last executing test programs: 2m13.398264311s ago: executing program 0 (id=10): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="ba400066ed66b8670000000f23d80f21f86635800000c00f23f80f21940f20c06635080000000f22c026d0860be1440f20c066350d000000440f22c0f30fc29edc00000f01c30f01ca260fc71a", 0x4d}], 0x1, 0x60, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x200, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) unshare(0x62040200) r5 = socket(0xa, 0x1, 0x0) unshare(0x100) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}}, 0x90) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) pipe(&(0x7f0000000080)) 2m13.260624682s ago: executing program 0 (id=12): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac000000000301"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0xfeffffffffffffff, 0x8, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523720fd4002002cfc03d81a8ca55b39c01802c4dae4162e43ac61b7ad3300", [0x2, 0x7]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/cgroup\x00') r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000ffdbdf2501000000000000000b00002c00140014"], 0x30}}, 0xc840) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpeername(r7, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x4}, 0xffffffff}], 0x1, 0x2100, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000700)={0x138, r8, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a75fc88be8779c2195bc315c60"}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "fed57f5ae5"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f78e081aa4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_SEQ={0xb, 0x4, "cccb42bc68d3d5"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e6c92963e5ca361a5b73347f6f"}, @NL80211_ATTR_KEY={0x9c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_SEQ={0x12, 0x4, "11dabf208abf0f874d641439be22"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "191efaedb27eb1296678ce2b7d"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ea9dff520af5a4b690ec7ab984"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ae841d026287f84cc67309e14a"}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x4000) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB="6465668981bfffffffffff22"]) sendto$inet(r0, &(0x7f0000000040)="5d3ee512d0db70142141fdc11b098b37c977bd4a80bc2dec20e0d9258692d74af639cb1f96e53bf75d46c30e00add8f48afea6bea2ace7594373f5a5c772e1ab385cbfb766e1b284b91024", 0x4b, 0x20000884, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) 2m12.492842153s ago: executing program 0 (id=15): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f9834b7f"]}]}, 0x30}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 2m12.491835183s ago: executing program 0 (id=16): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) syz_clone(0xa0004280, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) sendto$inet6(r5, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x4, 0x0, {0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x28}, 0x2}}}, 0x32) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000300)=0x30) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x80010, r7, 0x4a58c000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x3, 0xffffffffffffffff) write(r9, &(0x7f0000000100), 0xfffffe5d) 2m11.646859041s ago: executing program 0 (id=31): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000240)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x1100, 0x1}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) inotify_init1(0x80000) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "a9a3c89a01c75581", "735d44176a736be5115b3bbb8d2cf2fb", "876fd1d6", "09737a1fdf7e9f05"}, 0x28) setsockopt$inet6_tcp_int(r2, 0x11a, 0x4, &(0x7f00000001c0), 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='s', 0x1}], 0x1, 0x6) socket(0xa, 0x3, 0x3a) r7 = pidfd_getfd(r5, r3, 0x0) close_range(r1, r7, 0x0) 2m11.605371244s ago: executing program 0 (id=32): prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000040)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000080)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000000c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000100)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000140)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000180)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000200)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000240)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000280)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000002c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000300)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000340)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000003c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000400)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in=@remote}}, {{@in=@empty}}}, &(0x7f0000000540)=0xe8) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000580)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000005c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000600)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000640)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000680)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000006c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000700)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000740)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000780)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000007c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000800)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000840)) 1m56.270747802s ago: executing program 32 (id=32): prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000040)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000080)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000000c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000100)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000140)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000180)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000200)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000240)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000280)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000002c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000300)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000340)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000003c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000400)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in=@remote}}, {{@in=@empty}}}, &(0x7f0000000540)=0xe8) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000580)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000005c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000600)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000640)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000680)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000006c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000700)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000740)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000780)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000007c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000800)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000840)) 1.561574135s ago: executing program 3 (id=1266): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x22001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1b) (async) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r2, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) (async) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x2, 0x8000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) (async) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) (async) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x40000100000200) (async, rerun: 32) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x25) (async, rerun: 32) getpid() (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010d80402f0000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) (async) mount$9p_xen(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000002c0), 0x80000, &(0x7f0000000680)={'trans=xen,', {[{@msize={'msize', 0x3d, 0x4b}}]}}) (async) syz_usb_control_io(r4, 0x0, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x2, 0x0, 0x6}, 0x10) (async, rerun: 32) ioctl$HIDIOCGRDESC(r7, 0x90044802, &(0x7f00000002c0)={0x2a9, "2a09e0548fa9342e9ebabdb96f63ea506dd43b3b493982adb3b9fe1f4cd2ac003c8c50bc6a9360bcf471dbf0c6eb68e9d81906eef70f5104d9749daa256efdc01f855760479edb5f063a837ebc58780ad333fceec7140555ae495d4e1d5e047feb2d4943a1799c120e549b32ac17ab1d4168cdb48b8350250d642c38732cc563528282c9a5f1daf5897bc78923c8419bc2e7cefea83741c2da48d0b35992eeb9abf2e71ae96f683cf6bfeb991f13d632f85f436cdaf865969449a92eec46b37a6a53d873017d2ee301dcc412c3f83afd1f7d5a463f7a6a35d55f8be1c103d2c8c4a209a4187a21f17f1a9763c374157b8f62f2ad03859246e0eb9b26d5f20e5183ce6e81852a4731f71ab4ff775df09b57f472129185c51b6fd583f6750e74ac044134dcd7d2973a5bb92caa111a994977459741a4fa95759d628eebf70ce4d9d57e83910a0a58978e23291697ffdd2124b322f136acf7547adfff3652c98d17ce4392f5e01f22175749d0915f894b9f16ce252ceb05880b9d87ca9bc1c5aae2508244d70177f3e443688899bb1357e07efe5d88b518a69e7c9760aca0745a57209a028239fe8b4361113fa50d1f9df8a9fc2ae81eec89e7aa1e4562e8157a2625d9d59d4344403fbffe093c68451376332e88c5c10ce994da9ebf9ccefd9fa84c7cdf81487c0cde38c6b65c8b55bd73e023debba72b5d7423e7a2f66b3f64a6ec1bd1ea5bd802c0884110e8cbd5934d8b286d677caacd59d4d3f893cf6ab3f5651089a4284d0620121f6b52a892de0b9b2473c734a4ea4f6ece23480edccf75e4d1f6b63d4c0e2adbc5bcc9d2a6c92ecf9002430c78f235bebd1c263a75e2082b0407b19a6adb960f37996f9a3c19faec097fdb2f62ccd6d156691c630c8a882c678b90c04cc17c7d787791862aaf83fc56703be7527ccc59e112ae08b8d37765d55ea5279178acd9"}) (async, rerun: 32) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001240)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a2ffcf589"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220b000000660cbb92"], 0x0}, 0x0) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa8ca3411d1c2600d, 0x2010, r3, 0x5f49b000) 1.49540536s ago: executing program 3 (id=1268): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x42, 0x4) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x0) 1.391278968s ago: executing program 4 (id=1269): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x100000000000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x4, {{0x2, 0x4e22, @multicast1}}}, 0x88) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000040)=0x1, 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 1.389450718s ago: executing program 4 (id=1271): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x100000004, 0x0) write(r0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r7, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x109, &(0x7f0000000080)='z'}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x0, 0x0, 0x3fe, 0x0}, {0x1, 0x0, 0xe00000, 0x0}, {0x1, 0x0, 0xfffffffe, 0x0}, {0x2, 0x0, 0xffffff01, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0xa, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x80000002, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.045182226s ago: executing program 1 (id=1275): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000480)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0x4, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x3, 0x0) getdents(r3, &(0x7f0000000080)=""/143, 0x8f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000080)={0xf97cff8c, 0x8}, 0x10) 956.365493ms ago: executing program 3 (id=1276): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000000104010200000000000900000a0000050a000200000000ff050000000500010001000000080003"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4044844) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x2710, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000110001"], 0x30}], 0x1}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) 911.333857ms ago: executing program 1 (id=1277): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000001c40)=0x4) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/164, 0xa4}], 0x1) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/202, 0xca}], 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) dup(r1) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x6d, 0x0, 0x0) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0x2046) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@empty, @empty, @mcast1, 0x100001, 0x6, 0x0, 0x100, 0x10003, 0x180107, r7}) sendmmsg$inet6(r2, &(0x7f00000203c0)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0xfffff000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xa0c3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="ca02eec1152600c7de256d528c3aa62ae445b7e9aaf1e3e3c6fa4102cecb86c234d90e61c2d95128034ccd556b09fb3bacc72bd2ae3e74c992cf63162213ad4f7ae822e5bb080957d3deccd93ee7ebfcd290326aa2de0fcda48b3c3b7137e4df336117c730caa97bf01f089fab0b254d34f28bec07c4be3f5275aed6c1a7a0addacabf7b4232a2a5bd1ddc94adb9628ed8ad14caf42fc7ac37a72cc0110c13de2922e372b2719ad1821badc3779f11c3985932191daa11a7e63c3657bc8cbfb952aa736e1f805209158250d57efb088b83abff7e6eff68d8c6250d50a6b9987c52fb", 0xe2}, {&(0x7f0000000480)="e85b59f69b8098dfc3fc8118692c881b8b00beb2ff2abc4fbcc715c1468e83de0fd6963f10b75788d0f77b41610b7e22abe6c856ac84270d44f5edd9369de3b43259bd5805d1ad88bc51a786b6e74724013dd9b705b77389603036", 0x5b}, {&(0x7f0000000580)="fefb83caff1c982b6a5b026536b16bf5a3d779a3702a23edf6b77b08896a13308aac26de9de7f0d375dd3840d0db29d5eed0ee3a3a63b3915865dd007d333d957395291b63d4a38d6a9104ffee634f614732b7831e52fc6b0f0036e3528ce6ef71082897c5255013dcb395ecc821717255b2fcbe36d2176127b9e087a303cbe5ef55998e7a1a9fa538bb9360fe7459d20cbde8bc7fde30d4dca91e731c0d7d507bb834307aec8f9afd4679a272efa963ebcb27029524e200acf62acc42d2b8d01550f9a4ac18ff1e1a12a3", 0xcb}, {&(0x7f0000000680)="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", 0xfc}], 0x4, &(0x7f0000000780)=[@hopopts_2292={{0x40, 0x29, 0x36, {0x0, 0x4, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0xfffffa09}]}}}, @hopopts={{0xa0, 0x29, 0x36, {0x67, 0x10, '\x00', [@enc_lim={0x4, 0x1, 0xfd}, @generic={0x10, 0x29, "7fed110b6f63637c4b5f6155925a0bfd5a6e7adcec803423b6f37f66e1b63267a80cee78fe4e261cd6"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @private0}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x33, 0x4, 0x2, 0x5, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private1]}}}, @dstopts_2292={{0x98, 0x29, 0x4, {0x73, 0xf, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x6, 0x7, [0x8, 0x8, 0x10, 0x50e7, 0x4]}}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x398b}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xe, 0x32, "b993506e424506b835f40341f622793d0728ce121b9dca9c12f95f58d3abf13082f526874fdbbc298e86136e06d0d1a74b7c"}]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x1d, 0x1, '\x00', [@padn, @pad1, @ra={0x5, 0x2, 0xf}]}}}, @hopopts={{0x38, 0x29, 0x36, {0xff, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0xfe}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @ra={0x5, 0x2, 0x699b}]}}}, @tclass={{0x14, 0x29, 0x43, 0xe45}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0x240}}, {{&(0x7f00000009c0)={0xa, 0x4e23, 0x401, @private2={0xfc, 0x2, '\x00', 0x3b}, 0x1}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000a00)="3a040d609f6bc4f252451839d1fb032dbfc8dba99463006ba0dfda6404009812ada512d7f2e3d67442d1f06345ebcbec42bfc6efc58ec2d34f0720c518cbb7c8123ad397ef2ca8991e0d6be5957d03dfa1c10970b456097da9e43f2db046c059222ac046cb44db1a7cff4cb3c1b0ec2f41f8834be369657e966844ba099ab7164bb277a9472a8acbf3a5531f2c3e868f4180e86ea93a6131cc859ff5666faf4299067d60bc9e71c7d9260457006766ffb9efe33f632582ee343fc8", 0xbb}, {&(0x7f0000000ac0)="72f2ab29301978c34907330894e75d60957c3f3adf5131bd998903e033e6411923ff3aecf8b9555979b28cba07b7d4c1128f00e082fdefe5edc216efb8c9686fd4416ca7941a80847a2f199390c43c98bef04d94100bbb0d", 0x58}, {&(0x7f0000000b40)="d27a3cefc47b690e75fb4352a151796aef06f73b5e67bea3f1c4618ea3836ea25d9072216b364a0fadc476fd9adc257db9de9b24aad739f4a36b8231f52976dd5db2fd4327141c31b21f1538305f18c4088654e093bbc63eee52cbdcbef014946714dad8c1248af856428204121f43abba3fac775d03075f4ada813ba2c1672ddbd86f0a5e9ae8896d82368579b10eb64ab8a66146ba53cdc482862c7e1d513de3f0c90f79c69f31728234ada66a88a76934cbcdad7aec30b251ff2c946013a44502f43f300b86adc12f06d9809855b39167475448eaf5a78568369da196e5", 0xdf}], 0x3, &(0x7f0000000c80)=[@dstopts={{0xf0, 0x29, 0x37, {0x87, 0x1a, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x401}, @generic={0x1, 0xb0, "1d89a4ea6b543bf2fdb1056c02ba28787dea6dc103a185f7e1cc3a982ff52c7dce8683f648acb60b53338b12136773c46dca425be0f837ae4e00af5bdf21440d53c5ab17f8bf65113e01040bedf5e77bbcf69683f94654d4e50c5bb478399c00f89f6d8a5579a5696b50c645afb33233e584cb5ac5a4ad674abe450710c7e56e4bcb8057782f26154232e2c9ade33bdf7499c16dec0d3e3baa92de368d8ef65af2f57768ed229fdc7e8d0a4dca07999a"}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x2}]}}}, @hopopts_2292={{0x1a8, 0x29, 0x36, {0x67, 0x32, '\x00', [@ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x3ff}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x1, [0x0]}, @generic={0x6, 0x40, "3ab164da5287ceb6038a83fb25e524d40e69700bf7b826cbd68768cf0f39fd4c21642c550382521056823154868a3bb5b40a3ab9b270014b00d17a2cdd033729"}, @ra={0x5, 0x2, 0x6}, @generic={0x1, 0xf1, "a8a7b938d63d57b75a3cb7ecd5317bf8012a8ab42693aacab439a456e21b2fdf59505ea1e489e8b0b6afb2a64f0cbf18d297c74e3632854774b06349e150ae55c9b206f0fe96a8e9bd37485b30b254e83221d49075f7edc6fceebd150e3543a1edec63282a67a4024f681ab9aeb413bfd75a193c26960495012a6feecaa71667eda7bb63794a58fca8e8ddcbd059e70cba1b2e0166656f739e86a15eda37c378bd56d0bb30989b9b698d22117928973beb1e8d2f9166708ecdaf49bb89ccb551f14968ae92f9e914715757477dab11a3f160a753fbc1c8a09276b8db5244e6a3b6a90b9589ce4fff8b43b3e3a685b7d015"}, @generic={0x5, 0x32, "56877f3b5be3dcb7c2f1f6bdc0f825f6c41c48454c102331888d9a1b5e3aaedf673b67b185fdd0f1f116658050de773a50e0"}, @hao={0xc9, 0x10, @private1}, @enc_lim={0x4, 0x1, 0x8}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}], 0x2b0}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000f40)="b1bcf73527cd6b922f847980a38247818c73f4de54", 0x15}, {&(0x7f0000000f80)="7ce643c6bc5cf78f9fd2d0d7e5fdab3cbec4691465e6fb4028d3415f646761a71bbdb9a209a753160fd3a98f4bead5107c4a7e205003ed9f5ad103a0d2a112542e9116089a3eed01b2ccc02b132105d160a4e1488a5d2ba19b3b8711cac27ecf54f343d67b77ca9326f0ff537dcc0959db9abf5a43484c3c5d26fbe60bb34ed5e452ca75193d8bb231e9ad", 0x8b}, {&(0x7f0000001040)="9b0e6e9ab8e2f9c8b79af7b8c734d4c352e25a3f3fb06e306981a5e5ebd976f2a48e156b3423176927cb49458eaf288048176d2a71e4329bf89992d485068566d00a77ea8249f1551d", 0x49}, {&(0x7f00000010c0)="a2ef", 0x2}, {&(0x7f0000001100)="34149f55893b3c20c320584619f60e65d58a67e3e5aabd6ca4c6826bd15cc88d4e6db5146b284b3c8058cacaac399056b461ad623bc7e6e6abb5337d9a8c1ea2011fdaf4496eb5449c24b2bbf216141a07f6287dd275a16ea14c4159f103fc4d1ef1ccf8d4ea0209dd9ef079ec5d09ea6d84e1e6ff3abc137e76aaba862702df1b", 0x81}], 0x5}}, {{&(0x7f000001a240)={0xa, 0x4e23, 0x81, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}, 0x1c, &(0x7f000001a440)=[{&(0x7f000001a280)="b12747eb03b0b5a87ff78ff3911aa63d39d730356b8d18975820da4bebf9e8a65d309f4f9872ca8f53639e61e5635c83d77b9b8dbd98130b5579a6253b6018e220851560d1d65e432ea22180d89094183c14d692424b94539c2599fb1fac5cbbd125009b61b2f53652a27b117064db9a56269f04eaa07fc70879707d8da1316e439ba8", 0x83}, {&(0x7f000001a340)="64bfa761967810d29a7dd846f3b6e557de9379aa1474f8083a5e7d532dde4b66fb94aab7eb6cadb71bf4", 0x2a}, {&(0x7f000001a380)="78232ce2f2a7f8ddbfc17eb3b237f712c0b6205e447780be6f8e7da26b4c9b573184965092cfce8c25956654c7a7a2", 0x2f}, {&(0x7f000001a3c0)="b25047819f84d33f9ddf49aa4d6931b7e9270d6244f1c2daf8f537ab10aa01eba0db634c407e29b8b741a2a4012a348b5e81b8485199a148bfabbd45d4151e361e5ad8c26b42e01c4b9ec9", 0x4b}], 0x4, &(0x7f000001a480)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x3, 0x5, 0x0, [@empty]}}}], 0x28}}, {{&(0x7f000001a4c0)={0xa, 0x4e21, 0x6, @mcast2, 0x3}, 0x1c, &(0x7f000001b640)=[{&(0x7f000001a500)="9ecbeeb735596bbd6b2765cdf4caa41a4ac5560886", 0x15}, {&(0x7f000001a540)="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", 0x1000}, {&(0x7f000001b540)="27507ce3bd10df77b22ee65fd12fee4c1ff7a52cef098bc0b7fba8a01c032c0e305d005c7ccdb0f03cba84fced31ca41cd58975180cc0e687770177282677a91be94e1c6c0ebb4324d9f661b", 0x4c}, {&(0x7f000001b5c0)="455a37b6102679d2aa8f594ff31b130fe3ae3145f37e7a2312", 0x19}, {&(0x7f000001b600)="c314bacfa369c8e98beb9bacdbfdb459961d362a50f2d7c35e8de86abe67b539b6ff3200f6c2e49862b5", 0x2a}], 0x5, &(0x7f000001b6c0)=[@hopopts={{0xf8, 0x29, 0x36, {0x3c, 0x1b, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @pad1, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x4d}, @generic={0x3, 0xca, "8f57d4dd5a7d440c8cf0141ab73616e07af5b5ce28d47ec1ce21844762e8a0bb3f29aa1dc1dd03641b6123c71a6fd3b804ace70131353057fc1663d85f57e4fb4b0e607a6888216484b2a22241efc8a14070e9c266a5a24417d261109c9f54908306e681b5b84d9f2ae5557cf30f7e00d79833e68c15a4efd814478ffa8fa8bcbaceb826cdd104aab60dfa816339c9a1a0ef2b2cea5c849e4528f546088a57347388157e4e503c4ea60ccf7e9d4ac08421464dc25549369d1dc37df608a7b08b4e97dde3825170f8c4ba"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xff}}], 0x110}}, {{&(0x7f000001b800)={0xa, 0x4e24, 0x1, @mcast2, 0x6}, 0x1c, &(0x7f000001b980)=[{&(0x7f000001b840)="43db3b7e24e1a1afc8ec531dd8558c4ac89117703fdc34690a1506d962cee91a48c9da0b1c26f2e17ecf2c5a9334cfcbca97ca2d5c390e93", 0x38}, {&(0x7f000001b880)="daa03036611badff09550fc54f68831ceb490186a594d4105ec024b50abbb287bcf037364bf4a2115e1289483b1497d3ee8b2621532adf3a05a52181f652dd17d0bdb298e87cd9f8c9f426ca7d5a191e4c64e2ab2ee0b7acaf6cb8b8f060e5a88bc942ca058ac3bd13061ce64e18524aa34450f68bce8d4aede5d4c1f5fa513c527d664042ae24a0a775eeea296361d53476f47d2b5732cd877945ebdc884e557e2055a5b36bceb4b9b18ca49ebc18d8ab3b", 0xb2}, {&(0x7f000001e2c0)="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", 0x1000}, {&(0x7f000001b940)="a070d8af6ee485045b2a132c8592c1035db11ab55ada7ce259d1ec8572c898fca99ad71f0a34f967a903add1f856a15b549b93", 0x33}], 0x4}}, {{&(0x7f000001b9c0)={0xa, 0x4e24, 0x500000, @ipv4={'\x00', '\xff\xff', @local}, 0x30}, 0x1c, &(0x7f000001c080)=[{&(0x7f000001ba00)='vv', 0x2}, {&(0x7f000001ba40)="071f10cbed41af0aed48f43f95c6340419231ac9597eb6be4bb3d63ca5df5b2abd9a3d6f82b5a5cf18f1fd34ec9b32877b076bf5f4b5f6bcfaad58d0b7ae00e749aefe3a9a37658515db47a252b8735768e709b6ce75389d9eda3ecddedf6be6e8c927ca55f8", 0x66}, {&(0x7f000001bac0)="2432cac10f4bed55bffbb066f0c8056fe1ead9ba678323e8b2c230448c4dab7d5e0c44e7c1bd30a768b688d8fb22b6c319e518f46df3184d218d4a202c2ec7c8f420aab4169e16893817b20b2a36620965d6e1b109a6ba512c61ba6e1a5c7d184ffc6d846197c628b976f301c349ccf7bf2dccaeee98f7069b9612ddbfc80b6dd3f91fda1c77fa38eaaac4d24c", 0x8d}, {&(0x7f000001bb80)="fc5d0e67b4807d81890aea02a5ddf9455157d3355f3e97e68dcfb0fb160bcb4659dc8449b0f40cc8a954ef27c928bf111a0f3d5fe2ec97e65968c428e301c99fd1bcf6285f3120ed26506a4fcce3098d38dbf0f8f8b1beade7d4d3ba4339df0308a293a360cccaccb5af292acc6551deb4379811ec3c8f24c2b8c097c56ff8c0c9f2b85e900a2cc2cb418b82bf5d2173a8e41a9ce1d77149c65beb6218221f86c8ec34692e3f1cd0e9ca1fc44c31b6c3cf8c371dc648f22af2e34199e974135bdc50f940ee92153c158305ab53b43f39b4c66f8d8f1c2fce5a4272", 0xdb}, {&(0x7f000001bc80)="dc3be3597daedb2ce3317a6e2c92ab579a175ba225e4029b29d290932ddf4a688cf031a46e50b499fbd73f8d799702f31f4b7c6c36bed5990582ddb31d1787389ffda20272898f39bb7a3f5fbb356edfa4c8eff3b4a454e5ed7471ac01c1201fc91a65b5a3f0f9c0d82302def2795563ac444b859454f01c428c00f63718df1838a68faf51a5b15fb8debeb3c2146a4e2627f847375ad865e5ede67f08a8e08ab104b5f1dd776c17f92962323b753d9487eabdfdde53911886342ec03541787c57cecb799bc99dc821204800f623c79d37facd6b3eec", 0xd6}, {&(0x7f000001bd80)="03daa09995fde9d091019c6a1788ac30bc52bc3939198801378ea612098bdce8d537c6e9f674582320238e81d611b304e1908a86ff5805543a4728403e6b0bd34be7024728b4611bb3fc739792d71be94b60dab45a0d12318110db5985efcb2334eef199a3cd64fd85215d1e3f6490ea31e3982138740550eef90f86d320556274f133607e7f3bd763f6bca2a33c4beb890a848ac1892b8c9d13848fbf68f4f8c2cec6b13eb36e", 0xa7}, {&(0x7f000001be40)="5aec49d46d9ecc97ebf9dcf6d95e89fd63e4b0e4484545ad6fafd81f359580047c91e84ee42d8e42d6a6d1d0a09bcb14f351bf6403fe5291265b1f76063458a6b4253e85b106ac8599100224820a90a9bc71937a5b7609f41bbb395da6a13f9d610f9fb8a7515db304ca65fb4ec884c99aad575417d1f3751253fea81248cb294605a213b89fb317c348a95395cbcc053e2a62ad82fdca3d7cec9e21788c1d277b", 0xa1}, {&(0x7f000001bf00)="88dcbd1607c694596b25ea4034915edaca45db2ea1749ece206d0dd10a1b4818050838b7f49dec580c9db14c91ebae5c935e457355a37c0e5140334877be61ff0486dce21dc60bd6195232051ba0a43f661d7c1c3763d42a161bbe4182d5445963cb3850485db332d2b9ba15d818c2e2d9f07b7fb502801495d6018c6f", 0x7d}, {&(0x7f000001bf80)="9fc284a468a41eb7c3fd8573b820e6ce3c589f3b4498c6f199ba0080b7e34b803c270031849fb182234a80de3a08155ac83d06a3bcb2ef1b5d289a3ffa6222f3333a34bcb62f258883cd9a87d5bbe7059e9538dcbbacabefac537e76a611196e4d403425b18891932ffc06c8089a96bb99eccd734d05c025ab639745a008c82bcfa345cb33a0b43c58725a8866686ef5258cb65daf9cc47e2afc2786aa4c190b0b87989767da8d26d058fcb4e413a72400da40fea1ea11457c2cc140cd67fc626075efcffa54fb82628b885c88b52a6dd3506ede2a467b6df1cc4fa69dae77c028b17d57d09171e65b97", 0xea}], 0x9, &(0x7f000001f2c0)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x2a}, r7}}}, @rthdrdstopts={{0x10c8, 0x29, 0x37, {0x87, 0x215, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0x9}, @generic={0x9, 0x1000, "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"}, @generic={0xc8, 0x88, "034c3f510db514d6331923aa07a4ac414c18816898a1712886adace1aec8f5632cbb61987aa8d610812d564a64aac733c276cba08d73a488175386aa7ebc0b6fef8d200f22093187e2ff2708d0bd124c526d6186df82a2a889f96c88b46095ce4c618431434d67f5adde960db29db9912b2719599ffddcd2538d43317a973899ca7c5de90eeb844d"}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x2}]}}}], 0x10f0}}], 0x7, 0x4880) r8 = getpgid(0x0) r9 = getpgrp(0xffffffffffffffff) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200080, 0x0) r11 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r9, r8, 0x7, r10, &(0x7f0000000080)={r11, 0xffffffffffffffff, 0x10000}) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r12, &(0x7f000001c280)={0x2020}, 0xfffffe05) bind$802154_raw(r1, &(0x7f0000000040)={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x14) 687.386795ms ago: executing program 3 (id=1278): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) unlinkat(r1, &(0x7f0000000040)='./bus\x00', 0x200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01030000000000000000340000000800020000006900110002"], 0x30}}, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f00000000c0)=""/157) 654.786687ms ago: executing program 3 (id=1279): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x3, 0x3, 0x0, 0x2}}, 0x2e) timer_create(0x3, 0x0, &(0x7f0000044000)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_delete(0x0) (async) timer_delete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x1000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xadf41, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xadf41, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x23) timer_create(0x0, &(0x7f0000000140)={0x0, 0x11}, &(0x7f0000000240)=0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000090024226d041cc340000000000109022400010000a00009040000010301010009210008000122010009ddc8f2235e158ef7935e0581038c6e3745ae0100f1e58f38181c656c7be010b9eae1041f77255fddab6c30689b589cb1010d118aabb3693387ff49552cdd2a9a30d292845b76a663d32b81"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet(0x2, 0x1, 0x0) (async) r7 = socket$inet(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000440)=ANY=[], 0x90) getsockopt$SO_COOKIE(r7, 0x1, 0x39, 0x0, &(0x7f0000000040)) (async) getsockopt$SO_COOKIE(r7, 0x1, 0x39, 0x0, &(0x7f0000000040)) syz_usb_control_io$hid(r6, &(0x7f00000000c0)={0x24, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES64=0x0, @ANYRES16=r8, @ANYRESHEX=0x0, @ANYRES64=r5, @ANYRES8=r7, @ANYRES32=r3], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r5, 0xffff87f1, 0x90bd, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) 515.319638ms ago: executing program 4 (id=1280): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000080), &(0x7f0000000180)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close_range(r0, 0xffffffffffffffff, 0x0) 514.446569ms ago: executing program 3 (id=1281): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x64a00, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r4 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r4, 0x0, 0x400000000000000, 0x2) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000880)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b4876ce425106cecf403fbc9c91ff3f", 0xfdef}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) madvise(&(0x7f0000aed000/0x4000)=nil, 0x4000, 0xb) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000005080)=[{{&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x1, 0x20000001) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x28de, 0x1102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe4, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x9, 0x4, 0x1, {0x22, 0xc72}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0xd8, 0x2}}}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0xff, 0xfc, 0xd4, 0xff, 0x6}, 0x55, &(0x7f0000000180)={0x5, 0xf, 0x55, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x3f, 0x10, 0x1, "784904a05447349325911d5e9651a58a3a2db6c1be7d222a32897fb29d3a723f6962ffb323a40507a0c1ad2a60ffdc88405003cd7732bdcaeedc7039"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x4, 0x9, 0x10, 0x2}]}, 0x8, [{0xe4, &(0x7f0000000380)=@string={0xe4, 0x3, "35a93bbe23bd6f925f265107ff1c6336dc9cdc5a30471b291d80a1fb4420c9ca05d455ffd854bcd058e7dc81e6d6a443069bdcffcb9868f45ffd9e04ad688e5b0b48b60c4a4a61b049c0ebd6323ec837b4c6ca49b17dd05cd3639ce5df3e304080f456e462109e3100c49993dda7b631a13db6ad9a28193dcde640bf7cfcc84434c34d639aa79c14527a1e69e633a254b2c3923610c455b014baa58e1ccfe52881b903a421b0a08a7d2c35695b1b27bf5cc967e0761cd4c78275dac9213b94d7393c8545d8fb7afeb327ac6fb3ff94de28c4a31db740890d420f2de30c8c287f1650"}}, {0x88, &(0x7f0000000540)=@string={0x88, 0x3, "5002e423c4580cda8207df534146647cfd5cf69de7d7f10a0df14c3c417ebc3ef7c48bdcea98941dee1d509e388c675f0a19f6e30f3b8ce18fcf3375ea9a15d2b980af1f3c6a1ebfed2de31f7d8445893587388fca1d2120a97224e7cb9b7b90abbac9d748a04943d2fa1f374ef948bb4c48b54550c0cf28dd1caaf56f89b22c67057b0b8fc3"}}, {0x18, &(0x7f0000000240)=@string={0x18, 0x3, "0134aff646f379ef1e7896bd7c09b9f2c4ebc5f9a3df"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x807}}, {0x47, &(0x7f0000000480)=@string={0x47, 0x3, "01ec54ef972342dfe1a972098fe01491b00b5b5a2da982c8c6668d58068338ed87721292e95e71256b2aa7a1e946b01e33e734230d37493b197edc2e66369e2d40370330bb"}}, {0xc9, &(0x7f0000000780)=@string={0xc9, 0x3, "f6100bf8353c27784057b38155d14933548c832728d18bc823c908ae592a9b0d5cad2fca3b7279d264c3124f0281d8158eb3c98a13766ecafd6fdc3237cb464d9748409223573efa3992bf0af57f24603f5959c18cfe64c70a4ef7a5a946fdfa9173e073b747dcdfc60cc23fb6a059830350d435bbf6499a239e1f2522ee33e1e805797c35dd5b0b69da1b7299bd446c2305047af90425b6a5dc4ae7a7774fb08c5a1cc57f75da886bc79fdb5671044f3a0182a496f18f842dee02dcf5ea81230067ae517257ff"}}, {0x62, &(0x7f0000000600)=@string={0x62, 0x3, "0f19121f72aabe55ab5e432edcb72e914567a80597cdd9fbda1c4f98114493adf7040312e1d84326fc5db85c0172f1f47808b8154720632a8302c8e8d4188335d5685bf8934bc3ce8a6c4ceccdf16c6d27e4ed19187d0e3c2bcdf23c69ad4635"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x3401}}]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 513.640658ms ago: executing program 4 (id=1282): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000004c0)=0xf2b, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f00000000c0)=0xfffffffffffffee3) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000064f80000010040"]) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r4, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 512.573259ms ago: executing program 4 (id=1283): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) (async) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0xdddd0000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0xdddd0000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000080)={0x0, 0x203}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$PTP_ENABLE_PPS(r4, 0x40043d04, 0x1) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x10b, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_KEEPCAPS(0x8, 0x1) (async) prctl$PR_SET_KEEPCAPS(0x8, 0x1) setreuid(r8, r8) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x4, 0x0, 0x0, {0xa, 0x4e21, 0x0, @mcast1, 0x40}}}, 0x32) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) memfd_secret(0x80000) write$cgroup_pressure(r9, &(0x7f0000000600)={'full', 0x20, 0xffffffffffffff01, 0x20, 0x8000}, 0x2f) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0x4}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000200)={@mcast2, 0x200000, 0x1, 0x0, 0xb, 0x7, 0x4f2}, 0x20) dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000040)=[@enter_looper, @request_death], 0x50, 0x0, &(0x7f0000000580)="05de66730879c09a3dad5fda5a11568bd6fdffdb8a6c55bad3ce0e7d04883d574b211f9860bc1a93ac458aca9afb423d03bb15483d60c14ac6fee5f3fae5d384e42707be029a067801fd291926efc34a"}) 503.30342ms ago: executing program 4 (id=1284): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000040)=0x42, 0x4) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x0) 187.615764ms ago: executing program 2 (id=1286): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000580)="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", 0x1000) r1 = gettid() timer_create(0x7, &(0x7f0000000100)={0x0, 0x41, 0x4, @tid=r1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000002c0)=0x1) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000002c0)=0x1) inotify_rm_watch(0xffffffffffffffff, 0x0) (async) inotify_rm_watch(0xffffffffffffffff, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 187.250445ms ago: executing program 2 (id=1287): timer_create(0x0, &(0x7f0000000100)={0x0, 0x34, 0x1, @thr={0x0, 0x0}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000040)={0x20, r3, 0x1, 0x70bd2b, 0x25dfdbfa, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x14) (async, rerun: 32) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x981b00, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r5, 0x45809000) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 177.982505ms ago: executing program 2 (id=1288): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0x9, 0xfffffffffffffffa}}) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs2\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000100)=ANY=[@ANYBLOB='defcontext', @ANYRES64=0x0, @ANYRES64, @ANYRES8=r0, @ANYRES32=r0, @ANYRESHEX=r1]) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4880, &(0x7f0000000080)={[{@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0xfffffffffffffffe}}, {@max={'max', 0x3d, 0x4}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'binder\x00'}}, {@dont_hash}]}) 167.969406ms ago: executing program 2 (id=1289): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) (async) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/147, 0x93}, {&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000002bc0)=""/128, 0x80}, {&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000002f00)=""/268, 0x10c}, {&(0x7f0000000440)=""/134, 0x86}, {&(0x7f0000000400)=""/60, 0x3c}], 0xa}, 0xe}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1007}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000000, 0x0) (async) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, 0x0, 0x0) (async) bind$tipc(r4, &(0x7f0000000440)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x2}}, 0x10) bind$tipc(r2, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x34, 0x8a, 0x83, 0xff}]}) (async) lsm_set_self_attr(0x30, 0x0, 0x8, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000000)={0x0, 0x0, 0x8b, 0x6b, ""/107}, &(0x7f00000000c0)=0x8b, 0x1) (async) ioctl$TIOCSETD(r5, 0x5423, 0x0) (async) unshare(0x28000600) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x1, 0xfffffffffffffffd, &(0x7f0000000040)=0x60) ioctl$TIOCSETD(r5, 0x5423, 0x0) (async) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) (async) dup3(r1, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 107.770331ms ago: executing program 2 (id=1290): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x11, r1, 0x45809000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cb981, 0x0) socket$netlink(0x10, 0x3, 0x8) ioctl$BLKRRPART(r2, 0x125f, 0x0) 107.458331ms ago: executing program 1 (id=1291): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1}, 0x8040) ioctl$SIOCSIFHWADDR(r0, 0x8905, &(0x7f0000000340)={'pim6reg0\x00'}) (async, rerun: 64) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (rerun: 64) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) sendfile(r3, r2, 0x0, 0x5) 89.180873ms ago: executing program 1 (id=1292): futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) (async) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x40}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000440)={'wg2\x00'}) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f0000001080)) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) r7 = socket$inet(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r2, 0x70b, 0x70bd25, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x1) (async) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) (async) sendto$inet(r7, 0x0, 0x0, 0x40000, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r6, {0x7, 0x1f, 0x3000, 0x0, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf08003d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r8, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xfd, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x2b) ioctl$sock_inet_SIOCSARP(r9, 0xc0046686, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast2}, {0x0, @random="89a08d8ed953"}, 0x8, {0x2, 0x4e20, @private=0xa010101}, 'tunl0\x00'}) 76.478943ms ago: executing program 2 (id=1293): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000001c0)=0x1fff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r4, 0x541c, &(0x7f0000000000)) 295.65µs ago: executing program 1 (id=1294): clock_gettime(0xfffffffffffffffd, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1) (async, rerun: 32) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') close(r0) (async, rerun: 64) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x140002, &(0x7f0000000240)='$*\x00') (rerun: 64) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108"], 0x1f0}}, 0x0) (async) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x40400, &(0x7f0000000000)=ANY=[@ANYBLOB="01"]) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r4, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 0s ago: executing program 1 (id=1295): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000000)=ANY=[@ANYBLOB="726c6f675f70616765733d313834343637340030353635323936383234c632db4fc0ca"]) socket$inet_icmp_raw(0x2, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000080)) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) write$UHID_INPUT2(r1, &(0x7f0000000280)=ANY=[], 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x22e7c000) kernel console output (not intermixed with test programs): rom the descriptor's value: 3 [ 111.660974][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.670183][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.678295][ T45] usb 3-1: Product: syz [ 111.682501][ T45] usb 3-1: Manufacturer: syz [ 111.687155][ T45] usb 3-1: SerialNumber: syz [ 111.768551][ T2617] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 111.768571][ T2617] rust_binder: Error while translating object. [ 111.777467][ T2617] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 111.783686][ T2617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:654 [ 111.800295][ T2581] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 111.800407][ T2580] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 111.826574][ T2580] /dev/md0: Can't lookup blockdev [ 111.864902][ T10] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 111.877205][ T2622] rust_binder: Failed to allocate buffer. len:208, is_oneway:false [ 111.877236][ T36] audit: type=1400 audit(1756026728.075:15828): avc: denied { bind } for pid=2621 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 111.885568][ T10] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 111.916298][ T10] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 111.929211][ T10] usb 2-1: USB disconnect, device number 32 [ 111.960333][ T45] usb 3-1: 0:2 : does not exist [ 111.965529][ T2624] netlink: 1 bytes leftover after parsing attributes in process `syz.3.705'. [ 111.976944][ T45] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 111.992226][ T45] usb 3-1: USB disconnect, device number 22 [ 112.007227][ T1446] udevd[1446]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 112.323939][ T920] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 112.473901][ T920] usb 4-1: Using ep0 maxpacket: 32 [ 112.480193][ T920] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.491374][ T920] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.514597][ T920] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 112.532553][ T920] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 112.535761][ T36] audit: type=1400 audit(1756026728.735:15829): avc: denied { getopt } for pid=2649 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.541380][ T920] usb 4-1: Product: syz [ 112.565338][ T920] usb 4-1: Manufacturer: syz [ 112.576825][ T920] hub 4-1:4.0: USB hub found [ 112.584914][ T36] audit: type=1400 audit(1756026728.795:15830): avc: denied { map } for pid=2651 comm="syz.2.714" path="socket:[23191]" dev="sockfs" ino=23191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.636236][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.636267][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.642744][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.649481][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.656575][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.663312][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.669809][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.676253][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.682705][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.689618][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.696211][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.702777][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.710046][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.716824][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.723304][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.730138][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.736979][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.743918][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.750403][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.756965][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.763573][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.770175][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.776811][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.783534][ T920] hub 4-1:4.0: 2 ports detected [ 112.794932][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.794955][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.801467][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.807979][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.814452][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.820910][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.827365][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.833826][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.840300][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.846789][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.853252][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.854570][ T36] audit: type=1400 audit(1756026729.055:15831): avc: denied { getopt } for pid=2665 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.859771][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.866420][ T2667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.718'. [ 112.886724][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.901424][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.908163][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.914800][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.921275][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.927816][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.934289][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.940774][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.947555][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.954072][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.960514][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.967023][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.973475][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.979964][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.986556][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.993051][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.993247][ T2626] overlay: Unknown parameter 'audit' [ 112.999597][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.011312][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.017812][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.024294][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.030736][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.037215][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.043655][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.050124][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.056603][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.063068][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.069520][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.076016][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.082474][ T2659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.104449][ T2669] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.125927][ T36] audit: type=1400 audit(1756026729.335:15832): avc: denied { bind } for pid=2673 comm="syz.1.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.127429][ T2674] /dev/rnullb0: Can't open blockdev [ 113.223406][ T63] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.233353][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.245588][ T63] usb 5-1: can't set config #1, error -71 [ 113.252340][ T63] usb 5-1: USB disconnect, device number 26 [ 113.269690][ T2681] 9p: Unknown Cache mode or invalid value OZreadaheb귦kb Pؑ$F"B [ 113.764033][ T2699] /dev/rnullb0: Can't open blockdev [ 113.798827][ T2706] GUP no longer grows the stack in syz.2.731 (2706): 200000004000-20000000a000 (200000002000) [ 113.815747][ T2706] CPU: 0 UID: 0 PID: 2706 Comm: syz.2.731 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 113.815780][ T2706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.815801][ T2706] Call Trace: [ 113.815812][ T2706] [ 113.815819][ T2706] __dump_stack+0x21/0x30 [ 113.815852][ T2706] dump_stack_lvl+0x10c/0x190 [ 113.815878][ T2706] ? __cfi_dump_stack_lvl+0x10/0x10 [ 113.815907][ T2706] ? find_vma+0xcd/0x110 [ 113.815949][ T2706] ? vma_is_secretmem+0x11/0x50 [ 113.815978][ T2706] dump_stack+0x19/0x20 [ 113.815981][ T2708] rust_binder: Write failure EINVAL in pid:610 [ 113.816003][ T2706] __get_user_pages+0x1e34/0x22d0 [ 113.816032][ T2706] ? populate_vma_page_range+0x230/0x230 [ 113.816056][ T2706] get_user_pages_remote+0x392/0xbe0 [ 113.816082][ T2706] ? __cfi_mtree_load+0x10/0x10 [ 113.816123][ T2706] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 113.816163][ T2706] ? __cfi_get_user_pages_remote+0x10/0x10 [ 113.816193][ T2706] __access_remote_vm+0x1e2/0x640 [ 113.816222][ T2706] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 113.816254][ T2706] ? access_remote_vm+0x60/0x60 [ 113.816279][ T2706] ? _raw_spin_lock+0x8c/0x120 [ 113.816307][ T2706] ? __cfi__raw_spin_lock+0x10/0x10 [ 113.816336][ T2706] access_remote_vm+0x39/0x60 [ 113.816361][ T2706] proc_pid_cmdline_read+0x4bb/0xbf0 [ 113.816394][ T2706] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 113.816424][ T2706] ? bpf_lsm_file_permission+0xd/0x20 [ 113.816456][ T2706] vfs_readv+0x62b/0xa50 [ 113.816482][ T2706] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 113.816513][ T2706] ? do_readv+0x2d0/0x2d0 [ 113.816564][ T2706] __x64_sys_preadv+0x197/0x2a0 [ 113.816588][ T2706] ? __cfi___x64_sys_preadv+0x10/0x10 [ 113.816613][ T2706] ? switch_fpu_return+0x12/0x20 [ 113.816641][ T2706] x64_sys_call+0x1ee9/0x2ee0 [ 113.816677][ T2706] do_syscall_64+0x58/0xf0 [ 113.816706][ T2706] ? clear_bhb_loop+0x50/0xa0 [ 113.816731][ T2706] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 113.816768][ T2706] RIP: 0033:0x7ff5ee38ebe9 [ 113.816794][ T2706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.816816][ T2706] RSP: 002b:00007ff5ecde3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 113.816847][ T2706] RAX: ffffffffffffffda RBX: 00007ff5ee5b5fa0 RCX: 00007ff5ee38ebe9 [ 113.816866][ T2706] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006 [ 113.816883][ T2706] RBP: 00007ff5ee411e19 R08: 0000000000000000 R09: 0000000000000000 [ 113.816900][ T2706] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 113.816917][ T2706] R13: 00007ff5ee5b6038 R14: 00007ff5ee5b5fa0 R15: 00007ffe120df708 [ 113.816945][ T2706] [ 114.074509][ T920] hub 4-1:4.0: hub_hub_status failed (err = -32) [ 114.087695][ T920] hub 4-1:4.0: config failed, can't get hub status (err -32) [ 114.116940][ T920] usb 4-1: USB disconnect, device number 28 [ 114.141630][ T2720] rust_binder: Failed copying remainder into alloc: EFAULT [ 114.141657][ T2720] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 114.149246][ T2720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 114.158995][ T2720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:559 [ 114.211311][ T2720] kvm: kvm [2719]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x60000001 [ 114.229853][ T2720] kvm: kvm [2719]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x60000001 [ 114.243111][ T2720] kvm: kvm [2719]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x60000001 [ 114.255152][ T2720] kvm: kvm [2719]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0x60000001 [ 114.264393][ T2720] kvm: kvm [2719]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0x60000001 [ 114.275421][ T2720] kvm_intel: kvm [2719]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x1d9) = 0x60000001 [ 114.643921][ T45] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 114.664466][ T2737] No source specified [ 114.668939][ T2737] overlayfs: overlapping lowerdir path [ 114.696636][ T2739] netlink: 'syz.3.741': attribute type 1 has an invalid length. [ 114.765294][ T2742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.741'. [ 114.782009][ T2739] rust_binder: Read failure Err(EFAULT) in pid:670 [ 114.814999][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 114.832695][ T45] usb 3-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00 [ 114.841799][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.850655][ T45] usb 3-1: config 0 descriptor?? [ 114.857283][ T2735] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.033926][ T920] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 115.113909][ T740] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 115.183913][ T920] usb 5-1: Using ep0 maxpacket: 16 [ 115.190216][ T920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.201192][ T920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.210973][ T920] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 115.223828][ T920] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 115.232910][ T920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.241769][ T920] usb 5-1: config 0 descriptor?? [ 115.263916][ T740] usb 4-1: Using ep0 maxpacket: 32 [ 115.271450][ T45] ntrig 0003:1B96:0003.0014: hidraw0: USB HID v1.01 Device [HID 1b96:0003] on usb-dummy_hcd.2-1/input0 [ 115.282924][ T740] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 115.291407][ T740] usb 4-1: config 0 has no interface number 0 [ 115.297707][ T740] usb 4-1: config 0 interface 184 has no altsetting 0 [ 115.306018][ T740] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 115.315107][ T740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.323125][ T740] usb 4-1: Product: syz [ 115.327349][ T740] usb 4-1: Manufacturer: syz [ 115.331974][ T740] usb 4-1: SerialNumber: syz [ 115.337501][ T740] usb 4-1: config 0 descriptor?? [ 115.343395][ T740] smsc75xx v1.0.0 [ 115.648935][ T920] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 115.658620][ T920] microsoft 0003:045E:07DA.0015: ignoring exceeding usage max [ 115.675620][ T920] microsoft 0003:045E:07DA.0015: implement() called with n (56) > 32! (kworker/0:4) [ 115.740574][ T2756] 9pnet_fd: Insufficient options for proto=fd [ 115.849359][ T920] microsoft 0003:045E:07DA.0015: No inputs registered, leaving [ 115.857714][ T920] microsoft 0003:045E:07DA.0015: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 115.869205][ T920] microsoft 0003:045E:07DA.0015: no inputs found [ 115.875588][ T920] microsoft 0003:045E:07DA.0015: could not initialize ff, continuing anyway [ 115.886609][ T920] usb 5-1: USB disconnect, device number 27 [ 115.947097][ T740] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 115.957980][ T740] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 115.996302][ T45] usb 3-1: USB disconnect, device number 23 [ 116.043911][ T331] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 116.062570][ T2771] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 116.062604][ T2771] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:576 [ 116.083197][ T2775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.752'. [ 116.101518][ T2774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.752'. [ 116.122875][ T2777] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 116.130529][ T2777] SELinux: failed to load policy [ 116.203908][ T331] usb 2-1: Using ep0 maxpacket: 32 [ 116.210266][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 116.222076][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 116.231854][ T331] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 116.243416][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 116.256100][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 116.267350][ T740] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 116.278175][ T740] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 116.287964][ T740] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 116.298290][ T740] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 116.307904][ T740] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 116.317123][ T331] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 116.326672][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.334835][ T740] usb 4-1: USB disconnect, device number 29 [ 116.341404][ T331] usb 2-1: Product: syz [ 116.346167][ T331] usb 2-1: Manufacturer: syz [ 116.350792][ T331] usb 2-1: SerialNumber: syz [ 116.356434][ T331] usb 2-1: config 0 descriptor?? [ 116.361722][ T2763] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 116.373228][ T331] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input15 [ 116.384541][ T94] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.402384][ T94] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.413147][ T1446] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.425909][ T94] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.436294][ T94] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.577022][ T920] usb 2-1: USB disconnect, device number 33 [ 116.691083][ T2795] FAULT_INJECTION: forcing a failure. [ 116.691083][ T2795] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 116.704267][ T2795] CPU: 1 UID: 0 PID: 2795 Comm: syz.2.758 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 116.704299][ T2795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.704312][ T2795] Call Trace: [ 116.704319][ T2795] [ 116.704327][ T2795] __dump_stack+0x21/0x30 [ 116.704361][ T2795] dump_stack_lvl+0x10c/0x190 [ 116.704387][ T2795] ? __cfi_dump_stack_lvl+0x10/0x10 [ 116.704408][ T2795] ? __kmalloc_node_noprof+0x1b1/0x450 [ 116.704431][ T2795] dump_stack+0x19/0x20 [ 116.704459][ T2795] should_fail_ex+0x3d9/0x530 [ 116.704481][ T2795] should_fail+0xf/0x20 [ 116.704525][ T2795] should_fail_usercopy+0x1e/0x30 [ 116.704539][ T2795] _copy_from_user+0x22/0xb0 [ 116.704556][ T2795] vmemdup_user+0x7d/0x190 [ 116.704577][ T2795] ? kvm_vcpu_ioctl_set_cpuid+0x75/0x6e0 [ 116.704598][ T2795] kvm_vcpu_ioctl_set_cpuid+0x8a/0x6e0 [ 116.704614][ T2795] ? __kasan_check_write+0x18/0x20 [ 116.704637][ T2795] kvm_arch_vcpu_ioctl+0x11ce/0x2e50 [ 116.704662][ T2795] ? avc_has_perm+0x144/0x220 [ 116.704683][ T2795] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 116.704708][ T2795] ? selinux_file_open+0x457/0x610 [ 116.704727][ T2795] ? __cfi_selinux_file_open+0x10/0x10 [ 116.704748][ T2795] ? is_bpf_text_address+0x17b/0x1a0 [ 116.704765][ T2795] ? kernel_text_address+0xa9/0xe0 [ 116.704785][ T2795] ? __kernel_text_address+0x11/0x40 [ 116.704804][ T2795] ? do_vfs_ioctl+0xeda/0x1e30 [ 116.704821][ T2795] ? arch_stack_walk+0x10b/0x170 [ 116.704845][ T2795] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 116.704862][ T2795] ? _parse_integer_limit+0x195/0x1e0 [ 116.704885][ T2795] ? _parse_integer+0x2e/0x40 [ 116.704905][ T2795] ? kstrtoull+0x13b/0x1e0 [ 116.704925][ T2795] ? kstrtouint+0x78/0xf0 [ 116.704946][ T2795] ? ioctl_has_perm+0x1aa/0x4d0 [ 116.704963][ T2795] ? __asan_memcpy+0x5a/0x80 [ 116.704985][ T2795] ? ioctl_has_perm+0x3e0/0x4d0 [ 116.705002][ T2795] ? has_cap_mac_admin+0xd0/0xd0 [ 116.705020][ T2795] ? __kasan_check_write+0x18/0x20 [ 116.705042][ T2795] ? mutex_lock_killable+0x92/0x1c0 [ 116.705066][ T2795] ? __cfi_mutex_lock_killable+0x10/0x10 [ 116.705089][ T2795] ? proc_fail_nth_write+0x17e/0x210 [ 116.705110][ T2795] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 116.705131][ T2795] kvm_vcpu_ioctl+0x77c/0xee0 [ 116.705155][ T2795] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 116.705178][ T2795] ? __cfi_vfs_write+0x10/0x10 [ 116.705192][ T2795] ? __kasan_check_write+0x18/0x20 [ 116.705213][ T2795] ? mutex_unlock+0x8b/0x240 [ 116.705236][ T2795] ? __cfi_mutex_unlock+0x10/0x10 [ 116.705258][ T2795] ? __fget_files+0x2c5/0x340 [ 116.705275][ T2795] ? __fget_files+0x2c5/0x340 [ 116.705292][ T2795] ? bpf_lsm_file_ioctl+0xd/0x20 [ 116.705312][ T2795] ? security_file_ioctl+0x34/0xd0 [ 116.705330][ T2795] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 116.705353][ T2795] __se_sys_ioctl+0x132/0x1b0 [ 116.705370][ T2795] __x64_sys_ioctl+0x7f/0xa0 [ 116.705386][ T2795] x64_sys_call+0x1878/0x2ee0 [ 116.705409][ T2795] do_syscall_64+0x58/0xf0 [ 116.705427][ T2795] ? clear_bhb_loop+0x50/0xa0 [ 116.705442][ T2795] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 116.705466][ T2795] RIP: 0033:0x7ff5ee38ebe9 [ 116.705480][ T2795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.705494][ T2795] RSP: 002b:00007ff5ecde3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.705516][ T2795] RAX: ffffffffffffffda RBX: 00007ff5ee5b5fa0 RCX: 00007ff5ee38ebe9 [ 116.705528][ T2795] RDX: 0000200000000040 RSI: 000000004008ae8a RDI: 0000000000000006 [ 116.705539][ T2795] RBP: 00007ff5ecde3090 R08: 0000000000000000 R09: 0000000000000000 [ 116.705550][ T2795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.705560][ T2795] R13: 00007ff5ee5b6038 R14: 00007ff5ee5b5fa0 R15: 00007ffe120df708 [ 116.705574][ T2795] [ 117.205334][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.235402][ T2804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:676 [ 117.253995][ T2803] kvm: kvm [2801]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x60000001 [ 117.272480][ T2803] kvm: kvm [2801]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x60000001 [ 117.273821][ T2806] rust_binder: Error in use_page_slow: ESRCH [ 117.283228][ T2806] rust_binder: use_range failure ESRCH [ 117.283905][ T2803] kvm: kvm [2801]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x60000001 [ 117.290056][ T2806] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 117.297975][ T2803] kvm: kvm [2801]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0x60000001 [ 117.304985][ T2806] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 117.311968][ T2803] kvm: kvm [2801]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0x60000001 [ 117.334311][ T2807] binder: Binderfs stats mode cannot be changed during a remount [ 117.341743][ T2803] kvm_intel: kvm [2801]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x1d9) = 0x60000001 [ 117.356187][ T2806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:399 [ 117.436047][ T36] audit: type=1400 audit(1756026733.645:15833): avc: denied { create } for pid=2810 comm="syz.1.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 117.582631][ T2823] FAULT_INJECTION: forcing a failure. [ 117.582631][ T2823] name failslab, interval 1, probability 0, space 0, times 1 [ 117.595479][ T2823] CPU: 0 UID: 0 PID: 2823 Comm: syz.2.767 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 117.595521][ T2823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.595538][ T2823] Call Trace: [ 117.595549][ T2823] [ 117.595559][ T2823] __dump_stack+0x21/0x30 [ 117.595602][ T2823] dump_stack_lvl+0x10c/0x190 [ 117.595639][ T2823] ? __cfi_dump_stack_lvl+0x10/0x10 [ 117.595678][ T2823] dump_stack+0x19/0x20 [ 117.595713][ T2823] should_fail_ex+0x3d9/0x530 [ 117.595755][ T2823] should_failslab+0xac/0x100 [ 117.595786][ T2823] __kmalloc_node_noprof+0x6c/0x450 [ 117.595828][ T2823] ? __kvmalloc_node_noprof+0x11d/0x300 [ 117.595869][ T2823] ? __kvmalloc_node_noprof+0x168/0x300 [ 117.595910][ T2823] __kvmalloc_node_noprof+0x11d/0x300 [ 117.595950][ T2823] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 117.595990][ T2823] ? __kasan_check_write+0x18/0x20 [ 117.596029][ T2823] ? _copy_from_user+0x8b/0xb0 [ 117.596061][ T2823] ? vmemdup_user+0xb4/0x190 [ 117.596099][ T2823] ? kvm_vcpu_ioctl_set_cpuid+0x75/0x6e0 [ 117.596129][ T2823] kvm_vcpu_ioctl_set_cpuid+0xf1/0x6e0 [ 117.596158][ T2823] ? __kasan_check_write+0x18/0x20 [ 117.596199][ T2823] kvm_arch_vcpu_ioctl+0x11ce/0x2e50 [ 117.596243][ T2823] ? avc_has_perm+0x144/0x220 [ 117.596281][ T2823] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 117.596326][ T2823] ? selinux_file_open+0x457/0x610 [ 117.596360][ T2823] ? __cfi_selinux_file_open+0x10/0x10 [ 117.596398][ T2823] ? is_bpf_text_address+0x17b/0x1a0 [ 117.596438][ T2823] ? kernel_text_address+0xa9/0xe0 [ 117.596475][ T2823] ? __kernel_text_address+0x11/0x40 [ 117.596514][ T2823] ? do_vfs_ioctl+0xeda/0x1e30 [ 117.596563][ T2823] ? arch_stack_walk+0x10b/0x170 [ 117.596605][ T2823] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 117.596640][ T2823] ? _parse_integer_limit+0x195/0x1e0 [ 117.596690][ T2823] ? _parse_integer+0x2e/0x40 [ 117.596729][ T2823] ? kstrtoull+0x13b/0x1e0 [ 117.596769][ T2823] ? kstrtouint+0x78/0xf0 [ 117.596808][ T2823] ? ioctl_has_perm+0x1aa/0x4d0 [ 117.596842][ T2823] ? __asan_memcpy+0x5a/0x80 [ 117.596883][ T2823] ? ioctl_has_perm+0x3e0/0x4d0 [ 117.596917][ T2823] ? has_cap_mac_admin+0xd0/0xd0 [ 117.596951][ T2823] ? __kasan_check_write+0x18/0x20 [ 117.596992][ T2823] ? mutex_lock_killable+0x92/0x1c0 [ 117.597037][ T2823] ? __cfi_mutex_lock_killable+0x10/0x10 [ 117.597080][ T2823] ? proc_fail_nth_write+0x17e/0x210 [ 117.597118][ T2823] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 117.597157][ T2823] kvm_vcpu_ioctl+0x77c/0xee0 [ 117.597201][ T2823] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 117.597245][ T2823] ? __cfi_vfs_write+0x10/0x10 [ 117.597273][ T2823] ? __kasan_check_write+0x18/0x20 [ 117.597314][ T2823] ? mutex_unlock+0x8b/0x240 [ 117.597355][ T2823] ? __cfi_mutex_unlock+0x10/0x10 [ 117.597396][ T2823] ? __fget_files+0x2c5/0x340 [ 117.597439][ T2823] ? __fget_files+0x2c5/0x340 [ 117.597470][ T2823] ? bpf_lsm_file_ioctl+0xd/0x20 [ 117.597507][ T2823] ? security_file_ioctl+0x34/0xd0 [ 117.597539][ T2823] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 117.597581][ T2823] __se_sys_ioctl+0x132/0x1b0 [ 117.597615][ T2823] __x64_sys_ioctl+0x7f/0xa0 [ 117.597646][ T2823] x64_sys_call+0x1878/0x2ee0 [ 117.597686][ T2823] do_syscall_64+0x58/0xf0 [ 117.597721][ T2823] ? clear_bhb_loop+0x50/0xa0 [ 117.597751][ T2823] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 117.597805][ T2823] RIP: 0033:0x7ff5ee38ebe9 [ 117.597826][ T2823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.597851][ T2823] RSP: 002b:00007ff5ecde3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.597881][ T2823] RAX: ffffffffffffffda RBX: 00007ff5ee5b5fa0 RCX: 00007ff5ee38ebe9 [ 117.597901][ T2823] RDX: 0000200000000040 RSI: 000000004008ae8a RDI: 0000000000000006 [ 117.597923][ T2823] RBP: 00007ff5ecde3090 R08: 0000000000000000 R09: 0000000000000000 [ 117.597943][ T2823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.597961][ T2823] R13: 00007ff5ee5b6038 R14: 00007ff5ee5b5fa0 R15: 00007ffe120df708 [ 117.597987][ T2823] [ 117.854560][ T740] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 118.163917][ T740] usb 4-1: Using ep0 maxpacket: 32 [ 118.194819][ T740] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 118.203067][ T740] usb 4-1: config 0 has no interface number 0 [ 118.209624][ T740] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 118.224063][ T740] usb 4-1: config 0 interface 196 has no altsetting 0 [ 118.244344][ T740] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 118.253462][ T740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.261518][ T740] usb 4-1: Product: syz [ 118.265736][ T740] usb 4-1: Manufacturer: syz [ 118.271460][ T740] usb 4-1: SerialNumber: syz [ 118.281849][ T740] usb 4-1: config 0 descriptor?? [ 118.287391][ T2814] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 118.403948][ T920] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 118.453935][ T998] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 118.493740][ T36] audit: type=1400 audit(1756026734.695:15834): avc: denied { read write } for pid=2857 comm="syz.1.774" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 118.516396][ T36] audit: type=1400 audit(1756026734.695:15835): avc: denied { open } for pid=2857 comm="syz.1.774" path="/210/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 118.533929][ T920] usb 5-1: device descriptor read/64, error -71 [ 118.546301][ T36] audit: type=1400 audit(1756026734.755:15836): avc: denied { ioctl } for pid=2857 comm="syz.1.774" path="/210/file0/file0" dev="fuse" ino=0 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 118.614850][ T998] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 118.625769][ T998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.636717][ T998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.646500][ T998] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 118.660223][ T998] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 118.669318][ T998] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 118.677524][ T998] usb 3-1: Manufacturer: syz [ 118.683101][ T998] usb 3-1: config 0 descriptor?? [ 118.793915][ T920] usb 5-1: device descriptor read/64, error -71 [ 118.896444][ T740] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 118.905696][ T740] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 119.033919][ T920] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 119.092685][ T998] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 119.109070][ T998] appleir 0003:05AC:8243.0016: No inputs registered, leaving [ 119.133750][ T998] appleir 0003:05AC:8243.0016: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 119.151478][ T2881] FAULT_INJECTION: forcing a failure. [ 119.151478][ T2881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.164972][ T920] usb 5-1: device descriptor read/64, error -71 [ 119.167376][ T998] usb 4-1: USB disconnect, device number 30 [ 119.171336][ T2881] CPU: 0 UID: 0 PID: 2881 Comm: syz.1.778 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 119.171376][ T2881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.171392][ T2881] Call Trace: [ 119.171401][ T2881] [ 119.171413][ T2881] __dump_stack+0x21/0x30 [ 119.171455][ T2881] dump_stack_lvl+0x10c/0x190 [ 119.171487][ T2881] ? __cfi_dump_stack_lvl+0x10/0x10 [ 119.171522][ T2881] dump_stack+0x19/0x20 [ 119.171562][ T2881] should_fail_ex+0x3d9/0x530 [ 119.171600][ T2881] should_fail+0xf/0x20 [ 119.171634][ T2881] should_fail_usercopy+0x1e/0x30 [ 119.171657][ T2881] _copy_to_user+0x24/0xa0 [ 119.171684][ T2881] simple_read_from_buffer+0xed/0x160 [ 119.171718][ T2881] proc_fail_nth_read+0x19e/0x210 [ 119.171751][ T2881] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 119.171784][ T2881] ? bpf_lsm_file_permission+0xd/0x20 [ 119.171819][ T2881] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 119.171850][ T2881] vfs_read+0x278/0xb60 [ 119.171886][ T2881] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 119.171925][ T2881] ? __cfi_vfs_read+0x10/0x10 [ 119.171960][ T2881] ? __kasan_check_write+0x18/0x20 [ 119.171995][ T2881] ? mutex_lock+0x92/0x1c0 [ 119.172031][ T2881] ? __cfi_mutex_lock+0x10/0x10 [ 119.172066][ T2881] ? __fget_files+0x2c5/0x340 [ 119.172093][ T2881] ksys_read+0x141/0x250 [ 119.172115][ T2881] ? __cfi_ksys_read+0x10/0x10 [ 119.172138][ T2881] ? __kasan_check_read+0x15/0x20 [ 119.172173][ T2881] __x64_sys_read+0x7f/0x90 [ 119.172194][ T2881] x64_sys_call+0x2638/0x2ee0 [ 119.172229][ T2881] do_syscall_64+0x58/0xf0 [ 119.172258][ T2881] ? clear_bhb_loop+0x50/0xa0 [ 119.172282][ T2881] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 119.172321][ T2881] RIP: 0033:0x7f596a58d5fc [ 119.172341][ T2881] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 119.172368][ T2881] RSP: 002b:00007f596b4b0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.172408][ T2881] RAX: ffffffffffffffda RBX: 00007f596a7b5fa0 RCX: 00007f596a58d5fc [ 119.172426][ T2881] RDX: 000000000000000f RSI: 00007f596b4b00a0 RDI: 0000000000000007 [ 119.172443][ T2881] RBP: 00007f596b4b0090 R08: 0000000000000000 R09: 0000000000000000 [ 119.172459][ T2881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.172473][ T2881] R13: 00007f596a7b6038 R14: 00007f596a7b5fa0 R15: 00007ffe01409c38 [ 119.172495][ T2881] [ 119.300095][ T9] usb 3-1: USB disconnect, device number 24 [ 119.468845][ T2900] 9pnet_fd: Insufficient options for proto=fd [ 119.473951][ T920] usb 5-1: device descriptor read/64, error -71 [ 119.496111][ T998] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 119.583386][ T2919] tmpfs: Bad value for 'huge' [ 119.584801][ T920] usb usb5-port1: attempt power cycle [ 119.646146][ T2922] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 119.646168][ T2922] rust_binder: Error while translating object. [ 119.654855][ T2922] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 119.661091][ T2922] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:655 [ 119.859689][ T2927] netlink: 'syz.3.789': attribute type 12 has an invalid length. [ 119.943921][ T920] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 119.965750][ T920] usb 5-1: device descriptor read/8, error -71 [ 119.976635][ T2933] rust_binder: Got transaction with invalid offset. [ 119.976696][ T2933] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 119.983330][ T2933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:689 [ 120.094961][ T920] usb 5-1: device descriptor read/8, error -71 [ 120.273915][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 120.343993][ T920] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 120.364905][ T920] usb 5-1: device descriptor read/8, error -71 [ 120.424029][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 120.431909][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 120.444064][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a55, bcdDevice= 0.00 [ 120.453242][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.462388][ T9] usb 4-1: config 0 descriptor?? [ 120.495336][ T920] usb 5-1: device descriptor read/8, error -71 [ 120.604524][ T920] usb usb5-port1: unable to enumerate USB device [ 120.875834][ T2965] rust_binder: Error while translating object. [ 120.875873][ T2965] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 120.876645][ T9] hid-generic 0003:1B1C:0A55.0017: hidraw0: USB HID v0.09 Device [HID 1b1c:0a55] on usb-dummy_hcd.3-1/input0 [ 120.882083][ T2965] rust_binder: Failure BR_FAILED_REPLY { source: EBADF } during reply - delivering BR_FAILED_REPLY to sender. [ 120.882121][ T2965] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:649 [ 120.931540][ T2966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:649 [ 120.955557][ T9] rust_binder: 2964: removing orphan mapping 0:24 [ 121.072415][ T2935] support for cryptoloop has been removed. Use dm-crypt instead. [ 121.213919][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 121.362460][ T2978] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.373886][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 121.396049][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 121.406180][ T9] usb 3-1: config 0 has no interface number 0 [ 121.412303][ T9] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 121.422544][ T2978] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 121.429631][ T9] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 121.439776][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 121.448052][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 121.457237][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.465277][ T9] usb 3-1: Product: syz [ 121.469514][ T9] usb 3-1: Manufacturer: syz [ 121.479610][ T9] usb 3-1: SerialNumber: syz [ 121.485997][ T920] rust_binder: 2976: removing orphan mapping 0:112 [ 121.492882][ T9] usb 3-1: config 0 descriptor?? [ 121.504280][ T920] rust_binder: 0: removing orphan mapping 112:1048 [ 121.515261][ T2971] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 121.522490][ T2971] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 121.716010][ T36] audit: type=1400 audit(1756026737.925:15837): avc: denied { mount } for pid=2987 comm="syz.1.808" name="/" dev="ramfs" ino=27303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 121.739441][ T2971] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 121.746687][ T2971] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 121.752031][ T36] audit: type=1400 audit(1756026737.925:15838): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 122.073916][ T998] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 122.226916][ T9] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 122.244337][ T998] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 122.249866][ T9] usb 3-1: USB disconnect, device number 25 [ 122.257749][ T998] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.275036][ T998] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.286128][ T998] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.297199][ T998] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.308260][ T998] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.319332][ T998] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.330410][ T998] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.341473][ T998] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.351767][ T998] usb 2-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.32 [ 122.360885][ T998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.373673][ T998] usb 2-1: config 0 descriptor?? [ 122.381967][ T998] usb 2-1: bad CDC descriptors [ 122.387088][ T998] cdc_acm 2-1:0.0: Zero length descriptor references [ 122.393895][ T998] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 122.585925][ T2996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.596246][ T2996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.043912][ T998] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 123.046255][ T10] usb 4-1: USB disconnect, device number 31 [ 123.103170][ T3022] tipc: Enabling of bearer rejected, failed to enable media [ 123.194931][ T998] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 123.205918][ T998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.216839][ T998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.226651][ T998] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 123.240703][ T998] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 123.249795][ T998] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 123.257906][ T998] usb 3-1: Manufacturer: syz [ 123.263161][ T998] usb 3-1: config 0 descriptor?? [ 123.680774][ T998] usbhid 3-1:0.0: can't add hid device: -71 [ 123.687071][ T998] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 123.696380][ T998] usb 3-1: USB disconnect, device number 26 [ 123.770307][ T3034] rust_binder: Error in use_page_slow: ESRCH [ 123.770333][ T3034] rust_binder: use_range failure ESRCH [ 123.776854][ T3034] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 123.785000][ T3034] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 123.793033][ T3034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:667 [ 124.023933][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 124.184911][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.195942][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.206043][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.219430][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.228739][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.237931][ T10] usb 5-1: config 0 descriptor?? [ 124.243751][ T10] hub 5-1:0.0: USB hub found [ 124.273899][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 124.423911][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 124.434021][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 124.453608][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.471390][ T10] hub 5-1:0.0: 14 ports detected [ 124.476931][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.485949][ T10] hub 5-1:0.0: insufficient power available to use all downstream ports [ 124.495948][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.505145][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.513177][ T9] usb 4-1: Product: 秶站驨℮₊䔯孁ἐ촃㈵♛l쟚淀ࠥ㣤ﲽꆶ⎋ᅥ婲珏혆憟⥗㙍惶๱᫪ᾣ刮澱豽宀笅䈱᷹䌢⿻Კ挰渕㍛Ć寓닾⟑䊺믛긑≄⻠픷﬛㭾肀⨧䘺㘮쩫㿔ㇴ╪䮅䷞燅혆䜟㿜☣ꢿנ볖嫏珳迩꙳亨괎⼇陼Վ野汮什꪿ꆑ䍮 [ 124.545601][ T9] usb 4-1: Manufacturer: Ў [ 124.550191][ T9] usb 4-1: SerialNumber: syz [ 124.771954][ T9] usb 4-1: 0:2 : does not exist [ 124.791445][ T9] usb 4-1: USB disconnect, device number 32 [ 124.855535][ T998] usb 2-1: USB disconnect, device number 34 [ 124.897010][ T10] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 124.908386][ T10] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 124.934229][ T10] usb 5-1: USB disconnect, device number 32 [ 125.163930][ T331] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 125.243909][ T998] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 125.313910][ T331] usb 3-1: Using ep0 maxpacket: 8 [ 125.319999][ T331] usb 3-1: config 0 has an invalid interface number: 118 but max is 0 [ 125.328215][ T331] usb 3-1: config 0 has no interface number 0 [ 125.335715][ T331] usb 3-1: New USB device found, idVendor=0711, idProduct=0179, bcdDevice=d8.42 [ 125.344814][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.352873][ T331] usb 3-1: Product: syz [ 125.357421][ T331] usb 3-1: Manufacturer: syz [ 125.362040][ T331] usb 3-1: SerialNumber: syz [ 125.367486][ T331] usb 3-1: config 0 descriptor?? [ 125.373227][ T331] ax88179_178a 3-1:0.118: probe with driver ax88179_178a failed with error -22 [ 125.393901][ T998] usb 2-1: Using ep0 maxpacket: 32 [ 125.400322][ T998] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 125.408785][ T998] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 125.417532][ T998] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 125.427581][ T998] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 125.437288][ T998] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 125.446996][ T998] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 125.460019][ T998] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 125.469141][ T998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.480860][ T998] usb 2-1: config 0 descriptor?? [ 125.489893][ T3072] netlink: 'syz.3.833': attribute type 15 has an invalid length. [ 125.631987][ T36] audit: type=1400 audit(1756026741.835:15839): avc: denied { validate_trans } for pid=3063 comm="syz.2.830" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 125.686257][ T331] usb 3-1: USB disconnect, device number 27 [ 125.699431][ T3062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.714106][ T998] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 125.731584][ T3062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.755165][ T36] audit: type=1400 audit(1756026741.965:15840): avc: denied { read write } for pid=3061 comm="syz.1.829" name="lp0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 125.792158][ T36] audit: type=1400 audit(1756026741.965:15841): avc: denied { open } for pid=3061 comm="syz.1.829" path="/dev/usb/lp0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 125.818277][ C1] usblp0: nonzero read bulk status received: -71 [ 125.824937][ T3062] usblp0: error -71 reading from printer [ 125.831151][ T998] usb 2-1: USB disconnect, device number 35 [ 125.834510][ T3085] /dev/rnullb0: Can't open blockdev [ 125.842108][ T36] audit: type=1400 audit(1756026742.045:15842): avc: denied { create } for pid=3083 comm="syz.3.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 125.862498][ T998] usblp0: removed [ 125.992255][ T3104] netlink: 'syz.3.843': attribute type 4 has an invalid length. [ 126.004984][ T3104] netlink: 'syz.3.843': attribute type 4 has an invalid length. [ 126.033955][ T3104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=3104 comm=syz.3.843 [ 126.105448][ T3119] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 126.105475][ T3119] rust_binder: Read failure Err(EFAULT) in pid:711 [ 126.137552][ T331] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 126.233728][ T36] audit: type=1400 audit(1756026742.435:15843): avc: denied { getopt } for pid=3124 comm="syz.1.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.303880][ T331] usb 3-1: Using ep0 maxpacket: 32 [ 126.315055][ T331] usb 3-1: config index 0 descriptor too short (expected 52, got 36) [ 126.333485][ T331] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 126.350020][ T331] usb 3-1: config 0 has no interface number 0 [ 126.356439][ T331] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 126.366667][ T331] usb 3-1: config 0 interface 196 has no altsetting 0 [ 126.379813][ T331] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 126.390399][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.397908][ T3133] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=3133 comm=syz.1.851 [ 126.398630][ T331] usb 3-1: Product: syz [ 126.415204][ T331] usb 3-1: Manufacturer: syz [ 126.419805][ T331] usb 3-1: SerialNumber: syz [ 126.425165][ T331] usb 3-1: config 0 descriptor?? [ 126.430425][ T3086] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 126.538989][ T3140] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.549689][ T3140] rust_binder: Error in use_page_slow: ESRCH [ 126.556316][ T3140] rust_binder: use_range failure ESRCH [ 126.562352][ T3140] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 126.567874][ T3140] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 126.576103][ T3140] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:451 [ 126.641692][ T3086] binder: Unknown parameter '' [ 126.681727][ T331] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 126.689679][ T331] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 126.699224][ T331] usb 3-1: USB disconnect, device number 28 [ 127.021144][ T3159] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:736 [ 127.122126][ T36] audit: type=1400 audit(1756026743.325:15844): avc: denied { write } for pid=3153 comm="syz.4.859" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 127.293999][ T331] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 127.443903][ T331] usb 4-1: Using ep0 maxpacket: 16 [ 127.450490][ T331] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 127.459830][ T331] usb 4-1: config 1 has no interface number 1 [ 127.466162][ T331] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 122, changing to 7 [ 127.479179][ T331] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.488530][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.496750][ T331] usb 4-1: Product: syz [ 127.501073][ T331] usb 4-1: Manufacturer: syz [ 127.505900][ T331] usb 4-1: SerialNumber: syz [ 127.721568][ T331] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 127.732376][ T331] usb 4-1: 2:1 : sample bitwidth 82 in over sample bytes 4 [ 127.739850][ T331] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 127.751918][ T331] usb 4-1: USB disconnect, device number 33 [ 128.413912][ T63] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 128.516529][ T36] audit: type=1400 audit(1756026744.725:15845): avc: denied { create } for pid=3191 comm="syz.3.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.583911][ T63] usb 3-1: Using ep0 maxpacket: 16 [ 128.589488][ T63] usb 3-1: too many configurations: 97, using maximum allowed: 8 [ 128.598045][ T63] usb 3-1: config index 0 descriptor too short (expected 65535, got 18) [ 128.606471][ T63] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 128.615394][ T63] usb 3-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 128.626059][ T63] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 128.637012][ T63] usb 3-1: config index 1 descriptor too short (expected 65535, got 18) [ 128.645400][ T63] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 128.655075][ T63] usb 3-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 128.665559][ T63] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 128.675677][ T63] usb 3-1: config index 2 descriptor too short (expected 65535, got 18) [ 128.684076][ T63] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 128.692967][ T63] usb 3-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 128.703427][ T63] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 128.714107][ T63] usb 3-1: config index 3 descriptor too short (expected 65535, got 18) [ 128.722455][ T63] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 128.731495][ T63] usb 3-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 128.742007][ T63] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 128.752000][ T63] usb 3-1: config index 4 descriptor too short (expected 65535, got 18) [ 128.760420][ T63] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 128.769295][ T63] usb 3-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 128.779775][ T63] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 128.789111][ T10] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 128.797480][ T63] usb 3-1: config index 5 descriptor too short (expected 65535, got 18) [ 128.805898][ T63] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 128.814985][ T63] usb 3-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 128.825537][ T63] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 128.835549][ T63] usb 3-1: config index 6 descriptor too short (expected 65535, got 18) [ 128.843972][ T63] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 128.852833][ T63] usb 3-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 128.863299][ T63] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 128.873374][ T63] usb 3-1: config index 7 descriptor too short (expected 65535, got 18) [ 128.882119][ T63] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 128.891219][ T63] usb 3-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 128.901697][ T63] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 128.939872][ T63] usb 3-1: string descriptor 0 read error: -71 [ 128.946164][ T10] usb 4-1: device descriptor read/64, error -71 [ 128.952704][ T63] usb 3-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 128.962639][ T63] usb 3-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 128.972338][ T63] usb 3-1: rejected 8 configurations due to insufficient available bus power [ 128.983712][ T63] usb 3-1: no configuration chosen from 8 choices [ 128.991581][ T63] usb 3-1: USB disconnect, device number 29 [ 129.183930][ T10] usb 4-1: device descriptor read/64, error -71 [ 129.433912][ T10] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 129.488617][ T36] audit: type=1400 audit(1756026745.695:15846): avc: denied { read } for pid=3201 comm="syz.2.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.563900][ T10] usb 4-1: device descriptor read/64, error -71 [ 129.586518][ T36] audit: type=1400 audit(1756026745.795:15847): avc: denied { accept } for pid=3206 comm="syz.2.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 129.636698][ T36] audit: type=1400 audit(1756026745.845:15848): avc: denied { watch } for pid=3209 comm="syz.2.877" path="pipe:[29284]" dev="pipefs" ino=29284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 129.747632][ T3212] overlayfs: missing 'lowerdir' [ 129.798716][ T3217] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.803903][ T10] usb 4-1: device descriptor read/64, error -71 [ 129.817059][ T3217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.835349][ T3217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.943965][ T10] usb usb4-port1: attempt power cycle [ 130.038949][ T63] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 130.183648][ T3239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.192253][ T3239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.203884][ T63] usb 3-1: Using ep0 maxpacket: 8 [ 130.215474][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.234060][ T63] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 130.243125][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.274563][ T63] usb 3-1: config 0 descriptor?? [ 130.293908][ T10] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 130.324896][ T10] usb 4-1: device descriptor read/8, error -71 [ 130.413903][ T740] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 130.454938][ T10] usb 4-1: device descriptor read/8, error -71 [ 130.543903][ T740] usb 2-1: device descriptor read/64, error -71 [ 130.683042][ T63] kone 0003:1E7D:2CED.0018: unknown main item tag 0x0 [ 130.693939][ T10] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 130.706046][ T63] kone 0003:1E7D:2CED.0018: unknown main item tag 0x0 [ 130.720167][ T63] kone 0003:1E7D:2CED.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 130.743144][ T10] usb 4-1: device descriptor read/8, error -71 [ 130.793893][ T740] usb 2-1: device descriptor read/64, error -71 [ 130.874911][ T10] usb 4-1: device descriptor read/8, error -71 [ 130.883689][ T998] usb 3-1: USB disconnect, device number 30 [ 130.984314][ T10] usb usb4-port1: unable to enumerate USB device [ 131.033924][ T740] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 131.163901][ T740] usb 2-1: device descriptor read/64, error -71 [ 131.403911][ T740] usb 2-1: device descriptor read/64, error -71 [ 131.452651][ T3259] rust_binder: 3257 RLIMIT_NICE not set [ 131.514314][ T740] usb usb2-port1: attempt power cycle [ 131.688399][ T3274] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:759 [ 131.863932][ T740] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 131.895075][ T740] usb 2-1: device descriptor read/8, error -71 [ 132.025073][ T740] usb 2-1: device descriptor read/8, error -71 [ 132.217136][ T3279] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.219250][ T3279] rust_binder: Error in use_page_slow: ESRCH [ 132.233897][ T3279] rust_binder: use_range failure ESRCH [ 132.250916][ T3279] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 132.263887][ T3279] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 132.273900][ T740] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 132.277183][ T3279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:492 [ 132.294959][ T740] usb 2-1: device descriptor read/8, error -71 [ 132.318176][ T998] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 132.328235][ T998] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 132.345570][ T3287] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 132.370662][ T3285] fido_id[3285]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 132.384276][ T3287] SELinux: failed to load policy [ 132.434905][ T740] usb 2-1: device descriptor read/8, error -71 [ 132.524219][ T998] rust_binder: 3288: removing orphan mapping 0:24 [ 132.546264][ T998] rust_binder: 0: removing orphan mapping 24:1024 [ 132.553124][ T740] usb usb2-port1: unable to enumerate USB device [ 132.562402][ T3293] rust_binder: inc_ref_done called when no active inc_refs [ 132.923909][ T740] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 133.075328][ T740] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.086351][ T740] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 133.097667][ T740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.113121][ T740] usb 4-1: config 0 descriptor?? [ 133.190390][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 133.199495][ T10] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.213906][ T36] audit: type=1400 audit(1756026749.415:15849): avc: denied { mount } for pid=3317 comm="syz.1.913" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 133.232872][ T3319] fido_id[3319]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 133.249538][ T36] audit: type=1400 audit(1756026749.445:15850): avc: denied { mounton } for pid=3317 comm="syz.1.913" path="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 133.284021][ T3323] netlink: 'syz.1.914': attribute type 32 has an invalid length. [ 133.291880][ T36] audit: type=1400 audit(1756026749.485:15851): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 133.314535][ T3323] rust_binder: Write failure EFAULT in pid:762 [ 133.335877][ T36] audit: type=1400 audit(1756026749.535:15852): avc: denied { mount } for pid=3330 comm="syz.1.917" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 133.391191][ T36] audit: type=1400 audit(1756026749.545:15853): avc: denied { ioctl } for pid=3297 comm="syz.3.907" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.423959][ T36] audit: type=1400 audit(1756026749.545:15854): avc: denied { read } for pid=3330 comm="syz.1.917" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 133.447978][ T36] audit: type=1400 audit(1756026749.575:15855): avc: denied { read write } for pid=3327 comm="syz.4.916" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 133.480275][ T36] audit: type=1400 audit(1756026749.575:15856): avc: denied { open } for pid=3327 comm="syz.4.916" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 133.504365][ T36] audit: type=1400 audit(1756026749.575:15857): avc: denied { ioctl } for pid=3327 comm="syz.4.916" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 133.529300][ T36] audit: type=1400 audit(1756026749.595:15858): avc: denied { read write } for pid=3330 comm="syz.1.917" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.554983][ T3298] rust_binder: Write failure EFAULT in pid:764 [ 133.633934][ T998] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 133.815030][ T998] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.833886][ T998] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 133.853871][ T998] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 133.863767][ T998] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.903891][ T998] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.913589][ T998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.943073][ T998] usb 2-1: config 0 descriptor?? [ 134.296275][ T3351] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.360465][ T998] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 134.363433][ T63] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 134.373196][ T998] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 134.376026][ T63] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 134.392796][ T998] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 134.417696][ T3357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.418785][ T998] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 134.421374][ T3355] fido_id[3355]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 134.425711][ T998] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 134.453693][ T998] plantronics 0003:047F:FFFF.001B: item fetching failed at offset 13/15 [ 134.462348][ T998] plantronics 0003:047F:FFFF.001B: parse failed [ 134.468698][ T998] plantronics 0003:047F:FFFF.001B: probe with driver plantronics failed with error -22 [ 134.803882][ T998] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 134.953886][ T998] usb 3-1: Using ep0 maxpacket: 32 [ 134.960179][ T998] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.971154][ T998] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.981924][ T998] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 134.991013][ T998] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 134.999389][ T998] usb 3-1: Product: syz [ 135.003562][ T998] usb 3-1: Manufacturer: syz [ 135.010318][ T998] hub 3-1:4.0: USB hub found [ 135.210595][ T998] hub 3-1:4.0: 2 ports detected [ 135.274951][ T3368] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 135.274976][ T3368] rust_binder: Read failure Err(EFAULT) in pid:538 [ 135.284567][ T3368] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 135.291120][ T3368] rust_binder: Read failure Err(EFAULT) in pid:538 [ 135.412922][ T3364] SELinux: policydb version -299076691 does not match my version range 15-33 [ 135.428437][ T3364] SELinux: failed to load policy [ 135.511856][ T3384] fuse: Bad value for 'fd' [ 135.680772][ T740] usbhid 4-1:0.0: can't add hid device: -71 [ 135.691802][ T740] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 135.701827][ T740] usb 4-1: USB disconnect, device number 38 [ 135.781964][ T3425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=3425 comm=syz.3.947 [ 135.806698][ T3427] binder: Bad value for 'stats' [ 135.839062][ T3364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.849562][ T3364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.864683][ T3364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.873830][ T3364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.891720][ T3437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3658 sclass=netlink_route_socket pid=3437 comm=syz.4.952 [ 135.904986][ T3438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:776 [ 135.953492][ T998] usb 3-1: USB disconnect, device number 31 [ 136.441319][ T63] usb 2-1: USB disconnect, device number 40 [ 136.533317][ T3467] rust_binder: Write failure EFAULT in pid:749 [ 137.083898][ T998] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 137.244901][ T998] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.255199][ T998] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.265212][ T998] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 137.274348][ T998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 137.282361][ T998] usb 4-1: SerialNumber: syz [ 137.490476][ T998] usb 4-1: skipping empty audio interface (v1) [ 137.498439][ T998] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 137.508307][ T998] usb 4-1: USB disconnect, device number 39 [ 137.516121][ T1446] udevd[1446]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 137.683917][ T63] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 137.763894][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 137.813896][ T63] usb 3-1: device descriptor read/64, error -71 [ 137.913885][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 137.920703][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 137.929787][ T10] usb 2-1: config 1 has no interface number 1 [ 137.935959][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 137.950404][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 137.959541][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.967576][ T10] usb 2-1: Product: syz [ 137.971790][ T10] usb 2-1: Manufacturer: syz [ 137.976440][ T10] usb 2-1: SerialNumber: syz [ 138.074558][ T63] usb 3-1: device descriptor read/64, error -71 [ 138.313889][ T63] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 138.384143][ T36] kauditd_printk_skb: 98 callbacks suppressed [ 138.384161][ T36] audit: type=1400 audit(1756026754.595:15957): avc: denied { ioctl } for pid=3519 comm="syz.1.979" path="socket:[31844]" dev="sockfs" ino=31844 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 138.443900][ T63] usb 3-1: device descriptor read/64, error -71 [ 138.683884][ T63] usb 3-1: device descriptor read/64, error -71 [ 138.793998][ T63] usb usb3-port1: attempt power cycle [ 138.850550][ T36] audit: type=1400 audit(1756026755.055:15958): avc: denied { read write } for pid=3528 comm="syz.3.982" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 138.874863][ T36] audit: type=1400 audit(1756026755.055:15959): avc: denied { open } for pid=3528 comm="syz.3.982" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 138.900825][ T36] audit: type=1400 audit(1756026755.085:15960): avc: denied { ioctl } for pid=3528 comm="syz.3.982" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 139.019372][ T36] audit: type=1400 audit(1756026755.225:15961): avc: denied { connect } for pid=3535 comm="syz.3.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 139.143906][ T63] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 139.164950][ T63] usb 3-1: device descriptor read/8, error -71 [ 139.294876][ T63] usb 3-1: device descriptor read/8, error -71 [ 139.353913][ T920] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 139.503893][ T920] usb 4-1: Using ep0 maxpacket: 8 [ 139.518457][ T920] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 249, changing to 11 [ 139.531555][ T36] audit: type=1400 audit(1756026755.735:15962): avc: denied { ioctl } for pid=3539 comm="syz.4.987" path="socket:[31110]" dev="sockfs" ino=31110 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.557335][ T920] usb 4-1: config 1 interface 0 has no altsetting 0 [ 139.564244][ T63] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 139.572085][ T36] audit: type=1400 audit(1756026755.735:15963): avc: denied { watch watch_reads } for pid=3539 comm="syz.4.987" path="/209" dev="tmpfs" ino=1147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 139.596206][ T63] usb 3-1: device descriptor read/8, error -71 [ 139.602782][ T920] usb 4-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.40 [ 139.611919][ T920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.619958][ T920] usb 4-1: Product: syz [ 139.624241][ T920] usb 4-1: Manufacturer: syz [ 139.628885][ T920] usb 4-1: SerialNumber: syz [ 139.725012][ T63] usb 3-1: device descriptor read/8, error -71 [ 139.833965][ T63] usb usb3-port1: unable to enumerate USB device [ 140.040878][ T36] audit: type=1400 audit(1756026756.245:15964): avc: denied { audit_read } for pid=3537 comm="syz.3.986" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 140.062149][ T36] audit: type=1400 audit(1756026756.245:15965): avc: denied { read } for pid=3537 comm="syz.3.986" path="socket:[31100]" dev="sockfs" ino=31100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.065433][ T920] usbhid 4-1:1.0: can't add hid device: -71 [ 140.102230][ T920] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 140.121516][ T920] usb 4-1: USB disconnect, device number 40 [ 140.137653][ T3542] netlink: 'syz.4.988': attribute type 27 has an invalid length. [ 140.146669][ T3542] lo: entered promiscuous mode [ 140.151510][ T3542] lo: entered allmulticast mode [ 140.157467][ T3542] tunl0: entered promiscuous mode [ 140.162543][ T3542] tunl0: entered allmulticast mode [ 140.168253][ T3542] gre0: entered promiscuous mode [ 140.173229][ T3542] gre0: entered allmulticast mode [ 140.179016][ T3542] gretap0: entered promiscuous mode [ 140.184251][ T3542] gretap0: entered allmulticast mode [ 140.190007][ T3542] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 140.233163][ T36] audit: type=1400 audit(1756026756.435:15966): avc: denied { setopt } for pid=3546 comm="syz.4.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.474877][ T10] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 140.489450][ T10] usb 2-1: USB disconnect, device number 41 [ 140.496841][ T1446] udevd[1446]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 140.577849][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 140.593255][ T3564] /dev/rnullb0: Can't open blockdev [ 141.123917][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 141.274948][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.285136][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.294730][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 141.303869][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 141.311892][ T10] usb 4-1: SerialNumber: syz [ 141.407842][ T3583] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:789 [ 141.520324][ T10] usb 4-1: 0:2 : does not exist [ 141.534490][ T10] usb 4-1: unit 3 not found! [ 141.541483][ T10] usb 4-1: USB disconnect, device number 41 [ 141.552400][ T1446] udevd[1446]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 142.300516][ T45] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 142.324625][ T45] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 142.623893][ T2225] Bluetooth: hci0: command 0x1003 tx timeout [ 142.623893][ T1213] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 142.655155][ T3631] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 142.669265][ T3633] overlayfs: failed to clone upperpath [ 142.742744][ T3642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3642 comm=syz.2.1020 [ 142.899093][ T3655] overlayfs: failed to resolve './file1': -2 [ 143.013898][ T920] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 143.143935][ T920] usb 3-1: device descriptor read/64, error -71 [ 143.198922][ T3663] tmpfs: Bad value for 'size' [ 143.235274][ T3663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:832 [ 143.385187][ T920] usb 3-1: device descriptor read/64, error -71 [ 143.408824][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 143.408843][ T36] audit: type=1400 audit(1756026759.615:15983): avc: denied { getopt } for pid=3673 comm="syz.1.1032" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.446138][ T36] audit: type=1400 audit(1756026759.655:15984): avc: denied { read } for pid=3675 comm="syz.4.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.501613][ T36] audit: type=1400 audit(1756026759.705:15985): avc: denied { connect } for pid=3677 comm="syz.1.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.522914][ T36] audit: type=1400 audit(1756026759.705:15986): avc: denied { write } for pid=3677 comm="syz.1.1034" path="socket:[32983]" dev="sockfs" ino=32983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.548422][ T36] audit: type=1400 audit(1756026759.755:15987): avc: denied { read } for pid=3681 comm="syz.4.1035" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.602913][ T36] audit: type=1400 audit(1756026759.805:15988): avc: denied { listen } for pid=3685 comm="syz.1.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.643887][ T920] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 143.651840][ T45] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 143.665916][ T3691] binder: Bad value for 'max' [ 143.720435][ T3700] SELinux: Context system_u:object_r:syslogd_initrc_exec_t:s0 is not valid (left unmapped). [ 143.720442][ T36] audit: type=1400 audit(1756026759.925:15989): avc: denied { relabelfrom } for pid=3699 comm="syz.4.1042" name="NETLINK" dev="sockfs" ino=33019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.746880][ T3702] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1043'. [ 143.755263][ T36] audit: type=1400 audit(1756026759.935:15990): avc: denied { relabelto } for pid=3699 comm="syz.4.1042" name="NETLINK" dev="sockfs" ino=33019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_generic_socket permissive=1 trawcon="system_u:object_r:syslogd_initrc_exec_t:s0" [ 143.783939][ T920] usb 3-1: device descriptor read/64, error -71 [ 143.833911][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 143.840164][ T45] usb 4-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 143.850631][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 143.859550][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.873806][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.882903][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.890915][ T45] usb 4-1: Product: syz [ 143.895116][ T45] usb 4-1: Manufacturer: syz [ 143.899702][ T45] usb 4-1: SerialNumber: syz [ 144.043925][ T920] usb 3-1: device descriptor read/64, error -71 [ 144.107563][ T45] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 144.114491][ T45] cdc_ncm 4-1:1.0: bind() failure [ 144.122010][ T45] usb 4-1: USB disconnect, device number 42 [ 144.153953][ T920] usb usb3-port1: attempt power cycle [ 144.208629][ T36] audit: type=1400 audit(1756026760.415:15991): avc: denied { create } for pid=3704 comm="syz.1.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 144.249521][ T36] audit: type=1400 audit(1756026760.455:15992): avc: denied { create } for pid=3711 comm="syz.1.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.493902][ T920] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 144.524853][ T920] usb 3-1: device descriptor read/8, error -71 [ 144.533918][ T63] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 144.656140][ T920] usb 3-1: device descriptor read/8, error -71 [ 144.656994][ T45] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 144.684480][ T45] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 144.703889][ T63] usb 2-1: Using ep0 maxpacket: 16 [ 144.717188][ T63] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 237 [ 144.726043][ T63] usb 2-1: can't read configurations, error -22 [ 144.854998][ T63] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 144.893915][ T920] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 144.935013][ T920] usb 3-1: device descriptor read/8, error -71 [ 144.996741][ T3739] fuse: Bad value for 'fd' [ 145.023876][ T63] usb 2-1: Using ep0 maxpacket: 16 [ 145.039649][ T63] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 237 [ 145.052591][ T3740] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 145.054023][ T63] usb 2-1: can't read configurations, error -22 [ 145.078907][ T920] usb 3-1: device descriptor read/8, error -71 [ 145.094028][ T63] usb usb2-port1: attempt power cycle [ 145.193969][ T920] usb usb3-port1: unable to enumerate USB device [ 145.433905][ T63] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 145.454229][ T63] usb 2-1: Using ep0 maxpacket: 16 [ 145.461105][ T63] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 237 [ 145.469779][ T63] usb 2-1: can't read configurations, error -22 [ 145.603904][ T63] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 145.624228][ T63] usb 2-1: Using ep0 maxpacket: 16 [ 145.631105][ T63] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 237 [ 145.639936][ T63] usb 2-1: can't read configurations, error -22 [ 145.654002][ T63] usb usb2-port1: unable to enumerate USB device [ 145.747531][ T3756] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1060'. [ 145.818148][ T3763] /dev/rnullb0: Can't open blockdev [ 145.837021][ T3765] binder: Bad value for 'stats' [ 145.983614][ T3777] /dev/rnullb0: Can't open blockdev [ 146.017897][ T3781] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.194768][ T3789] netlink: 'syz.3.1072': attribute type 4 has an invalid length. [ 146.202744][ T3789] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1072'. [ 146.212511][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.212548][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.221173][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.227788][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.234406][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.240851][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.247671][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.254353][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.260872][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.274316][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.274344][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.280825][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.298576][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.298603][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.306743][ T3791] rust_binder: Error in use_page_slow: ESRCH [ 146.313188][ T3791] rust_binder: use_range failure ESRCH [ 146.319264][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.325043][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.331511][ T3791] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 146.338189][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.346237][ T3791] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 146.352976][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.362527][ T3791] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:880 [ 146.369186][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.378400][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.385361][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.391864][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.398604][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.405233][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.411773][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.418462][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.425060][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.431555][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.438239][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.444839][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.451339][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.458046][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.464695][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.471200][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.477963][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.484687][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.491285][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.498086][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.504708][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.511192][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.523443][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.536827][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.548994][ T3793] netlink: 'syz.2.1073': attribute type 11 has an invalid length. [ 146.563408][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.563436][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.573166][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.586072][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.602706][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.612811][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.626147][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.641921][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.648640][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.656631][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.663152][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.669860][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.676518][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.683006][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.689702][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.700658][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.713735][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.720408][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.727035][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.733566][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.740207][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.746883][ T3790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.781021][ T3797] rust_binder: Error while translating object. [ 146.807713][ T3797] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 146.814352][ T3797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:780 [ 147.141710][ T3807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:891 [ 147.583493][ T3819] rust_binder: Error while translating object. [ 147.624827][ T3819] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 147.631086][ T3819] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:842 [ 148.223790][ T3844] rust_binder: Error while translating object. [ 148.243923][ T3844] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 148.253895][ T740] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 148.281130][ T3844] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:799 [ 148.297555][ T3848] rust_binder: 803: no such ref 2 [ 148.320367][ T3848] rust_binder: Write failure EINVAL in pid:803 [ 148.493902][ T63] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 148.690009][ T63] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 148.723858][ T63] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 148.757016][ T63] usb 2-1: string descriptor 0 read error: -22 [ 148.783136][ T63] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.802425][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.859148][ T3875] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 148.940813][ T3883] rust_binder: 3878 RLIMIT_NICE not set [ 148.941604][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 148.941621][ T36] audit: type=1326 audit(1756026765.145:16026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="syz.3.1099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f754d18ebe9 code=0x0 [ 148.979749][ T36] audit: type=1400 audit(1756026765.185:16027): avc: denied { create } for pid=3884 comm="syz.4.1102" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 149.000923][ T36] audit: type=1400 audit(1756026765.185:16028): avc: denied { write } for pid=3884 comm="syz.4.1102" name="file2" dev="tmpfs" ino=1405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 149.023706][ T36] audit: type=1400 audit(1756026765.185:16029): avc: denied { open } for pid=3884 comm="syz.4.1102" path="/256/file2" dev="tmpfs" ino=1405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 149.045018][ T3892] 9pnet_fd: Insufficient options for proto=fd [ 149.051213][ T36] audit: type=1400 audit(1756026765.185:16030): avc: denied { ioctl } for pid=3884 comm="syz.4.1102" path="/256/file2" dev="tmpfs" ino=1405 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 149.082405][ T3894] tipc: Started in network mode [ 149.087529][ T3894] tipc: Node identity ac14140f, cluster identity 4711 [ 149.096765][ T3894] tipc: New replicast peer: 255.255.255.255 [ 149.109510][ T3894] tipc: Enabled bearer , priority 10 [ 149.116817][ T36] audit: type=1400 audit(1756026765.195:16031): avc: denied { unlink } for pid=878 comm="syz-executor" name="file2" dev="tmpfs" ino=1405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 149.147253][ T63] cdc_ncm 2-1:1.0: bind() failure [ 149.150668][ T36] audit: type=1400 audit(1756026765.355:16032): avc: denied { bind } for pid=3842 comm="syz.1.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 149.153422][ T63] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 149.174026][ T36] audit: type=1400 audit(1756026765.355:16033): avc: denied { mount } for pid=3897 comm="syz.4.1106" name="/" dev="configfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 149.211124][ T36] audit: type=1400 audit(1756026765.355:16034): avc: denied { search } for pid=3897 comm="syz.4.1106" name="/" dev="configfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.237374][ T63] cdc_ncm 2-1:1.1: bind() failure [ 149.239876][ T36] audit: type=1400 audit(1756026765.355:16035): avc: denied { read } for pid=3897 comm="syz.4.1106" name="/" dev="configfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.254143][ T3906] netlink: 'syz.4.1108': attribute type 2 has an invalid length. [ 149.273643][ T63] usb 2-1: USB disconnect, device number 46 [ 149.781483][ T3934] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 149.822637][ T3934] SELinux: failed to load policy [ 150.052586][ T3939] __vm_enough_memory: pid: 3939, comm: syz.1.1117, bytes: 21199963217920 not enough memory for the allocation [ 150.090899][ T3921] /dev/rnullb0: Can't open blockdev [ 150.100681][ T3949] binder: Unknown parameter '0xffffffffffffffff' [ 150.123903][ T998] tipc: Node number set to 2886997007 [ 150.150780][ T3953] loop8: detected capacity change from 0 to 79 [ 150.335305][ T63] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 150.410489][ T3962] rust_binder: Write failure EFAULT in pid:824 [ 150.514149][ T63] usb 2-1: Using ep0 maxpacket: 16 [ 150.526647][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.537617][ T63] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 150.551204][ T63] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 150.560370][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.569546][ T63] usb 2-1: config 0 descriptor?? [ 150.683942][ T998] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 150.743898][ T740] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 150.813897][ T998] usb 3-1: device descriptor read/64, error -71 [ 150.895121][ T740] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.905307][ T740] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.914970][ T740] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 150.924101][ T740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 150.932126][ T740] usb 4-1: SerialNumber: syz [ 150.980986][ T63] nintendo 0003:057E:2019.001F: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 151.023164][ T3985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1133'. [ 151.039977][ T3986] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1133'. [ 151.073915][ T998] usb 3-1: device descriptor read/64, error -71 [ 151.206262][ T740] usb 4-1: 0:2 : does not exist [ 151.213457][ T740] usb 4-1: USB disconnect, device number 43 [ 151.313913][ T998] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 151.443924][ T998] usb 3-1: device descriptor read/64, error -71 [ 151.527100][ C0] usb 2-1: input irq status -75 received [ 151.683909][ T998] usb 3-1: device descriptor read/64, error -71 [ 151.730513][ T4003] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:924 [ 151.730567][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 151.739821][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 151.747961][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 151.754609][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 151.762642][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 151.769434][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 151.777641][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 151.784257][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 151.792280][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 151.798888][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 151.803997][ T998] usb usb3-port1: attempt power cycle [ 151.807133][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 151.819155][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 151.829251][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 151.843891][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 151.852059][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 151.858775][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 151.866952][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 151.873511][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 151.882193][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 151.888780][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 151.896910][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 151.903477][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 151.911604][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 151.918142][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 151.926222][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 151.932739][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 151.940835][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 151.947381][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 151.955431][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 151.961944][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 151.969996][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 151.976533][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 151.984585][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 151.991100][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 151.999140][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 152.005683][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 152.013691][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 152.020225][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 152.028332][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 152.034863][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 152.042880][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 152.049409][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 152.057464][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 152.064007][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 152.072018][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 152.078546][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 152.086692][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 152.093300][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 152.101382][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 152.107934][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 152.116082][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 152.122650][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 152.130687][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 152.137242][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 152.145504][ T998] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 152.145551][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 152.159674][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 152.165400][ T998] usb 3-1: device descriptor read/8, error -71 [ 152.167757][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 152.180461][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 152.188512][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 152.195055][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 152.203116][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 152.209709][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 152.217772][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 152.224394][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 152.232415][ T4003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 152.238989][ T4003] rust_binder: Read failure Err(EFAULT) in pid:924 [ 152.305325][ T998] usb 3-1: device descriptor read/8, error -71 [ 152.317577][ T4024] rust_binder: Error while translating object. [ 152.318100][ T4024] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 152.324364][ T4024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:939 [ 152.334264][ T4024] x_tables: duplicate underflow at hook 1 [ 152.349450][ T4024] 9pnet_fd: Insufficient options for proto=fd [ 152.420706][ T4030] rust_binder: 4027 RLIMIT_NICE not set [ 152.428451][ T45] rust_binder: 4026: removing orphan mapping 0:24 [ 152.551014][ T4043] rust_binder: Read failure Err(EAGAIN) in pid:947 [ 152.553929][ T998] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 152.585256][ T998] usb 3-1: device descriptor read/8, error -71 [ 152.715205][ T998] usb 3-1: device descriptor read/8, error -71 [ 152.823996][ T998] usb usb3-port1: unable to enumerate USB device [ 152.936719][ T63] nintendo 0003:057E:2019.001F: Failed to get joycon info; ret=-71 [ 152.944722][ T63] nintendo 0003:057E:2019.001F: Failed to retrieve controller info; ret=-71 [ 152.953805][ T63] nintendo 0003:057E:2019.001F: Failed to initialize controller; ret=-71 [ 152.964566][ T63] nintendo 0003:057E:2019.001F: probe - fail = -71 [ 152.972215][ T63] nintendo 0003:057E:2019.001F: probe with driver nintendo failed with error -71 [ 152.985804][ T63] usb 2-1: USB disconnect, device number 47 [ 153.033372][ T4053] __vm_enough_memory: pid: 4053, comm: syz.1.1158, bytes: 18014402804453376 not enough memory for the allocation [ 153.073168][ T4060] fuse: Bad value for 'fd' [ 153.393915][ T998] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 153.543900][ T998] usb 4-1: Using ep0 maxpacket: 32 [ 153.550325][ T998] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 153.558492][ T998] usb 4-1: config 0 has no interface number 0 [ 153.566852][ T998] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 153.576021][ T998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.584055][ T998] usb 4-1: Product: syz [ 153.588296][ T998] usb 4-1: Manufacturer: syz [ 153.592916][ T998] usb 4-1: SerialNumber: syz [ 153.598234][ T998] usb 4-1: config 0 descriptor?? [ 153.604049][ T998] smsc95xx v2.0.0 [ 154.004387][ T998] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 154.015269][ T998] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 154.276862][ T36] kauditd_printk_skb: 155 callbacks suppressed [ 154.276882][ T36] audit: type=1400 audit(1756026770.485:16191): avc: denied { setopt } for pid=4099 comm="syz.4.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 154.339962][ T36] audit: type=1400 audit(1756026770.545:16192): avc: denied { listen } for pid=4105 comm="syz.4.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 154.391953][ T36] audit: type=1326 audit(1756026770.595:16193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb18ebe9 code=0x7ffc0000 [ 154.415594][ T36] audit: type=1326 audit(1756026770.595:16194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb18ebe9 code=0x7ffc0000 [ 154.439447][ T36] audit: type=1326 audit(1756026770.595:16195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb18ebe9 code=0x7ffc0000 [ 154.442437][ T998] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 154.463725][ T36] audit: type=1326 audit(1756026770.595:16196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23cb18ebe9 code=0x7ffc0000 [ 154.475365][ T998] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 154.498176][ T36] audit: type=1326 audit(1756026770.595:16197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb18ebe9 code=0x7ffc0000 [ 154.528809][ T998] usb 4-1: USB disconnect, device number 44 [ 154.533880][ T36] audit: type=1326 audit(1756026770.595:16198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb18ebe9 code=0x7ffc0000 [ 154.542605][ T4120] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.560499][ T36] audit: type=1326 audit(1756026770.595:16199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb18ebe9 code=0x7ffc0000 [ 154.590883][ T36] audit: type=1326 audit(1756026770.595:16200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb18ebe9 code=0x7ffc0000 [ 154.833912][ T330] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 154.985114][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.996163][ T330] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 155.005288][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.014297][ T330] usb 3-1: config 0 descriptor?? [ 155.224193][ T4123] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1183' sets config #65 [ 155.269649][ T4160] overlayfs: failed to clone upperpath [ 155.287747][ T4164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1196'. [ 155.434841][ T330] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 155.449263][ T330] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0020/input/input17 [ 155.483885][ T920] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 155.533702][ T330] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 155.588906][ T4184] syz.4.1204: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 155.604596][ T4184] CPU: 0 UID: 0 PID: 4184 Comm: syz.4.1204 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 155.604631][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.604646][ T4184] Call Trace: [ 155.604654][ T4184] [ 155.604664][ T4184] __dump_stack+0x21/0x30 [ 155.604700][ T4184] dump_stack_lvl+0x10c/0x190 [ 155.604729][ T4184] ? __cfi_dump_stack_lvl+0x10/0x10 [ 155.604760][ T4184] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 155.604792][ T4184] dump_stack+0x19/0x20 [ 155.604828][ T4184] warn_alloc+0x1bc/0x2a0 [ 155.604856][ T4184] ? stack_depot_save_flags+0x38/0x800 [ 155.604893][ T4184] ? __cfi_warn_alloc+0x10/0x10 [ 155.604921][ T4184] ? kasan_save_track+0x4f/0x80 [ 155.604943][ T4184] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 155.604977][ T4184] ? xskq_create+0x68/0x2a0 [ 155.605008][ T4184] ? xsk_init_queue+0xb6/0x120 [ 155.605039][ T4184] ? xsk_setsockopt+0x43f/0x6f0 [ 155.605068][ T4184] ? do_sock_setsockopt+0x26a/0x400 [ 155.605101][ T4184] ? __x64_sys_setsockopt+0x1b8/0x250 [ 155.605132][ T4184] ? x64_sys_call+0x2adc/0x2ee0 [ 155.605163][ T4184] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 155.605203][ T4184] __vmalloc_node_range_noprof+0x135/0x1420 [ 155.605239][ T4184] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 155.605268][ T4184] ? avc_has_perm+0x144/0x220 [ 155.605290][ T4184] ? kasan_save_alloc_info+0x40/0x50 [ 155.605311][ T4184] ? __kasan_kmalloc+0x96/0xb0 [ 155.605338][ T4184] vmalloc_user_noprof+0x77/0x90 [ 155.605368][ T4184] ? xskq_create+0xdb/0x2a0 [ 155.605401][ T4184] xskq_create+0xdb/0x2a0 [ 155.605424][ T4184] xsk_init_queue+0xb6/0x120 [ 155.605447][ T4184] xsk_setsockopt+0x43f/0x6f0 [ 155.605475][ T4184] ? __cfi_xsk_setsockopt+0x10/0x10 [ 155.605506][ T4184] ? do_futex+0x309/0x500 [ 155.605529][ T4184] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 155.605557][ T4184] ? security_socket_setsockopt+0x33/0xd0 [ 155.605573][ T4184] ? __cfi_xsk_setsockopt+0x10/0x10 [ 155.605594][ T4184] do_sock_setsockopt+0x26a/0x400 [ 155.605625][ T4184] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 155.605660][ T4184] __x64_sys_setsockopt+0x1b8/0x250 [ 155.605694][ T4184] x64_sys_call+0x2adc/0x2ee0 [ 155.605718][ T4184] do_syscall_64+0x58/0xf0 [ 155.605738][ T4184] ? clear_bhb_loop+0x50/0xa0 [ 155.605755][ T4184] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 155.605793][ T4184] RIP: 0033:0x7f23cb18ebe9 [ 155.605819][ T4184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.605840][ T4184] RSP: 002b:00007f23c9bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 155.605859][ T4184] RAX: ffffffffffffffda RBX: 00007f23cb3b5fa0 RCX: 00007f23cb18ebe9 [ 155.605872][ T4184] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 155.605882][ T4184] RBP: 00007f23cb211e19 R08: 0000000000000004 R09: 0000000000000000 [ 155.605894][ T4184] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.605909][ T4184] R13: 00007f23cb3b6038 R14: 00007f23cb3b5fa0 R15: 00007ffcaf444578 [ 155.605932][ T4184] [ 155.605948][ T4184] Mem-Info: [ 155.910981][ T330] usb 3-1: USB disconnect, device number 45 [ 155.917618][ T4184] active_anon:15297 inactive_anon:443 isolated_anon:0 [ 155.917618][ T4184] active_file:21754 inactive_file:4606 isolated_file:0 [ 155.917618][ T4184] unevictable:0 dirty:56 writeback:0 [ 155.917618][ T4184] slab_reclaimable:6620 slab_unreclaimable:71265 [ 155.917618][ T4184] mapped:24706 shmem:194 pagetables:1291 [ 155.917618][ T4184] sec_pagetables:0 bounce:0 [ 155.917618][ T4184] kernel_misc_reclaimable:0 [ 155.917618][ T4184] free:1508634 free_pcp:4068 free_cma:0 [ 155.962798][ T920] usb 4-1: Using ep0 maxpacket: 16 [ 155.968653][ T4184] Node 0 active_anon:61188kB inactive_anon:1772kB active_file:87016kB inactive_file:18424kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98824kB dirty:224kB writeback:0kB shmem:776kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5880kB pagetables:5164kB sec_pagetables:0kB all_unreclaimable? no [ 156.002151][ T920] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.012441][ T920] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.021458][ T920] usb 4-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.034487][ T4184] DMA32 free:2952148kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965964kB mlocked:0kB bounce:0kB free_pcp:13816kB local_pcp:3448kB free_cma:0kB [ 156.064611][ T920] usb 4-1: config 1 interface 0 has no altsetting 0 [ 156.071279][ T4184] lowmem_reserve[]: 0 3921 3921 [ 156.081105][ T920] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.091380][ T920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.103882][ T4184] Normal free:3086980kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60980kB inactive_anon:1772kB active_file:87016kB inactive_file:18424kB unevictable:0kB writepending:224kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:1212kB local_pcp:1052kB free_cma:0kB [ 156.136118][ T920] usb 4-1: Product: syz [ 156.140375][ T920] usb 4-1: Manufacturer: syz [ 156.145199][ T920] usb 4-1: SerialNumber: syz [ 156.150723][ T4184] lowmem_reserve[]: 0 0 0 [ 156.155517][ T4184] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 4*2048kB (M) 717*4096kB (M) = 2952148kB [ 156.177635][ T4184] Normal: 916*4kB (UME) 1657*8kB (UME) 1167*16kB (UME) 386*32kB (UME) 382*64kB (UME) 165*128kB (UM) 102*256kB (UM) 48*512kB (UM) 29*1024kB (UME) 19*2048kB (UME) 701*4096kB (UM) = 3084104kB [ 156.197647][ T4184] 27018 total pagecache pages [ 156.202655][ T4184] 471 pages in swap cache [ 156.207078][ T4184] Free swap = 122744kB [ 156.211464][ T4184] Total swap = 124996kB [ 156.215853][ T4184] 2097051 pages RAM [ 156.219728][ T4184] 0 pages HighMem/MovableOnly [ 156.224762][ T4184] 351530 pages reserved [ 156.229047][ T4184] 0 pages cma reserved [ 156.246819][ T4184] Memory allocations: [ 156.250886][ T4184] 0 B 0 init/main.c:1370 func:do_initcalls [ 156.258329][ T4184] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 156.266628][ T4184] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 156.274482][ T4184] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 156.282447][ T4184] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 156.290621][ T4184] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 156.299389][ T4184] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 156.307549][ T4184] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 156.315649][ T4184] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 156.323653][ T4184] 0 B 0 init/initramfs.c:101 func:find_link [ 156.429929][ T920] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 156.441386][ T920] usb 4-1: USB disconnect, device number 45 [ 156.713156][ T4227] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.973917][ T920] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 157.135020][ T920] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.146083][ T920] usb 3-1: config 0 interface 0 has no altsetting 0 [ 157.152718][ T920] usb 3-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 157.161837][ T920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.170460][ T920] usb 3-1: config 0 descriptor?? [ 157.297305][ T4254] kvm: kvm [4253]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 157.306015][ T4254] kvm: kvm [4253]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 157.325104][ T4254] kvm: kvm [4253]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xc800 [ 157.334082][ T4254] kvm: kvm [4253]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xc800 [ 157.382310][ T920] usbhid 3-1:0.0: can't add hid device: -71 [ 157.388566][ T920] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 157.401647][ T920] usb 3-1: USB disconnect, device number 46 [ 157.703896][ T920] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 157.801758][ T4279] kvm: kvm [4278]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 157.810375][ T4279] kvm: kvm [4278]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 157.825520][ T4279] kvm_intel: kvm [4278]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x162 [ 157.836498][ T4279] kvm: kvm [4278]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x162 [ 157.843881][ T920] usb 3-1: device descriptor read/64, error -71 [ 157.845257][ T4279] kvm: kvm [4278]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x162 [ 158.014138][ T4298] /dev/rnullb0: Can't open blockdev [ 158.019862][ T4298] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 158.027180][ T4298] rust_binder: 1021: no such ref 2 [ 158.083915][ T920] usb 3-1: device descriptor read/64, error -71 [ 158.093416][ T4303] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 158.093438][ T4303] rust_binder: Read failure Err(EFAULT) in pid:1026 [ 158.147084][ T4314] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1245'. [ 158.180592][ T4320] rust_binder: Write failure EFAULT in pid:920 [ 158.280918][ T4330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=4330 comm=syz.3.1250 [ 158.317013][ T4331] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1249'. [ 158.323909][ T920] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 158.424149][ T4337] rust_binder: Failed copying into alloc: EFAULT [ 158.424169][ T4337] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 158.430610][ T4337] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 158.438943][ T4337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1046 [ 158.463925][ T920] usb 3-1: device descriptor read/64, error -71 [ 158.713943][ T920] usb 3-1: device descriptor read/64, error -71 [ 158.823976][ T920] usb usb3-port1: attempt power cycle [ 159.163897][ T920] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 159.184942][ T920] usb 3-1: device descriptor read/8, error -71 [ 159.314938][ T920] usb 3-1: device descriptor read/8, error -71 [ 159.495411][ T4356] rust_binder: 1061: no such ref 2 [ 159.503657][ T4353] overlayfs: failed to clone upperpath [ 159.551607][ T4359] fuse: Bad value for 'group_id' [ 159.556701][ T920] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 159.557338][ T4359] fuse: Bad value for 'group_id' [ 159.581935][ T36] kauditd_printk_skb: 548 callbacks suppressed [ 159.581955][ T36] audit: type=1400 audit(1756026775.785:16749): avc: denied { setopt } for pid=4360 comm="syz.1.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 159.585795][ T920] usb 3-1: device descriptor read/8, error -71 [ 159.588390][ T36] audit: type=1326 audit(1756026775.795:16750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4355 comm="syz.3.1259" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f754d18ebe9 code=0x0 [ 159.735026][ T920] usb 3-1: device descriptor read/8, error -71 [ 159.844501][ T920] usb usb3-port1: unable to enumerate USB device [ 160.385360][ T4378] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 160.405001][ T4378] SELinux: failed to load policy [ 160.443588][ T4384] futex_wake_op: syz.2.1267 tries to shift op by -1; fix this program [ 160.948008][ T4407] SELinux: failed to load policy [ 161.097467][ T4416] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 161.107437][ T4416] SELinux: failed to load policy [ 161.253069][ T36] audit: type=1400 audit(1756027033.447:16751): avc: denied { mount } for pid=4418 comm="syz.3.1278" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 161.284970][ T36] audit: type=1326 audit(1756027033.487:16752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4420 comm="syz.3.1279" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f754d18ebe9 code=0x0 [ 161.308647][ T36] audit: type=1326 audit(1756027033.507:16753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4420 comm="syz.3.1279" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f754d18ebe9 code=0x0 [ 161.395903][ T36] audit: type=1326 audit(1756027033.597:16754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d18ebe9 code=0x7ffc0000 [ 161.398691][ T4428] tipc: Started in network mode [ 161.424556][ T4428] tipc: Node identity e280df9321e2, cluster identity 4711 [ 161.431817][ T4428] tipc: Enabled bearer , priority 0 [ 161.450949][ T36] audit: type=1326 audit(1756027033.597:16755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d18ebe9 code=0x7ffc0000 [ 161.474800][ T36] audit: type=1326 audit(1756027033.597:16756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f754d18ebe9 code=0x7ffc0000 [ 161.498494][ T36] audit: type=1326 audit(1756027033.597:16757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d18ebe9 code=0x7ffc0000 [ 161.523638][ T36] audit: type=1326 audit(1756027033.597:16758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d18ebe9 code=0x7ffc0000 [ 161.683931][ T740] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 161.712236][ T4441] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 161.712263][ T4441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 161.720322][ T4441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:885 [ 161.771609][ T4451] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.833910][ T740] usb 4-1: Using ep0 maxpacket: 16 [ 161.859314][ T740] usb 4-1: config 1 interface 0 has no altsetting 0 [ 161.878003][ T740] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.40 [ 161.887265][ T740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.895500][ T740] usb 4-1: Product: 㐁砞붖ॼ暈 [ 161.903554][ T740] usb 4-1: Manufacturer: ɐ⏤壄ނ叟䙁籤峽鷶ퟧ૱㱌繁㺼쓷飪ᶔᷮ鹐谸彧ᤊ㬏쾏申髪툕肹ᾯ樼뼞ⷭΰ葽襅蜵輸᷊‡犩鯋遻몫퟉ꁈ䍉㮝㜟漏뭈䡌䖵쁐⣏᳝襯Ⲳէ୻쎏 [ 161.907614][ T4473] ------------[ cut here ]------------ [ 161.924923][ T740] usb 4-1: SerialNumber: ࠇ [ 161.930152][ T4473] WARNING: CPU: 0 PID: 4473 at mm/page_alloc.c:5225 __alloc_pages_noprof+0xe8/0x7b0 [ 161.944563][ T4473] Modules linked in: [ 161.948494][ T4473] CPU: 0 UID: 0 PID: 4473 Comm: syz.1.1295 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 161.960084][ T4473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.970196][ T4473] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 161.976151][ T4473] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 81 26 ee 05 00 0f 85 be 00 00 00 c6 05 74 26 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 161.995851][ T4473] RSP: 0018:ffffc90009497880 EFLAGS: 00010246 [ 162.001954][ T4473] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000 [ 162.006213][ T4476] UHID_CREATE from different security context by process 967 (syz.1.1295), this is not allowed. [ 162.010070][ T4473] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90009497938 [ 162.021975][ T4476] __vm_enough_memory: pid: 4476, comm: syz.1.1295, bytes: 18014402804453376 not enough memory for the allocation [ 162.028383][ T4473] RBP: ffffc900094979b0 R08: ffffc90009497937 R09: 0000000000000000 [ 162.048301][ T4473] R10: ffffc90009497920 R11: fffff52001292f27 R12: ffffc900094978c0 [ 162.056395][ T4473] R13: dffffc0000000000 R14: 1ffff92001292f14 R15: 0000000000000000 [ 162.064465][ T4473] FS: 00007f596b4b06c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 162.073421][ T4473] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.080132][ T4473] CR2: 0000001b2ed23ffc CR3: 000000011090c000 CR4: 00000000003526b0 [ 162.088147][ T4473] Call Trace: [ 162.091448][ T4473] [ 162.094427][ T4473] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 162.100534][ T4473] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 162.106308][ T4473] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 162.111967][ T4473] ___kmalloc_large_node+0x9c/0x1d0 [ 162.117228][ T4473] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 162.122895][ T4473] __kmalloc_large_node_noprof+0x1e/0xe0 [ 162.128606][ T4473] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 162.134297][ T4473] __kmalloc_noprof+0x26d/0x450 [ 162.139180][ T4473] incfs_realloc_mount_info+0xa7/0x4d0 [ 162.144711][ T4473] ? incfs_add_sysfs_node+0x118/0x240 [ 162.150127][ T4473] incfs_alloc_mount_info+0x479/0x600 [ 162.155581][ T4473] incfs_mount_fs+0x3ca/0x960 [ 162.160297][ T4473] ? __cfi_incfs_mount_fs+0x10/0x10 [ 162.165584][ T4473] ? vfs_parse_fs_string+0x102/0x170 [ 162.170907][ T4473] ? selinux_capable+0x38/0x50 [ 162.175758][ T4473] legacy_get_tree+0x106/0x1b0 [ 162.180552][ T4473] ? __cfi_incfs_mount_fs+0x10/0x10 [ 162.185828][ T4473] vfs_get_tree+0x9e/0x290 [ 162.190296][ T4473] do_new_mount+0x251/0xb40 [ 162.194905][ T4473] ? security_capable+0xcf/0xf0 [ 162.199798][ T4473] path_mount+0x688/0x1050 [ 162.204293][ T4473] ? putname+0x113/0x150 [ 162.208560][ T4473] __se_sys_mount+0x2bd/0x480 [ 162.213266][ T4473] ? __x64_sys_mount+0xf0/0xf0 [ 162.218118][ T4473] ? __kasan_check_write+0x18/0x20 [ 162.223281][ T4473] ? fpregs_restore_userregs+0x11d/0x260 [ 162.228990][ T4473] __x64_sys_mount+0xc3/0xf0 [ 162.233605][ T4473] x64_sys_call+0x2021/0x2ee0 [ 162.238369][ T4473] do_syscall_64+0x58/0xf0 [ 162.242824][ T4473] ? clear_bhb_loop+0x50/0xa0 [ 162.247558][ T4473] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 162.253547][ T4473] RIP: 0033:0x7f596a58ebe9 [ 162.254620][ T740] usbhid 4-1:1.0: can't add hid device: -71 [ 162.258011][ T4473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.264315][ T740] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 162.283531][ T4473] RSP: 002b:00007f596b4b0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 162.293755][ T740] usb 4-1: USB disconnect, device number 46 [ 162.299740][ T4473] RAX: ffffffffffffffda RBX: 00007f596a7b5fa0 RCX: 00007f596a58ebe9 [ 162.313623][ T4473] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 162.321630][ T4473] RBP: 00007f596a611e19 R08: 0000200000000000 R09: 0000000000000000 [ 162.329642][ T4473] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000 [ 162.337658][ T4473] R13: 00007f596a7b6038 R14: 00007f596a7b5fa0 R15: 00007ffe01409c38 [ 162.345690][ T4473] [ 162.348713][ T4473] ---[ end trace 0000000000000000 ]--- [ 162.354328][ T4427] tipc: Resetting bearer [ 162.367947][ T4427] tipc: Disabling bearer [ 162.368395][ T4473] incfs: Error allocating mount info. -12 [ 162.380533][ T4473] incfs: mount failed -12