103.707922][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.727354][ T31] usb 4-1: config 0 descriptor?? [ 103.734367][ T3904] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 103.748888][ T31] usbhid 4-1:0.0: can't add hid device: -22 [ 103.757730][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 103.776816][ T63] usb 5-1: USB disconnect, device number 10 [ 103.944357][ T31] usb 4-1: USB disconnect, device number 27 [ 104.287840][ T3920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1190'. [ 104.416276][ T3924] overlayfs: failed to clone lowerpath [ 104.459361][ T3926] __vm_enough_memory: pid: 3926, comm: syz.3.1193, bytes: 18014402804453376 not enough memory for the allocation [ 104.490024][ T3928] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 104.490054][ T3928] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 104.498441][ T3928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:525 [ 104.560596][ T3934] rust_binder: Error in use_page_slow: ESRCH [ 104.569971][ T3934] rust_binder: use_range failure ESRCH [ 104.576461][ T3934] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 104.582155][ T3934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 104.583681][ T63] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 104.590495][ T3934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:531 [ 104.608330][ T3935] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.743478][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.761784][ T63] usb 5-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 104.771446][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.780859][ T63] usb 5-1: config 0 descriptor?? [ 105.258120][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 105.383271][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 105.383292][ T36] audit: type=1400 audit(1759736251.098:644): avc: denied { load_policy } for pid=3921 comm="syz.4.1191" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 105.383492][ T3922] ------------[ cut here ]------------ [ 105.417291][ T3922] WARNING: CPU: 0 PID: 3922 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 105.427874][ T3922] Modules linked in: [ 105.431924][ T3922] CPU: 0 UID: 0 PID: 3922 Comm: syz.4.1191 Not tainted syzkaller #0 658fd523d4664e50339751640158cdc1077a64d7 [ 105.443707][ T3922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 105.454451][ T3922] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 105.460548][ T3922] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 22 1f ee 05 00 0f 85 be 00 00 00 c6 05 15 1f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 105.480664][ T3922] RSP: 0018:ffffc9000fe3f660 EFLAGS: 00010246 [ 105.487153][ T3922] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 105.495527][ T3922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000fe3f718 [ 105.504857][ T3922] RBP: ffffc9000fe3f7a0 R08: ffffc9000fe3f717 R09: 0000000000000000 [ 105.513532][ T3922] R10: ffffc9000fe3f700 R11: fffff52001fc7ee3 R12: ffffc9000fe3f6a0 [ 105.522021][ T3922] R13: dffffc0000000000 R14: 1ffff92001fc7ed0 R15: 0000000000000000 [ 105.531432][ T3922] FS: 00007f3a9716e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 105.541363][ T3922] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.548374][ T3922] CR2: 0000200000001000 CR3: 000000011f458000 CR4: 00000000003526b0 [ 105.556873][ T3922] Call Trace: [ 105.560527][ T3922] [ 105.563628][ T3922] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 105.569689][ T3922] ? kasan_save_alloc_info+0x40/0x50 [ 105.575281][ T3922] ? __kasan_slab_alloc+0x73/0x90 [ 105.580468][ T3922] ? ebitmap_read+0x144/0x990 [ 105.585381][ T3922] ? hashtab_init+0xdb/0x1f0 [ 105.590077][ T3922] ___kmalloc_large_node+0x81/0x220 [ 105.595746][ T3922] ? hashtab_init+0xdb/0x1f0 [ 105.600420][ T3922] __kmalloc_large_node_noprof+0x1e/0xe0 [ 105.606354][ T3922] ? hashtab_init+0xdb/0x1f0 [ 105.611771][ T3922] __kmalloc_noprof+0x26d/0x450 [ 105.616885][ T3922] hashtab_init+0xdb/0x1f0 [ 105.621619][ T3922] ? policydb_read+0x86f/0x28c0 [ 105.626727][ T3922] symtab_init+0x44/0x70 [ 105.631085][ T3922] policydb_read+0x8fe/0x28c0 [ 105.635971][ T3922] ? kasan_save_alloc_info+0x40/0x50 [ 105.641620][ T3922] ? __cfi_policydb_read+0x10/0x10 [ 105.647204][ T3922] ? security_load_policy+0x128/0x12f0 [ 105.652730][ T3922] security_load_policy+0x162/0x12f0 [ 105.658209][ T3922] ? irqentry_exit+0x4a/0x60 [ 105.663654][ T3922] ? exc_page_fault+0x66/0xc0 [ 105.669063][ T3922] ? asm_exc_page_fault+0x2b/0x30 [ 105.674669][ T3922] ? __cfi_security_load_policy+0x10/0x10 [ 105.680685][ T3922] ? rep_movs_alternative+0x4a/0xa0 [ 105.686149][ T3922] sel_write_load+0x298/0x5e0 [ 105.691162][ T3922] ? futex_wait+0x29a/0x7a0 [ 105.696030][ T3922] ? __cfi_sel_write_load+0x10/0x10 [ 105.701433][ T3922] ? __cfi_futex_wait+0x10/0x10 [ 105.706937][ T3922] ? bpf_lsm_file_permission+0xd/0x20 [ 105.712981][ T3922] ? __cfi_sel_write_load+0x10/0x10 [ 105.718606][ T3922] vfs_write+0x3bd/0xf30 [ 105.723285][ T3922] ? __cfi_vfs_write+0x10/0x10 [ 105.728227][ T3922] ? __kasan_check_write+0x18/0x20 [ 105.733679][ T3922] ? mutex_lock+0x92/0x1c0 [ 105.738290][ T3922] ? __cfi_mutex_lock+0x10/0x10 [ 105.743651][ T3922] ? __fget_files+0x2c5/0x340 [ 105.748860][ T3922] ksys_write+0x141/0x250 [ 105.753743][ T3922] ? __cfi_ksys_write+0x10/0x10 [ 105.759085][ T3922] ? __kasan_check_write+0x18/0x20 [ 105.764467][ T3922] ? fpregs_restore_userregs+0x11d/0x260 [ 105.770249][ T3922] __x64_sys_write+0x7f/0x90 [ 105.774964][ T3922] x64_sys_call+0x271c/0x2ee0 [ 105.779850][ T3922] do_syscall_64+0x58/0xf0 [ 105.784538][ T3922] ? clear_bhb_loop+0x50/0xa0 [ 105.789404][ T3922] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.795807][ T3922] RIP: 0033:0x7f3a9638eec9 [ 105.800902][ T3922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.821037][ T3922] RSP: 002b:00007f3a9716e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.829623][ T3922] RAX: ffffffffffffffda RBX: 00007f3a965e5fa0 RCX: 00007f3a9638eec9 [ 105.837889][ T3922] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000004 [ 105.845975][ T3922] RBP: 00007f3a96411f91 R08: 0000000000000000 R09: 0000000000000000 [ 105.854169][ T3922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.862692][ T3922] R13: 00007f3a965e6038 R14: 00007f3a965e5fa0 R15: 00007ffe0cea0868 [ 105.870930][ T3922] [ 105.874158][ T3922] ---[ end trace 0000000000000000 ]--- [ 105.880071][ T3922] SELinux: failed to load policy [ 105.889873][ T63] usbhid 5-1:0.0: can't add hid device: -71 [ 105.896009][ T63] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 105.903999][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 105.910252][ T10] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 105.920028][ T63] usb 5-1: USB disconnect, device number 11 [ 105.926096][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.937440][ T10] usb 4-1: config 0 descriptor?? [ 106.142438][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 107.137289][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 107.147672][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 107.159133][ T10] asix 4-1:0.0: probe with driver asix failed with error -71 [ 107.168386][ T10] usb 4-1: USB disconnect, device number 28