last executing test programs: 59.680894484s ago: executing program 1 (id=203): clock_gettime(0xfffffffffffffff1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000200)={[{0x3, 0x4, 0x0, 0x0, 0x4, 0xfe, 0xe, 0x4, 0x4, 0x2, 0xad, 0x4, 0x5000000000000}, {0x9, 0x401, 0x9, 0x40, 0x5, 0x5, 0x45, 0x9, 0xb, 0x2, 0x2, 0xd7, 0x6}, {0xfffffff9, 0x7, 0x0, 0x2c, 0x0, 0x5, 0x4, 0x3, 0xa, 0x9, 0x8, 0x68, 0x3}], 0xfffffffc}) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000200)={[{0x3, 0x4, 0x0, 0x0, 0x4, 0xfe, 0xe, 0x4, 0x4, 0x2, 0xad, 0x4, 0x5000000000000}, {0x9, 0x401, 0x9, 0x40, 0x5, 0x5, 0x45, 0x9, 0xb, 0x2, 0x2, 0xd7, 0x6}, {0xfffffff9, 0x7, 0x0, 0x2c, 0x0, 0x5, 0x4, 0x3, 0xa, 0x9, 0x8, 0x68, 0x3}], 0xfffffffc}) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x5, 0x0, 0xaf92, 0x3, "ff00"}) (async) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x5, 0x0, 0xaf92, 0x3, "ff00"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0xfffe, 0xfffc, 0xe000, 0xb3, 0xb, "7554f369532e9032"}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0xfffffffffffffffe, 0x100000000, 0x0, 0x69, 0x100000, 0x0, 0x2004c8, 0x5, 0x0, 0x0, 0x9, 0x0, 0x5, 0xe64, 0x2, 0xffffffffffffffff], 0x0, 0x200}) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000001200)={0x60000010}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0xa000000d}) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0xa000000d}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000280)={0x1000}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000600)) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x0, 0x2}, @ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x32}, @flat=@binder={0x73622a85, 0x1, 0x2}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x0, 0x2}, @ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x32}, @flat=@binder={0x73622a85, 0x1, 0x2}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0}) rt_sigtimedwait(&(0x7f00000002c0)={[0x7]}, &(0x7f0000000440), &(0x7f00000004c0)={0x0, 0x3938700}, 0x8) (async) rt_sigtimedwait(&(0x7f00000002c0)={[0x7]}, &(0x7f0000000440), &(0x7f00000004c0)={0x0, 0x3938700}, 0x8) 59.558921736s ago: executing program 1 (id=204): ioperm(0x5, 0xee8, 0x163f) iopl(0x3) iopl(0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x12, 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x6a) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0xca0ca000) close_range(r0, 0xffffffffffffffff, 0x0) 59.530496656s ago: executing program 1 (id=205): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x10000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80080) fsmount(r2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xfffffffffffffffd, 0x2, 0x36}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0}) 59.446259697s ago: executing program 1 (id=207): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000200)="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", 0xfb}, {&(0x7f00000003c0)="06c6c1d4c7ef2425d4b060964f927cc28c5840377f535d61fbeb1d1d00f00cdebd9336b8ab117304bd0d6fbd80c0428575cee74cda425a74edb2a1e71f96b2f407d7526402d1efbdc2eb587faca433dc6423cc96f4228d782b2513e8cd48a2f06bc7d690a4610b993cf0704df6ada02700f3cd0093b9c248dca40d8298946e865b893cfdf8bf0c0e4a8fdc0d3ef73e12cf3440da0621fccea8baa1268440e79b", 0xa0}, {&(0x7f0000000300)="856e935011d2eaeb469b588e80e4d2739cf4a1eaef657210b42da22b571fb89e20c233eff02ca3846fdee460998c34278512eaf210520ff85ec732840d25666323f2c63f22ce8909f29001973f6b", 0x4e}, {&(0x7f00000004c0)="56dbf0da57ef14065552a584bfecd91d", 0x10}, {&(0x7f0000000500)="23cbcc3efbf114a24ab20b25b5a33a6ef14687347bb259ead0449aeb13409a9b65a9c9a8bd07b6214e9876e8a8e6fd343cbc8b5a12dd86543ba355f1065c563f7bad64", 0x43}, {&(0x7f0000000580)="12ee0f339999dc9befd5dbd4520a545c6ed738dac5d0ab6110a5be19a14e828895cc97b90b676ec2eab224b1eca178a2a305250e0d5add202322c5e854dad96180a47c597ef396d2fca10f0a6335a59c520ce912c6f55563eb66170ac457fab8698a382a517521fc575d60375522df0ab00d49d261e1e75aa6e3c2157ac03922566cc255f29460144cf7767f21782994fb65db857a5c3f1750ff8415c047da173add98dfaef1fdaccc73ca13936867f32d436832f7bd7be4e56cbb3488b2a50436a5408ee3c69c6db319952638c46b3a89229c585ad6135987b87feed3956554dab435db", 0xe4}], 0x6}}, {{&(0x7f0000000700)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000740)="8a3f824854bd2660d9a0f6150a3666e895b0c0ead8b0e4fa88be026fa0367223e58616e8c6186f59182e", 0x2a}], 0x1, &(0x7f0000000d80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000800)="727ff721e132ade3fd1771ec72e850b5510ed5c3ac08ea8cce6858f7e05c50e35594e7fa8eb60869820176d88006e882cd8f117900d80cfaeb243160c8cfb280ba3848cdad2d02c3070aa3db49651aa330374bf145ae0e2fc07ddfa9bf4eb2a06f5edbd383be19b73c6430a5b58b9c590dc00aa0ab9a002f7550a72d1d4d41410e7fb65f11afebf7e8d7ffb6052798a76a49577d70612addfc24ef43605117b58c9a569d04051d2404c7bd4a216a45c823ac97b1deb6051a727a411859cdd6f81d81c72ddf6cffd3063d6f7b17b395611384d4d7342c31e09228cd", 0xdb}], 0x1}}, {{&(0x7f0000000940)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000980)="348bbc09b02cf87161e7bda69f98df01b80bb25a6d59c9a7c2a58d84d799108193c078380d03d8a7bcb4ad3b448a6a5253154264eeac0b918a83284228ce9ebd788b917a39ebd32970bb4d980a65d75a39509d51b14a92734d2b1b4f5a958fb7bbeb6b", 0x63}, {&(0x7f0000000a00)="6a6d5cf9b94ea5a5660c30b1e8a4433ac652fd33451f876faf65fa3927b3e4859d116de537b963b60a494d426baae1ff4573d715650394b9990088d17f926e3e996cdfedb4348ff6a7f520d118e60ef34e4d0c6cf7319b4c3369e64536f4b22b028310d6bf7d2fb12069a242c57eaa5c192231ac", 0x74}, {&(0x7f0000000a80)="1c54501220c64acb82c4914bdbc048d3f2004aa6a272d42e7a467f40085fe7d1351637695cf6709cecbca2ce5f0ec8111e0fe8008ce6921d0ab4b1f14fba530cf4739437931b6b552097ed949da3c94ca918cbbb1545836fa1fc58ecd3de387bc7d3be0f79761b04e5c116c8f16bbdf3e8b9776d5d851a383b5b7360e3df321e214d9e72a8aab680bea78f372a45ada9", 0x90}, {&(0x7f0000000dc0)="ba0c50880bb0f46295a897a33c61aafbfc1213568e3e2b6632a3bdd8f8a29a385995499c16a93b30ab56d8085cda957897381a840bfc9c4022e6b88021ce49542caf8e56edd8ed71fd80ddcb6051a131132977e1398d1ab7f796004ad06a37328a3e2a993e511b05605bca1312a693e995228add579494d9346c15500f57ce61d7b71d24c3dc477355066dfb7e2f6e088cd9017bf05d8aac3fbbcaff00acc90b7c98c39efcb06a89c5ce5a0e4ac9ad0d2629861240d3642bed16e6cc3222f72c5b41b6", 0xc3}], 0x4, &(0x7f0000000c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x38}}], 0x4, 0xc048801) 59.444869497s ago: executing program 1 (id=208): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet6(r3, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback, r4}}}], 0x28}}], 0x2, 0x4000) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@updpolicy={0x1a4, 0x19, 0x10, 0x70bd26, 0x25dfdbff, {{@in=@broadcast, @in=@rand_addr=0x64010102, 0x4e20, 0xe, 0x4e20, 0x1, 0xa, 0x60, 0xc0, 0x2, r4, r5}, {0x8, 0x3, 0x7, 0x1, 0xdd8, 0x7fffffffffffffff, 0x80, 0x3}, {0x7, 0x4, 0x1, 0xec6}, 0xec, 0x6e6bb3, 0x3, 0x1, 0x2, 0x3}, [@algo_comp={0xd3, 0x3, {{'deflate\x00'}, 0x458, "4a6a526f00eabdddb786e263de8addc2b0bccd9d7f0795a7ed08be073d6c27c7b9c9680e19f07a9027b7235421775fefa5cf2667e1649b93a8caa0e4800c27d21db7e3a7a5366f422b172371f1969725c79800e4e7d34be64be6bf000def7eafd528276f30b7aa464048ffa9688dec3db7a031ad9820143243c810c8e6a2ebbe66f55ae05549f26473d899"}}, @proto={0x5, 0x19, 0xf}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}, @proto={0x5, 0x19, 0x6c}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x22, 0x0, &(0x7f0000000080), 0xffffffffffffffe9, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x50, 0x0, &(0x7f0000002040)="7797f473010e3c6f412193d01ca46e5d1fd37e1ff088862e47734ac7eb2e436321311317afe07822a299d63328f5c10a5f99166b47868f357ba1edd6b402c7022a1fe37f5f729dd812db18dad930f670"}) 59.388582518s ago: executing program 1 (id=211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000004f000e"], 0x78}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r2, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x4e}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x80) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f000000b000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000)=0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x37) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r7, 0x99b33000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r10, 0x4188aea7, &(0x7f0000000100)=ANY=[@ANYBLOB="00a0"]) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r12, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) r13 = socket(0x22, 0x803, 0x1b) setsockopt$sock_int(r13, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) r14 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGETD(r14, 0x5424, &(0x7f0000000000)) ioctl$TIOCGPGRP(r14, 0x540f, &(0x7f0000000080)=0x0) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'osx.', '/dev/kvm\x00'}, &(0x7f0000000180)=""/185, 0xb9) syz_open_procfs(r15, &(0x7f00000000c0)='net/hci\x00') 43.736470926s ago: executing program 32 (id=211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000004f000e"], 0x78}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r2, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x4e}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x80) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f000000b000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000)=0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x37) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r7, 0x99b33000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r10, 0x4188aea7, &(0x7f0000000100)=ANY=[@ANYBLOB="00a0"]) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r12, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) r13 = socket(0x22, 0x803, 0x1b) setsockopt$sock_int(r13, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) r14 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGETD(r14, 0x5424, &(0x7f0000000000)) ioctl$TIOCGPGRP(r14, 0x540f, &(0x7f0000000080)=0x0) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'osx.', '/dev/kvm\x00'}, &(0x7f0000000180)=""/185, 0xb9) syz_open_procfs(r15, &(0x7f00000000c0)='net/hci\x00') 31.469717682s ago: executing program 4 (id=620): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000200)}, {&(0x7f00000003c0)="06c6c1d4c7ef2425d4b060964f927cc28c5840377f535d61fbeb1d1d00f00cdebd9336b8ab117304bd0d6fbd80c0428575cee74cda425a74edb2a1e71f96b2f407d7526402d1efbdc2eb587faca433dc6423cc96f4228d782b2513e8cd48a2f06bc7d690a4610b993cf0704df6ada02700f3cd0093b9c248dca40d8298946e865b893cfdf8bf0c0e4a8fdc0d3ef73e12cf3440da0621fccea8baa1268440e79b", 0xa0}, {&(0x7f0000000300)="856e935011d2eaeb469b588e80e4d2739cf4a1eaef657210b42da22b571fb89e20c233eff02ca3846fdee460998c34278512eaf210520ff85ec732840d25666323f2c63f22ce8909f29001973f6bf0c0", 0x50}, {&(0x7f00000004c0)="56dbf0da57ef14065552a584bfecd91d", 0x10}, {&(0x7f0000000500)="23cbcc3efbf114a24ab20b25b5a33a6ef14687347bb259ead0449aeb13409a9b65a9c9a8bd07b6214e9876e8a8e6fd343cbc8b5a12dd86543ba355f1065c563f7bad64", 0x43}, {&(0x7f0000000580)="12ee0f339999dc9befd5dbd4520a545c6ed738dac5d0ab6110a5be19a14e828895cc97b90b676ec2eab224b1eca178a2a305250e0d5add202322c5e854dad96180a47c597ef396d2fca10f0a6335a59c520ce912c6f55563eb66170ac457fab8698a382a517521fc575d60375522df0ab00d49d261e1e75aa6e3c2157ac03922566cc255f29460144cf7767f21782994fb65db857a5c3f1750ff8415c047da173add98dfaef1fdaccc73ca13936867f32d436832f7bd7be4e56cbb3488b2a50436a5408ee3c69c6db319952638c46b3a89229c585ad6135987b87feed3956554dab435db", 0xe4}], 0x6}}, {{&(0x7f0000000700)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000740)="8a3f824854bd2660d9a0f6150a3666e895b0c0ead8b0e4fa88be026fa0367223e58616e8c6186f59182e", 0x2a}], 0x1, &(0x7f0000000d80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000800)="727ff721e132ade3fd1771ec72e850b5510ed5c3ac08ea8cce6858f7e05c50e35594e7fa8eb60869820176d88006e882cd8f117900d80cfaeb243160c8cfb280ba3848cdad2d02c3070aa3db49651aa330374bf145ae0e2fc07ddfa9bf4eb2a06f5edbd383be19b73c6430a5b58b9c590dc00aa0ab9a002f7550a72d1d4d41410e7fb65f11afebf7e8d7ffb6052798a76a49577d70612addfc24ef43605117b58c9a569d04051d2404c7bd4a216a45c823ac97b1deb6051a727a411859cdd6f81d81c72ddf6cffd3063d6f7b17b395611384d4d7342c31e09228cd", 0xdb}], 0x1}}, {{&(0x7f0000000940)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000980)="348bbc09b02cf87161e7bda69f98df01b80bb25a6d59c9a7c2a58d84d799108193c078380d03d8a7bcb4ad3b448a6a5253154264eeac0b918a83284228ce9ebd788b917a39ebd32970bb4d980a65d75a39509d51b14a92734d2b1b4f5a958fb7bbeb6b", 0x63}, {&(0x7f0000000a00)="6a6d5cf9b94ea5a5660c30b1e8a4433ac652fd33451f876faf65fa3927b3e4859d116de537b963b60a494d426baae1ff4573d715650394b9990088d17f926e3e996cdfedb4348ff6a7f520d118e60ef34e4d0c6cf7319b4c3369e64536f4b22b028310d6bf7d2fb12069a242c57eaa5c192231ac", 0x74}, {&(0x7f0000000a80)="1c54501220c64acb82c4914bdbc048d3f2004aa6a272d42e7a467f40085fe7d1351637695cf6709cecbca2ce5f0ec8111e0fe8008ce6921d0ab4b1f14fba530cf4739437931b6b552097ed949da3c94ca918cbbb1545836fa1fc58ecd3de387bc7d3be0f79761b04e5c116c8f16bbdf3e8b9776d5d851a383b5b7360e3df321e214d9e72a8aab680bea78f372a45ada9", 0x90}, {&(0x7f0000000dc0)="ba0c50880bb0f46295a897a33c61aafbfc1213568e3e2b6632a3bdd8f8a29a385995499c16a93b30ab56d8085cda957897381a840bfc9c4022e6b88021ce49542caf8e56edd8ed71fd80ddcb6051a131132977e1398d1ab7f796004ad06a37328a3e2a993e511b05605bca1312a693e995228add579494d9346c15500f57ce61d7b71d24c3dc477355066dfb7e2f6e088cd9017bf05d8aac3fbbcaff00acc90b7c98c39efcb06a89c5ce5a0e4ac9ad0d2629861240d3642bed16e6cc3222f72c5b41b6", 0xc3}], 0x4, &(0x7f0000000c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x38}}], 0x4, 0xc048801) 31.455473222s ago: executing program 4 (id=621): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x40010, r2, 0x0) (async) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4000000) (async) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r3, 0x12, 0x4, 0x0, 0x0) (async) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) (async) madvise(&(0x7f0000344000/0x4000)=nil, 0x4000, 0x64) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) (async) unshare(0x20000) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') setns(r6, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000000)={0x6, 0x3, 0x10021da0, 0x8000420, 0xf8, "42f48e5afb777600000000000000800100", 0xa, 0x3}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) mremap(&(0x7f0000d59000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000a91000/0x1000)=nil) (async) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r9, &(0x7f0000001fc0)=""/4079, 0xfef) (async) getdents64(r9, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES8=r0], 0xb8}, 0x1, 0x0, 0x0, 0xfccfb855df84d84}, 0x40) 31.393744513s ago: executing program 4 (id=622): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00') (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r1) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=@polexpire={0xcc, 0x1b, 0x1, 0x70bd2d, 0x25dfdbfd, {{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x4e23, 0x4, 0xa, 0x0, 0x80, 0x32}, {0x800, 0x80, 0xfffffffffffffff8, 0x1ff, 0x1, 0x9, 0x9, 0x1158000000000}, {0x2, 0x1, 0xfd, 0x4}, 0x107, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x29}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x125082, 0x0) (async) syz_fuse_handle_req(r1, &(0x7f0000002800)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 31.355770504s ago: executing program 4 (id=623): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x9cc6d000) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x20010, r2, 0xee6b000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$sock_cred(r3, 0x1, 0x4d, 0x0, &(0x7f0000000000)) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xb8H\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&`<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6#M\"\x87\x05W\f0b(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\xfe\x8c\x87\x0f\x99\xc3E\xcfc\x8cX\xa3\xf5&}\a\xbf\xf8N\"C!\x1f\x96\xd7\xe9\xa5tw\'\x8f,_\xa0\xea\x90\"\x19i\f\xd5\x02\xe2+\xc1\x8e\xfb@\xc56\xb5\xe4\x91\xbc\xbf\xf7\xea\x01]\xd8\xf8.\x99\x82\x89\x9a\x97\x8b\xdd\xcf\xe6\xb4\xad\xda\x7f\xc8\xd0(Q\x8dP\xd9\xd8(){\xca\x84\xd3(\xb6\xd5\xd4\x94\xdf\xde\x05B\"\xa3L\xc9t\xd4]\x95.\x02\x97\xb5\xc5E\xc7H\x84d\xe6I\xd8\\&\xc6\x81t\xa38u\xc0\xa3\x9b\b,4-\x8a\x9fo:\x86J?\xac\xd1\xa8\x02\xb6\xc5m\x85,\x97\xbe\xba\x0eWnW\xdd,\x1eT\x9c\xde\x9e{;\xb2X\x89\xdc\xcfO6\xba\xcbK\xb5\xfbD\xc9\xc4D\x04BT\xe1\xe9]s\x18$F\x9b\xe9<\xdb\x03\b\xfc\xe9\x19E\x8b\x83\xa6\x84Y\xab\x85\xea\x1f^K\xd6I\x10G<@n\x9e\x81\xc6\x1d\xbc\x1a\xc1G') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fstat(r0, &(0x7f00000003c0)) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) close(0xffffffffffffffff) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x9cc6d000) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x20010, r2, 0xee6b000) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) getsockopt$sock_cred(r3, 0x1, 0x4d, 0x0, &(0x7f0000000000)) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xb8H\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&`<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6#M\"\x87\x05W\f0b(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\xfe\x8c\x87\x0f\x99\xc3E\xcfc\x8cX\xa3\xf5&}\a\xbf\xf8N\"C!\x1f\x96\xd7\xe9\xa5tw\'\x8f,_\xa0\xea\x90\"\x19i\f\xd5\x02\xe2+\xc1\x8e\xfb@\xc56\xb5\xe4\x91\xbc\xbf\xf7\xea\x01]\xd8\xf8.\x99\x82\x89\x9a\x97\x8b\xdd\xcf\xe6\xb4\xad\xda\x7f\xc8\xd0(Q\x8dP\xd9\xd8(){\xca\x84\xd3(\xb6\xd5\xd4\x94\xdf\xde\x05B\"\xa3L\xc9t\xd4]\x95.\x02\x97\xb5\xc5E\xc7H\x84d\xe6I\xd8\\&\xc6\x81t\xa38u\xc0\xa3\x9b\b,4-\x8a\x9fo:\x86J?\xac\xd1\xa8\x02\xb6\xc5m\x85,\x97\xbe\xba\x0eWnW\xdd,\x1eT\x9c\xde\x9e{;\xb2X\x89\xdc\xcfO6\xba\xcbK\xb5\xfbD\xc9\xc4D\x04BT\xe1\xe9]s\x18$F\x9b\xe9<\xdb\x03\b\xfc\xe9\x19E\x8b\x83\xa6\x84Y\xab\x85\xea\x1f^K\xd6I\x10G<@n\x9e\x81\xc6\x1d\xbc\x1a\xc1G') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') (async) fstat(r0, &(0x7f00000003c0)) (async) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) (async) 31.293846995s ago: executing program 4 (id=625): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) recvmsg$unix(r1, &(0x7f0000000500)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000180)=""/17, 0x11}, {&(0x7f00000001c0)=""/147, 0x93}, {&(0x7f0000000280)=""/184, 0xb8}, {&(0x7f0000000340)=""/57, 0x39}, {&(0x7f0000000380)=""/11, 0xb}, {&(0x7f00000003c0)=""/10, 0xa}], 0x6, &(0x7f0000000480)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}, 0x40012001) read(r0, &(0x7f0000000080)=""/93, 0xffffff6c) 31.292770625s ago: executing program 4 (id=626): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = dup(r2) write$FUSE_BMAP(r3, 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@dev, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@loopback, 0x4d4, 0x33}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0x400}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) io_setup(0x1, &(0x7f00000004c0)=0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r7, 0x1, &(0x7f0000000c80)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x202, r8, 0x0, 0x0, 0x8800000, 0x0, 0x0, r8}]) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async, rerun: 32) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (rerun: 32) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcd, 0xc6, 0xcb, 0x10, 0x1a0a, 0x102, 0x9e0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x90, 0x0, 0x0, 0x42, 0x68, 0x6a}}]}}]}}, 0x0) write$cgroup_devices(r10, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0xffdd) (async, rerun: 64) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x78, r9, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x78}}, 0xc000) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r4}, @flat=@weak_binder={0x77622a85, 0x100}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async, rerun: 64) mount$cgroup(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f00000003c0), 0xc80, &(0x7f0000000400)={[{@favordynmods}, {@cpuset_v2_mode}, {@nofavordynmods}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@subj_user={'subj_user', 0x3d, 'TIPCv2\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/net/tun\x00'}}, {@pcr={'pcr', 0x3d, 0x3c}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x30, 0x33, 0x33, 0x36, 0x63, 0x65, 0x31], 0x2d, [0x32, 0x36, 0x30, 0x38], 0x2d, [0x39, 0x35, 0x62, 0x37], 0x2d, [0x63, 0x34, 0x0, 0x61], 0x2d, [0x32, 0x31, 0x34, 0x37, 0x37, 0x9, 0x2eca8e71200ee018, 0x30]}}}, {@audit}]}) (rerun: 64) 16.303367702s ago: executing program 33 (id=626): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = dup(r2) write$FUSE_BMAP(r3, 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@dev, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@loopback, 0x4d4, 0x33}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0x400}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) io_setup(0x1, &(0x7f00000004c0)=0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r7, 0x1, &(0x7f0000000c80)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x202, r8, 0x0, 0x0, 0x8800000, 0x0, 0x0, r8}]) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async, rerun: 32) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (rerun: 32) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcd, 0xc6, 0xcb, 0x10, 0x1a0a, 0x102, 0x9e0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x90, 0x0, 0x0, 0x42, 0x68, 0x6a}}]}}]}}, 0x0) write$cgroup_devices(r10, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0xffdd) (async, rerun: 64) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x78, r9, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x78}}, 0xc000) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r4}, @flat=@weak_binder={0x77622a85, 0x100}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async, rerun: 64) mount$cgroup(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f00000003c0), 0xc80, &(0x7f0000000400)={[{@favordynmods}, {@cpuset_v2_mode}, {@nofavordynmods}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@subj_user={'subj_user', 0x3d, 'TIPCv2\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/net/tun\x00'}}, {@pcr={'pcr', 0x3d, 0x3c}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x30, 0x33, 0x33, 0x36, 0x63, 0x65, 0x31], 0x2d, [0x32, 0x36, 0x30, 0x38], 0x2d, [0x39, 0x35, 0x62, 0x37], 0x2d, [0x63, 0x34, 0x0, 0x61], 0x2d, [0x32, 0x31, 0x34, 0x37, 0x37, 0x9, 0x2eca8e71200ee018, 0x30]}}}, {@audit}]}) (rerun: 64) 4.325559235s ago: executing program 3 (id=955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x2, 0x4, 0x2, 0x6, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x80010, r2, 0x20000000) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x10, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000200)={0x2c, &(0x7f0000000180)={0x40, 0x2, 0x8, {0x8, 0x30, "8a34b3a2abb6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000480)={[&(0x7f0000000200)='\x00', &(0x7f0000000240)='F#\x00', &(0x7f0000000280)='\x9a\x00', &(0x7f00000002c0)='./binderfs\x00', &(0x7f0000000340)='./binderfs\x00', &(0x7f0000000380)='.\x00', &(0x7f00000003c0)='./binderfs\x00', &(0x7f0000000440)='binder\x00']}, &(0x7f0000000540)={[&(0x7f0000000500)='#! ']}) 2.990882155s ago: executing program 2 (id=958): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, 0x0) fcntl$lock(r1, 0x24, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x40047705, 0x0) 2.968596935s ago: executing program 2 (id=959): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async, rerun: 64) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000100)=0x2, 0x4) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0xe3}, 0x1c) (async) close(r0) openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x125082, 0x0) (async) syz_fuse_handle_req(r0, &(0x7f0000002800)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.881955087s ago: executing program 2 (id=960): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0xe}, 0x1c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r2, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)}}], 0x2, 0x4000011) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000980)={0x4, 0x4, 0x20004002, 0xffff2aab}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000005200010004bd7000fcdbdf240a00000008000100", @ANYRES32, @ANYRES16=r0], 0x1c}}, 0x8800) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000200)="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", 0xfb}, {&(0x7f00000003c0)="06c6c1d4c7ef2425d4b060964f927cc28c5840377f535d61fbeb1d1d00f00cdebd9336b8ab117304bd0d6fbd80c0428575cee74cda425a74edb2a1e71f96b2f407d7526402d1efbdc2eb587faca433dc6423cc96f4228d782b2513e8cd48a2f06bc7d690a4610b993cf0704df6ada02700f3cd0093b9c248dca40d8298946e865b893cfdf8bf0c0e4a8fdc0d3ef73e12cf3440da0621fccea8baa1268440e79b", 0xa0}, {&(0x7f0000000300)="856e935011d2eaeb469b588e80e4d2739cf4a1eaef657210b42da22b571fb89e20c233eff02ca3846fdee460998c34278512eaf210520ff85ec732840d25666323f2c63f22ce8909f29001973f6bf0c0", 0x50}, {&(0x7f00000004c0)="56dbf0da57ef14065552a584bfecd91d", 0x10}, {&(0x7f0000000500)="23cbcc3efbf114a24ab20b25b5a33a6ef14687347bb259ead0449aeb13409a9b65a9c9a8bd07b6214e9876e8a8e6fd343cbc8b5a12dd86543ba355f1065c563f7bad64", 0x43}, {&(0x7f0000000580)="12ee0f339999dc9befd5dbd4520a545c6ed738dac5d0ab6110a5be19a14e828895cc97b90b676ec2eab224b1eca178a2a305250e0d5add202322c5e854dad96180a47c597ef396d2fca10f0a6335a59c520ce912c6f55563eb66170ac457fab8698a382a517521fc575d60375522df0ab00d49d261e1e75aa6e3c2157ac03922566cc255f29460144cf7767f21782994fb65db857a5c3f1750ff8415c047da173add98dfaef1fdaccc73ca13936867f32d436832f7bd7be4e56cbb3488b2a50436a5408ee3c69c6db319952638c46b3a89229c585ad6135987b87feed3956554dab435db", 0xe4}], 0x6}}, {{&(0x7f0000000700)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000000)="8a3f824854bd2660d9a0f6150a3666e895b0c0ead8b0e4fa88be026fa0367223e58616e8c6186f59182e", 0x2a}], 0x1, &(0x7f0000000d80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000800)="727ff721e132ade3fd1771ec72e850b5510ed5c3ac08ea8cce6858f7e05c50e35594e7fa8eb60869820176d88006e882cd8f117900d80cfaeb243160c8cfb280ba3848cdad2d02c3070aa3db49651aa330374bf145ae0e2fc07ddfa9bf4eb2a06f5edbd383be19b73c6430a5b58b9c590dc00aa0ab9a002f7550a72d1d4d41410e7fb65f11afebf7e8d7ffb6052798a76a49577d70612addfc24ef43605117b58c9a569d04051d2404c7bd4a216a45c823ac97b1deb6051a727a411859cdd6f81d81c72ddf6cffd3063d6f7b17b395611384d4d7342c31e09228cd", 0xdb}], 0x1}}, {{&(0x7f0000000940)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000980)="348bbc09b02cf87161e7bda69f98df01b80bb25a6d59c9a7c2a58d84d799108193c078380d03d8a7bcb4ad3b448a6a5253154264eeac0b918a83284228ce9ebd788b917a39ebd32970bb4d980a65d75a39509d51b14a92734d2b1b4f5a958fb7bbeb6b", 0x63}, {&(0x7f0000000a00)="6a6d5cf9b94ea5a5660c30b1e8a4433ac652fd33451f876faf65fa3927b3e4859d116de537b963b60a494d426baae1ff4573d715650394b9990088d17f926e3e996cdfedb4348ff6a7f520d118e60ef34e4d0c6cf7319b4c3369e64536f4b22b028310d6bf7d2fb12069a242c57eaa5c192231ac", 0x74}, {&(0x7f0000000a80)="1c54501220c64acb82c4914bdbc048d3f2004aa6a272d42e7a467f40085fe7d1351637695cf6709cecbca2ce5f0ec8111e0fe8008ce6921d0ab4b1f14fba530cf4739437931b6b552097ed949da3c94ca918cbbb1545836fa1fc58ecd3de387bc7d3be0f79761b04e5c116c8f16bbdf3e8b9776d5d851a383b5b7360e3df321e214d9e72a8aab680bea78f372a45ada9", 0x90}, {&(0x7f0000000dc0)="ba0c50880bb0f46295a897a33c61aafbfc1213568e3e2b6632a3bdd8f8a29a385995499c16a93b30ab56d8085cda957897381a840bfc9c4022e6b88021ce49542caf8e56edd8ed71fd80ddcb6051a131132977e1398d1ab7f796004ad06a37328a3e2a993e511b05605bca1312a693e995228add579494d9346c15500f57ce61d7b71d24c3dc477355066dfb7e2f6e088cd9017bf05d8aac3fbbcaff00acc90b7c98c39efcb06a89c5ce5a0e4ac9ad0d2629861240d3642bed16e6cc3222f72c5b41b6", 0xc3}], 0x4, &(0x7f0000000c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x38}}], 0x4, 0xc048801) r5 = socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(r5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close_range(r0, r0, 0x2) 2.558260721s ago: executing program 3 (id=967): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x400, 0x0) r1 = socket(0x10, 0x3, 0x80) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x80000c, 0x20, 0x4}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@mcast1, @private0, @remote, 0xff, 0x5, 0x9, 0x500, 0x5, 0x2200064}) write(r1, &(0x7f0000000300)="240000001a005f0214f9f507000904001f000000000000000000000008000400012a9dd9", 0x24) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x800, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='fdinfo/3\x00') sendmsg$nl_generic(r1, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000052c0)=ANY=[@ANYBLOB="a81100004000800925bd7000fcdbdf250800000014001600ff01000000000000000000000000000108009f00", @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="7df82eb5554a2afd96b529056ce9c40207567869aae519f588d16d9358be7d16272776180635fe52d5926eade901f8cfb3eb157bc22b638b06c25e81d34daa7670920fe305fe6cb5d5e03b06cc686d5fd0557c39957f4707f816281077ce6458fea46b9fc0407d61ac3f2a45d8b70e34aea05b33f8193618c242369b09c1ff251e47328a72431b28db5fa325c5f83a9931283b5b35aca685de819ba269918cad76cdd264ebf971480400e0000800fd00", @ANYRES32=r5, @ANYBLOB="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"], 0x11a8}, 0x1, 0x0, 0x0, 0x4800}, 0x880) read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) r7 = fcntl$dupfd(r4, 0x406, r5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x410041, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0xa, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) getsockopt$sock_buf(r8, 0x1, 0x3b, &(0x7f0000000100)=""/190, &(0x7f0000000040)=0xbe) getsockopt(r7, 0xab5f, 0x800, 0x0, 0x0) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r10 = socket(0x1d, 0x3, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x67, 0x0, &(0x7f0000000240)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6211d35fa6d5328fb7e7fdeebdfe2111754ec5aeaec6510241a36950b544877661c265c83f6f3de2879e0e7dbb5c4335e43"}) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) ioctl$SIOCSIFMTU(r10, 0x8931, &(0x7f0000000040)={'veth0_to_bridge\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death={0x400c630e}], 0x0, 0x0, 0x0}) 2.220749856s ago: executing program 5 (id=968): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000000)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x10, 0x0) (async) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x10, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r3, 0x7d23000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r3, 0x7d23000) read(r2, &(0x7f0000000440)=""/72, 0x87) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 2.089091738s ago: executing program 5 (id=969): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)={[{@huge_advise}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000031c000/0x4000)=nil, 0x4000}, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x81}, {0x6}]}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0xa2fe11fdee41aefb, 0x5, 0xf000, 0x2000, &(0x7f0000fb3000/0x2000)=nil}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000ebf000/0x2000)=nil, 0x2000}}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r9) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r10, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048004}, 0x8000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r7, 0x400454cc, 0x206) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x3, 0x4, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x1, 0x225, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r11, 0x6, 0xe8, 0x1, 0x5, 0x10, @mcast2, @private0, 0x7800, 0x700, 0x9b}}) io_setup(0x4, &(0x7f0000000180)) madvise(&(0x7f00004b5000/0x1000)=nil, 0x1000, 0x9) setsockopt$inet6_int(r5, 0x29, 0x46, &(0x7f0000000080)=0x7ffb, 0x4) 1.97392943s ago: executing program 2 (id=972): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000200)="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", 0xfb}, {&(0x7f00000003c0)="06c6c1d4c7ef2425d4b060964f927cc28c5840377f535d61fbeb1d1d00f00cdebd9336b8ab117304bd0d6fbd80c0428575cee74cda425a74edb2a1e71f96b2f407d7526402d1efbdc2eb587faca433dc6423cc96f4228d782b2513e8cd48a2f06bc7d690a4610b993cf0704df6ada02700f3cd0093b9c248dca40d8298946e865b893cfdf8bf0c0e4a8fdc0d3ef73e12cf3440da0621fccea8baa1268440e79b", 0xa0}, {&(0x7f0000000300)="856e935011d2eaeb469b588e80e4d2739cf4a1eaef657210b42da22b571fb89e20c233eff02ca3846fdee460998c34278512eaf210520ff85ec732840d25666323f2c63f22ce8909f29001973f6bf0c0", 0x50}, {&(0x7f00000004c0)="56dbf0da57ef14065552a584bfecd91d", 0x10}, {&(0x7f0000000500)="23cbcc3efbf114a24ab20b25b5a33a6ef14687347bb259ead0449aeb13409a9b65a9c9a8bd07b6214e9876e8a8e6fd343cbc8b5a12dd86543ba355f1065c563f7bad64", 0x43}, {&(0x7f0000000580)="12ee0f339999dc9befd5dbd4520a545c6ed738dac5d0ab6110a5be19a14e828895cc97b90b676ec2eab224b1eca178a2a305250e0d5add202322c5e854dad96180a47c597ef396d2fca10f0a6335a59c520ce912c6f55563eb66170ac457fab8698a382a517521fc575d60375522df0ab00d49d261e1e75aa6e3c2157ac03922566cc255f29460144cf7767f21782994fb65db857a5c3f1750ff8415c047da173add98dfaef1fdaccc73ca13936867f32d436832f7bd7be4e56cbb3488b2a50436a5408ee3c69c6db319952638c46b3a89229c585ad6135987b87feed3956554dab435db", 0xe4}], 0x6}}, {{&(0x7f0000000700)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000740)="8a3f824854bd2660d9a0f6150a3666e895b0c0ead8b0e4fa88be026fa0367223e58616e8c6186f59182e", 0x2a}], 0x1, &(0x7f0000000d80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000800)="727ff721e132ade3fd1771ec72e850b5510ed5c3ac08ea8cce6858f7e05c50e35594e7fa8eb60869820176d88006e882cd8f117900d80cfaeb243160c8cfb280ba3848cdad2d02c3070aa3db49651aa330374bf145ae0e2fc07ddfa9bf4eb2a06f5edbd383be19b73c6430a5b58b9c590dc00aa0ab9a002f7550a72d1d4d41410e7fb65f11afebf7e8d7ffb6052798a76a49577d70612addfc24ef43605117b58c9a569d04051d2404c7bd4a216a45c823ac97b1deb6051a727a411859cdd6f81d81c72ddf6cffd3063d6f7b17b395611384d4d7342c31e09228cd", 0x194ce5d151d0efd}], 0x1}}, {{&(0x7f0000000940)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000980)="348bbc09b02cf87161e7bda69f98df01b80bb25a6d59c9a7c2a58d84d799108193c078380d03d8a7bcb4ad3b448a6a5253154264eeac0b918a83284228ce9ebd788b917a39ebd32970bb4d980a65d75a39509d51b14a92734d2b1b4f5a958fb7bbeb6b", 0x63}, {&(0x7f0000000a00)="6a6d5cf9b94ea5a5660c30b1e8a4433ac652fd33451f876faf65fa3927b3e4859d116de537b963b60a494d426baae1ff4573d715650394b9990088d17f926e3e996cdfedb4348ff6a7f520d118e60ef34e4d0c6cf7319b4c3369e64536f4b22b028310d6bf7d2fb12069a242c57eaa5c192231ac", 0x74}, {&(0x7f0000000a80)="1c54501220c64acb82c4914bdbc048d3f2004aa6a272d42e7a467f40085fe7d1351637695cf6709cecbca2ce5f0ec8111e0fe8008ce6921d0ab4b1f14fba530cf4739437931b6b552097ed949da3c94ca918cbbb1545836fa1fc58ecd3de387bc7d3be0f79761b04e5c116c8f16bbdf3e8b9776d5d851a383b5b7360e3df321e214d9e72a8aab680bea78f372a45ada9", 0x90}, {&(0x7f0000000dc0)="ba0c50880bb0f46295a897a33c61aafbfc1213568e3e2b6632a3bdd8f8a29a385995499c16a93b30ab56d8085cda957897381a840bfc9c4022e6b88021ce49542caf8e56edd8ed71fd80ddcb6051a131132977e1398d1ab7f796004ad06a37328a3e2a993e511b05605bca1312a693e995228add579494d9346c15500f57ce61d7b71d24c3dc477355066dfb7e2f6e088cd9017bf05d8aac3fbbcaff00acc90b7c98c39efcb06a89c5ce5a0e4ac9ad0d2629861240d3642bed16e6cc3222f72c5b41b6", 0xb7}], 0x4, &(0x7f0000000c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x38}}], 0x4, 0xc048801) 1.9560443s ago: executing program 5 (id=973): r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000380)='./file1\x00', r0, &(0x7f00000003c0)='./bus\x00', 0x400) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0x80) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x2000) close_range(r2, 0xffffffffffffffff, 0x0) 1.200674762s ago: executing program 0 (id=981): r0 = inotify_init() poll(&(0x7f0000000000)=[{r0, 0xd408}], 0x1, 0x1) (async) mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x4008024, &(0x7f0000000040)={[{@stats}]}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x1000}) 1.138011523s ago: executing program 0 (id=982): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r5 = gettid() clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={r6, r7+10000000}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) recvfrom$inet6(r9, &(0x7f0000000300)=""/218, 0xda, 0x120, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r9) shutdown(r9, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) sendto$packet(r3, &(0x7f0000000280)="05031600d3700ee1a880", 0xa, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) bind$packet(r8, &(0x7f0000000200)={0x11, 0x1, r10, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', r10, 0xa1cda3063ef9e42e, 0x40, 0x5, 0x4b9c, 0x62, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x700, 0x3}}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x18) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) 1.137372373s ago: executing program 2 (id=983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2}) r1 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_open_procfs(r1, &(0x7f0000002240)='attr/fscreate\x00') syz_fuse_handle_req(r2, &(0x7f0000000240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) vmsplice(r3, &(0x7f00000008c0)=[{&(0x7f00000006c0)="2af7b55502ba6041e157bf9fbe1aa5190e1a0af9669f65c24b58b3e4eb83673bf618bf46555e647da78c379d5c93f452df0261e78164f6ff612532d0f5985b486149bf471a7bb851cceacf26bd0a303f88e30a9aab69de7d2a814625f3a994e6ebfaed774b9e648c605008234e", 0x6d}, {&(0x7f0000000740)="224ebacbc784fb29ac978930f7b318a670374631018063ba1e138e50bc82f93c166703362aeac25e6c9d2a1b07195373385d655fe0c6c5abc017644eb35ac64d045375533aafb2bc43a88668131d90990bad64dddeab62d3ce9f5c1627c5b93acf43d6ead4d0f5bf36960d549df7766701a693b67b44ba1f01fb19abf5d8283da8a9890075c0bed97636dc59953b86d6bc9321ff364fd554f6c9396ebf0ad75c204d63522539d2007644476e5620067ae4410d51f9499df491e53ab171e877408f82b1f3093c9640561b5a7c31e397ee23ff536e85abbda4815fed4f", 0xdc}, {&(0x7f0000000840)="15cd03c15f27ed219e196f11307685053fe3fec5ed2d85583f43dad073cfb9b3a492ba342feb87a021fed792fb543f4482c82a2671475a74268ce4c3ea149993a59efb", 0x43}], 0x3, 0xd) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000680)='bic\x00', 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = syz_clone(0x48000, &(0x7f0000000480)="46ceb1445671b2d7aa2647bb3ebd420087d5f62726ddc5ae838ff9bf2b112478ad3d26ed44c812bbf56836b68d42e6bd5e6f08c251da4701a941a8193dba94b3236cbed03617a03462f0aeb761ebd4", 0x4f, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="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") r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = fcntl$dupfd(r8, 0x0, r6) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x547}, 0x1c) ioctl$ASHMEM_SET_NAME(r4, 0x8008770b, &(0x7f0000000080)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\xe3\xff\xff\xff\x00\x00\x00\xa7\xca1~z\x1f\xe7\xe1\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\x96\x8b#@\xd3!b+{\x17\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\b\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~\xef\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xac\x92\x86uY\xf6\x8c\xcdNNR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x05\x00\x00\x00\x00\x00\x00\x00\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,\xd8$\x12f\xe8s$\xa0\xcb\x0e\xaa\xe1\xcc\xbe\x10\x04\x97\x9d+\x81\xbb8|\xf3\x8fo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 L\xcc\x1b\xeb\x97\xce\xfd\x80lmb5o\xf1\x9d\xeb\x98\xec1\a\x9d\xb2t\xb9%\xee\x1f\x02d\r*\v\xb8\x80\x16\xe4a\xe5\xecc\xa2C\x84\x87kd\xac\xb9\xb9U\x03\x92\x81\x89[U\x8b\t\x18\x18+\xecx\xed\x16\x80fDP\v\x12\x06\xff}\x03\xec\x1f\xc8\xe7#\x89rR\x9b\x02\xc6b\x9fk\x9f\x83_\xdbp\xcb\x9e\x1c\xd2G\x88\x02\x17\x87\xa75\xed\x0f\x17^\xcd\x0eh\xa1\x12\xc0}\x1f\xa6etR\v,90\xb4\xd5\xad5d\x02\xa0\x9b#\xf3\x0e\xcb\x87dm\xd4\x91\xa1\x14P\xf1BBs\x84l\x0e\xc5;\'\xd4G\xd8~\xc8\nm\x9f3\xe9\xf4\x1f+\x96Yp{\xfa\xe3\x9c\xca\x19\x8c1\as\x85\xfc\xe2\xc2\x03\xd3\b\x98Jj\xe0\xfe\\w0\xb8%T\xac\xeeo\xca\xc7JD\xa8\x05\xff\x1f$\x00\x00\x00\x00\x00\x00\x00n;q\xf8\xfb\x97\xbaUP\x13\fe\x84\x84\xbc\xd3\xe8]\xf7\xed5\x9cW\xbdu\xeb\a\x12v\x1a\x1c\xf0B\xa5\xd0\xc4\'\x19\xa0\xc4a\x19Eu\xdf\xa9\xaezmq\xfa\xce\x97\xca6w\xa7\x82\xbb\xc7\xbb\xc00\xfeT\x7f=\xc6\x81`\x16c\xf9\x95\xcba\xed\xaf\xe9\xba\xb4\t\xbf}\xea\xe9\x19s\xc07N\x10l\x9dOG\xb8PS\xd3-\x8c\xb9\x92\xe0OW\xa0\x970\n>\xff\x96\xe8\xdc\\5{\xe0?\xd2\x04H(|\xc3Q\xb3') ptrace$ARCH_SHSTK_ENABLE(0x1e, r7, 0x1, 0x5001) 1.135167973s ago: executing program 2 (id=984): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000640)={0x34, &(0x7f00000003c0)={0x0, 0x2, 0x2, "9fcb"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10004, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x13, r4, 0x99b33000) 1.035371215s ago: executing program 0 (id=985): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000656000/0x1000)=nil, 0x1000, 0xc, 0x2010, r0, 0x0) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, 0x0) 985.393225ms ago: executing program 0 (id=986): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x1002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070506ef"], 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x10b502, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000100)={'\x00', 0xaa69, 0x1, 0x80000001}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000003180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$tipc(r1, &(0x7f00000031c0), &(0x7f0000003200)=0x10) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f00000003c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window={0x3, 0x8007}, @mss={0x2, 0x5}], 0x4) setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getegid() sendmmsg$unix(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0x20, 0x4000}}], 0x1, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r5, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x87, 0x1}, 0x47, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x4, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0xfffffffd, 0x4, 0x1, 0x3, 0x0, 0x1, 0x5de82a4e, 0x0, 0x0, 0x9, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x6, 0x2, 0x0, 0x9, 0x1c15d73a, 0x2], [0x8, 0x0, 0x0, 0x5, 0x4, 0x1, 0x8, 0x5, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0xfffffffd, 0x61c5fb46, 0x10000, 0x0, 0x35, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0xfffff303, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0xa, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238c7, 0x0, 0x3, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x20, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0xdb, 0x40, 0x0, 0x21, 0x24000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x200000, 0x202, 0xcc0, 0x3fd, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0x80, 0x921, 0x2f, 0x0, 0x0, 0xfffffffc, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0x1, 0xd62, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x2, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x8, 0x0, 0x80000001, 0x3, 0x0, 0x400, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x10800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x6, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) listxattr(&(0x7f0000000040)='./cgroup/../file0\x00', &(0x7f0000004240)=""/4086, 0xff6) openat$cgroup_subtree(r7, &(0x7f0000000080), 0x2, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001180)={{0x0, 0x7, 0x10, 0xfffffffffffffffc, 0x5, 0x9, 0x6b, 0xffffff81, 0x8, 0x80000000, 0x3, 0x5, 0x80, 0xfffffffffffffffc, 0x91e}}) keyctl$set_reqkey_keyring(0xe, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r8, 0xd0009412, &(0x7f0000002180)={r9, 0x7}) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') 826.194878ms ago: executing program 3 (id=987): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='comm\x00') io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x1, r2, 0x0}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r3, &(0x7f0000000180)={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) 787.613578ms ago: executing program 3 (id=988): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000001b000000c000000011000d000000000000"]) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x12, r3, 0x2b09d000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1}) r6 = eventfd(0xc7) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x12c40, 0x20) r8 = socket$inet6(0xa, 0x6, 0x2) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x8000, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815", 0x45, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x40000, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r7, &(0x7f0000000180)={0x1d, r9}, 0x10) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000500)={0x1, r6}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9a11700c77180eefee8a1c000000010401e5ffffff0000000000000000000600064000020000"], 0x1c}}, 0x2000004) syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x11, r6, 0xe40e9000) 690.913829ms ago: executing program 3 (id=989): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) (async) socket$inet6(0xa, 0x6, 0x800) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000140)=0x6, 0xfffffffffffffcdd) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000080)=""/81, 0x8000, 0x1000, 0xffffffff}, 0x20) (async) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0x0, &(0x7f0000000000)) 617.852711ms ago: executing program 3 (id=990): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x7}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000500)={0x3, 0x6}, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000200)="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", 0xfb}, {&(0x7f00000003c0)="06c6c1d4c7ef2425d4b060964f927cc28c5840377f535d61fbeb1d1d00f00cdebd9336b8ab117304bd0d6fbd80c0428575cee74cda425a74edb2a1e71f96b2f407d7526402d1efbdc2eb587faca433dc6423cc96f4228d782b2513e8cd48a2f06bc7d690a4610b993cf0704df6ada02700f3cd0093b9c248dca40d8298946e865b893cfdf8bf0c0e4a8fdc0d3ef73e12cf3440da0621fccea8baa1268440e79b", 0xa0}, {&(0x7f0000000300)="856e935011d2eaeb469b588e80e4d2739cf4a1eaef657210b42da22b571fb89e20c233eff02ca3846fdee460998c34278512eaf210520ff85ec732840d25666323f2c63f22ce8909f29001973f6bf0c0", 0x50}, {&(0x7f00000004c0)="56dbf0da57ef14065552a584bfecd91d", 0x10}, {&(0x7f0000000500)="23cbcc3efbf114a24ab20b25b5a33a6ef14687347bb259ead0449aeb13409a9b65a9c9a8bd07b6214e9876e8a8e6fd343cbc8b5a12dd86543ba355f1065c563f7bad64", 0x43}, {&(0x7f0000000580)="12ee0f339999dc9befd5dbd4520a545c6ed738dac5d0ab6110a5be19a14e828895cc97b90b676ec2eab224b1eca178a2a305250e0d5add202322c5e854dad96180a47c597ef396d2fca10f0a6335a59c520ce912c6f55563eb66170ac457fab8698a382a517521fc575d60375522df0ab00d49d261e1e75aa6e3c2157ac03922566cc255f29460144cf7767f21782994fb65db857a5c3f1750ff8415c047da173add98dfaef1fdaccc73ca13936867f32d436832f7bd7be4e56cbb3488b2a50436a5408ee3c69c6db319952638c46b3a89229c585ad6135987b87feed3956554dab435db", 0xe4}], 0x6}}, {{&(0x7f0000000700)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000740)="8a3f824854bd2660d9a0f6150a3666e895b0c0ead8b0e4fa88be026fa0367223e58616e8c6186f59182e", 0x2a}], 0x1, &(0x7f0000000d80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000800)="727ff721e132ade3fd1771ec72e850b5510ed5c3ac08ea8cce6858f7e05c50e35594e7fa8eb60869820176d88006e882cd8f117900d80cfaeb243160c8cfb280ba3848cdad2d02c3070aa3db49651aa330374bf145ae0e2fc07ddfa9bf4eb2a06f5edbd383be19b73c6430a5b58b9c590dc00aa0ab9a002f7550a72d1d4d41410e7fb65f11afebf7e8d7ffb6052798a76a49577d70612addfc24ef43605117b58c9a569d04051d2404c7bd4a216a45c823ac97b1deb6051a727a411859cdd6f81d81c72ddf6cffd3063d6f7b17b395611384d4d7342c31e09228cd", 0x194ce5d151d0efd}], 0x1}}, {{&(0x7f0000000940)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000980)="348bbc09b02cf87161e7bda69f98df01b80bb25a6d59c9a7c2a58d84d799108193c078380d03d8a7bcb4ad3b448a6a5253154264eeac0b918a83284228ce9ebd788b917a39ebd32970bb4d980a65d75a39509d51b14a92734d2b1b4f5a958fb7bbeb6b", 0x63}, {&(0x7f0000000a00)="6a6d5cf9b94ea5a5660c30b1e8a4433ac652fd33451f876faf65fa3927b3e4859d116de537b963b60a494d426baae1ff4573d715650394b9990088d17f926e3e996cdfedb4348ff6a7f520d118e60ef34e4d0c6cf7319b4c3369e64536f4b22b028310d6bf7d2fb12069a242c57eaa5c192231ac", 0x74}, {&(0x7f0000000a80)="1c54501220c64acb82c4914bdbc048d3f2004aa6a272d42e7a467f40085fe7d1351637695cf6709cecbca2ce5f0ec8111e0fe8008ce6921d0ab4b1f14fba530cf4739437931b6b552097ed949da3c94ca918cbbb1545836fa1fc58ecd3de387bc7d3be0f79761b04e5c116c8f16bbdf3e8b9776d5d851a383b5b7360e3df321e214d9e72a8aab680bea78f372a45ada9", 0x90}, {&(0x7f0000000dc0)="ba0c50880bb0f46295a897a33c61aafbfc1213568e3e2b6632a3bdd8f8a29a385995499c16a93b30ab56d8085cda957897381a840bfc9c4022e6b88021ce49542caf8e56edd8ed71fd80ddcb6051a131132977e1398d1ab7f796004ad06a37328a3e2a993e511b05605bca1312a693e995228add579494d9346c15500f57ce61d7b71d24c3dc477355066dfb7e2f6e088cd9017bf05d8aac3fbbcaff00acc90b7c98c39efcb06a89c5ce5a0e4ac9ad0d2629861240d3642bed16e6cc3222f72c5b41b6", 0xb7}], 0x4, &(0x7f0000000c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x38}}], 0x4, 0xc048801) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)=ANY=[@ANYBLOB='l \x00\x00', @ANYRESOCT=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001004a0000000000000000000000000100000000ffffe000000200000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a7a"], 0x6c}}, 0x0) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="9000c7fd5da99f073414685d39", @ANYRES16=r4, @ANYBLOB="020027bd7000fedbdf25110000001400028008000100f8ffffff08000100030000003c000380080001000180000008000200070000000800020008000000080003000800000008000200ff070000080001006b09000008000100800000002c000380080003000900000008000300c00e00000800020000040000080003008a8000000800030007000000"], 0x90}, 0x1, 0x0, 0x0, 0x20000881}, 0x1800) 380.468914ms ago: executing program 0 (id=991): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) socket$inet(0x2, 0x80000, 0x3) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\x98\x1d?\xf7\xc5\x8a\x8f\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xfff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x14Ge\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb0\xde\x82\xe1\x86\x11/I\x14\xc5Ay\xbe\xfe?\xab\x83\xc6v\x0e\xc7+2\xa1\x89{\xe3\x03\xc5{8y3\xdf\xe0_9\x96\x83\xe3\x86L\x92\xe8=\x03\xbd\x95\xf4\x94^\xab\x906\x9a\x98\x8c^\x14B\x14l\xdb3\xf2\x03Y\xc9\xb2\x11\xb2ci\x89\"\xdb\xe4\x1b\xe8\x9b\x00\xcc\xd9J\x04\\\xb4\xab\xfaE\x03\x86\x84\xb9\xc8\xa3\xd6\xa3k\xe5\xe7+o6mN/4\'\x153F\a\xfd@\x1bNu\x1aK\xdc\xb0\xf3La#OVs\xf8\x84\x18=\xdf\xb3') r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)={{0x6, 0x4}, {0x10001, 0x2000}, 0x5}) 364.078265ms ago: executing program 0 (id=992): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000200)="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", 0xfb}, {&(0x7f00000003c0)="06c6c1d4c7ef2425d4b060964f927cc28c5840377f535d61fbeb1d1d00f00cdebd9336b8ab117304bd0d6fbd80c0428575cee74cda425a74edb2a1e71f96b2f407d7526402d1efbdc2eb587faca433dc6423cc96f4228d782b2513e8cd48a2f06bc7d690a4610b993cf0704df6ada02700f3cd0093b9c248dca40d8298946e865b893cfdf8bf0c0e4a8fdc0d3ef73e12cf3440da0621fccea8baa1268440e79b", 0xa0}, {&(0x7f0000000300)="856e935011d2eaeb469b588e80e4d2739cf4a1eaef657210b42da22b571fb89e20c233eff02ca3846fdee460998c34278512eaf210520ff85ec732840d25666323f2c63f22ce8909f29001973f6bf0c0", 0x50}, {&(0x7f00000004c0)="56dbf0da57ef14065552a584bfecd91d", 0x10}, {&(0x7f0000000500)="23cbcc3efbf114a24ab20b25b5a33a6ef14687347bb259ead0449aeb13409a9b65a9c9a8bd07b6214e9876e8a8e6fd343cbc8b5a12dd86543ba355f1065c563f7bad64", 0x43}, {&(0x7f0000000580)="12ee0f339999dc9befd5dbd4520a545c6ed738dac5d0ab6110a5be19a14e828895cc97b90b676ec2eab224b1eca178a2a305250e0d5add202322c5e854dad96180a47c597ef396d2fca10f0a6335a59c520ce912c6f55563eb66170ac457fab8698a382a517521fc575d60375522df0ab00d49d261e1e75aa6e3c2157ac03922566cc255f29460144cf7767f21782994fb65db857a5c3f1750ff8415c047da173add98dfaef1fdaccc73ca13936867f32d436832f7bd7be4e56cbb3488b2a50436a5408ee3c69c6db319952638c46b3a89229c585ad6135987b87feed3956554dab435db", 0xe4}], 0x6}}, {{&(0x7f0000000700)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000740)="8a3f824854bd2660d9a0f6150a3666e895b0c0ead8b0e4fa88be026fa0367223e58616e8c6186f59182e", 0x2a}], 0x1, &(0x7f0000000d80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000800)="727ff721e132ade3fd1771ec72e850b5510ed5c3ac08ea8cce6858f7e05c50e35594e7fa8eb60869820176d88006e882cd8f117900d80cfaeb243160c8cfb280ba3848cdad2d02c3070aa3db49651aa330374bf145ae0e2fc07ddfa9bf4eb2a06f5edbd383be19b73c6430a5b58b9c590dc00aa0ab9a002f7550a72d1d4d41410e7fb65f11afebf7e8d7ffb6052798a76a49577d70612addfc24ef43605117b58c9a569d04051d2404c7bd4a216a45c823ac97b1deb6051a727a411859cdd6f81d81c72ddf6cffd3063d6f7b17b395611384d4d7342c31e09228cd", 0x194ce5d151d0efd}], 0x1}}, {{&(0x7f0000000940)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000980)="348bbc09b02cf87161e7bda69f98df01b80bb25a6d59c9a7c2a58d84d799108193c078380d03d8a7bcb4ad3b448a6a5253154264eeac0b918a83284228ce9ebd788b917a39ebd32970bb4d980a65d75a39509d51b14a92734d2b1b4f5a958fb7bbeb6b", 0x63}, {&(0x7f0000000a00)="6a6d5cf9b94ea5a5660c30b1e8a4433ac652fd33451f876faf65fa3927b3e4859d116de537b963b60a494d426baae1ff4573d715650394b9990088d17f926e3e996cdfedb4348ff6a7f520d118e60ef34e4d0c6cf7319b4c3369e64536f4b22b028310d6bf7d2fb12069a242c57eaa5c192231ac", 0x74}, {&(0x7f0000000a80)="1c54501220c64acb82c4914bdbc048d3f2004aa6a272d42e7a467f40085fe7d1351637695cf6709cecbca2ce5f0ec8111e0fe8008ce6921d0ab4b1f14fba530cf4739437931b6b552097ed949da3c94ca918cbbb1545836fa1fc58ecd3de387bc7d3be0f79761b04e5c116c8f16bbdf3e8b9776d5d851a383b5b7360e3df321e214d9e72a8aab680bea78f372a45ada9", 0x90}, {&(0x7f0000000dc0)="ba0c50880bb0f46295a897a33c61aafbfc1213568e3e2b6632a3bdd8f8a29a385995499c16a93b30ab56d8085cda957897381a840bfc9c4022e6b88021ce49542caf8e56edd8ed71fd80ddcb6051a131132977e1398d1ab7f796004ad06a37328a3e2a993e511b05605bca1312a693e995228add579494d9346c15500f57ce61d7b71d24c3dc477355066dfb7e2f6e088cd9017bf05d8aac3fbbcaff00acc90b7c98c39efcb06a89c5ce5a0e4ac9ad0d2629861240d3642bed16e6cc3222f72c5b41b6", 0xb7}], 0x4, &(0x7f0000000c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x38}}], 0x4, 0xc048801) 261.894276ms ago: executing program 5 (id=993): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) sendfile(r1, r2, 0x0, 0x5cb) sendfile(r1, r2, 0x0, 0x10001) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfd, 0x100}, 0xc) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa000008}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020026bd7000fcdbdf254c00000008000300", @ANYRES32=0x0, @ANYBLOB="2c009900050000003c000000ac79da7fff9a92ff158d998d493b15f025774a73e62c863fe3ba94dac0cca8ad0fc648e3bd140d433094811c1272fd07ce77321e26f23e51ee1786ea84045a4744655498b39b15d4ba3721b4b1c9ba53faaf9b26e8a650608db2228b60403bb30a6ce74175c725f26ac3fb790bdffc8855512a93450a93683dc4a0870b83948040efff731ef76e8d8e6f"], 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000280)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0, 0x10}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) 223.779347ms ago: executing program 5 (id=994): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 0s ago: executing program 5 (id=995): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x4}, [{0x2, 0x7, r5}, {0x2, 0x0, r5}], {}, [{0x8, 0x3, r6}], {0x10, 0x4}}, 0x3c, 0x2) umount2(&(0x7f0000000340)='./file0\x00', 0x3) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 44.719857][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.735707][ T10] usb 3-1: config 0 descriptor?? [ 44.752192][ T36] audit: type=1400 audit(1751170477.520:221): avc: denied { write } for pid=566 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.754713][ T565] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 44.774857][ T36] audit: type=1400 audit(1751170477.520:222): avc: denied { unlink } for pid=566 comm="syz.1.79" name="#1" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 44.819653][ T36] audit: type=1400 audit(1751170477.590:223): avc: denied { mount } for pid=566 comm="syz.1.79" name="/" dev="overlay" ino=73 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 44.857156][ T306] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 44.874597][ T306] usb 2-1: USB disconnect, device number 6 [ 44.924607][ T518] udevd[518]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.943282][ T307] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 45.085709][ T307] usb 1-1: device descriptor read/64, error -71 [ 45.269745][ T585] kvm: emulating exchange as write [ 45.333412][ T307] usb 1-1: device descriptor read/64, error -71 [ 45.364300][ T588] rust_binder: Error while translating object. [ 45.364336][ T588] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.378503][ T588] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:107 [ 45.434747][ T10] logitech 0003:046D:C286.0001: unknown main item tag 0x6 [ 45.461679][ T10] logitech 0003:046D:C286.0001: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.2-1/input0 [ 45.478773][ T10] logitech 0003:046D:C286.0001: no inputs found [ 45.539220][ T605] kvm: pic: non byte write [ 45.575626][ T307] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 45.640100][ T10] usb 3-1: USB disconnect, device number 4 [ 45.715566][ T307] usb 1-1: device descriptor read/64, error -71 [ 45.965577][ T307] usb 1-1: device descriptor read/64, error -71 [ 46.075696][ T307] usb usb1-port1: attempt power cycle [ 46.302585][ T627] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 46.302623][ T627] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 46.316129][ T627] rust_binder: Read failure Err(EFAULT) in pid:98 [ 46.335597][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 46.425609][ T307] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 46.488748][ T307] usb 1-1: device descriptor read/8, error -71 [ 46.505993][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 46.514341][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 46.523445][ T10] usb 2-1: config 0 has no interface number 0 [ 46.530520][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 46.541341][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 46.553607][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.563299][ T10] usb 2-1: Product: syz [ 46.572009][ T10] usb 2-1: Manufacturer: syz [ 46.578649][ T10] usb 2-1: SerialNumber: syz [ 46.592046][ T10] usb 2-1: config 0 descriptor?? [ 46.608091][ T10] smsc75xx v1.0.0 [ 46.627598][ T307] usb 1-1: device descriptor read/8, error -71 [ 46.635663][ T618] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 46.788273][ T618] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 46.801383][ T618] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 46.813752][ T618] usb 3-1: config 0 interface 0 has no altsetting 0 [ 46.824578][ T618] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 46.836238][ T618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.852987][ T618] usb 3-1: config 0 descriptor?? [ 46.859862][ T636] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 46.877773][ T307] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 46.908304][ T307] usb 1-1: device descriptor read/8, error -71 [ 47.047345][ T307] usb 1-1: device descriptor read/8, error -71 [ 47.156143][ T307] usb usb1-port1: unable to enumerate USB device [ 47.366260][ T618] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 47.389852][ T618] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 47.403778][ T618] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 47.414810][ T618] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 47.425748][ T618] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 47.434392][ T618] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 47.444583][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 47.457769][ T618] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 47.467175][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 47.476821][ T618] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 47.483018][ T636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:105 [ 47.494271][ T618] usb 3-1: USB disconnect, device number 5 [ 47.626071][ T652] capability: warning: `syz.3.106' uses deprecated v2 capabilities in a way that may be insecure [ 47.688790][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 47.700675][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 47.711477][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 47.723861][ T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 47.743233][ T10] usb 2-1: USB disconnect, device number 7 [ 47.775744][ T656] Zero length message leads to an empty skb [ 48.149581][ T679] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.149617][ T679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:109 [ 48.340863][ T688] tmpfs: Cannot disable swap on remount [ 48.357669][ T688] binder: Bad value for 'max' [ 48.385579][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 48.410269][ T702] input: syz0 as /devices/virtual/input/input6 [ 48.547010][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.558442][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.569177][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 48.583176][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.593025][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.602250][ T10] usb 3-1: config 0 descriptor?? [ 48.625560][ T618] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 48.685639][ T306] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 48.777481][ T716] __nla_validate_parse: 30 callbacks suppressed [ 48.777523][ T716] netlink: 84 bytes leftover after parsing attributes in process `syz.0.130'. [ 48.795656][ T618] usb 2-1: Using ep0 maxpacket: 32 [ 48.796497][ T716] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25710 sclass=netlink_xfrm_socket pid=716 comm=syz.0.130 [ 48.802729][ T618] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 48.829436][ T618] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 48.840069][ T618] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 48.845654][ T306] usb 4-1: Using ep0 maxpacket: 16 [ 48.850088][ T618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 48.858302][ T306] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.866991][ T618] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 48.867034][ T618] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 48.878119][ T306] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.889983][ T618] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 48.908456][ T306] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 48.915796][ T618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.917414][ T618] usb 2-1: config 0 descriptor?? [ 48.931678][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.961874][ T306] usb 4-1: Product: syz [ 48.966352][ T306] usb 4-1: Manufacturer: syz [ 48.971166][ T306] usb 4-1: SerialNumber: syz [ 49.029496][ T680] netlink: 'syz.2.117': attribute type 4 has an invalid length. [ 49.030851][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.038540][ T680] netlink: 'syz.2.117': attribute type 21 has an invalid length. [ 49.047472][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.056704][ T307] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 49.062901][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.070465][ T680] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.117'. [ 49.078914][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.097868][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.111138][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.118233][ T719] rust_binder: Write failure EINVAL in pid:114 [ 49.120083][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.134853][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.143903][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.155572][ T618] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 49.167524][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.180065][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.180216][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 49.188573][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.197813][ T306] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 49.212315][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.220202][ T306] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 49.220705][ T10] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 49.233018][ T306] usb 4-1: USB disconnect, device number 4 [ 49.245548][ T307] usb 1-1: Using ep0 maxpacket: 16 [ 49.251511][ T10] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 49.265703][ T518] udevd[518]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.268903][ T307] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 49.288415][ T10] usb 3-1: USB disconnect, device number 6 [ 49.313016][ T307] usb 1-1: config 1 interface 0 has no altsetting 0 [ 49.325205][ T307] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 49.336925][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.344400][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 49.344423][ T36] audit: type=1400 audit(2000000004.110:241): avc: denied { read write } for pid=692 comm="syz.1.122" name="lp0" dev="devtmpfs" ino=471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 49.346779][ T307] usb 1-1: Product: syz [ 49.354785][ T618] usb 2-1: USB disconnect, device number 8 [ 49.378754][ T307] usb 1-1: Manufacturer: syz [ 49.386498][ T36] audit: type=1400 audit(2000000004.110:242): avc: denied { open } for pid=692 comm="syz.1.122" path="/dev/usb/lp0" dev="devtmpfs" ino=471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 49.389902][ T307] usb 1-1: SerialNumber: syz [ 49.398055][ T618] usblp0: removed [ 49.645682][ T10] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 49.682656][ T36] audit: type=1400 audit(2000000004.450:243): avc: denied { getopt } for pid=715 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.797327][ T10] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 49.810746][ T10] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 49.822483][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 49.829586][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 49.840354][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.850262][ T10] usb 3-1: config 0 descriptor?? [ 49.856320][ T721] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 49.885092][ T36] audit: type=1400 audit(2000000004.650:244): avc: denied { getopt } for pid=727 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.915157][ T36] audit: type=1400 audit(2000000004.660:245): avc: denied { setopt } for pid=727 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 50.017451][ T36] audit: type=1400 audit(2000000004.790:246): avc: denied { nlmsg_write } for pid=735 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 50.041394][ T36] audit: type=1400 audit(2000000004.790:247): avc: denied { write } for pid=735 comm="syz.3.138" name="netlink" dev="proc" ino=4026532471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 50.130626][ T36] audit: type=1400 audit(2000000004.900:248): avc: denied { mount } for pid=741 comm="syz.1.140" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 50.154145][ T36] audit: type=1400 audit(2000000004.900:249): avc: denied { mounton } for pid=741 comm="syz.1.140" path="/22/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 50.178845][ T36] audit: type=1400 audit(2000000004.900:250): avc: denied { remount } for pid=741 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 50.225394][ T745] kvm: pic: non byte write [ 50.295624][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 50.303428][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 50.312621][ T618] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 50.323561][ T10] usb 3-1: USB disconnect, device number 7 [ 50.477300][ T618] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 50.489343][ T618] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 50.502462][ T618] usb 4-1: config 0 interface 0 has no altsetting 0 [ 50.510069][ T618] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 50.521366][ T618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.532260][ T618] usb 4-1: config 0 descriptor?? [ 50.538611][ T740] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 50.645642][ T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 50.795754][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 50.808720][ T45] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 50.818926][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.828137][ T45] usb 2-1: Product: syz [ 50.833052][ T45] usb 2-1: Manufacturer: syz [ 50.838457][ T45] usb 2-1: SerialNumber: syz [ 50.845794][ T45] r8152-cfgselector 2-1: Unknown version 0x0000 [ 50.850818][ T759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118 [ 50.853258][ T45] r8152-cfgselector 2-1: config 0 descriptor?? [ 50.853807][ T759] rust_binder: Error while translating object. [ 50.864461][ T760] rust_binder: Error while translating object. [ 50.871873][ T759] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.878599][ T760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.886243][ T759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118 [ 50.898029][ T760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118 [ 50.960309][ T618] usbhid 4-1:0.0: can't add hid device: -71 [ 50.981694][ T618] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 50.994934][ T618] usb 4-1: USB disconnect, device number 5 [ 51.245676][ T306] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 51.405591][ T306] usb 3-1: Using ep0 maxpacket: 16 [ 51.413544][ T306] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.427073][ T306] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.440242][ T306] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 51.451016][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.460801][ T306] usb 3-1: Product: syz [ 51.465276][ T306] usb 3-1: Manufacturer: syz [ 51.470729][ T306] usb 3-1: SerialNumber: syz [ 51.497777][ T767] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.498054][ T766] binder: Unknown parameter 'measure' [ 51.685724][ T306] usb 3-1: 0:2 : does not exist [ 51.699628][ T306] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 51.715668][ T306] usb 3-1: USB disconnect, device number 8 [ 51.737256][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.782405][ T776] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 51.797082][ T307] usb 1-1: USB disconnect, device number 12 [ 51.835583][ T618] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 51.855753][ T782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.868577][ T782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.975627][ T618] usb 4-1: device descriptor read/64, error -71 [ 52.175608][ T307] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 52.215760][ T618] usb 4-1: device descriptor read/64, error -71 [ 52.315681][ T307] usb 1-1: device descriptor read/64, error -71 [ 52.367463][ T792] binder: Bad value for 'stats' [ 52.387857][ T795] netlink: 57 bytes leftover after parsing attributes in process `syz.2.158'. [ 52.465734][ T618] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 52.555679][ T307] usb 1-1: device descriptor read/64, error -71 [ 52.565469][ T805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.575685][ T805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.605631][ T618] usb 4-1: device descriptor read/64, error -71 [ 52.795669][ T307] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 52.816287][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 52.845626][ T618] usb 4-1: device descriptor read/64, error -71 [ 52.935691][ T307] usb 1-1: device descriptor read/64, error -71 [ 52.955795][ T618] usb usb4-port1: attempt power cycle [ 53.175649][ T307] usb 1-1: device descriptor read/64, error -71 [ 53.285732][ T307] usb usb1-port1: attempt power cycle [ 53.295627][ T618] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 53.316933][ T618] usb 4-1: device descriptor read/8, error -71 [ 53.446787][ T618] usb 4-1: device descriptor read/8, error -71 [ 53.487586][ T363] r8152-cfgselector 2-1: USB disconnect, device number 9 [ 53.546177][ T807] binder: Unknown parameter 'fscontext?}' [ 53.625629][ T307] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 53.647008][ T307] usb 1-1: device descriptor read/8, error -71 [ 53.685686][ T618] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 53.716950][ T618] usb 4-1: device descriptor read/8, error -71 [ 53.777019][ T307] usb 1-1: device descriptor read/8, error -71 [ 53.846640][ T618] usb 4-1: device descriptor read/8, error -71 [ 53.865633][ T363] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 53.955707][ T618] usb usb4-port1: unable to enumerate USB device [ 54.005663][ T363] usb 2-1: device descriptor read/64, error -71 [ 54.015654][ T307] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 54.040169][ T307] usb 1-1: device descriptor read/8, error -71 [ 54.176757][ T307] usb 1-1: device descriptor read/8, error -71 [ 54.245639][ T363] usb 2-1: device descriptor read/64, error -71 [ 54.285655][ T307] usb usb1-port1: unable to enumerate USB device [ 54.485586][ T363] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 54.615668][ T363] usb 2-1: device descriptor read/64, error -71 [ 54.855959][ T363] usb 2-1: device descriptor read/64, error -71 [ 54.920765][ T835] mmap: syz.0.171 (835): VmData 29077504 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 54.922194][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 54.922216][ T36] audit: type=1400 audit(2000000009.690:263): avc: denied { execute } for pid=834 comm="syz.0.171" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 54.963744][ T837] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.979892][ T36] audit: type=1400 audit(2000000009.740:264): avc: denied { map } for pid=836 comm="syz.0.172" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 55.006092][ T363] usb usb2-port1: attempt power cycle [ 55.044019][ T36] audit: type=1400 audit(2000000009.810:265): avc: denied { append } for pid=841 comm="syz.2.174" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 55.087786][ T840] exFAT-fs (rnullb0): invalid boot record signature [ 55.095172][ T840] exFAT-fs (rnullb0): failed to read boot sector [ 55.102362][ T840] exFAT-fs (rnullb0): failed to recognize exfat type [ 55.138070][ T36] audit: type=1400 audit(2000000009.910:266): avc: denied { write } for pid=853 comm="syz.3.175" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 55.173588][ T36] audit: type=1400 audit(2000000009.940:267): avc: denied { connect } for pid=853 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.345633][ T363] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 55.374271][ T363] usb 2-1: device descriptor read/8, error -71 [ 55.415988][ T36] audit: type=1400 audit(2000000010.190:268): avc: denied { name_bind } for pid=867 comm="syz.2.180" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 55.506892][ T363] usb 2-1: device descriptor read/8, error -71 [ 55.550856][ T878] raw_sendmsg: syz.0.183 forgot to set AF_INET. Fix it! [ 55.567055][ T36] audit: type=1400 audit(2000000010.340:269): avc: denied { setopt } for pid=875 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.595571][ T36] audit: type=1400 audit(2000000010.350:270): avc: denied { accept } for pid=867 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.745647][ T363] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 55.776871][ T363] usb 2-1: device descriptor read/8, error -71 [ 55.875616][ T307] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 55.909736][ T363] usb 2-1: device descriptor read/8, error -71 [ 55.928715][ T884] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.025679][ T363] usb usb2-port1: unable to enumerate USB device [ 56.036758][ T307] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 56.064209][ T307] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 56.084908][ T307] usb 3-1: config 0 interface 0 has no altsetting 0 [ 56.092124][ T307] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 56.111542][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.125680][ T36] audit: type=1400 audit(2000000010.900:271): avc: denied { connect } for pid=888 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.150497][ T307] usb 3-1: config 0 descriptor?? [ 56.195689][ T873] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 56.262822][ T893] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 56.262864][ T893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:204 [ 56.285548][ T893] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 56.307755][ T893] rust_binder: Read failure Err(EFAULT) in pid:204 [ 56.370791][ T36] audit: type=1400 audit(2000000011.140:272): avc: denied { setopt } for pid=895 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.469666][ T900] rust_binder: Failed copying remainder into alloc: EFAULT [ 56.469694][ T900] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 56.485640][ T900] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 56.504445][ T900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:108 [ 56.815563][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 56.895572][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 57.005542][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 57.016554][ T9] usb 1-1: config 0 has no interfaces? [ 57.023705][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=817a, bcdDevice=eb.19 [ 57.035531][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.045540][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 57.055963][ T9] usb 1-1: Product: syz [ 57.062306][ T10] usb 4-1: config 6 has an invalid interface number: 132 but max is 2 [ 57.072490][ T10] usb 4-1: config 6 has an invalid interface number: 66 but max is 2 [ 57.082544][ T9] usb 1-1: Manufacturer: syz [ 57.092539][ T10] usb 4-1: config 6 has an invalid interface number: 213 but max is 2 [ 57.102287][ T9] usb 1-1: SerialNumber: syz [ 57.108336][ T9] usb 1-1: config 0 descriptor?? [ 57.117682][ T10] usb 4-1: config 6 has no interface number 0 [ 57.124560][ T10] usb 4-1: config 6 has no interface number 1 [ 57.132800][ T10] usb 4-1: config 6 has no interface number 2 [ 57.142429][ T10] usb 4-1: config 6 interface 132 altsetting 6 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 57.155627][ T10] usb 4-1: config 6 interface 66 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 57.168288][ T10] usb 4-1: config 6 interface 213 altsetting 15 has a duplicate endpoint with address 0xC, skipping [ 57.180065][ T10] usb 4-1: config 6 interface 213 altsetting 15 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 57.191833][ T10] usb 4-1: config 6 interface 213 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 57.206815][ T10] usb 4-1: config 6 interface 213 altsetting 15 has a duplicate endpoint with address 0x6, skipping [ 57.225552][ T10] usb 4-1: config 6 interface 213 altsetting 15 has a duplicate endpoint with address 0x8, skipping [ 57.237533][ T10] usb 4-1: config 6 interface 213 altsetting 15 has a duplicate endpoint with address 0x6, skipping [ 57.249104][ T10] usb 4-1: config 6 interface 213 altsetting 15 has a duplicate endpoint with address 0xA, skipping [ 57.262100][ T10] usb 4-1: config 6 interface 213 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 57.275939][ T10] usb 4-1: config 6 interface 213 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 57.289547][ T10] usb 4-1: config 6 interface 213 altsetting 15 has a duplicate endpoint with address 0x8E, skipping [ 57.305582][ T10] usb 4-1: config 6 interface 213 altsetting 15 has a duplicate endpoint with address 0xA, skipping [ 57.319296][ T9] usb 1-1: USB disconnect, device number 17 [ 57.327355][ T10] usb 4-1: config 6 interface 213 altsetting 15 has a duplicate endpoint with address 0x8, skipping [ 57.339547][ T10] usb 4-1: config 6 interface 213 altsetting 15 has a duplicate endpoint with address 0xE, skipping [ 57.352686][ T10] usb 4-1: config 6 interface 132 has no altsetting 0 [ 57.360937][ T10] usb 4-1: config 6 interface 66 has no altsetting 0 [ 57.368470][ T10] usb 4-1: config 6 interface 213 has no altsetting 0 [ 57.379464][ T10] usb 4-1: New USB device found, idVendor=1460, idProduct=9150, bcdDevice=e0.9a [ 57.395534][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.408848][ T10] usb 4-1: Product: Л [ 57.413517][ T10] usb 4-1: Manufacturer: ц [ 57.427534][ T10] usb 4-1: SerialNumber: 躶ॵф땤Ｈ皌帧ဗ⣧枿匩໲氕궭⿱曙呴ᙉ騅뉎⩌㜠﵀떾鏜싢鬕휗㠇㪧꼝뜡ꥶ瘶햴末븢 [ 57.445854][ T911] rust_binder: Error while translating object. [ 57.445884][ T911] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 57.463809][ T911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:93 [ 57.656122][ T909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.684357][ T909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.709887][ T10] usb 4-1: USB disconnect, device number 10 [ 57.862134][ T306] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.874557][ T306] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 57.915415][ T926] fido_id[926]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.975646][ T930] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.988361][ T931] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:107 [ 57.992144][ T930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:107 [ 58.145577][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 58.176092][ T937] mmap: syz.1.205 (937) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.197061][ T937] rust_binder: Error while translating object. [ 58.197087][ T937] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.205266][ T937] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:114 [ 58.262775][ T945] rust_binder: Read failure Err(EAGAIN) in pid:119 [ 58.316443][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 58.346645][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.359118][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.375054][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 58.376144][ T307] usbhid 3-1:0.0: can't add hid device: -71 [ 58.390376][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.402585][ T307] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 58.425683][ T10] usb 1-1: config 0 descriptor?? [ 58.427837][ T307] usb 3-1: USB disconnect, device number 10 [ 58.448040][ T10] hub 1-1:0.0: USB hub found [ 58.603771][ T967] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 58.635061][ T10] hub 1-1:0.0: 1 port detected [ 58.935669][ T307] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 59.048583][ T973] binder: Unknown parameter 'fowner' [ 59.110370][ T31] usb 1-1: USB disconnect, device number 18 [ 59.172836][ T980] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 59.205566][ T307] usb 3-1: Using ep0 maxpacket: 32 [ 59.216749][ T307] usb 3-1: config 0 has no interfaces? [ 59.233315][ T307] usb 3-1: New USB device found, idVendor=0cf3, idProduct=817a, bcdDevice=eb.19 [ 59.254622][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.272698][ T307] usb 3-1: Product: syz [ 59.282737][ T307] usb 3-1: Manufacturer: syz [ 59.287717][ T307] usb 3-1: SerialNumber: syz [ 59.297245][ T307] usb 3-1: config 0 descriptor?? [ 59.791860][ T989] rust_binder: Error while translating object. [ 59.791897][ T989] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 59.806064][ T989] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:243 [ 59.903760][ T995] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 60.031030][ T1000] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 60.031075][ T1000] rust_binder: Error while translating object. [ 60.065570][ T1000] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.079878][ T1000] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:252 [ 60.482928][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 60.482951][ T36] audit: type=1400 audit(2000000015.250:291): avc: denied { mount } for pid=1022 comm="syz.3.234" name="/" dev="configfs" ino=1263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 60.526147][ T36] audit: type=1400 audit(2000000015.250:292): avc: denied { search } for pid=1022 comm="syz.3.234" name="/" dev="configfs" ino=1263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.551168][ T36] audit: type=1400 audit(2000000015.250:293): avc: denied { read } for pid=1022 comm="syz.3.234" name="/" dev="configfs" ino=1263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.576771][ T36] audit: type=1400 audit(2000000015.250:294): avc: denied { open } for pid=1022 comm="syz.3.234" path="/" dev="configfs" ino=1263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.601851][ T36] audit: type=1400 audit(2000000015.250:295): avc: denied { setattr } for pid=1022 comm="syz.3.234" name="/" dev="configfs" ino=1263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.994561][ T1043] fuse: Bad value for 'user_id' [ 61.003161][ T1043] fuse: Bad value for 'user_id' [ 61.319270][ T36] audit: type=1400 audit(2000000016.090:296): avc: denied { setattr } for pid=1050 comm="syz.3.244" path="/dev/bus/usb/005/001" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.493007][ T31] usb 3-1: USB disconnect, device number 11 [ 61.533718][ T1068] overlayfs: failed to clone upperpath [ 61.607548][ T1074] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.607588][ T1074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:183 [ 61.715604][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 61.886968][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.900293][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.911151][ T10] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 61.915790][ T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 61.921815][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.939564][ T10] usb 4-1: config 0 descriptor?? [ 62.095602][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 62.103524][ T31] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 62.112990][ T31] usb 3-1: config 1 has no interface number 0 [ 62.119900][ T31] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 62.132790][ T31] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 62.144054][ T31] usb 3-1: config 1 interface 105 has no altsetting 0 [ 62.154067][ T31] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 62.164157][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.173587][ T31] usb 3-1: Product: syz [ 62.178218][ T31] usb 3-1: Manufacturer: syz [ 62.183774][ T31] usb 3-1: SerialNumber: syz [ 62.196381][ T1076] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 62.203866][ T1076] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 62.269959][ T1086] overlayfs: failed to clone upperpath [ 62.279026][ T36] audit: type=1400 audit(2000000017.050:297): avc: denied { ioctl } for pid=1085 comm="syz.0.258" path="socket:[10498]" dev="sockfs" ino=10498 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.348838][ T1088] overlayfs: failed to clone upperpath [ 62.389982][ T1090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'. [ 62.612894][ T1076] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 62.621440][ T1076] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 62.831322][ T31] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 62.852300][ T31] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 62.862679][ T31] usb 3-1: USB disconnect, device number 12 [ 62.957259][ T10] uclogic 0003:256C:006D.0005: interface is invalid, ignoring [ 63.303004][ T1103] netlink: 324 bytes leftover after parsing attributes in process `syz.0.264'. [ 63.344881][ T1109] overlayfs: failed to clone upperpath [ 63.351746][ T1108] overlayfs: failed to clone upperpath [ 63.390036][ T36] audit: type=1400 audit(2000000000.080:298): avc: denied { setopt } for pid=1112 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.483929][ T36] audit: type=1400 audit(2000000000.170:299): avc: denied { bind } for pid=1127 comm="syz.0.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 63.534501][ T36] audit: type=1400 audit(2000000000.200:300): avc: denied { create } for pid=1127 comm="syz.0.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 63.642596][ T1131] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:194 [ 63.642639][ T1131] rust_binder: Read failure Err(EFAULT) in pid:194 [ 63.674863][ T10] usb 4-1: USB disconnect, device number 11 [ 63.711208][ T1137] bpf: Bad value for 'gid' [ 63.877309][ T1149] binder: Bad value for 'max' [ 65.401474][ T1201] rust_binder: Write failure EFAULT in pid:221 [ 65.515989][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 65.516011][ T36] audit: type=1400 audit(2000000002.210:314): avc: denied { lock } for pid=1208 comm="syz.2.299" path="socket:[10112]" dev="sockfs" ino=10112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 65.690168][ T1217] binder: Unknown parameter 'context' [ 65.862834][ T36] audit: type=1400 audit(2000000002.550:315): avc: denied { ioctl } for pid=1222 comm="syz.0.303" path="socket:[10117]" dev="sockfs" ino=10117 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.256234][ T1233] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 66.598976][ T36] audit: type=1400 audit(2000000003.290:316): avc: denied { write } for pid=1251 comm="syz.2.312" name="wireless" dev="proc" ino=4026532317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 66.673850][ T1258] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 66.706675][ T36] audit: type=1400 audit(2000000003.400:317): avc: denied { create } for pid=1261 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 66.760787][ T36] audit: type=1400 audit(2000000003.430:318): avc: denied { connect } for pid=1261 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 66.787616][ T36] audit: type=1400 audit(2000000003.430:319): avc: denied { name_connect } for pid=1261 comm="syz.2.316" dest=1 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:inetd_child_port_t tclass=tcp_socket permissive=1 [ 67.040170][ T1270] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 67.040203][ T1270] rust_binder: Error while translating object. [ 67.075540][ T1270] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.083689][ T1270] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:254 [ 67.471265][ T36] audit: type=1400 audit(2000000004.160:320): avc: denied { mount } for pid=1274 comm="syz.3.320" name="/" dev="ramfs" ino=11151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 67.596209][ T1291] netlink: 'syz.3.325': attribute type 21 has an invalid length. [ 67.619455][ T1291] netlink: 388 bytes leftover after parsing attributes in process `syz.3.325'. [ 67.665567][ T36] audit: type=1400 audit(2000000004.350:321): avc: denied { getopt } for pid=1292 comm="syz.0.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.684091][ T1300] binder: Unknown parameter 'fscontext?}' [ 67.761379][ T36] audit: type=1400 audit(2000000004.450:322): avc: denied { read } for pid=1316 comm="syz.2.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.806187][ T1321] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 67.814713][ T1321] rust_binder: Write failure EINVAL in pid:271 [ 67.852356][ T1325] rust_binder: Write failure EINVAL in pid:275 [ 67.858896][ T1325] rust_binder: Read failure Err(EAGAIN) in pid:275 [ 68.155558][ T307] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 68.227998][ T36] audit: type=1400 audit(2000000004.920:323): avc: denied { setopt } for pid=1336 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.326683][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.340925][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.356810][ T307] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 68.367925][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.379566][ T307] usb 3-1: config 0 descriptor?? [ 68.655788][ T1373] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 68.655842][ T1373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:359 [ 68.732323][ T1375] netlink: 'syz.0.351': attribute type 11 has an invalid length. [ 68.790958][ T307] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 69.083227][ T1329] kvm: pic: non byte write [ 69.203422][ T307] playstation 0003:054C:0DF2.0006: Failed to retrieve feature with reportID 9: -71 [ 69.226452][ T307] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -71 [ 69.249649][ T307] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense [ 69.269918][ T307] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 69.301976][ T307] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -71 [ 69.330261][ T307] usb 3-1: USB disconnect, device number 13 [ 69.925740][ T307] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 69.948793][ T1430] tipc: Enabling of bearer rejected, failed to enable media [ 70.085556][ T307] usb 4-1: Using ep0 maxpacket: 32 [ 70.085556][ T363] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 70.122217][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.161584][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.195536][ T307] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 70.215182][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.235744][ T307] usb 4-1: config 0 descriptor?? [ 70.511886][ T1477] rust_binder: Write failure EFAULT in pid:322 [ 70.571908][ T1478] rust_binder: Write failure EFAULT in pid:322 [ 70.648607][ T307] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 70.663048][ T307] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 70.670848][ T307] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 70.678817][ T307] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 70.686900][ T307] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 70.697103][ T307] koneplus 0003:1E7D:2D51.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 70.863307][ T307] koneplus 0003:1E7D:2D51.0007: couldn't init struct koneplus_device [ 70.872123][ T307] koneplus 0003:1E7D:2D51.0007: couldn't install mouse [ 70.880993][ T307] koneplus 0003:1E7D:2D51.0007: probe with driver koneplus failed with error -32 [ 70.895377][ T307] usb 4-1: USB disconnect, device number 12 [ 71.095588][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 71.095608][ T36] audit: type=1400 audit(2000000007.780:329): avc: denied { wake_alarm } for pid=1482 comm="syz.0.387" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.425531][ T36] audit: type=1400 audit(2000000008.110:330): avc: denied { create } for pid=1492 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 71.607631][ T1503] /dev/rnullb0: Can't open blockdev [ 71.610603][ T36] audit: type=1400 audit(2000000008.300:331): avc: denied { shutdown } for pid=1502 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.645530][ T307] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 71.682929][ T36] audit: type=1326 audit(2000000008.370:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1507 comm="syz.2.395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3396b8e929 code=0x0 [ 71.817277][ T307] usb 4-1: unable to get BOS descriptor or descriptor too short [ 71.826217][ T307] usb 4-1: not running at top speed; connect to a high speed hub [ 71.836307][ T307] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 71.846792][ T307] usb 4-1: config 0 has no interface number 0 [ 71.854116][ T307] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 71.867409][ T307] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 71.879028][ T307] usb 4-1: config 0 interface 88 has no altsetting 0 [ 71.887547][ T307] usb 4-1: language id specifier not provided by device, defaulting to English [ 71.901303][ T307] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 71.912526][ T307] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 71.921372][ T307] usb 4-1: Product: syz [ 71.926351][ T307] usb 4-1: SerialNumber: syz [ 71.933789][ T307] usb 4-1: config 0 descriptor?? [ 72.148474][ T36] audit: type=1400 audit(2000000008.840:333): avc: denied { write } for pid=1493 comm="syz.3.391" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.584524][ T36] audit: type=1400 audit(2000000009.270:334): avc: denied { append } for pid=1517 comm="syz.2.398" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.682760][ T1518] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 72.694210][ T1520] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 72.758439][ T1520] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 72.994513][ T1538] rust_binder: Write failure EINVAL in pid:391 [ 72.995626][ T1538] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.150714][ T363] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 73.183448][ T363] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 73.244102][ T1550] fido_id[1550]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 73.286341][ T36] audit: type=1400 audit(2000000009.980:335): avc: denied { map } for pid=1553 comm="syz.3.409" path="pipe:[13087]" dev="pipefs" ino=13087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 73.323921][ T1554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.334185][ T36] audit: type=1400 audit(2000000010.010:336): avc: denied { execute } for pid=1553 comm="syz.3.409" path="pipe:[13087]" dev="pipefs" ino=13087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 73.366182][ T1554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.385568][ T36] audit: type=1400 audit(2000000010.010:337): avc: denied { ioctl } for pid=1553 comm="syz.3.409" path="socket:[13089]" dev="sockfs" ino=13089 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.443850][ T36] audit: type=1400 audit(2000000010.010:338): avc: denied { getopt } for pid=1553 comm="syz.3.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.450735][ T307] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input8 [ 73.524154][ T307] usb 4-1: USB disconnect, device number 13 [ 74.055011][ T1560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:365 [ 74.112840][ T1563] netlink: 328 bytes leftover after parsing attributes in process `syz.2.413'. [ 74.132001][ T1566] rust_binder: Error in use_page_slow: ESRCH [ 74.132317][ T1566] rust_binder: use_range failure ESRCH [ 74.145266][ T305] bridge_slave_1: left allmulticast mode [ 74.157005][ T1566] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 74.157038][ T1566] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 74.158661][ T305] bridge_slave_1: left promiscuous mode [ 74.165326][ T1566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:406 [ 74.175755][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.201094][ T305] bridge_slave_0: left allmulticast mode [ 74.216625][ T305] bridge_slave_0: left promiscuous mode [ 74.228766][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.277408][ T1579] syz.3.419 uses obsolete (PF_INET,SOCK_PACKET) [ 74.346113][ T305] veth1_macvtap: left promiscuous mode [ 74.354267][ T305] veth0_vlan: left promiscuous mode [ 74.497507][ T1567] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.506222][ T1567] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.522933][ T1567] bridge_slave_0: entered allmulticast mode [ 74.531112][ T1567] bridge_slave_0: entered promiscuous mode [ 74.546822][ T1567] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.554756][ T1567] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.564340][ T1567] bridge_slave_1: entered allmulticast mode [ 74.571859][ T1567] bridge_slave_1: entered promiscuous mode [ 74.595620][ T306] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 74.642238][ T1567] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.649511][ T1567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.657520][ T1567] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.664906][ T1567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.691486][ T1319] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.701184][ T1319] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.712063][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.719902][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.731616][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.739690][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.749321][ T306] usb 3-1: config 160 has too many interfaces: 207, using maximum allowed: 32 [ 74.761257][ T306] usb 3-1: config 160 has an invalid descriptor of length 55, skipping remainder of the config [ 74.773522][ T306] usb 3-1: config 160 has 0 interfaces, different from the descriptor's value: 207 [ 74.780348][ T1567] veth0_vlan: entered promiscuous mode [ 74.784858][ T306] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 74.801231][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.801758][ T1567] veth1_macvtap: entered promiscuous mode [ 74.906722][ T1619] rust_binder: Write failure EINVAL in pid:420 [ 74.906717][ T1620] rust_binder: Write failure EINVAL in pid:2 [ 74.917403][ T1620] kvm: apic: phys broadcast and lowest prio [ 74.935899][ T1620] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 74.935936][ T1620] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 75.016616][ T306] usb 3-1: string descriptor 0 read error: -71 [ 75.035144][ T306] usb 3-1: USB disconnect, device number 15 [ 75.137570][ T1626] netlink: 88 bytes leftover after parsing attributes in process `syz.0.435'. [ 75.147387][ T1626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'. [ 75.175658][ T307] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 75.335597][ T307] usb 4-1: Using ep0 maxpacket: 16 [ 75.342615][ T307] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 75.351860][ T307] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 75.361152][ T307] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 75.371977][ T307] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 75.382452][ T307] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 75.393333][ T307] usb 4-1: config 0 has no interface number 0 [ 75.400302][ T307] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 75.412735][ T307] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 75.424008][ T307] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 75.435035][ T307] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 75.450495][ T307] usb 4-1: config 0 interface 125 has no altsetting 0 [ 75.458606][ T307] usb 4-1: config 0 interface 125 has no altsetting 2 [ 75.468694][ T307] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 75.478316][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.487713][ T307] usb 4-1: Product: syz [ 75.492568][ T307] usb 4-1: Manufacturer: syz [ 75.497670][ T307] usb 4-1: SerialNumber: syz [ 75.503671][ T307] usb 4-1: config 0 descriptor?? [ 75.550262][ T1664] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 75.702915][ T1675] rust_binder: Error while translating object. [ 75.702953][ T1675] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.709436][ T1675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:396 [ 75.720525][ T1675] tmpfs: Bad value for 'huge' [ 75.792523][ T1682] tmpfs: Unknown parameter 'quota' [ 75.842223][ T1687] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 75.895603][ T1689] overlayfs: failed to clone upperpath [ 75.995576][ T363] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 76.036475][ T1713] fuse: Bad value for 'user_id' [ 76.042170][ T1713] fuse: Bad value for 'user_id' [ 76.135697][ T363] usb 3-1: device descriptor read/64, error -71 [ 76.375651][ T363] usb 3-1: device descriptor read/64, error -71 [ 76.615643][ T363] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 76.690545][ T1719] rust_binder: Error while translating object. [ 76.690627][ T1719] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.697837][ T1719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15 [ 76.746055][ T363] usb 3-1: device descriptor read/64, error -71 [ 76.867969][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 76.867990][ T36] audit: type=1326 audit(2000000013.560:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1712 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96b78e929 code=0x7fc00000 [ 76.925572][ T36] audit: type=1400 audit(2000000013.600:369): avc: denied { sqpoll } for pid=1730 comm="syz.0.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 76.975320][ T36] audit: type=1400 audit(2000000013.660:370): avc: denied { map } for pid=1733 comm="syz.0.467" path="socket:[14379]" dev="sockfs" ino=14379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 77.055566][ T363] usb 3-1: device descriptor read/64, error -71 [ 77.165653][ T363] usb usb3-port1: attempt power cycle [ 77.220623][ T1741] 9pnet_fd: Insufficient options for proto=fd [ 77.505585][ T363] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 77.526854][ T363] usb 3-1: device descriptor read/8, error -71 [ 77.656998][ T363] usb 3-1: device descriptor read/8, error -71 [ 77.895554][ T363] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 77.926651][ T363] usb 3-1: device descriptor read/8, error -71 [ 77.950456][ T306] usb 4-1: USB disconnect, device number 14 [ 78.044349][ T1753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:429 [ 78.044393][ T1753] rust_binder: Read failure Err(EFAULT) in pid:429 [ 78.056738][ T363] usb 3-1: device descriptor read/8, error -71 [ 78.098502][ T36] audit: type=1400 audit(2000000014.790:371): avc: denied { mount } for pid=1755 comm="syz.4.474" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 78.132497][ T36] audit: type=1400 audit(2000000014.810:372): avc: denied { read } for pid=1755 comm="syz.4.474" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 78.155622][ T36] audit: type=1400 audit(2000000014.810:373): avc: denied { open } for pid=1755 comm="syz.4.474" path="/9/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 78.180545][ T363] usb usb3-port1: unable to enumerate USB device [ 78.188046][ T36] audit: type=1400 audit(2000000014.830:374): avc: denied { unmount } for pid=1567 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 78.425617][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.575529][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 78.583909][ T45] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 78.593946][ T45] usb 5-1: config 0 has no interface number 0 [ 78.602192][ T45] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 78.612886][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.623642][ T45] usb 5-1: Product: syz [ 78.628469][ T45] usb 5-1: Manufacturer: syz [ 78.634555][ T45] usb 5-1: SerialNumber: syz [ 78.643204][ T45] usb 5-1: config 0 descriptor?? [ 78.650958][ T45] smsc95xx v2.0.0 [ 78.717363][ T36] audit: type=1400 audit(2000000000.510:375): avc: denied { create } for pid=1779 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 78.879645][ T36] audit: type=1400 audit(2000000000.670:376): avc: denied { execute } for pid=1785 comm="syz.2.485" path="/selinux/load" dev="selinuxfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 79.729674][ T1803] overlayfs: missing 'workdir' [ 79.736437][ T1800] overlayfs: missing 'lowerdir' [ 79.774323][ T1805] rust_binder: Error while translating object. [ 79.774369][ T1805] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.781686][ T1805] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:408 [ 79.850633][ T1816] fuse: Bad value for 'fd' [ 79.966453][ T1827] netlink: 'syz.3.498': attribute type 4 has an invalid length. [ 79.974953][ T1827] netlink: 'syz.3.498': attribute type 5 has an invalid length. [ 79.983871][ T1827] netlink: 'syz.3.498': attribute type 1 has an invalid length. [ 79.992817][ T45] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 80.005640][ T45] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 80.017643][ T45] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 80.040617][ T45] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 80.054705][ T45] usb 5-1: USB disconnect, device number 2 [ 80.134207][ T1838] rust_binder: Write failure EINVAL in pid:466 [ 80.545619][ T363] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 80.625396][ T1860] rust_binder: validate_parent_fixup: new_min_offset=81, sg_entry.length=0 [ 80.625418][ T1860] rust_binder: Error while translating object. [ 80.637427][ T1860] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.644028][ T1860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51 [ 80.684842][ T1862] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 80.736353][ T363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.749498][ T363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.760402][ T363] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.775279][ T363] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.785121][ T363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.796233][ T363] usb 4-1: config 0 descriptor?? [ 80.945593][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.009785][ T36] audit: type=1400 audit(2000000002.800:377): avc: denied { search } for pid=1844 comm="syz.3.503" name="/" dev="configfs" ino=1263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.055634][ T45] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 81.079301][ T363] usbhid 4-1:0.0: can't add hid device: -71 [ 81.093760][ T363] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 81.106304][ T363] usb 4-1: USB disconnect, device number 15 [ 81.124296][ T1868] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 81.124323][ T1868] rust_binder: Read failure Err(EFAULT) in pid:475 [ 81.133853][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 81.151813][ T10] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.163444][ T10] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.173684][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 81.181238][ T10] usb 5-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 81.191749][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.203638][ T10] usb 5-1: config 0 descriptor?? [ 81.216118][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 81.224075][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.236321][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.249274][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.260550][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.269852][ T45] usb 3-1: Product: إ騀钨Ｌ랷摧뎢뤊썚⶚愝ㄽ⤋窌땰総䷫䐭뼠擾ńΞ瓫펨➝鳼叝뵑呩侰ᕙ藺䂔䴭㩭Ẃᛓ诋꾄睠闶᠇忱爬词쐑挈㮞歒㐾詙걨瑧엥謫ᶁ颹펏雄 [ 81.292482][ T45] usb 3-1: Manufacturer: 읋㵡盂丞畞٩蜈琌瑬쳝㔾쿁⮠임薿뱴ꪳᅅᇉ揂惦굏ᒄ逜໨⏥爖㈌雱牲䜜㖎祥軼㚇䰎쥔☧㪂珁禊뙄咋줿籡㊁Ȿ慯͋鼸琰꼽䕦絊淋敵洺䃿㪝쨯碏쀵㊗詈ᨾ鶢鰀࣮ᡧ뱤㋮Ⲍ셟ၯᅠ꡸衕抯젵ꧯ⩟ꋑﶀ믺湽떤靠ꆹ봑彔⤪釙ᝃ䷣壊ꁛ⪷쫛 [ 81.329263][ T45] usb 3-1: SerialNumber: 뿎舟ᵀ﫯럶ǖ黝㮩ฬ᠏㈶穄⣀⨬醝뼔ꋤ樵ᩊ冟ຟꥀ⃺犲域墍䝝뗊ℼኘム✪ƨ﫚侯ꮰꓤርꄖ詀몛㎥෨긙尵眤⅝닟睈㞵䕇ㆦ傠ّ屢튖⣼⣓떑갻錡箔鿁㞩䶪纞衙횜窟쌸殟赹⍦꘶ߍ奻䍿촿妠․㙾麎䎌츌欪ﭩ䏒㇂⿅ꈰ꽞坚轐類﬏ᵂ㛈쒔䡴鏍䰅텎닏軚 [ 81.525630][ T808] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 81.612925][ T10] chicony 0003:04F2:0418.0009: item fetching failed at offset 0/4 [ 81.622072][ T10] chicony 0003:04F2:0418.0009: Chicony hid parse failed: -22 [ 81.630883][ T10] chicony 0003:04F2:0418.0009: probe with driver chicony failed with error -22 [ 81.676740][ T808] usb 4-1: config index 0 descriptor too short (expected 5668, got 36) [ 81.686363][ T808] usb 4-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 81.695943][ T808] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 81.706049][ T808] usb 4-1: config 3 has no interface number 0 [ 81.712789][ T808] usb 4-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 81.725488][ T808] usb 4-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.739038][ T808] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 81.750524][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.759565][ T808] usb 4-1: Product: syz [ 81.764218][ T808] usb 4-1: Manufacturer: syz [ 81.769882][ T808] usb 4-1: SerialNumber: syz [ 81.780799][ T1879] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 81.801245][ T45] usb 3-1: 0:2 : does not exist [ 81.822263][ T45] usb 3-1: USB disconnect, device number 20 [ 81.839736][ T1898] 9pnet_fd: p9_fd_create_tcp (1898): problem connecting socket to 127.0.0.1 [ 81.879710][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 81.879731][ T36] audit: type=1400 audit(2000000003.670:381): avc: denied { mount } for pid=1903 comm="syz.0.525" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 82.050305][ T808] usb-storage 4-1:3.20: USB Mass Storage device detected [ 82.068882][ T808] usb-storage 4-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 82.091700][ T1945] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 82.091738][ T1945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:432 [ 82.093149][ T808] scsi host1: usb-storage 4-1:3.20 [ 82.151752][ T808] usb 4-1: USB disconnect, device number 16 [ 82.171417][ T1949] netlink: 60 bytes leftover after parsing attributes in process `syz.4.509'. [ 82.203824][ T36] audit: type=1400 audit(2000000003.990:382): avc: denied { view } for pid=1861 comm="syz.4.509" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 82.218683][ T1951] capability: warning: `syz.0.533' uses 32-bit capabilities (legacy support in use) [ 82.225764][ T1949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.509'. [ 82.238942][ T36] audit: type=1400 audit(2000000004.020:383): avc: denied { name_bind } for pid=1950 comm="syz.0.533" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 82.297192][ T36] audit: type=1400 audit(2000000004.090:384): avc: denied { read } for pid=1954 comm="syz.0.535" path="socket:[14798]" dev="sockfs" ino=14798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 82.332852][ T1957] netlink: 'syz.0.536': attribute type 4 has an invalid length. [ 82.420607][ T36] audit: type=1400 audit(2000000004.210:385): avc: denied { associate } for pid=1963 comm="syz.0.539" name="file1" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 82.555444][ T1972] tipc: Started in network mode [ 82.561436][ T1972] tipc: Node identity 7, cluster identity 4711 [ 82.568454][ T1972] tipc: Node number set to 7 [ 82.627712][ T36] audit: type=1400 audit(2000000004.420:386): avc: denied { create } for pid=1982 comm="syz.0.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 82.655587][ T36] audit: type=1400 audit(2000000004.420:387): avc: denied { bind } for pid=1982 comm="syz.0.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.978298][ T2036] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 82.987695][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 82.995446][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 83.211104][ T2040] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 83.211145][ T2040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:446 [ 83.307448][ T36] audit: type=1400 audit(2000000005.100:388): avc: denied { ioctl } for pid=2045 comm="syz.2.567" path="socket:[15634]" dev="sockfs" ino=15634 ioctlcmd=0xaf04 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.308070][ T2046] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 83.317932][ T36] audit: type=1400 audit(2000000005.100:389): avc: denied { read } for pid=2045 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.379167][ T2048] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 83.379197][ T2048] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:454 [ 83.416237][ T36] audit: type=1326 audit(2000000005.210:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2051 comm="syz.2.570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3396b8e929 code=0x0 [ 83.485777][ T2062] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.485809][ T2062] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.493211][ T2062] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.499858][ T2062] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.507125][ T2062] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.514014][ T2062] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.521102][ T2062] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.528230][ T2062] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.535633][ T2062] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.542728][ T2062] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.693564][ T363] usb 5-1: USB disconnect, device number 3 [ 84.021128][ T305] Bluetooth: hci1: Frame reassembly failed (-84) [ 84.167657][ T2094] fuse: Bad value for 'fd' [ 84.173981][ T2094] netlink: 44 bytes leftover after parsing attributes in process `syz.0.584'. [ 84.249636][ T2106] rust_binder: Write failure EFAULT in pid:485 [ 84.278561][ T2108] netlink: 80 bytes leftover after parsing attributes in process `syz.2.589'. [ 84.398481][ T2112] rust_binder: Error while translating object. [ 84.398518][ T2112] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 84.406442][ T2112] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:491 [ 84.620878][ T2116] bpf: Bad value for 'mode' [ 84.650682][ T2116] kvm: pic: non byte write [ 85.045514][ T2092] Bluetooth: hci0: command 0x1003 tx timeout [ 85.046580][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.251319][ T2145] fuse: Bad value for 'fd' [ 85.342466][ T2150] 9pnet_fd: Insufficient options for proto=fd [ 85.366862][ T2152] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.366898][ T2152] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.526489][ T2157] /dev/rnullb0: Can't open blockdev [ 85.782185][ T2180] tipc: Can't bind to reserved service type 0 [ 85.784531][ T2168] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4240, size: 18446744073709550742) [ 85.789912][ T2168] rust_binder: Error while translating object. [ 85.804751][ T2168] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 85.811461][ T2168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:530 [ 85.848119][ T2189] netlink: 'syz.2.617': attribute type 11 has an invalid length. [ 85.928887][ T2193] /dev/rnullb0: Can't open blockdev [ 86.085616][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 86.085633][ T2037] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 86.105580][ T306] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 86.266954][ T306] usb 3-1: unable to get BOS descriptor or descriptor too short [ 86.276361][ T306] usb 3-1: not running at top speed; connect to a high speed hub [ 86.285642][ T306] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 86.299729][ T306] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.311983][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.321337][ T306] usb 3-1: Product: syz [ 86.326203][ T306] usb 3-1: Manufacturer: syz [ 86.331655][ T306] usb 3-1: SerialNumber: syz [ 86.383554][ T808] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65380 sclass=netlink_audit_socket pid=808 comm=kworker/0:5 [ 86.542393][ T2189] /dev/rnullb0: Can't open blockdev [ 86.554312][ T306] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 86.571090][ T306] usb 3-1: USB disconnect, device number 21 [ 87.305655][ T306] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 87.345538][ T31] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 87.357871][ T2266] netlink: 'syz.0.641': attribute type 46 has an invalid length. [ 87.409565][ T2272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.644'. [ 87.455560][ T306] usb 3-1: Using ep0 maxpacket: 16 [ 87.462707][ T306] usb 3-1: config index 0 descriptor too short (expected 31810, got 155) [ 87.471869][ T306] usb 3-1: config 163 has an invalid descriptor of length 216, skipping remainder of the config [ 87.483948][ T306] usb 3-1: config 163 has 0 interfaces, different from the descriptor's value: 13 [ 87.495912][ T306] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.506450][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.515524][ T306] usb 3-1: Product: syz [ 87.519869][ T306] usb 3-1: Manufacturer: syz [ 87.525013][ T306] usb 3-1: SerialNumber: syz [ 87.530898][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 87.540196][ T31] usb 4-1: no configurations [ 87.545450][ T31] usb 4-1: can't read configurations, error -22 [ 87.759670][ T306] usb 3-1: USB disconnect, device number 22 [ 88.027124][ T2289] netlink: 'syz.0.652': attribute type 3 has an invalid length. [ 88.036260][ T2289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 88.080468][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 88.080487][ T36] audit: type=1400 audit(2000000009.870:395): avc: denied { create } for pid=2298 comm="syz.0.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 88.081471][ T2299] SELinux: Context system_u:object_r:var_lock_t:s0 is not valid (left unmapped). [ 88.124697][ T36] audit: type=1400 audit(2000000009.910:396): avc: denied { relabelto } for pid=2298 comm="syz.0.655" name="file0" dev="tmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:var_lock_t:s0" [ 88.155498][ T36] audit: type=1400 audit(2000000009.910:397): avc: denied { associate } for pid=2298 comm="syz.0.655" name="file0" dev="tmpfs" ino=1272 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:var_lock_t:s0" [ 88.185714][ T36] audit: type=1400 audit(2000000009.910:398): avc: denied { ioctl } for pid=2298 comm="syz.0.655" path="/229/file0" dev="tmpfs" ino=1272 ioctlcmd=0xae88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:var_lock_t:s0" [ 88.216794][ T36] audit: type=1400 audit(2000000009.980:399): avc: denied { read } for pid=2300 comm="syz.3.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.307665][ T36] audit: type=1400 audit(2000000010.100:400): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 88.615642][ T45] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 88.662352][ T36] audit: type=1400 audit(2000000010.450:401): avc: denied { unlink } for pid=288 comm="syz-executor" name="file0" dev="tmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:var_lock_t:s0" [ 88.766614][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.781986][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 88.791930][ T45] usb 3-1: config 1 has no interface number 0 [ 88.798887][ T45] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.815030][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.826099][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.827674][ T36] audit: type=1400 audit(2000000010.620:402): avc: denied { accept } for pid=2325 comm="syz.0.664" path=0000224E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 88.835182][ T45] usb 3-1: Product: syz [ 88.835203][ T45] usb 3-1: Manufacturer: syz [ 88.835221][ T45] usb 3-1: SerialNumber: syz [ 88.842617][ T45] usb 3-1: selecting invalid altsetting 1 [ 89.136566][ T2335] rust_binder: Error while translating object. [ 89.136606][ T2335] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 89.143037][ T2335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:578 [ 89.545621][ T363] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 89.618771][ T36] audit: type=1400 audit(2000000011.410:403): avc: denied { create } for pid=2350 comm="syz.0.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 89.695622][ T363] usb 4-1: device descriptor read/64, error -71 [ 89.935591][ T363] usb 4-1: device descriptor read/64, error -71 [ 90.175617][ T363] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 90.315597][ T363] usb 4-1: device descriptor read/64, error -71 [ 90.555816][ T363] usb 4-1: device descriptor read/64, error -71 [ 90.665651][ T363] usb usb4-port1: attempt power cycle [ 90.733213][ T36] audit: type=1400 audit(2000000012.520:404): avc: denied { read } for pid=2356 comm="syz.0.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.015568][ T363] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 91.037055][ T363] usb 4-1: device descriptor read/8, error -71 [ 91.166897][ T363] usb 4-1: device descriptor read/8, error -71 [ 91.399943][ T45] cdc_ncm 3-1:1.1: bind() failure [ 91.407240][ T363] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 91.411364][ T45] usb 3-1: USB disconnect, device number 23 [ 91.447609][ T363] usb 4-1: device descriptor read/8, error -71 [ 91.449091][ T2360] fuse: Bad value for 'user_id' [ 91.460479][ T2360] fuse: Bad value for 'user_id' [ 91.503231][ T2362] kvm: pic: non byte write [ 91.576962][ T363] usb 4-1: device descriptor read/8, error -71 [ 91.605305][ T2365] batadv_slave_1: entered promiscuous mode [ 91.614684][ T2365] rust_binder: Error while translating object. [ 91.614711][ T2365] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 91.621473][ T2365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:553 [ 91.632723][ T2364] batadv_slave_1: left promiscuous mode [ 91.686240][ T363] usb usb4-port1: unable to enumerate USB device [ 91.735685][ T2375] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 91.735722][ T2375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:563 [ 91.892449][ T2395] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.903080][ T2395] rust_binder: Error in use_page_slow: ESRCH [ 91.910651][ T2395] rust_binder: use_range failure ESRCH [ 91.917579][ T2395] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 91.923968][ T2395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 91.932756][ T2395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:583 [ 92.030767][ T2402] SELinux: security_context_str_to_sid () failed with errno=-22 [ 92.305582][ T45] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 92.361313][ T2411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.694'. [ 92.457473][ T45] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 164, changing to 11 [ 92.465602][ T2418] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.469624][ T2418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:598 [ 92.469645][ T45] usb 3-1: config 1 interface 0 has no altsetting 0 [ 92.501777][ T45] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.40 [ 92.505859][ T2420] rust_binder: Write failure EINVAL in pid:601 [ 92.511788][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.527837][ T45] usb 3-1: Product: 퍉一樢ᘳ渢闶à蔩瘟꽻⸸뿌xᐁ嗖瓑욙뫈紆鐢꒚े跃戬판鰾瓧죒肏陉迵뚇㣩꺰馑驎숕䁈瑙踻娷뾕⽮篓莙턯쫋嗳輆茵뻰ꐹ摤쪏跫盞岾龡睵淁쉩莍⸬툒⿅鞰䳰腪粴厨ᜨ乡쨘멼垺ᨃẶ⠔쳯▱꺍筇ࡾﹿ叨솳诨釅♴ⱂ [ 92.559188][ T45] usb 3-1: Manufacturer: 泏 [ 92.564168][ T45] usb 3-1: SerialNumber: ࠐ [ 92.639554][ T2429] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 92.975117][ T45] usbhid 3-1:1.0: can't add hid device: -71 [ 92.992299][ T45] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 93.004480][ T45] usb 3-1: USB disconnect, device number 24 [ 93.326908][ T2434] netlink: 32 bytes leftover after parsing attributes in process `syz.3.703'. [ 93.513299][ T2439] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.552610][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 93.552632][ T36] audit: type=1400 audit(2000000015.340:410): avc: denied { listen } for pid=2444 comm="syz.3.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.795851][ T36] audit: type=1400 audit(2000000015.590:411): avc: denied { write } for pid=31 comm="kworker/1:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18804 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.015606][ T45] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 94.167038][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.179157][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.190253][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.204539][ T45] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.214735][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.225419][ T45] usb 3-1: config 0 descriptor?? [ 94.245694][ T31] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 94.338162][ T36] audit: type=1400 audit(2000000016.130:412): avc: denied { create } for pid=2480 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 94.396644][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.408366][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.416542][ T2492] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=118 sclass=netlink_audit_socket pid=2492 comm=syz.0.724 [ 94.420209][ T31] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 94.443964][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 94.453371][ T31] usb 4-1: SerialNumber: syz [ 94.691606][ T31] usb 4-1: 0:2 : does not exist [ 94.699617][ T31] usb 4-1: USB disconnect, device number 23 [ 94.709251][ T518] udevd[518]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 94.845142][ T2467] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.846887][ T2467] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.859107][ T2467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:611 [ 94.867333][ T2467] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 94.877668][ T2467] rust_binder: Read failure Err(EFAULT) in pid:611 [ 94.888976][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 94.901986][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 94.911731][ T45] usb 3-1: USB disconnect, device number 25 [ 95.417698][ T2509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.418892][ T2509] rust_binder: Error while translating object. [ 95.426103][ T2509] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 95.433030][ T2509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:616 [ 95.445941][ T45] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 95.469099][ T2511] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.469246][ T2511] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.476848][ T2511] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 95.484394][ T2511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:618 [ 95.626401][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 95.646259][ T45] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 95.658306][ T45] usb 4-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.673561][ T45] usb 4-1: config 1 interface 0 has no altsetting 0 [ 95.682907][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 95.693791][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.702753][ T45] usb 4-1: Product: syz [ 95.708502][ T45] usb 4-1: Manufacturer: syz [ 95.713920][ T45] usb 4-1: SerialNumber: syz [ 95.723387][ T2504] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 95.745875][ T36] audit: type=1400 audit(2000000017.540:413): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 95.800113][ T2526] rust_binder: Write failure EINVAL in pid:630 [ 96.046528][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.054213][ T2530] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:634 [ 96.103166][ T2530] tipc: Started in network mode [ 96.118455][ T2530] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 96.127380][ T2530] tipc: Enabled bearer , priority 10 [ 96.337834][ T45] usbhid 4-1:1.0: can't add hid device: -22 [ 96.344306][ T45] usbhid 4-1:1.0: probe with driver usbhid failed with error -22 [ 96.363990][ T2559] netlink: 40 bytes leftover after parsing attributes in process `syz.0.748'. [ 96.515688][ T10] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 96.556183][ T808] usb 4-1: USB disconnect, device number 24 [ 96.676989][ T10] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 96.690255][ T10] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 96.703356][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 96.710517][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 96.720616][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.730689][ T10] usb 3-1: config 0 descriptor?? [ 96.737389][ T2554] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 97.148148][ T10] logitech 0003:046D:C286.000A: unknown main item tag 0x6 [ 97.163263][ T10] logitech 0003:046D:C286.000A: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.2-1/input0 [ 97.179068][ T10] logitech 0003:046D:C286.000A: no inputs found [ 97.205203][ T2592] overlayfs: failed to clone upperpath [ 97.211736][ T2591] overlayfs: failed to clone upperpath [ 97.218018][ T2592] tipc: Enabling of bearer rejected, failed to enable media [ 97.245580][ T10] tipc: Node number set to 10922666 [ 97.305557][ T808] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 97.314411][ T36] audit: type=1400 audit(2000000019.100:414): avc: denied { bind } for pid=2609 comm="syz.0.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.338377][ T36] audit: type=1400 audit(2000000019.100:415): avc: denied { setopt } for pid=2609 comm="syz.0.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.408095][ T2621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.418130][ T2621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.439512][ T36] audit: type=1400 audit(2000000019.230:416): avc: denied { create } for pid=2622 comm="syz.0.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.465613][ T808] usb 4-1: device descriptor read/64, error -71 [ 97.510636][ T45] usb 3-1: USB disconnect, device number 26 [ 97.705653][ T808] usb 4-1: device descriptor read/64, error -71 [ 97.945614][ T808] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 98.086591][ T808] usb 4-1: device descriptor read/64, error -71 [ 98.335558][ T808] usb 4-1: device descriptor read/64, error -71 [ 98.445691][ T808] usb usb4-port1: attempt power cycle [ 98.785530][ T808] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 98.806675][ T808] usb 4-1: device descriptor read/8, error -71 [ 98.938004][ T808] usb 4-1: device descriptor read/8, error -71 [ 98.952341][ T2649] fuse: Unknown parameter 'RF' [ 98.963233][ T36] audit: type=1400 audit(2000000020.750:417): avc: denied { relabelfrom } for pid=2648 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 98.985316][ T36] audit: type=1400 audit(2000000020.750:418): avc: denied { relabelto } for pid=2648 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 99.129511][ T36] audit: type=1400 audit(2000000020.920:419): avc: denied { bind } for pid=2665 comm="syz.2.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.177831][ T808] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 99.206714][ T808] usb 4-1: device descriptor read/8, error -71 [ 99.212043][ T2673] tipc: Enabled bearer , priority 0 [ 99.223772][ T2672] tipc: Disabling bearer [ 99.321614][ T36] audit: type=1400 audit(2000000021.110:420): avc: denied { mount } for pid=2681 comm="syz.2.791" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 99.322096][ T2682] devtmpfs: Unknown parameter 'nr_inode ' [ 99.345890][ T36] audit: type=1400 audit(2000000021.110:421): avc: denied { remount } for pid=2681 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 99.375894][ T808] usb 4-1: device descriptor read/8, error -71 [ 99.488101][ T808] usb usb4-port1: unable to enumerate USB device [ 99.529117][ T36] audit: type=1400 audit(2000000021.320:422): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 99.797113][ T2696] overlayfs: failed to clone upperpath [ 99.915948][ T808] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 100.082983][ T808] usb 3-1: unable to get BOS descriptor or descriptor too short [ 100.092460][ T808] usb 3-1: config 3 has an invalid interface number: 24 but max is 0 [ 100.101750][ T808] usb 3-1: config 3 has no interface number 0 [ 100.108525][ T808] usb 3-1: config 3 interface 24 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 100.120431][ T808] usb 3-1: config 3 interface 24 has no altsetting 0 [ 100.129949][ T808] usb 3-1: New USB device found, idVendor=0b57, idProduct=b2eb, bcdDevice=36.b7 [ 100.140681][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.150820][ T808] usb 3-1: Product: 勗࢝ꫲ斃ᬎ쯦푓磗ၢ땔퇰솑⹴淉簽悥춣튎㲏杉숼벪딡瀄Ꮩ阐ꎉ䷩⍮鷮褍췇洂뀞☳嘜㋎蚘ᢕ큒옐滆ᖜ慔ì쩓幬祲秂띅嵔긠᬴ᯥ祉쨔亪铰櫥噡芩ᡉ曈ﭟ趖懲尰쯃릢셝ᔯ⪕咟쉔㬃躖堽췀쁃挼 [ 100.183511][ T808] usb 3-1: Manufacturer: 횧ㅦᜤᢳ⪑曱鸲홥紂傒㾚暞늊횒ໞ㒰綎ꖶ测笌貸ⷁꭝ׹⏞⩈찷㝒ʹ볞ꪁ讛⏑薿궜泴䨭뜹顄쐰딸컂붯綬䵤剂ᒯ㵨뢚뮧䩨 [ 100.204083][ T808] usb 3-1: SerialNumber: syz [ 100.505565][ T9] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 100.655886][ T9] usb 4-1: no configurations [ 100.660839][ T9] usb 4-1: can't read configurations, error -22 [ 100.795616][ T9] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 100.945941][ T9] usb 4-1: no configurations [ 100.950866][ T9] usb 4-1: can't read configurations, error -22 [ 100.957954][ T9] usb usb4-port1: attempt power cycle [ 101.295607][ T9] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 101.316312][ T9] usb 4-1: no configurations [ 101.321628][ T9] usb 4-1: can't read configurations, error -22 [ 101.465589][ T9] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 101.486379][ T9] usb 4-1: no configurations [ 101.491767][ T9] usb 4-1: can't read configurations, error -22 [ 101.498918][ T9] usb usb4-port1: unable to enumerate USB device [ 101.543199][ T2757] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.551783][ T2757] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.560674][ T2757] bridge_slave_0: entered allmulticast mode [ 101.568375][ T2757] bridge_slave_0: entered promiscuous mode [ 101.576495][ T2757] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.584474][ T2757] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.592625][ T2757] bridge_slave_1: entered allmulticast mode [ 101.600032][ T2757] bridge_slave_1: entered promiscuous mode [ 101.671787][ T2757] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.680676][ T2757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.688856][ T2757] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.696515][ T2757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.726280][ T1312] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.734094][ T1312] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.747177][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.755379][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.764951][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.773317][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.809069][ T2757] veth0_vlan: entered promiscuous mode [ 101.826398][ T2757] veth1_macvtap: entered promiscuous mode [ 102.285669][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 102.435607][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 102.442853][ T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 102.451873][ T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 102.461585][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.472974][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 102.483111][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 102.493716][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.504553][ T10] usb 6-1: config 0 descriptor?? [ 102.715111][ T808] usbhid 3-1:3.24: couldn't find an input interrupt endpoint [ 102.726317][ T808] usb 3-1: USB disconnect, device number 27 [ 102.916551][ T10] usb 6-1: string descriptor 0 read error: -71 [ 102.925068][ T10] usb 6-1: USB disconnect, device number 2 [ 103.115594][ T808] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 103.267114][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.281395][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.296938][ T808] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 103.309292][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.318804][ T808] usb 3-1: config 0 descriptor?? [ 103.733159][ T808] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 103.745183][ T808] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 103.753660][ T808] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 103.762161][ T808] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 103.771999][ T808] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 103.785967][ T808] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 103.936301][ T36] audit: type=1400 audit(2000000025.730:423): avc: denied { load_policy } for pid=2772 comm="syz.2.820" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 103.936457][ T2773] SELinux: failed to load policy [ 103.969390][ T2773] SELinux: security_context_str_to_sid (sytem_uGй_device) failed with errno=-22 [ 103.980511][ T808] usb 3-1: USB disconnect, device number 28 [ 104.174384][ T1312] tipc: Subscription rejected, illegal request [ 104.288084][ T2808] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.497836][ T2815] fuse: Unknown parameter 'g;roup_id' [ 104.534175][ T2820] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.534675][ T2820] rust_binder: Failed copying remainder into alloc: EFAULT [ 104.542039][ T2820] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 104.550744][ T2820] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 104.560298][ T2820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:684 [ 104.586442][ T2825] rust_binder: Write failure EFAULT in pid:689 [ 104.596711][ T2826] rust_binder: Write failure EFAULT in pid:689 [ 104.631294][ T2831] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.638378][ T2833] rust_binder: Error while translating object. [ 104.645948][ T2833] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 104.653037][ T2833] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:695 [ 104.698889][ T2835] kvm: pic: non byte write [ 104.870233][ T2846] rust_binder: Error while translating object. [ 104.870272][ T2846] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 104.877163][ T2846] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15 [ 105.018850][ T2858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.848'. [ 105.048007][ T2860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.048750][ T36] audit: type=1400 audit(2000000026.840:424): avc: granted { setsecparam } for pid=2859 comm="syz.3.849" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 105.056023][ T2860] rust_binder: Error while translating object. [ 105.075726][ T2860] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 105.082571][ T2860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:660 [ 105.148945][ T2864] tipc: Started in network mode [ 105.164827][ T2864] tipc: Node identity aed5b9b7572e, cluster identity 4711 [ 105.173180][ T2864] tipc: Enabled bearer , priority 0 [ 105.182514][ T2864] tipc: Disabling bearer [ 105.332499][ T2872] tipc: Enabled bearer , priority 0 [ 105.341099][ T2872] tipc: Disabling bearer [ 105.383001][ T2875] /dev/rnullb0: Can't open blockdev [ 105.423851][ T2878] tipc: Enabled bearer , priority 0 [ 105.432050][ T2879] tipc: Disabling bearer [ 105.621975][ T36] audit: type=1400 audit(2000000027.410:425): avc: denied { write } for pid=2884 comm="syz.2.858" path="socket:[19990]" dev="sockfs" ino=19990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.715554][ T363] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 105.876909][ T363] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 105.889623][ T363] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 105.902092][ T363] usb 4-1: config 0 interface 0 has no altsetting 0 [ 105.909926][ T363] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 105.919692][ T363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.929644][ T363] usb 4-1: config 0 descriptor?? [ 105.935249][ T2881] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 105.985510][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 106.074911][ T36] audit: type=1400 audit(2000000027.860:426): avc: denied { write } for pid=2893 comm="syz.0.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 106.145529][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 106.152109][ T10] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 106.160818][ T10] usb 6-1: config 0 has no interface number 0 [ 106.168928][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 106.178771][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.187204][ T10] usb 6-1: Product: syz [ 106.191795][ T10] usb 6-1: Manufacturer: syz [ 106.197520][ T10] usb 6-1: SerialNumber: syz [ 106.203694][ T10] usb 6-1: config 0 descriptor?? [ 106.211097][ T10] smsc95xx v2.0.0 [ 106.345542][ T363] usbhid 4-1:0.0: can't add hid device: -71 [ 106.352150][ T363] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 106.361819][ T363] usb 4-1: USB disconnect, device number 33 [ 106.611177][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 106.623064][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 106.650939][ T2920] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.651805][ T2920] rust_binder: Error while translating object. [ 106.659358][ T2920] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 106.667581][ T2920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:721 [ 106.691890][ T2922] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.759684][ T36] audit: type=1400 audit(2000000028.550:427): avc: denied { mounton } for pid=2927 comm="syz.2.874" path="/239/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.766418][ T2928] 9p: Unknown access argument .: -22 [ 106.912994][ T2936] rust_binder: Write failure EFAULT in pid:687 [ 107.155523][ T363] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 107.316762][ T363] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 107.325929][ T363] usb 3-1: config 0 has no interface number 0 [ 107.332335][ T363] usb 3-1: config 0 interface 9 altsetting 132 endpoint 0x6 has invalid wMaxPacketSize 0 [ 107.343360][ T363] usb 3-1: config 0 interface 9 altsetting 132 has an endpoint descriptor with address 0x31, changing to 0x1 [ 107.355515][ T363] usb 3-1: config 0 interface 9 altsetting 132 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 107.367718][ T363] usb 3-1: config 0 interface 9 has no altsetting 0 [ 107.377064][ T363] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 107.386989][ T363] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.395857][ T363] usb 3-1: Product: syz [ 107.400697][ T363] usb 3-1: Manufacturer: syz [ 107.406221][ T363] usb 3-1: SerialNumber: syz [ 107.412480][ T363] usb 3-1: config 0 descriptor?? [ 107.505625][ T481] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 107.622133][ T363] ftdi_sio 3-1:0.9: FTDI USB Serial Device converter detected [ 107.631751][ T363] usb 3-1: Detected SIO [ 107.636539][ T363] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 6 [ 107.645618][ T363] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 107.656238][ T363] usb 3-1: USB disconnect, device number 29 [ 107.664674][ T363] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 107.674760][ T363] ftdi_sio 3-1:0.9: device disconnected [ 107.675884][ T481] usb 4-1: Using ep0 maxpacket: 16 [ 107.688160][ T481] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 107.697024][ T481] usb 4-1: config 0 has no interface number 0 [ 107.703620][ T481] usb 4-1: config 0 interface 4 has no altsetting 0 [ 107.713157][ T481] usb 4-1: New USB device found, idVendor=0079, idProduct=c619, bcdDevice= e.d8 [ 107.725414][ T481] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.734011][ T481] usb 4-1: Product: syz [ 107.739219][ T481] usb 4-1: Manufacturer: syz [ 107.744515][ T481] usb 4-1: SerialNumber: syz [ 107.751294][ T481] usb 4-1: config 0 descriptor?? [ 107.964349][ T481] usb 4-1: USB disconnect, device number 34 [ 108.045963][ T2962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.887'. [ 108.239171][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 108.250769][ T10] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 108.265865][ T10] usb 6-1: USB disconnect, device number 3 [ 108.278118][ T2975] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.280824][ T36] audit: type=1400 audit(2000000030.070:428): avc: denied { execute } for pid=2974 comm="syz.2.892" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 108.468432][ T2981] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.468893][ T2981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:745 [ 108.476046][ T2981] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 108.486831][ T2981] rust_binder: Read failure Err(EFAULT) in pid:745 [ 108.555731][ T2987] /dev/rnullb0: Can't open blockdev [ 108.562656][ T2985] fuse: Bad value for 'fd' [ 108.811819][ T3004] netlink: 'syz.5.903': attribute type 63 has an invalid length. [ 108.825530][ T10] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 108.826670][ T3004] netlink: 5 bytes leftover after parsing attributes in process `syz.5.903'. [ 108.989740][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.001090][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.018993][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.020813][ T36] audit: type=1326 audit(2000000030.810:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3026 comm="syz.0.912" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb96b78e929 code=0x0 [ 109.035529][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.062897][ T10] usb 3-1: Product: syz [ 109.068673][ T10] usb 3-1: Manufacturer: syz [ 109.073692][ T10] usb 3-1: SerialNumber: syz [ 109.281551][ T10] usb 3-1: 0:2 : does not exist [ 109.294975][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 109.313035][ T10] usb 3-1: USB disconnect, device number 30 [ 109.332097][ T518] udevd[518]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 109.605606][ T481] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 109.755591][ T481] usb 4-1: Using ep0 maxpacket: 32 [ 109.763183][ T481] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 109.772877][ T481] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 109.782595][ T481] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 109.793143][ T481] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.804313][ T481] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 109.819550][ T481] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 109.834723][ T36] audit: type=1400 audit(2000000031.610:430): avc: denied { append } for pid=3047 comm="syz.5.918" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 109.859810][ T481] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 109.869790][ T481] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.878370][ T36] audit: type=1400 audit(2000000031.610:431): avc: denied { shutdown } for pid=3047 comm="syz.5.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.907203][ T481] usb 4-1: config 0 descriptor?? [ 110.061671][ T3066] overlayfs: failed to clone upperpath [ 110.114099][ T481] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 110.128770][ T481] usb 4-1: USB disconnect, device number 35 [ 110.136380][ T481] usblp0: removed [ 110.205563][ T2497] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 110.334065][ T3071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=3071 comm=syz.3.926 [ 110.366632][ T2497] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.378983][ T2497] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.389799][ T2497] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 110.400403][ T2497] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.409968][ T2497] usb 6-1: config 0 descriptor?? [ 110.818598][ T2497] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 110.823046][ T3080] /dev/rnullb0: Can't open blockdev [ 110.841783][ T2497] hid-thrustmaster 0003:044F:B65D.000C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 110.866879][ T2497] hid-thrustmaster 0003:044F:B65D.000C: Wrong number of endpoints? [ 110.883420][ T36] audit: type=1400 audit(2000000032.677:432): avc: denied { watch } for pid=3083 comm="syz.0.932" path="/345/file0" dev="tmpfs" ino=1890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.020570][ C1] hid-thrustmaster 0003:044F:B65D.000C: URB to get model id failed with error -71 [ 111.020748][ T10] usb 6-1: USB disconnect, device number 4 [ 111.107062][ T3101] __vm_enough_memory: pid: 3101, comm: syz.5.935, bytes: 70373039144960 not enough memory for the allocation [ 111.277019][ T3112] tipc: Enabled bearer , priority 0 [ 111.285089][ T3112] tipc: Disabling bearer [ 111.365725][ T3116] /dev/rnullb0: Can't open blockdev [ 111.415507][ T618] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 111.555511][ T618] usb 3-1: device descriptor read/64, error -71 [ 111.645517][ T2497] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 111.795528][ T2497] usb 4-1: Using ep0 maxpacket: 16 [ 111.802419][ T2497] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.805621][ T618] usb 3-1: device descriptor read/64, error -71 [ 111.815119][ T2497] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 111.832778][ T2497] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 111.843914][ T2497] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.854789][ T2497] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.866431][ T2497] usb 4-1: config 1 interface 1 has no altsetting 0 [ 111.875063][ T2497] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.884598][ T2497] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.893229][ T2497] usb 4-1: Product: syz [ 111.897837][ T2497] usb 4-1: Manufacturer: syz [ 111.902474][ T2497] usb 4-1: SerialNumber: syz [ 112.015581][ T3126] 9pnet_fd: Insufficient options for proto=fd [ 112.055522][ T618] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 112.115639][ T2497] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 112.124575][ T2497] usb 4-1: 2:1 : format type 9 is not supported yet [ 112.139497][ T2497] usb 4-1: USB disconnect, device number 36 [ 112.195540][ T618] usb 3-1: device descriptor read/64, error -71 [ 112.435563][ T618] usb 3-1: device descriptor read/64, error -71 [ 112.545594][ T618] usb usb3-port1: attempt power cycle [ 112.885960][ T618] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 112.906824][ T618] usb 3-1: device descriptor read/8, error -71 [ 112.922725][ T3142] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.923445][ T3142] rust_binder: Write failure EINVAL in pid:49 [ 112.923495][ T3143] rust_binder: Read failure Err(EAGAIN) in pid:49 [ 113.037270][ T618] usb 3-1: device descriptor read/8, error -71 [ 113.295547][ T618] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 113.316669][ T618] usb 3-1: device descriptor read/8, error -71 [ 113.447609][ T618] usb 3-1: device descriptor read/8, error -71 [ 113.555643][ T618] usb usb3-port1: unable to enumerate USB device [ 113.725540][ T363] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 113.829503][ T3156] syzkaller0: entered promiscuous mode [ 113.835796][ T3156] syzkaller0: entered allmulticast mode [ 113.875537][ T363] usb 4-1: Using ep0 maxpacket: 16 [ 113.882551][ T363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.894733][ T363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.905257][ T363] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 113.915852][ T363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.925823][ T363] usb 4-1: config 0 descriptor?? [ 114.085726][ T2497] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 114.236927][ T2497] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.249179][ T2497] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 114.263045][ T2497] usb 6-1: config 0 interface 0 has no altsetting 0 [ 114.270758][ T2497] usb 6-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 114.281165][ T2497] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.290659][ T2497] usb 6-1: config 0 descriptor?? [ 114.296436][ T3156] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 114.339008][ T363] holtek 0003:1241:5015.000D: unknown main item tag 0x3 [ 114.348155][ T363] holtek 0003:1241:5015.000D: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.3-1/input0 [ 114.361038][ T363] holtek 0003:1241:5015.000D: no inputs found [ 114.550227][ T3153] binder: Unknown parameter 'fscontext?}' [ 114.557185][ T2514] usb 4-1: USB disconnect, device number 37 [ 114.714248][ T2497] logitech 0003:046D:C286.000E: unknown main item tag 0x6 [ 114.725281][ T2497] logitech 0003:046D:C286.000E: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.5-1/input0 [ 114.740305][ T2497] logitech 0003:046D:C286.000E: no inputs found [ 115.405568][ T618] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 115.421235][ T481] usb 6-1: USB disconnect, device number 5 [ 115.575852][ T618] usb 4-1: Using ep0 maxpacket: 16 [ 115.586849][ T618] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.600053][ T618] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.610568][ T3199] fuse: Bad value for 'group_id' [ 115.616286][ T3199] fuse: Bad value for 'group_id' [ 115.619410][ T618] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 115.637960][ T618] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.645074][ T618] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 115.656751][ T618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.673777][ T618] usb 4-1: config 0 descriptor?? [ 115.975509][ T363] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 116.082939][ T618] hid (null): invalid report_size 50650 [ 116.089405][ T618] hid (null): nested delimiters [ 116.094872][ T618] hid (null): unknown global tag 0xc [ 116.100907][ T618] hid (null): unknown global tag 0x40 [ 116.108920][ T618] hid (null): bogus close delimiter [ 116.126954][ T363] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.139624][ T363] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.150672][ T363] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.165560][ T363] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.176677][ T363] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.186560][ T363] usb 6-1: config 0 descriptor?? [ 116.285391][ T618] usb 4-1: USB disconnect, device number 38 [ 116.359127][ T36] audit: type=1400 audit(2000000038.157:433): avc: denied { audit_read } for pid=3210 comm="syz.0.976" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 116.597911][ T363] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 116.606761][ T363] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 116.615248][ T363] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 116.624703][ T363] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 116.643170][ T363] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 116.660158][ T363] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 116.670160][ T363] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 116.678791][ T363] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 116.694458][ T363] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 116.709598][ T363] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 116.718564][ T363] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 116.727110][ T363] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 116.735960][ T363] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 116.744690][ T363] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 116.753569][ T363] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 116.762430][ T363] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 116.776090][ T363] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 116.795529][ T618] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 116.866081][ T2497] usb 6-1: USB disconnect, device number 6 [ 116.955523][ T618] usb 3-1: Using ep0 maxpacket: 16 [ 116.962472][ T618] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 116.978087][ T618] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 116.988588][ T618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.000259][ T618] usb 3-1: Product: syz [ 117.005025][ T618] usb 3-1: Manufacturer: syz [ 117.011169][ T618] usb 3-1: SerialNumber: syz [ 117.024853][ T618] usb 3-1: config 0 descriptor?? [ 117.033905][ T618] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 117.043477][ T618] usb 3-1: Detected FT232R [ 117.231686][ T618] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 117.448533][ T618] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 117.647593][ T2497] usb 3-1: USB disconnect, device number 35 [ 117.665724][ T2497] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 117.679797][ T2497] ftdi_sio 3-1:0.0: device disconnected [ 117.706224][ T3265] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 117.706224][ T3265] null pointer dereference occurred [ 117.720160][ T3265] ------------[ cut here ]------------ [ 117.725973][ T3265] kernel BUG at rust/helpers/bug.c:7! [ 117.728128][ T36] audit: type=1400 audit(2000000039.527:434): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 117.733410][ T3265] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 117.759961][ T36] audit: type=1400 audit(2000000039.527:435): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.767080][ T3265] CPU: 1 UID: 0 PID: 3265 Comm: syz.5.995 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 117.767121][ T3265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.767138][ T3265] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 117.791761][ T36] audit: type=1400 audit(2000000039.527:436): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.805649][ T3265] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 4f a6 03 b8 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 05 62 4a 34 90 90 90 90 90 90 90 90 90 [ 117.805680][ T3265] RSP: 0018:ffffc90010d771b0 EFLAGS: 00010246 [ 117.805729][ T3265] RAX: 000000000000005a RBX: 1ffff920021aee38 RCX: 84d061d426423700 [ 117.805748][ T3265] RDX: ffffc900016a1000 RSI: 0000000000002ede RDI: 0000000000002edf [ 117.817718][ T36] audit: type=1400 audit(2000000039.527:437): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.822786][ T3265] RBP: ffffc90010d771b0 R08: ffffc90010d76ea7 R09: 1ffff920021aedd4 [ 117.822813][ T3265] R10: dffffc0000000000 R11: fffff520021aedd5 R12: 0000000000000000 [ 117.822832][ T3265] R13: dffffc0000000000 R14: ffffc90010d771e0 R15: ffffc90010d77210 [ 117.822853][ T3265] FS: 00007fde932196c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 117.846367][ T36] audit: type=1400 audit(2000000039.527:438): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.866447][ T3265] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.866475][ T3265] CR2: 0000200000001000 CR3: 00000001346b0000 CR4: 00000000003526b0 [ 117.866498][ T3265] Call Trace: [ 117.866506][ T3265] [ 117.866517][ T3265] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 117.873883][ T36] audit: type=1400 audit(2000000039.527:439): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.881407][ T3265] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 117.881459][ T3265] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 117.890593][ T36] audit: type=1400 audit(2000000039.527:440): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.912020][ T3265] ? p9pdu_vwritef+0x2720/0x2720 [ 117.912070][ T3265] ? radix_tree_node_alloc+0x1af/0x400 [ 117.912097][ T3265] ? _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xa2/0xf0 [ 118.096327][ T3265] ? __asan_memcpy+0x5a/0x80 [ 118.101304][ T3265] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 118.110200][ T3265] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 118.120509][ T3265] ? p9pdu_writef+0xdb/0x130 [ 118.125832][ T3265] ? p9pdu_vwritef+0x2720/0x2720 [ 118.131445][ T3265] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 118.142243][ T3265] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 118.153361][ T3265] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 118.162735][ T3265] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 118.171204][ T3265] ? p9_client_prepare_req+0x732/0xa10 [ 118.177507][ T3265] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 118.186831][ T3265] ? __kasan_check_write+0x18/0x20 [ 118.192424][ T3265] ? _raw_spin_lock+0x8c/0x120 [ 118.197929][ T3265] ? __cfi__raw_spin_lock+0x10/0x10 [ 118.204317][ T3265] ? __kasan_check_write+0x18/0x20 [ 118.210303][ T3265] ? pipe_poll+0x319/0x500 [ 118.215190][ T3265] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 118.223906][ T3265] p9_fd_request+0x440/0x500 [ 118.228979][ T3265] p9_client_rpc+0x2f9/0xb40 [ 118.234110][ T3265] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 118.243006][ T3265] ? p9_fid_create+0x3d0/0x3d0 [ 118.248564][ T3265] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 118.257342][ T3265] ? p9_conn_create+0x4c9/0x570 [ 118.262997][ T3265] ? p9_fd_create+0x2f3/0x4c0 [ 118.268333][ T3265] p9_client_create+0x96a/0x1190 [ 118.274380][ T3265] ? __cfi_p9_client_create+0x10/0x10 [ 118.280687][ T3265] ? kasan_save_alloc_info+0x40/0x50 [ 118.286546][ T3265] ? __kasan_kmalloc+0x96/0xb0 [ 118.292238][ T3265] ? kstrdup+0x7b/0x140 [ 118.297237][ T3265] ? __kasan_check_write+0x18/0x20 [ 118.303747][ T3265] v9fs_session_init+0x1e1/0x1820 [ 118.309938][ T3265] ? __cfi_v9fs_session_init+0x10/0x10 [ 118.315999][ T3265] ? kasan_save_alloc_info+0x40/0x50 [ 118.321710][ T3265] ? __kasan_kmalloc+0x96/0xb0 [ 118.327037][ T3265] ? v9fs_mount+0xbd/0xa00 [ 118.332099][ T3265] v9fs_mount+0xd7/0xa00 [ 118.336643][ T3265] ? __cfi_v9fs_mount+0x10/0x10 [ 118.342239][ T3265] ? selinux_capable+0x38/0x50 [ 118.347541][ T3265] legacy_get_tree+0x106/0x1b0 [ 118.352742][ T3265] ? __cfi_v9fs_mount+0x10/0x10 [ 118.357824][ T3265] vfs_get_tree+0x9e/0x290 [ 118.362845][ T3265] do_new_mount+0x251/0xb40 [ 118.368098][ T3265] ? security_capable+0xcf/0xf0 [ 118.373870][ T3265] path_mount+0x688/0x1050 [ 118.378859][ T3265] ? putname+0x113/0x150 [ 118.383408][ T3265] __se_sys_mount+0x2bd/0x480 [ 118.388916][ T3265] ? __x64_sys_mount+0xf0/0xf0 [ 118.394671][ T3265] ? __kasan_check_write+0x18/0x20 [ 118.400479][ T3265] ? fpregs_restore_userregs+0x11d/0x260 [ 118.407280][ T3265] __x64_sys_mount+0xc3/0xf0 [ 118.412237][ T3265] x64_sys_call+0x2021/0x2ee0 [ 118.417119][ T3265] do_syscall_64+0x58/0xf0 [ 118.422102][ T3265] ? clear_bhb_loop+0x50/0xa0 [ 118.427257][ T3265] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 118.433878][ T3265] RIP: 0033:0x7fde9238e929 [ 118.438769][ T3265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.460908][ T3265] RSP: 002b:00007fde93219038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 118.471289][ T3265] RAX: ffffffffffffffda RBX: 00007fde925b5fa0 RCX: 00007fde9238e929 [ 118.480337][ T3265] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 118.489417][ T3265] RBP: 00007fde92410b39 R08: 0000200000000180 R09: 0000000000000000 [ 118.498064][ T3265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.506842][ T3265] R13: 0000000000000000 R14: 00007fde925b5fa0 R15: 00007ffc495c3958 [ 118.515538][ T3265] [ 118.518802][ T3265] Modules linked in: [ 118.523031][ T3265] ---[ end trace 0000000000000000 ]--- [ 118.529261][ T3265] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 118.535207][ T3265] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 4f a6 03 b8 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 05 62 4a 34 90 90 90 90 90 90 90 90 90 [ 118.555681][ T3265] RSP: 0018:ffffc90010d771b0 EFLAGS: 00010246 [ 118.561958][ T3265] RAX: 000000000000005a RBX: 1ffff920021aee38 RCX: 84d061d426423700 [ 118.571052][ T3265] RDX: ffffc900016a1000 RSI: 0000000000002ede RDI: 0000000000002edf [ 118.579949][ T3265] RBP: ffffc90010d771b0 R08: ffffc90010d76ea7 R09: 1ffff920021aedd4 [ 118.589427][ T3265] R10: dffffc0000000000 R11: fffff520021aedd5 R12: 0000000000000000 [ 118.597999][ T3265] R13: dffffc0000000000 R14: ffffc90010d771e0 R15: ffffc90010d77210 [ 118.600490][ T618] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 118.600490][ T618] null pointer dereference occurred [ 118.606982][ T3265] FS: 00007fde932196c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 118.628663][ T3265] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.632596][ T618] ------------[ cut here ]------------ [ 118.635805][ T3265] CR2: 00007fc69f381178 CR3: 00000001346b0000 CR4: 00000000003526b0 [ 118.642072][ T618] kernel BUG at rust/helpers/bug.c:7! [ 118.651494][ T3265] Kernel panic - not syncing: Fatal exception [ 118.657438][ T3265] Kernel Offset: disabled