last executing test programs: 4.26139867s ago: executing program 0 (id=851): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x38) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x1}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x200040d0, &(0x7f0000000240)={0xa, 0x4e20, 0xbc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}, 0x1c) recvmmsg(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x5a}], 0x1, 0x40000041, 0x0) dup3(r3, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x7, 0x1000000, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) mprotect(&(0x7f0000185000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20100, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) bind$bt_l2cap(r8, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, 0x0, &(0x7f0000000040)) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0xf) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x24, 0x0, &(0x7f00000002c0)=[@decrefs={0x400c6314}, @request_death={0x400c630e, 0x5}, @free_buffer], 0x0, 0x0, 0x0}) 4.093224923s ago: executing program 0 (id=856): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x160e) (async) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x0, 0x0, "b8d397697abf5387da713880bbb2f368"}) syz_open_procfs(r1, 0x0) 4.059031614s ago: executing program 0 (id=857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000500)={'bridge0\x00'}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) poll(&(0x7f0000000140)=[{r1, 0x240}], 0x1, 0x6) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 3.927246896s ago: executing program 0 (id=863): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1541, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt(r3, 0x400, 0xffff, &(0x7f0000000600), 0x0) unshare(0x480) syz_usb_connect(0x3, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904", @ANYRES16=r2, @ANYRES32=r2], 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000000)="d60415a19e24db39087030253f135a2b9b6f02fac1c22290fa7cd95482a82bc9f42c22d91328d1cc504b9b41890e33e8ee3a796e5ec5bb0df0d8a207c0c2a23935aa5abd6754c88caae9cfe0b1ff94db4ab7920d75917401a7f16381d594dcd24fb951117cbf6bb2d7f2233b34bdac3f3ca3485ceb2bb622ac7bb5", 0x7b}, {&(0x7f0000000100)="0d66919314d71dfe2313a26708ab627c855646813cc6ec61f83702d78ec7aabd3aa0737c4465d7e582829a1e2fde49e56b3f59672076725bd9ab37178f37a934a20020aa6e0c4b7f442b56eb1fa3532a3574302d0c054642907a970681b48acdee8dba0bf6c950a60b041b765cc0596fc80f45b5d35ff21ee08be89be2b213765c2b074af0b1c68e4a17110c3e5afa6edee2681a0d2335251495dbb69b62afdaffb8fb4eb2f397773106875b3f27c1dfbb5236716f65321fa201c15e71de2c4ef5", 0xc1}, {&(0x7f0000000300)="43ae904de73a890086f8394803135e37ba3c61ddc257585e184559c82c5403fe62624c3141ad1853c10329caf1fa5b8bf889c675089efbbb23f439c96c9471c26b50fa1698", 0x45}, {&(0x7f0000000380)="fea84b8a9a1436f104430697bfbb32859a65f83fb574e1e43b3854fb2bb1b8daecb7a1fc60e1de2ac4ed904abf693cc1e979738a355eedcdb2a504e207377474f946183e7a8fdede45430e4e925ef93373da6214b5a14973bcb1855ebfbae232ee44698b62808ff42ac71f90ec926fe75be128ff09c92693a69198ffa9bfd6416f0a2a3d35cfac10bbb243273a90b993552528f4ce3b11ab2a0304dc2a9ab078045273532c8b2f91bf8d0fc5966333c995957846f5f6a86eee49abf24c6ce028d283c57d88bf21ae24679db79bb2ec51929516b3c4da1873d859613c17cac888845758b4f4c7c406f8", 0xe9}, {&(0x7f0000000480)="c23c29f1a743ac5593e5267d650bb2974259ea97fdac036db25acfeb30c915b62489f886f0bf6bedc3d0bf91af6c98cf236aa502664c648c1aff2b74f2b1cac9fdd3a31c5bc14c7dcfaf9a303c40acfbfc965b5ffc1d3620ca710136299dd1bb04b4b329988c0725a40c22f3b663", 0x6e}, {&(0x7f0000000500)="34c601dfd556e76bfc22853aa9137d95c19170f99902a32cd5fcd35a01ada11386b19fc5a4c7943f6330470919ed72abe0d66578183fcc3d557a1b1c07318753907cd836a84f5d68ff681db070459457c2a1322d8f1f62e0e797265a0f341bcab2da", 0x62}], 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_usb_connect$hid(0x9932dca9d209743, 0x3f, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4e7, 0x50, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x82, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x101}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x3, 0x80}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x6c, 0x9, 0x4}}]}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x8, 0x2, 0x6, 0x20, 0x5}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x8, [{0xd7, &(0x7f0000000740)=@string={0xd7, 0x3, "9156b95c1c34c05f2a56c3e54cc4f0b299bd05feb27225cf35cf054f39f59076961b81e370dcc1ee79a020ae3a993571b2ee0f0a7dce520e66e0114b547676cd052330f2559fc6c4a312307888401350d481d230a6d81e299beaa910826b85b55f875fe39c81d5040a5530baa8122cfe91af185d503945df8e8b78c1792b8ae03ba683b8cf1ec4793778b2afdd001c1495dccb491995e0d32f4d6125ef044d169f740957a525f6b1fcada448a107cea8ccda20249ea8a19f6b9af80e84904f2b57a39afd842764369cdad8f3d46e8d703dd1da72fa"}}, {0xde, &(0x7f0000000840)=@string={0xde, 0x3, "1e6c929721adcb632f0c87c1d20f8858a212d36af84074186511203b3c026de5490367af45b84e5af96ef3625a7fbec900aa5d49ee5db3b7fbc67e0fea23a15cb8f8ab4ea3c5098028012137adcee2b365c6e0a9ef2a783a4756e04336c39b1bb4a75fd95fd938462d723ac5d86bfcd98cf222baef8f0cd261856c70bccef52a65c0f56077bba031e9d198c3888f6f30416cb1b49815d5c268477ac3dce538251fe294399b1c03d2055309cd0826481a09adc83c0770db5e4f13c3e17eaf6f1f475e6d08aca9188a72f83d3f2ded51a51f54a553ef8148f7e1f96d1c"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x18}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x41f}}, {0xf5, &(0x7f0000000a40)=@string={0xf5, 0x3, "99cb877d53ecb778acd3fc7a743cbddd29b2993651dee1c25c454e09169911f194d0b839388b7dccb28f904cb3f43eb8237f4155e6047b9ff10f35a260e97e3329a4e8480f1bd27456f2d7c4a546a71ea34a4db30bb57ada15dc75e27ff63c7221e3b3625fd18ac0dabf5357a104210f082604f0faf2980834395aa21cb2e667f183ac47f26681e6c62e7eba2ccfe724b910b285e5131078a5309c44bd92be5e747f7a61422b2e3056a5d8233cb1568659d35a7ccaaa4d0a12dc82215bdb6f075a665d243f090d940b50a4b38aa522c2a098cf9f8059812aeaba18d05c69c8d8fbb5a1bf2b094f09a8db7d7b432129dc7c0dca"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x10}}]}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) dup3(r4, r5, 0x6700000000000000) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.796499658s ago: executing program 1 (id=866): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0xc9, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r2, 0x2b09d000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@polexpire={0xcc, 0x1b, 0x1, 0x70bd2d, 0x25dfdbfd, {{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0xb, 0x4e23, 0x4, 0xa, 0x0, 0x80, 0x32}, {0x800, 0x80, 0xfffffffffffffff8, 0xa799, 0x1, 0x8000000000000001, 0x9}, {0x2, 0x40000000001, 0xfd, 0x4}, 0x7, 0x0, 0x0, 0x1, 0x2, 0x3}, 0x29}, [@mark={0xc, 0x15, {0x350753, 0x1004}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1, &(0x7f0000000000)=[{0x10, 0x8, 0x8}, {0x4, 0x1, 0x323}, {0x191, 0xf5a, 0x2}, {0x2, 0x4, 0x2}], 0x4, 0x5, 0x40, 0x4, 0x12, 0xd}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) accept(r6, 0x0, 0x0) r7 = dup(r5) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r7, 0x0, 0x483, &(0x7f0000000240)={0x89, @private=0xa010101, 0x4e22, 0x1, 'fo\x00', 0x22, 0x100, 0x3}, 0x2c) 3.725754009s ago: executing program 1 (id=867): mknodat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async) mknodat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) dup(r1) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, 0x0, {0x80000000000}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b1"], 0xb0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x110a, 0x2}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x110a, 0x2}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000240), 0x800002, &(0x7f0000000600)=ANY=[]) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000240), 0x800002, &(0x7f0000000600)=ANY=[]) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x10003, 0x5, 0xdddd1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x10003, 0x5, 0xdddd1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa101, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$vga_arbiter(r7, &(0x7f0000000340)=ANY=[], 0xa) (async) write$vga_arbiter(r7, &(0x7f0000000340)=ANY=[], 0xa) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) write$vga_arbiter(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="6c6f636b206e6f6e65006482e741f04fe9b20c44ddbfe6520ca0042bf4cff17a4fc634b030595aaddd39d447644a2c99480c2c95c90f0e7d5b088bc2d5ca7aa26c046439ce66535ee1be6f9420c20e676317a45c4359ec59d2aeeb0008000000000000dbb3a2c33a5959070740ba3b3718faff4ba08b82ffbec5042e1a619bf17904187b4d7ce55cf27efe36596d7f13cf687740"], 0xa) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r11, 0xc008aeba, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRESDEC=r11, @ANYRES16=r0, @ANYRESHEX=r5, @ANYRESOCT=r11, @ANYRESOCT=r3, @ANYRES32=0x0, @ANYRES32]) (async) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRESDEC=r11, @ANYRES16=r0, @ANYRESHEX=r5, @ANYRESOCT=r11, @ANYRESOCT=r3, @ANYRES32=0x0, @ANYRES32]) socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r4, 0x0, 0x725e65a4, 0xe) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffd88) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0x400448cb, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x420000, 0x0) ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0x2a) 3.710495949s ago: executing program 1 (id=868): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) setreuid(0x0, 0xee01) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) setreuid(0xee01, 0xee01) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x11, &(0x7f0000000280)=0x4, 0x4) fchdir(r0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/key-users\x00', 0x0, 0x0) pread64(r4, &(0x7f0000001440)=""/126, 0x7e, 0x41) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) epoll_create(0x10000e9) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 2.817957234s ago: executing program 1 (id=872): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc286, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x3, 0x1, 0xb, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x2}, [@processing_unit={0xa, 0x24, 0x7, 0x3, 0x1, 0x4, "9d35f8"}, @processing_unit={0xa, 0x24, 0x7, 0x5, 0x4, 0x0, "d1c78b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3d, 0x1, 0xbb, 0xff, "", "d4"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x9, 0x3}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xb2, 0x1, 0xa2, 0xf8, "ce42", "aa2441"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x9e, {0x7, 0x25, 0x1, 0x3, 0x0, 0x4d1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x0, 0x5, {0x7, 0x25, 0x1, 0x80, 0x9, 0x4}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x6, 0x8, 0x5, 0x20, 0xf6}, 0x19, &(0x7f0000000200)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "1ab35ecb983ffa2cbda56e18a04ee459"}]}, 0x1, [{0x58, &(0x7f0000000240)=@string={0x58, 0x3, "0392b0435fca7fa7265ccc2c62a60352e3fea9cb17e6b7785b65c8483dc1d414dcb0d9180a122198ca47f220680f1db56a34b1f6f697b82fa53c7fb5d791f8e9d09b5e69a1f2b9dc1fbcb6945c0fab92a5ffd53380ad"}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) r2 = socket(0x2, 0x3, 0xff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000340)={r3, 0x7fffffffffffffff, 0x10001, 0x5}) write$binfmt_aout(r5, &(0x7f0000001980)={{0x108, 0xc, 0x5, 0x357, 0x3c7, 0x5, 0x81, 0x4}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1820) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xf, r6, 0x80000000, &(0x7f0000000500)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ppoll(&(0x7f0000000240)=[{r7, 0x63}], 0x1, &(0x7f0000000280), 0x0, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000480), 0x10) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x2298, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 1.952307068s ago: executing program 2 (id=895): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x1000000, &(0x7f0000000340)=ANY=[@ANYBLOB="7247fa6461686561643d30303030303030303030303030303030303030362c00"]) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x1f, 0x0, &(0x7f0000000100)) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r5 = dup(r3) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\xb79V\xd9\xfeO\x17\xa8\xd2\xe5\xd5V\x9f\xceF\x85\x1a\a\x9e\x0fz\xb6k\xa9\xad?\xe7O\xb1\xc67T\xca\xec\x15\xc6t\xd3\xa1\x1e\xa4s\a\x19\xac\v\bN;\x02\x9ab\x9ae\x1a/\xae\xc6\xe1\x86\xd34\xb1\xfc;\xdd\x85\x93\xd3\xb6\x99]\xb5\xc4\x1d\xe5\"\xc7\x9cwKl\xa2\x9a\x9cx\f\xa6f*d\xa0z\x9c\xc1\xb1\x18\x01\xf8\xc1)F\xbd`\xac[\x860\xff\xc7\x8c\x18^\x84\x18`\xab\x0e\xb0\xe7/\x8f\x95\x87\xd6\xdb\xa5]\x01y\x15p\x8e\\\x93\xc7v\x96:\xf0v\x91\xb1{\xc3\xa09\xc8OGPI\x8e\xae\xf2_Ge\x9c\xa7\xf4\x9c\x91\xda}\x00\xa2\'$\xc4\xf4\xb0\v=d\xa9z\'Qv\x01\x13\xa6\xe9\xeb\xf9\xcf\xdc\xe3\xc0\n=\x80Y\x119\xbf'}}]}}) r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendfile(r6, r0, 0x0, 0x80000000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x1000000, &(0x7f0000000340)=ANY=[@ANYBLOB="7247fa6461686561643d30303030303030303030303030303030303030362c00"]) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$inet_tcp_buf(r4, 0x6, 0x1f, 0x0, &(0x7f0000000100)) (async) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) dup(r3) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) (async) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\xb79V\xd9\xfeO\x17\xa8\xd2\xe5\xd5V\x9f\xceF\x85\x1a\a\x9e\x0fz\xb6k\xa9\xad?\xe7O\xb1\xc67T\xca\xec\x15\xc6t\xd3\xa1\x1e\xa4s\a\x19\xac\v\bN;\x02\x9ab\x9ae\x1a/\xae\xc6\xe1\x86\xd34\xb1\xfc;\xdd\x85\x93\xd3\xb6\x99]\xb5\xc4\x1d\xe5\"\xc7\x9cwKl\xa2\x9a\x9cx\f\xa6f*d\xa0z\x9c\xc1\xb1\x18\x01\xf8\xc1)F\xbd`\xac[\x860\xff\xc7\x8c\x18^\x84\x18`\xab\x0e\xb0\xe7/\x8f\x95\x87\xd6\xdb\xa5]\x01y\x15p\x8e\\\x93\xc7v\x96:\xf0v\x91\xb1{\xc3\xa09\xc8OGPI\x8e\xae\xf2_Ge\x9c\xa7\xf4\x9c\x91\xda}\x00\xa2\'$\xc4\xf4\xb0\v=d\xa9z\'Qv\x01\x13\xa6\xe9\xeb\xf9\xcf\xdc\xe3\xc0\n=\x80Y\x119\xbf'}}]}}) (async) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) sendfile(r6, r0, 0x0, 0x80000000) (async) 1.946022188s ago: executing program 2 (id=896): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = userfaultfd(0x1) (async) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x143202, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x13, r3, 0x4758f000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ff8000/0x4000)=nil, 0x4000}}) (async) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r4, 0x4) (async, rerun: 32) connect$unix(r1, &(0x7f0000000180)=@file={0x1, './file1\x00'}, 0x6e) (async, rerun: 32) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r7 = openat$null(0xffffffffffffff9c, 0x0, 0x62a3c2, 0x0) faccessat(r7, &(0x7f00000004c0)='./file0\x00', 0x180) (async) lseek(r6, 0x401, 0x2) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$selinux_validatetrans(r6, &(0x7f00000000c0)={'system_u:object_r:pinentry_exec_t:s0', 0x20, 'system_u:object_r:modem_device_t:s0', 0x20, 0x7b14, 0x20, 'unconfined\x00'}, 0x69) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r9, 0x8010aebc, &(0x7f0000000280)) (async, rerun: 32) mkdirat(r7, &(0x7f0000000040)='./file1\x00', 0x110) (async, rerun: 32) write$selinux_validatetrans(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="73797374e56d5f753a6f626a6563745f723a73797374656d5f64627573645f7661725f72756e5f743a73302081797374656d5f753a6f626a6563745f723a7075626c69635f636f6e74656e745f743a7330203030303030303030303030303030303030313239202f7573722f7362696e2f6e74706400"], 0x76) (async, rerun: 32) process_vm_readv(0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/112, 0x70}], 0x1, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/172, 0xac}], 0x1, 0x0) (async, rerun: 32) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 1.891257049s ago: executing program 2 (id=897): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000180)={0x0, 0x10, 0x12, {0x12, 0x2, "afb6bdc5ef51f687b072ebcc1f2ae87d"}}, 0x0}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r3, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fadvise64(r4, 0x10000001003, 0x9, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1e984a11, 0x202812, r4, 0x7dfff000) mmap(&(0x7f0000785000/0x4000)=nil, 0x4000, 0x8, 0x11, r4, 0x3d7c3000) 1.654226523s ago: executing program 3 (id=898): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) (async) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000180)=0x1f5, 0x4) recvmmsg(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}, 0x4ce9}], 0x1, 0x45833af92e4b39ff, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000100)={0xa4, 0x0, 0x1}) (async) ioctl$TCFLSH(r0, 0x400455c8, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) gettid() (async) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000040)) (async) sendmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x18, 0x1, 0x1, [r5, r5]}}], 0x30, 0x4008840}, 0x4000080) ioctl$TCFLSH(r4, 0x400455c8, 0x0) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) 1.653437243s ago: executing program 3 (id=899): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r0, 0x0) read$FUSE(r8, &(0x7f0000000440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000002480)={0x50, 0xfffffffffffffff5, r9, {0x7, 0x2b, 0x6, 0x2000000, 0x7f, 0x1, 0x3, 0x2, 0x0, 0x0, 0x100, 0x4}}, 0x50) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x51bf3295, 0x101040) ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000000200)=""/225) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000002500)={0x4, 0x0, [{0x1, 0x0, 0x4}, {0xffffffff, 0x0, 0x2}, {0x9, 0x0, 0x8}, {0x10, 0x0, 0x5}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x12, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1.609585873s ago: executing program 3 (id=900): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x2c}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x88}}}], 0x70}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0xe22, 0x0, @loopback, 0x1d53d65e}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x1, @remote, 0x403}, 0x1c) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usb_connect$uac1(0x4, 0xd5, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x3, 0x1, 0xeb, 0xc0, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x72, 0x6, 0x4}, @as_header={0x7, 0x24, 0x1, 0xfc, 0x77, 0x1001}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x9, 0x2, 0x43, 0x9, "939d64ab4349c3ae28"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6, 0x1a22, 0x4, "a94f7eedb466002f"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1b, 0x1, 0xe, 0x2, "", "6f10"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7f, 0x0, 0x5, {0x7, 0x25, 0x1, 0x82, 0x8, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6d, 0x0, 0x1}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xf000, 0x1, 0xfe, 'a'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x15, 0x4, 0x5, 0xd, "90de88"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x2, 0x1}, @as_header={0x7, 0x24, 0x1, 0x80, 0x8, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x80, 0x81, 0xb, {0x7, 0x25, 0x1, 0xc2, 0xd, 0x200}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x5, 0x4, 0xd, 0xff, 0x2e}, 0x4c, &(0x7f0000000400)={0x5, 0xf, 0x4c, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x4, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x33, 0xff, 0xf0, 0x0, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x8, 0xcc}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "49139a561c5b7bd52e17d20cc9042384"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xc7, 0x2, 0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x8, 0xf000, 0x0, [0x3f00]}]}, 0x1, [{0x51, &(0x7f0000000480)=@string={0x51, 0x3, "5fe156b8c30d4bb64da1d8dd2dbb83a08789d3862a5c09885574adaaced2b4437022f280c8cb585a0f202fe4e2dae4b4f2031717277de4aa3806b44ba5a752d3ca1de97772182c2e9aea039a71f9e4"}}]}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000100)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x1000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="7ea481a8c97aa47dd1d5f1ceaad50a5e7962c17b3fec2826987b0eeeea92095b3d4d8b0d3307aa397b", 0x29}, {&(0x7f0000000240)="39083702fb4d62dfa000610461ac647c9c0850ee87d82be6fb6595e08cf4744846a3774a49ae8f3df3b50aa5dc38bf2d9a2709bc4000b2b5547a53c6088f7e22985cfdb182ee0a033868a71a53f087a1e0b1c3f6df82337a1375873303fbe92a145f5a85fd7e8f33882b7c551f4e17cb22a1413112ec440ed2753d7a2639b6f9a0576115af", 0x85}], 0x2) syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e010000082405"], 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='\x04Xk\xd5\xbe\x80\xb5R\x7f\x87\xb7jS\x97\xe89OK\xaf\x1di\x11H\xfc\xb1\xc8\xa9\xfc\xcd\xea3}C_\x83\x8c\x1e\xd6\x89i\xe3\x943\xdd\xe2r\xec\xd3\x9f\\g\x83\"') r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_fuse_handle_req(r8, &(0x7f0000002240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.2226892s ago: executing program 1 (id=901): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000009, 0x12, r2, 0x99b33000) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffdab, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b80fcaec7bf495d5c618332756cbb1bb9b96d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc790626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b000000000000000010000000100e8ffffffffffffff00000000000000"], 0x208}, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"/24]) (async) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async) readv(r5, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xc1}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x4004000) (async) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000440)="1c0000001200050f3e9b03e857aa200a00080001c000000001000000334e27ccfd61ede7339377fe37750c22562e1aea8088d9d388d77cb66a73a6667439058be3991446090000001abc319979ffc71dc28cb729f111b3809422baf878ed3c32567308ba1e9747bc168c7faceb93685bc458c8c91975a90cfb421b792af40db3505711b72622153a8b63e67dd44e1f0d238a3d97de8604a56fdf7917309904e999240b5d8c21653e2fa1e697533b8c659ad473c6fd9ecbd510a38a2b811f16e56fbc96ee8bc054626ed1836d8810b634b4deda320bc79fe2f6e05301105ba5ad182c9f0000", 0xe5, 0x40c1, 0x0, 0x0) (async) recvmsg(r8, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r8, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) 1.044487123s ago: executing program 3 (id=902): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r1 = signalfd(r0, &(0x7f0000000040)={[0x2]}, 0x8) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'nat\x00', 0x2, [{}, {}]}, 0x48) (async) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc286, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103a42, 0x18) write$FUSE_IOCTL(r3, &(0x7f0000000080)={0x20, 0x0, 0x0, {0x10000, 0x4, 0x9, 0x7}}, 0x20) (async) copy_file_range(r3, 0x0, r3, 0x0, 0xfffffffffffffffe, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r2, 0x0, 0x0) (async, rerun: 32) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x1016000, 0x1000, 0xf7fffffe, 0x4}, 0x20) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async, rerun: 64) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, 0x0, &(0x7f0000000040)) (async) keyctl$negate(0xd, 0x0, 0x5, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 1.043247233s ago: executing program 3 (id=903): r0 = eventfd(0x9) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x880) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x840, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}, {@access_user}, {@access_user}, {@version_9p2000}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@afid={'afid', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, '[%#'}}, {@fscache}, {@version_L}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@subj_user}, {@pcr={'pcr', 0x3d, 0x38}}]}}) r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0xfffffffffffffffd, 0x10080) ioctl$KVM_RUN(r2, 0xae80, 0x0) rt_sigqueueinfo(0x0, 0x1b, &(0x7f0000000200)={0x6, 0x7, 0x1}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x5) write$eventfd(r0, &(0x7f0000000280)=0x200, 0x8) r3 = openat(r2, &(0x7f00000002c0)='./file0\x00', 0x51b241, 0x3f) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, r4, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3f}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x79}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x293}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000004c0)={0x40, 0x29, 0x67, {0x67, 0xb, "f312ca803bfc4648f05712ad3743b4577a9224754913565531ddb2719181312b3e57ef4018dd805188d9e356881ca86af10880f6d2d16e85d1174df9d13d5ce35c1165216f82a00e13364f6638e8000b8f2fbd4807e7bc1b0829a2967386770464d080eb05"}}, &(0x7f0000000540)={0x0, 0x3, 0xbe, @string={0xbe, 0x3, "f8c4f2df385b5ab8ab0ff356e4ee7e84973761f24551ff26c1491ed537b8b674cf6184b8b6378bf16208b70e71c907c946391c79a99579cbb8764703023a619313eb25b682458b150445b7e544d2caab646dadc8bf3d15add57df4030c090c6e7ab4a1dd3c12c35f7ebaf01b9bc4f964b6bb0d693d07ef93dd510e301f2cc62ff2d0cce097f74fc94a9807687b780d35f975386c52f138e51d5e095c6e474bab23553dd3205c30a9766c46fe51ef0f0a170b6872d625adab990a5da5"}}, &(0x7f0000000640)={0x0, 0x22, 0x1a, {[@local=@item_012={0x1, 0x2, 0x5, '6'}, @main=@item_4={0x3, 0x0, 0x9, "f46cf79f"}, @global=@item_4={0x3, 0x1, 0x1, "ecb64032"}, @global=@item_012={0x1, 0x1, 0x4, '\r'}, @global=@item_4={0x3, 0x1, 0x4, "8f1dcaac"}, @local=@item_012={0x1, 0x2, 0x0, '#'}, @global=@item_4={0x3, 0x1, 0x1, "386f337f"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x7, 0x1, {0x22, 0x29d}}}}, &(0x7f0000000880)={0x2c, &(0x7f0000000700)={0x20, 0x30, 0x6a, "35192dcdde8d71d5cdeb4b7cd879c49ff401e576ec7754b4929b7d52bc6f46db89936e181f6cb092697273e7ce6639cee3451e2c8fff34798da094663b8cb6e609f3af634efae2ad06be1e711f48a88dbfe51444cff3ba179bd8ace6bb9ea9ff52710930ee2d1414c7ed"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x28}, &(0x7f0000000800)={0x20, 0x1, 0x28, "ac410e4e723f55a980a2623129bdfb649d292ddc84c62528d48181621aa13efe7b2895b8b69c9717"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0x6}}) r5 = socket$inet(0x2, 0x800, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001d40)={'syztnl0\x00', &(0x7f0000001cc0)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x5, 0xffffffff, 0xc, @remote, @remote, 0x1, 0x1, 0x6, 0x80000000}}) sendmsg$inet(r5, &(0x7f0000001e40)={&(0x7f00000008c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000000900)="6ba93c566c9e1b35300ed7bcfaacc937d4a4a7b35a50a3a270a2ba0aac9063d260276228a41e6c05871bd2bfa93c11437f5915b389caa315df851e177fac1e919e5e787768b12571f2d03db67e2d5d402e9886470a7689fcd753a6a7cecfe46d3fe0b6ce68a02a2a5c9dc8be879a7da91df208eb88fe699c2f81c6d260b389282e07702ab009f980053234cd44422b9f5ad33972fcdfab7692200b56c811ae1edec4ab0817d3f76b0fc801e5735d4be31ce9998733c8b5ca4162684e788c792ee986d1b1935056832a576ef50e747b15ee736d88e9de92ae74f8f161010ba8d57d34", 0xe2}, {&(0x7f0000000a00)="0f19a6e0baca18ca17386145bbcb8c491950a697b99c6af3dcc7bb665e65eafce3dfa96459d0d8d5b3187b18405afd6aaf4bc5bb140344b49ad68c8283684f2b10c8aa76bac054f454c3f89870f27b774069eb59d1ddbf76e96e485c8c9ef403f3a519227e68a41123c1d88ddced9641150850f327ae4115c4f981f10f206765dbcfddbd10c3d926441ea6aef802342d5af1f697e25f04c43bea1977c994167394b34c24", 0xa4}, {&(0x7f0000000ac0)="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", 0xfb}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="a514277bd3ff904aa87fc3cfe75a4f79281833b58d7d21ef590174b48176732ba3a114760208afd46cb4632f9788a2fb8181b11eed4c0f22b92f8d5af022f0c6cff1a5a37a2529b4b750479884d0889aab60004c75369ad9ba95", 0x5a}], 0x5, &(0x7f0000001d80)=[@ip_retopts={{0x50, 0x0, 0x7, {[@cipso={0x86, 0x13, 0x0, [{0x7, 0x4, "fa58"}, {0x6, 0x9, "2ff5890023ccb1"}]}, @timestamp={0x44, 0x18, 0xa, 0x0, 0x3, [0x2, 0xfffffff9, 0xffff, 0xb, 0x600000]}, @generic={0x88, 0x8, "8c02731f6831"}, @timestamp_prespec={0x44, 0xc, 0xe4, 0x3, 0x3, [{@private=0x6, 0x1}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8c61}}], 0xa0}, 0x1c800) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000001e80)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000001ec0)=0x9, 0x4) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001f00), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r7, 0x4008af22, &(0x7f0000001f40)={0x3, r2}) statx(r2, &(0x7f0000001fc0)='./file0\x00', 0x4000, 0x80, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r3, &(0x7f00000025c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002580)={&(0x7f0000002100)={0x454, 0x20, 0x8, 0x70bd2d, 0x25dfdbfc, {0x11}, [@typed={0x8, 0x25, 0x0, 0x0, @uid=r8}, @typed={0x8, 0xc9, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x62, 0x0, 0x0, @fd=r1}, @generic="759d0c295e51c889c875fb1fbe0a20d3e6eacd800a8c483f28aa072e02017db9943ad7816cd2ca42e9e4c5221e32ea61e2e38a965a5b33779bce2ceac92694855d1ae3847201f12ae4dc8a56efcba506ab2d31934a88967adccbddaddbbd4207178409dbab176fbefce9", @nested={0xff, 0x33, 0x0, 0x1, [@nested={0x4, 0x94}, @generic="6913b7211c507616ae51517e3c26af5819d3ffed0331e2c6358f6b83c1b4adaa6d09ceaec428ba44919ff5da5a7363123bf396bdf7709c2d943e1f21a479fa7d07b1100ce79762b927041d3bcb09baf7454c679ae757666bd60f6a023fb0a6a234580f6e70542c800f85ac1d73d40a6aad", @nested={0x4, 0x4a}, @generic="f7fee2838be84a293b3c9b3c1b20a7c379011dfaa5b7d0added79e0d82d7429aa0e2b81ec0cb9f90c22e618b5c3ddf16eb105929b0a638384cd0cee89108c161d6281002b2858640a555fed3b624fa016b1a616c31240a39b8e2d95fa569dc98ac99c794090c1bbcea4539195096114b8b39c2a61d2655561dc139c6e4744440017e"]}, @typed={0x8, 0xf5, 0x0, 0x0, @u32}, @nested={0x2b0, 0xb7, 0x0, 0x1, [@nested={0x4, 0x44}, @generic="ad3042f5a02045a4b92f91b048149dec7faa6eee55b9c08545ec1251612bbeed904891fa649a540a59cb0d4f4a68f9fcf1455cbcb174f0d86a2055d67c28e7022321dfb6589bc72b5ffef18bfc10da34b9f9e174a36c2469e2725c9ac22e", @typed={0x8, 0xcb, 0x0, 0x0, @ipv4=@broadcast}, @generic="0405dac589f3f5dc64a3c77a2bdf640b201e45aae22bb0e81bdd5311bb5920a05f04ff9462aae2b1e7e944cc3cb1dfa94b4b45690b8efeab576f77bf7370c34e585334a429e12d44c843d9b5c04a72eae625f4d9f03f113b1ebd68ffce5427177d1d557cab8ae248748908221ba96f0a9e9b35f51812a52aa049c64bbaf9a578beb07c80268bb8d43e7b44d12cb8aff343f59246411193e9", @typed={0x8, 0xd0, 0x0, 0x0, @u32=0xe}, @generic="7896586e07531d51691079d2d5839a142aaad295d1a5b265e1717a49a65cd80734fea381ccfcde498e9e78a97f43ede209842695f1d1d2e607719c2c6721395865ee0f4bceca76f15111d00163890316d5953f355cbd7e8499a7b014f01a50791df7f71be56ba0c21df05ecbebcfa5062ad18298632f8cb5fe0fabc06dc8fac7e6c5c3cdd10df1a60ede13fdfd1124a752a57261a1492dc9f4f4d828e6930ab4db931786c859702f4ae0b1da", @nested={0x4, 0x150}, @generic="bcdfa1fe4d1ff45c0c333e038d767e2c52c31b944457f0b4236bd1e0c6ab37a89e98e6d0f6479902dff3a7e4d911e8b24b96f18d2054a4769694479fddbd274f4e2d50d43d685deb27ed4b898a38c40c6534ceb812eec791ecda987085d162cba9e79c039be079d61ef6812027e7619260bf2ae871dd638594f7107d996124ffcabae8ab13bd45d82c2884432114c78628b640e696b2eaa1798b", @nested={0x4, 0xe8}, @generic="7701532dc6a44e78e833fcba6dbb279fc386f1f30c2ac85c7491e136360c247b8352b984bc850e430d99d6d71f6bb986c4f6a0f887cbee664a7b037cdf6f6dbf6980501ed33e4b71bfe1e0d63d94a847b4b12c1b"]}, @typed={0x4, 0xbc}]}, 0x454}}, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x1) ioctl$TIOCNOTTY(r3, 0x5422) r9 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x0, r9, 0x2, 0x0) read$FUSE(r3, &(0x7f0000002600)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004640)={0x50, 0x0, r10, {0x7, 0x2b, 0x89, 0x2, 0x9, 0x101, 0x78be, 0x0, 0x0, 0x0, 0x2, 0x7}}, 0x50) connect$inet(r2, &(0x7f00000046c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000004bc0)={0x24, &(0x7f0000004a80)={0x40, 0x3, 0x90, {0x90, 0xe, "d40fd3c7ff940bbf061fe644aa2a56cfb67daafe54f5c7c6e7c6a6339158fec57d77d07d9536f44606d568ecd523868b9f85a2288edbbdfcf00072e09417d6c46081931ff5b09fd9c428f14aa519673548dbcea9f55b5ab50d94b742a84f74cc3854ee8fc5b0a683c70a2d3266a2379f1d80422480f7ffb03ed2e4ba85429b74b37eaecdcf05d0120f2821becef7"}}, &(0x7f0000004b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x457}}, &(0x7f0000004b80)={0x0, 0x22, 0xe, {[@main=@item_012={0x1, 0x0, 0xc, "e5"}, @local=@item_4={0x3, 0x2, 0xa, "1480765b"}, @local=@item_012={0x1, 0x2, 0x7, ')'}, @main=@item_4={0x3, 0x0, 0x9, "905e6e1a"}]}}, 0xfffffffffffffffc}, &(0x7f0000004ec0)={0x2c, &(0x7f0000004c00)={0x40, 0xe, 0xd4, "9238ef9343439902810ce9c5378efca0578bdbd49bccf39ae2887800bc3c9a2c7135611fdae49202481ef7c4f8e5fefa736bef3d4f8614a76fd4ee381cfaa6e813a7dcb893cc5dc464720d15d135daf83942da4f1f4a2489c42d63129e76fa9ee740cc65e5aae95e576b22bdfd9bc239a65bb3f875d6bd7c8cc443eaee1ff4daac404046eb372108330501544d2b13921b62cff7eb5e9af9cc3752986461b0d945e0d523c8399cf0a169d06a92c84bac0d8ed7e93d1b2880b966c9a93473838b95c932091b5c80ebd65f05f5b3e76a188738e51a"}, &(0x7f0000004d00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000004d40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000004d80)={0x20, 0x1, 0xcf, "cf1ea3573580fb03f69a2bcfe2efd5f7358291d39e80fad379e79a30b7aa62e6f82c7c3aaea421864607993919def39e99d1b8a7c7aeb39907b2cbd53b1cf246dd735e2b37fcac8ca90c65bc09284146bbe82513dd402676d9e85f92418f24767f8b4423c36d1841b4188d95e7823f818266c90ab0985b7ac57ae7f98c45c12b89072c96b3b73c24b6bea2e458b5b06af6605ada238321226ab3164ecbb0742803da59e2badbb261bffef3bbd9414bff4c0b1d66b35e5bd00bcad512e6102a95dfb105ce8b24351716dc312e6e7bd4"}, &(0x7f0000004e80)={0x20, 0x3, 0x1, 0x3}}) 917.929515ms ago: executing program 0 (id=904): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000140)={0xc7, 0x0, 0x1}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000080)='f2fs\x00', 0x200000, 0x0) 817.195117ms ago: executing program 0 (id=905): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async, rerun: 64) r1 = socket(0xa, 0x3, 0x3a) (rerun: 64) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r4, r4, 0x0) (async) setresuid(0x0, 0x0, r4) (async, rerun: 32) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (rerun: 32) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000000f70695000040"]) (async, rerun: 64) r7 = socket(0xa, 0x3, 0x3a) (rerun: 64) close_range(r0, r7, 0x0) 517.987241ms ago: executing program 3 (id=906): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x8, 0x0, 0x6b}}]}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="090a0e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) unshare(0x20000400) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000080)=[{r3, 0x8080}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x4040, 0x5c) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00'}) ioctl$RTC_UIE_OFF(r0, 0x7004) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x80000) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000000200)=""/2) socket$inet6(0xa, 0x3, 0x84) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x180, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@private, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x180}}, 0x0) getpgrp(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 284.102166ms ago: executing program 1 (id=907): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000140)=""/153) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49de, 0xfff6, 0x3, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x40, 0x1c, "0062ba7d820000a75e0000000000fcff00"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000240)=0xa) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000040)) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x1) bind$pptp(r7, &(0x7f0000000280)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1c00000020007fafb72d13b2a4a2719302000000030b43026c262369", 0x1c}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 229.294727ms ago: executing program 2 (id=908): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001}) read$FUSE(r2, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x2b, 0xc, 0x40000400, 0xe, 0x3, 0x8, 0x631, 0x0, 0x0, 0x10, 0x4}}, 0x50) pipe2(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1f0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10000, 0xa8) r6 = openat$incfs(r5, &(0x7f0000000080)='.pending_reads\x00', 0x200, 0x110) sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x3fa, 0x10, 0x70bd2c, 0x25dfdbfc, {0x1, 0x1, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x303, 0x0, 0x0, 0x101, 0x0}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x2b00000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) setresuid(r4, r4, r4) 134.099728ms ago: executing program 2 (id=909): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000180)=0xba, 0x4) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0xa3f}], 0x1, 0x102, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="0c9c7652971832dbe1b31a4aa5f8006b00001080000000008da33ed3cf1113496f00000000000000", 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) sendto$inet(r1, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket(0xa, 0x3, 0x3a) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=910): socket$can_raw(0x1d, 0x3, 0x1) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000001080), 0x10) (async) bind$can_raw(r0, &(0x7f0000001080), 0x10) read(r0, &(0x7f00000027c0)=""/4102, 0x1006) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f00000003c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "06989974bed4755d"}, 0x10}, 0x1, 0x0, 0x0, 0x48021}, 0x20000001) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x402000, 0x1, 0x2a}, 0x18) sendmsg$can_raw(r5, &(0x7f0000000480)={&(0x7f0000000300), 0x10, &(0x7f0000000440)={&(0x7f0000000400)=@can={{0x0, 0x1}, 0x0, 0x3, 0x0, 0x0, "93029f5354606207"}, 0x10}}, 0x400c4) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) (async) recvmmsg(r4, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x5453, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r6, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 16275][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.123366][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.130470][ T290] bridge_slave_0: entered allmulticast mode [ 27.136926][ T290] bridge_slave_0: entered promiscuous mode [ 27.146796][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.154158][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.161238][ T289] bridge_slave_0: entered allmulticast mode [ 27.167690][ T289] bridge_slave_0: entered promiscuous mode [ 27.174136][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.181185][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.188312][ T289] bridge_slave_1: entered allmulticast mode [ 27.194669][ T289] bridge_slave_1: entered promiscuous mode [ 27.203731][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.210792][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.217941][ T290] bridge_slave_1: entered allmulticast mode [ 27.224443][ T290] bridge_slave_1: entered promiscuous mode [ 27.290706][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.298065][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.305215][ T291] bridge_slave_0: entered allmulticast mode [ 27.311571][ T291] bridge_slave_0: entered promiscuous mode [ 27.323426][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.330490][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.337717][ T291] bridge_slave_1: entered allmulticast mode [ 27.344122][ T291] bridge_slave_1: entered promiscuous mode [ 27.449900][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.456999][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.483449][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.490526][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.498069][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.505123][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.530402][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.537511][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.544836][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.551876][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.566018][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.573094][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.580421][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.587477][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.623737][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.631240][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.639243][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.646835][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.654189][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.662105][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.669657][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.692215][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.699331][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.707914][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.715000][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.742872][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.749985][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.758366][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.765486][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.780497][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.787609][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.805721][ T292] veth0_vlan: entered promiscuous mode [ 27.813987][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.821051][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.829109][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.836200][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.848450][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.855559][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.885863][ T292] veth1_macvtap: entered promiscuous mode [ 27.905519][ T289] veth0_vlan: entered promiscuous mode [ 27.923080][ T290] veth0_vlan: entered promiscuous mode [ 27.939535][ T291] veth0_vlan: entered promiscuous mode [ 27.951536][ T290] veth1_macvtap: entered promiscuous mode [ 27.962587][ T289] veth1_macvtap: entered promiscuous mode [ 27.982206][ T291] veth1_macvtap: entered promiscuous mode [ 28.035115][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.087001][ T311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 28.312454][ T338] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.322018][ T338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 28.334968][ T330] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.7'. [ 28.355080][ T65] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.413866][ T330] /dev/nbd1: Can't lookup blockdev [ 28.466957][ T343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=343 comm=syz.3.11 [ 28.481989][ T343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11'. [ 28.514284][ T65] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.525006][ T65] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 28.543948][ T345] ======================================================= [ 28.543948][ T345] WARNING: The mand mount option has been deprecated and [ 28.543948][ T345] and is ignored by this kernel. Remove the mand [ 28.543948][ T345] option from the mount to silence this warning. [ 28.543948][ T345] ======================================================= [ 28.552351][ T65] usb 3-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=45.a9 [ 28.590530][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.592655][ T345] overlayfs: failed to clone upperpath [ 28.600858][ T65] usb 3-1: Product: syz [ 28.609385][ T65] usb 3-1: Manufacturer: syz [ 28.614369][ T65] usb 3-1: SerialNumber: syz [ 28.621404][ T65] r8152-cfgselector 3-1: Unknown version 0x0000 [ 28.638175][ T65] r8152-cfgselector 3-1: config 0 descriptor?? [ 28.638979][ T351] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.649253][ T65] r8152 3-1:0.0: Expected endpoints are not found [ 28.808943][ T367] Zero length message leads to an empty skb [ 28.849021][ T316] binder: Unknown parameter '' [ 28.856918][ T65] r8152-cfgselector 3-1: USB disconnect, device number 2 [ 29.143256][ T308] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.295293][ T308] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 29.310624][ T308] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 29.319787][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 29.328021][ T308] usb 2-1: Product: syz [ 29.332205][ T308] usb 2-1: Manufacturer: syz [ 29.336900][ T308] usb 2-1: SerialNumber: syz [ 29.342213][ T308] usb 2-1: config 0 descriptor?? [ 29.348253][ T308] cdc_acm 2-1:0.0: Zero length descriptor references [ 29.355061][ T308] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 29.549380][ T373] rust_binder: Write failure EFAULT in pid:22 [ 29.549996][ T308] usb 2-1: USB disconnect, device number 2 [ 29.613231][ T65] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.763191][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 29.770191][ T65] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 29.779062][ T65] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 29.789496][ T65] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.799919][ T65] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 29.809038][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.817130][ T65] usb 3-1: Product: ⤟≑䡚⚈损㎤怡ꃺ簢㟞Ს䓢儀뺈￲ꢁ폨픠鼥㈁堷䋸ꑌ⨥风쌠廭퉝﹂ࢉ睋耿ٚ莣絪쟽ન默䴥䱌汯붐껧吏㖫䝮㈣ [ 29.835147][ T65] usb 3-1: Manufacturer: С [ 29.839694][ T65] usb 3-1: SerialNumber: ࠉ [ 30.048760][ T65] usb 3-1: 0:2 : does not exist [ 30.064679][ T65] usb 3-1: USB disconnect, device number 3 [ 30.075894][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.207870][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 30.207889][ T36] audit: type=1400 audit(1751260367.310:154): avc: denied { create } for pid=382 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.240867][ T36] audit: type=1400 audit(1751260367.310:155): avc: denied { write } for pid=382 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.261742][ T36] audit: type=1400 audit(1751260367.310:156): avc: denied { read } for pid=382 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.282629][ T36] audit: type=1400 audit(1751260367.320:157): avc: denied { create } for pid=382 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.303653][ T36] audit: type=1400 audit(1751260367.438:158): avc: denied { write } for pid=385 comm="syz.1.27" name="icmp6" dev="proc" ino=4026532608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 30.740426][ T36] audit: type=1400 audit(1751260367.908:159): avc: denied { ioctl } for pid=397 comm="syz.2.30" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 30.780558][ T36] audit: type=1400 audit(1751260367.938:160): avc: denied { ioctl } for pid=397 comm="syz.2.30" path="socket:[3690]" dev="sockfs" ino=3690 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.949051][ T36] audit: type=1400 audit(1751260368.118:161): avc: denied { name_bind } for pid=412 comm="syz.2.32" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 30.977500][ T36] audit: type=1400 audit(1751260368.118:162): avc: denied { node_bind } for pid=412 comm="syz.2.32" saddr=fe88::ff03 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 30.999603][ T36] audit: type=1400 audit(1751260368.118:163): avc: denied { view } for pid=412 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 31.193026][ T444] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 31.538023][ T463] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 31.553215][ T65] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.573215][ T308] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.618408][ T467] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 31.625936][ T467] rust_binder: Write failure EINVAL in pid:18 [ 31.642094][ T470] option changes via remount are deprecated (pid=469 comm=syz.0.48) [ 31.656674][ T470] tmpfs: Unknown parameter '' [ 31.713184][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 31.719633][ T65] usb 2-1: config 0 has no interfaces? [ 31.726962][ T65] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 31.743171][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.744404][ T308] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 31.760653][ T65] usb 2-1: Product: syz [ 31.760682][ T308] usb 3-1: config 1 has no interface number 0 [ 31.765369][ T65] usb 2-1: Manufacturer: syz [ 31.771561][ T308] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.786960][ T65] usb 2-1: SerialNumber: syz [ 31.788448][ T308] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 31.792689][ T65] usb 2-1: config 0 descriptor?? [ 31.806105][ T308] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 31.821520][ T308] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.843031][ T308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.851922][ T308] usb 3-1: Product: syz [ 31.856377][ T308] usb 3-1: Manufacturer: syz [ 31.861024][ T308] usb 3-1: SerialNumber: syz [ 32.023379][ T499] tipc: Started in network mode [ 32.028378][ T499] tipc: Node identity 111, cluster identity 4711 [ 32.034957][ T499] tipc: Node number set to 273 [ 32.068855][ T501] /dev/nbd0: Can't lookup blockdev [ 32.118467][ T45] usb 2-1: USB disconnect, device number 3 [ 32.125853][ T509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:44 [ 32.422038][ T529] rust_binder: Write failure EINVAL in pid:63 [ 32.432039][ T529] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63 [ 32.487726][ T308] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 32.495261][ T531] rust_binder: Write failure EINVAL in pid:63 [ 32.496944][ T308] cdc_ncm 3-1:1.1: bind() failure [ 32.515976][ T308] usb 3-1: USB disconnect, device number 4 [ 32.669030][ T540] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 32.678389][ T540] tipc: Started in network mode [ 32.683318][ T540] tipc: Node identity 9605de7f1052, cluster identity 4711 [ 32.690541][ T540] tipc: Enabled bearer , priority 0 [ 32.751489][ T544] tmpfs: Invalid uid '0x00000000ffffffff' [ 32.823563][ T556] netlink: 188 bytes leftover after parsing attributes in process `syz.3.76'. [ 32.832599][ T556] capability: warning: `syz.3.76' uses deprecated v2 capabilities in a way that may be insecure [ 32.845518][ T540] tipc: Disabling bearer [ 32.867901][ T556] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.042024][ T584] kvm_intel: kvm [583]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 33.162228][ T602] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 33.162887][ T602] rust_binder: Error while translating object. [ 33.162948][ T603] rust_binder: Error while translating object. [ 33.172379][ T602] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.182213][ T603] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.192387][ T602] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 33.195253][ T603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 33.274676][ T609] SELinux: Context o is not valid (left unmapped). [ 33.779444][ T628] netlink: 5 bytes leftover after parsing attributes in process `syz.2.100'. [ 34.381549][ T666] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.429626][ T670] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=670 comm=syz.3.115 [ 34.446260][ T670] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=670 comm=syz.3.115 [ 34.460739][ T670] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=670 comm=syz.3.115 [ 34.474456][ T670] process 'syz.3.115' launched './file0' with NULL argv: empty string added [ 34.514685][ T673] overlayfs: failed to clone upperpath [ 34.530322][ T673] overlayfs: failed to clone upperpath [ 34.931929][ T681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.941199][ T681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.990318][ T686] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 34.990372][ T686] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 35.004017][ T686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:111 [ 35.074412][ T692] netlink: 'syz.3.122': attribute type 1 has an invalid length. [ 35.116084][ T694] netlink: 5 bytes leftover after parsing attributes in process `syz.3.123'. [ 35.125169][ T694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=694 comm=syz.3.123 [ 35.293246][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.333183][ T308] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 35.436857][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 35.436878][ T36] audit: type=1400 audit(2000000000.340:233): avc: denied { connect } for pid=702 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.444795][ T703] rust_binder: Error while translating object. [ 35.462545][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 35.469120][ T36] audit: type=1400 audit(2000000000.340:234): avc: denied { create } for pid=702 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.474330][ T703] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 35.493709][ T703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:66 [ 35.494159][ T36] audit: type=1400 audit(2000000000.340:235): avc: denied { setopt } for pid=702 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.511515][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 35.543321][ T36] audit: type=1400 audit(2000000000.440:236): avc: denied { execute } for pid=704 comm="syz.0.127" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.546988][ T308] usb 2-1: not running at top speed; connect to a high speed hub [ 35.574786][ T45] usb 3-1: config 1 has an invalid interface descriptor of length 4, skipping [ 35.586207][ T308] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 35.587840][ T36] audit: type=1400 audit(2000000000.490:237): avc: denied { setopt } for pid=710 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.600519][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.626935][ T308] usb 2-1: config 1 interface 0 has no altsetting 0 [ 35.635840][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.644914][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 35.658561][ T308] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 35.667689][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.675820][ T308] usb 2-1: Product: syz [ 35.680117][ T308] usb 2-1: Manufacturer: 貀䆹Á㙌󬦙㩌ᎇ옶ʀ늝ꍟ킣㕯퇋枒쳔툟盝끓虯쟊鱸큁ላ䠲퓢睪읯蓝丐ￅ鸣葔ࡌ䉩鬴ᕧ똂酨䦪傜服ᘋ袅髯ꍂ씄ᾏ䷚渡殺⠰隵ﳖ붉ࣱ熫澑퇪嫩뷖鐟፯ꔬ뭨渚視崰졷㽭钏槦ꉃ缋悥⌓횳桬晫᚛ﯓ䌷닏（⊖ঽ⪯ꏄ [ 35.710288][ T308] usb 2-1: SerialNumber: syz [ 35.715003][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 35.724088][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.732083][ T45] usb 3-1: Product: syz [ 35.736873][ T45] usb 3-1: Manufacturer: syz [ 35.742088][ T687] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 35.744214][ T45] usb 3-1: SerialNumber: syz [ 35.962353][ T690] rust_binder: Error while translating object. [ 35.962384][ T690] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 35.968858][ T690] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:114 [ 35.981716][ T45] usb 3-1: 0:2 : does not exist [ 35.998355][ T45] usb 3-1: USB disconnect, device number 5 [ 36.067839][ T36] audit: type=1400 audit(2000000000.970:238): avc: denied { sqpoll } for pid=717 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 36.087723][ T36] audit: type=1400 audit(2000000000.970:239): avc: denied { map } for pid=717 comm="syz.3.130" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.111763][ T36] audit: type=1400 audit(2000000000.970:240): avc: denied { read write } for pid=717 comm="syz.3.130" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.157346][ T308] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 36.171368][ T308] usb 2-1: USB disconnect, device number 4 [ 36.178835][ T308] usblp0: removed [ 36.593660][ T728] rust_binder: Error while translating object. [ 36.593689][ T728] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 36.599943][ T728] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:121 [ 36.646317][ T734] bpf: Bad value for 'uid' [ 36.688240][ T36] audit: type=1400 audit(2000000001.590:241): avc: denied { map } for pid=735 comm="syz.1.138" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 36.719289][ T36] audit: type=1326 audit(2000000001.590:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=737 comm="syz.3.139" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4a618e929 code=0x0 [ 36.813257][ T468] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.943213][ T468] usb 1-1: device descriptor read/64, error -71 [ 37.023192][ T308] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.113299][ T65] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 37.173193][ T308] usb 2-1: Using ep0 maxpacket: 16 [ 37.179534][ T308] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 37.188682][ T308] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.193204][ T468] usb 1-1: device descriptor read/64, error -71 [ 37.199201][ T308] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.215700][ T308] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 37.224926][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.233004][ T308] usb 2-1: Product: syz [ 37.237325][ T308] usb 2-1: Manufacturer: syz [ 37.241929][ T308] usb 2-1: SerialNumber: syz [ 37.284373][ T65] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.295462][ T65] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 37.306173][ T65] usb 3-1: config 0 interface 0 has no altsetting 0 [ 37.312813][ T65] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 37.321927][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.330952][ T65] usb 3-1: config 0 descriptor?? [ 37.336275][ T750] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 37.453231][ T468] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.583219][ T468] usb 1-1: device descriptor read/64, error -71 [ 37.649669][ T308] usb 2-1: 0:2 : does not exist [ 37.801559][ T767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.812331][ T767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.833236][ T468] usb 1-1: device descriptor read/64, error -71 [ 37.842221][ T65] usbhid 3-1:0.0: can't add hid device: -71 [ 37.851880][ T65] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 37.856532][ T771] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 37.870297][ T65] usb 3-1: USB disconnect, device number 6 [ 37.945776][ T468] usb usb1-port1: attempt power cycle [ 37.968220][ T779] futex_wake_op: syz.3.153 tries to shift op by 144; fix this program [ 38.031696][ T789] tipc: Enabling of bearer rejected, failed to enable media [ 38.140779][ T808] fuse: Unknown parameter '184467440737095516150xffffffffffffffff' [ 38.213291][ T65] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 38.247458][ T817] cgroup: fork rejected by pids controller in /syz3 [ 38.276077][ T308] usb 2-1: USB disconnect, device number 5 [ 38.290989][ T468] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.322633][ T852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 38.324297][ T468] usb 1-1: device descriptor read/8, error -71 [ 38.374260][ T65] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 38.391047][ T65] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 38.402503][ T65] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 38.411691][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.419765][ T65] usb 3-1: Product: syz [ 38.424025][ T65] usb 3-1: Manufacturer: syz [ 38.428663][ T65] usb 3-1: SerialNumber: syz [ 38.437106][ T65] usb 3-1: config 0 descriptor?? [ 38.442427][ T775] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 38.449735][ T775] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 38.474179][ T468] usb 1-1: device descriptor read/8, error -71 [ 38.658364][ T775] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 38.665660][ T775] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 38.713211][ T468] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 38.734265][ T468] usb 1-1: device descriptor read/8, error -71 [ 38.864219][ T468] usb 1-1: device descriptor read/8, error -71 [ 38.973359][ T468] usb usb1-port1: unable to enumerate USB device [ 39.098374][ T902] rust_binder: Write failure EINVAL in pid:121 [ 39.343188][ T308] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 39.481597][ T775] IPv6: NLM_F_CREATE should be specified when creating new route [ 39.503252][ T308] usb 2-1: Using ep0 maxpacket: 32 [ 39.508881][ T308] usb 2-1: no configurations [ 39.513563][ T308] usb 2-1: can't read configurations, error -22 [ 39.690723][ T775] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 39.711337][ T775] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 39.731015][ T775] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 39.749624][ T775] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 39.776918][ T65] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 39.816147][ T65] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 39.849975][ T65] usb 3-1: USB disconnect, device number 7 [ 39.863407][ T65] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 40.076100][ T308] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 40.110842][ T950] overlayfs: missing 'lowerdir' [ 40.233222][ T308] usb 2-1: Using ep0 maxpacket: 32 [ 40.238919][ T308] usb 2-1: no configurations [ 40.243843][ T308] usb 2-1: can't read configurations, error -22 [ 40.250295][ T308] usb usb2-port1: attempt power cycle [ 40.290497][ T955] binder: Bad value for 'max' [ 40.373195][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 40.523183][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 40.529540][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.539714][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.550256][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 40.559397][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.568395][ T45] usb 1-1: Product: syz [ 40.572587][ T45] usb 1-1: Manufacturer: syz [ 40.577220][ T45] usb 1-1: SerialNumber: syz [ 40.603226][ T308] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 40.623602][ T308] usb 2-1: Using ep0 maxpacket: 32 [ 40.629151][ T308] usb 2-1: no configurations [ 40.633969][ T308] usb 2-1: can't read configurations, error -22 [ 40.707418][ T975] tipc: Enabling of bearer rejected, failed to enable media [ 40.744314][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 40.744334][ T36] audit: type=1400 audit(2000000005.650:257): avc: denied { ioctl } for pid=978 comm="syz.3.205" path="socket:[7268]" dev="sockfs" ino=7268 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.775031][ T308] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 40.782860][ T36] audit: type=1400 audit(2000000005.660:258): avc: denied { nlmsg_read } for pid=980 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.812063][ T45] usb 1-1: 0:2 : does not exist [ 40.823486][ T308] usb 2-1: Using ep0 maxpacket: 32 [ 40.829046][ T308] usb 2-1: no configurations [ 40.833716][ T308] usb 2-1: can't read configurations, error -22 [ 40.840128][ T308] usb usb2-port1: unable to enumerate USB device [ 40.846577][ T45] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 40.858407][ T45] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 40.868390][ T45] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 40.878346][ T45] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 40.888268][ T45] usb 1-1: USB disconnect, device number 6 [ 41.257351][ T36] audit: type=1400 audit(2000000006.160:259): avc: denied { setopt } for pid=988 comm="syz.2.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.296789][ T991] rust_binder: Write failure EINVAL in pid:151 [ 41.306832][ T993] FAT-fs (rnullb0): bogus number of reserved sectors [ 41.319861][ T993] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 41.335792][ T996] overlayfs: unescaped trailing colons in lowerdir mount option. [ 41.356456][ T993] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 41.365006][ T996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.379732][ T996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.436339][ T36] audit: type=1400 audit(2000000006.340:260): avc: denied { read } for pid=1010 comm="syz.2.218" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 41.473398][ T36] audit: type=1400 audit(2000000006.340:261): avc: denied { open } for pid=1010 comm="syz.2.218" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 41.498322][ T36] audit: type=1400 audit(2000000006.360:262): avc: denied { ioctl } for pid=1010 comm="syz.2.218" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 41.536372][ T36] audit: type=1400 audit(2000000006.440:263): avc: denied { listen } for pid=1021 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.613196][ T65] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 41.650033][ T296] tipc: Subscription rejected, illegal request [ 41.656403][ T36] audit: type=1400 audit(2000000006.550:264): avc: denied { read } for pid=1040 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.701480][ T1049] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 41.743182][ T65] usb 1-1: device descriptor read/64, error -71 [ 41.804904][ T1054] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.993195][ T65] usb 1-1: device descriptor read/64, error -71 [ 42.043222][ T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 42.129755][ T1058] rust_binder: Error in use_page_slow: ESRCH [ 42.129772][ T1058] rust_binder: use_range failure ESRCH [ 42.132934][ T36] audit: type=1400 audit(2000000007.030:265): avc: denied { write } for pid=1056 comm="syz.1.235" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.166648][ T1058] rust_binder: Failed to allocate buffer. len:4192, is_oneway:false [ 42.166687][ T1058] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 42.174873][ T1058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:125 [ 42.194041][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 42.209488][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.220200][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.230998][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 42.232168][ T1063] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.240365][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.243272][ T65] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 42.247642][ T45] usb 3-1: Product: syz [ 42.267994][ T45] usb 3-1: Manufacturer: syz [ 42.272849][ T45] usb 3-1: SerialNumber: syz [ 42.403198][ T65] usb 1-1: device descriptor read/64, error -71 [ 42.478126][ T36] audit: type=1400 audit(2000000000.190:266): avc: denied { mount } for pid=1073 comm="syz.1.240" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.500169][ T1054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:168 [ 42.502243][ T45] usb 3-1: 0:2 : does not exist [ 42.518959][ T45] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 42.532985][ T45] usb 3-1: USB disconnect, device number 8 [ 42.643325][ T1081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 42.653187][ T65] usb 1-1: device descriptor read/64, error -71 [ 42.764105][ T65] usb usb1-port1: attempt power cycle [ 43.108760][ T1096] 9pnet_fd: Insufficient options for proto=fd [ 43.113208][ T65] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 43.154662][ T65] usb 1-1: device descriptor read/8, error -71 [ 43.294285][ T65] usb 1-1: device descriptor read/8, error -71 [ 43.545163][ T65] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 43.584259][ T65] usb 1-1: device descriptor read/8, error -71 [ 43.686349][ T1122] tmpfs: Unknown parameter 'eid<18446744073709551615' [ 43.714287][ T65] usb 1-1: device descriptor read/8, error -71 [ 43.716857][ T1124] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:150 [ 43.833299][ T65] usb usb1-port1: unable to enumerate USB device [ 44.028241][ T1142] netlink: 'syz.2.264': attribute type 58 has an invalid length. [ 44.093333][ T1144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.093584][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.103621][ T1140] rust_binder: Error while translating object. [ 44.110806][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.117596][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.124214][ T1140] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 44.131380][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.141219][ T1140] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:163 [ 44.147960][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.160026][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.166910][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.173669][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.180198][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.187039][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.196686][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.203450][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.209976][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.216813][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.232332][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.239070][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.246348][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.252869][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.259763][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.266465][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.282244][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.295818][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.302657][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.309881][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.316688][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.334370][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.341592][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.348447][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.355593][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.362302][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.369133][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.376071][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.382597][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.410059][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.417869][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.424758][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.431204][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.466777][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.473550][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.489193][ T1167] overlayfs: failed to clone lowerpath [ 44.503193][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.503223][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.509700][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.529969][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.536804][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.543586][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.551176][ T1169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:96 [ 44.560690][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.582724][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.589526][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.596212][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.602830][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.609713][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.616437][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.623863][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.631041][ T1176] can0: slcan on ptm1. [ 44.633068][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.641782][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.658410][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.670236][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.677029][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.687884][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.694467][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.706996][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.714400][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.739548][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.761423][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.777856][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.882381][ T1208] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.895334][ T1208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:191 [ 45.128340][ T1208] rust_binder: Error while translating object. [ 45.137761][ T1208] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.144264][ T1208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:191 [ 45.255259][ T1173] can0 (unregistered): slcan off ptm1. [ 45.283255][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 45.444232][ T45] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 45.452444][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.462618][ T45] usb 2-1: config 0 has no interface number 0 [ 45.470072][ T45] usb 2-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 45.479179][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.487460][ T45] usb 2-1: Product: syz [ 45.489500][ T1250] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 21) [ 45.491694][ T1250] rust_binder: Error while translating object. [ 45.491717][ T45] usb 2-1: Manufacturer: syz [ 45.503635][ T1250] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.514039][ T1250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:108 [ 45.516825][ T45] usb 2-1: SerialNumber: syz [ 45.538470][ T45] usb 2-1: config 0 descriptor?? [ 45.745087][ T1215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.760310][ T1215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.769188][ T1215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.777848][ T1215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.789552][ T1215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.798742][ T1215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.807588][ T1215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.816785][ T1215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.825581][ T1215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.834290][ T1215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.851762][ T45] usb 2-1: Found UVC 0.00 device syz (056d:0000) [ 45.858690][ T45] usb 2-1: No valid video chain found. [ 45.867577][ T45] usb 2-1: USB disconnect, device number 10 [ 46.013237][ T65] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 46.055533][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 46.055551][ T36] audit: type=1400 audit(2000000003.770:293): avc: denied { append } for pid=1264 comm="syz.1.290" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 46.114952][ T1265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:190 [ 46.114983][ T1265] rust_binder: Read failure Err(EFAULT) in pid:190 [ 46.163217][ T65] usb 3-1: device descriptor read/64, error -71 [ 46.219708][ T1269] binder: Unknown parameter 'stjk^ [ 46.219708][ T1269] al' [ 46.243081][ T36] audit: type=1400 audit(2000000003.950:294): avc: denied { getopt } for pid=1270 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.413230][ T65] usb 3-1: device descriptor read/64, error -71 [ 46.421750][ T36] audit: type=1400 audit(2000000004.130:295): avc: denied { write } for pid=1273 comm="syz.0.293" path="socket:[8045]" dev="sockfs" ino=8045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.421909][ T1274] binder: Unknown parameter 'iontextIoD?' [ 46.589833][ T36] audit: type=1400 audit(2000000004.300:296): avc: denied { bind } for pid=1281 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.595917][ T1282] rust_binder: Write failure EFAULT in pid:123 [ 46.609434][ T36] audit: type=1400 audit(2000000004.310:297): avc: denied { listen } for pid=1281 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.630882][ T1285] __vm_enough_memory: pid: 1285, comm: syz.0.297, bytes: 70373039144960 not enough memory for the allocation [ 46.636256][ T36] audit: type=1400 audit(2000000004.310:298): avc: denied { write } for pid=1281 comm="syz.0.296" path="socket:[8634]" dev="sockfs" ino=8634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.671284][ T65] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 46.679053][ T36] audit: type=1400 audit(2000000004.310:299): avc: denied { accept } for pid=1281 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.699131][ T36] audit: type=1400 audit(2000000004.310:300): avc: denied { read } for pid=1281 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.843943][ T65] usb 3-1: device descriptor read/64, error -71 [ 46.903189][ T308] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 47.054325][ T308] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 47.062480][ T308] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.072627][ T308] usb 1-1: config 0 has no interface number 0 [ 47.083237][ T65] usb 3-1: device descriptor read/64, error -71 [ 47.093996][ T308] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 47.104379][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.112427][ T308] usb 1-1: Product: syz [ 47.116651][ T308] usb 1-1: Manufacturer: syz [ 47.121268][ T308] usb 1-1: SerialNumber: syz [ 47.126712][ T308] usb 1-1: config 0 descriptor?? [ 47.203298][ T65] usb usb3-port1: attempt power cycle [ 47.333178][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 47.342205][ T1287] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 47.351912][ T1290] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 47.362489][ T36] audit: type=1400 audit(2000000005.080:301): avc: denied { read write } for pid=1286 comm="syz.0.298" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.386869][ T36] audit: type=1400 audit(2000000005.080:302): avc: denied { read write } for pid=1286 comm="syz.0.298" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.456310][ T751] usb 1-1: USB disconnect, device number 11 [ 47.483183][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 47.489467][ T9] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 47.497822][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.508112][ T9] usb 2-1: config 0 has no interface number 0 [ 47.514267][ T9] usb 2-1: New USB device found, idVendor=0bd3, idProduct=1555, bcdDevice= 0.5b [ 47.523389][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.532027][ T9] usb 2-1: config 0 descriptor?? [ 47.543200][ T65] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 47.560547][ T1295] overlayfs: failed to clone upperpath [ 47.567314][ T65] usb 3-1: device descriptor read/8, error -71 [ 47.610496][ T1305] fuse: Bad value for 'user_id' [ 47.610585][ T1306] fuse: Bad value for 'user_id' [ 47.615431][ T1305] fuse: Bad value for 'user_id' [ 47.625306][ T1306] fuse: Bad value for 'user_id' [ 47.704391][ T65] usb 3-1: device descriptor read/8, error -71 [ 47.739507][ T308] usb 2-1: USB disconnect, device number 11 [ 47.943892][ T65] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 47.964628][ T65] usb 3-1: device descriptor read/8, error -71 [ 48.094305][ T65] usb 3-1: device descriptor read/8, error -71 [ 48.203385][ T65] usb usb3-port1: unable to enumerate USB device [ 48.223219][ T308] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 48.331919][ T1320] tipc: Enabled bearer , priority 0 [ 48.373233][ T308] usb 1-1: Using ep0 maxpacket: 16 [ 48.379408][ T308] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.389621][ T308] usb 1-1: config 0 has no interfaces? [ 48.395172][ T308] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 48.404711][ T308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.414102][ T1320] tipc: Disabling bearer [ 48.414766][ T308] usb 1-1: config 0 descriptor?? [ 48.458948][ T1323] fuse: Invalid rootmode [ 48.466199][ T1323] overlayfs: failed to resolve './file1': -2 [ 48.473967][ T1323] incfs: Can't find or create .index dir in ./file0 [ 48.480769][ T1323] incfs: mount failed -22 [ 48.486651][ T1323] incfs: Can't find or create .incomplete dir in ./file0 [ 48.493794][ T1323] incfs: mount failed -22 [ 48.629935][ T308] usb 1-1: USB disconnect, device number 12 [ 48.714435][ T1338] overlayfs: failed to clone upperpath [ 48.721065][ T1338] overlayfs: failed to resolve './file0': -2 [ 48.802907][ T1351] binder: Bad value for 'stats' [ 49.433191][ T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 49.584350][ T45] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 49.594310][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.604945][ T45] usb 1-1: config 0 descriptor?? [ 49.683318][ T1372] tipc: Enabled bearer , priority 0 [ 49.691013][ T1372] tipc: Disabling bearer [ 49.755303][ T1374] kvm: kvm [1373]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa1a9 [ 49.888400][ T1383] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 49.888448][ T1383] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:230 [ 49.897978][ T1383] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 49.907156][ T1383] rust_binder: Read failure Err(EFAULT) in pid:230 [ 49.915912][ T1383] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.935892][ T1388] rust_binder: Error while translating object. [ 49.942364][ T1388] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 49.948675][ T1388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:235 [ 49.973848][ T1390] rust_binder: Failed copying remainder into alloc: EFAULT [ 49.982945][ T1390] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 49.990274][ T1390] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 49.998593][ T1390] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:237 [ 50.848267][ T45] usb 1-1: Cannot set autoneg [ 50.862250][ T45] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 51.473224][ T65] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 51.634290][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.645432][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.655241][ T65] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 51.668181][ T65] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.677270][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.686253][ T65] usb 3-1: config 0 descriptor?? [ 52.079112][ T1445] mmap: syz.3.356 (1445) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.095143][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 52.106538][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 52.114253][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 52.120668][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 52.120688][ T36] audit: type=1326 audit(2000000009.830:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1446 comm="syz.3.357" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4a618e929 code=0x0 [ 52.121909][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 52.158031][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 52.165539][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 52.172992][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 52.179682][ T36] audit: type=1400 audit(2000000009.890:314): avc: denied { create } for pid=1446 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 52.180438][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 52.207370][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 52.214845][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 52.222262][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 52.230035][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 52.237485][ T65] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 52.245081][ T65] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 52.254050][ T65] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 52.299945][ T1424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.308569][ T1424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.375099][ T308] usb 3-1: USB disconnect, device number 13 [ 52.768495][ T9] usb 1-1: USB disconnect, device number 13 [ 53.133199][ T308] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 53.213200][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 53.293171][ T308] usb 3-1: Using ep0 maxpacket: 32 [ 53.299521][ T308] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 53.308177][ T308] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 53.316891][ T308] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 53.326011][ T308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 53.335777][ T308] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 53.345810][ T308] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 53.364557][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 53.364720][ T308] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 53.382527][ T9] usb 1-1: config 4 has an invalid interface number: 48 but max is 0 [ 53.384405][ T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.397847][ T9] usb 1-1: config 4 has no interface number 0 [ 53.406192][ T9] usb 1-1: config 4 interface 48 has no altsetting 0 [ 53.411403][ T308] usb 3-1: config 0 descriptor?? [ 53.422987][ T9] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 53.439437][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.447871][ T9] usb 1-1: Product: syz [ 53.452210][ T9] usb 1-1: Manufacturer: syz [ 53.456880][ T9] usb 1-1: SerialNumber: syz [ 53.517254][ T36] audit: type=1400 audit(2000000011.230:315): avc: denied { write } for pid=1483 comm="syz.3.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.539733][ T36] audit: type=1400 audit(2000000011.250:316): avc: denied { execute } for pid=1481 comm="syz.1.371" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 53.620959][ T308] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 53.665191][ T9] ums-alauda 1-1:4.48: USB Mass Storage device detected [ 53.756794][ T9] usb 1-1: USB disconnect, device number 14 [ 53.822968][ T1455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.831634][ T1455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.840299][ T36] audit: type=1400 audit(2000000011.560:317): avc: denied { read write } for pid=1454 comm="syz.2.359" name="lp0" dev="devtmpfs" ino=507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 53.864056][ T36] audit: type=1400 audit(2000000011.560:318): avc: denied { open } for pid=1454 comm="syz.2.359" path="/dev/usb/lp0" dev="devtmpfs" ino=507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 53.864645][ T308] usb 3-1: USB disconnect, device number 14 [ 53.894582][ T308] usblp0: removed [ 54.405603][ T36] audit: type=1400 audit(2000000012.120:319): avc: denied { write } for pid=1520 comm="syz.2.383" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.405869][ T1522] fuse: Unknown parameter '00000000000000000003' [ 54.428436][ T36] audit: type=1400 audit(2000000012.120:320): avc: denied { remove_name } for pid=1520 comm="syz.2.383" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.458086][ T36] audit: type=1400 audit(2000000012.120:321): avc: denied { unlink } for pid=1520 comm="syz.2.383" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 54.497175][ T36] audit: type=1400 audit(2000000012.200:322): avc: denied { ioctl } for pid=1507 comm="syz.1.378" path="socket:[10581]" dev="sockfs" ino=10581 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.536533][ T1539] netlink: 'syz.3.387': attribute type 27 has an invalid length. [ 54.823183][ T65] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 54.974288][ T65] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 54.982424][ T65] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.993077][ T65] usb 3-1: config 0 has no interface number 0 [ 55.000624][ T65] usb 3-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 55.009744][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.017947][ T65] usb 3-1: Product: syz [ 55.022141][ T65] usb 3-1: Manufacturer: syz [ 55.026772][ T65] usb 3-1: SerialNumber: syz [ 55.032038][ T65] usb 3-1: config 0 descriptor?? [ 55.062823][ T1543] /dev/rnullb0: Can't lookup blockdev [ 55.210452][ T1582] SELinux: Context system_u:object_r:public_content_t:s0 is not valid (left unmapped). [ 55.249118][ T65] usb 3-1: Found UVC 0.00 device syz (056d:0000) [ 55.257554][ T65] usb 3-1: No valid video chain found. [ 55.272672][ T65] usb 3-1: USB disconnect, device number 15 [ 55.420839][ T1596] binder: Bad value for 'defcontext' [ 55.443036][ T308] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 55.465728][ T308] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.492908][ T1604] fido_id[1604]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 55.512590][ T1607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.522202][ T1607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.717320][ T1618] rust_binder: Write failure EINVAL in pid:293 [ 55.718509][ T1618] rust_binder: Read failure Err(EAGAIN) in pid:293 [ 55.743171][ T751] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 55.775923][ T1628] netlink: 96 bytes leftover after parsing attributes in process `syz.2.406'. [ 55.928909][ T751] usb 1-1: No LPM exit latency info found, disabling LPM. [ 55.943924][ T751] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 55.963194][ T751] usb 1-1: config 1 interface 0 has no altsetting 0 [ 57.112019][ T1683] SELinux: security_context_str_to_sid () failed with errno=-22 [ 57.120412][ T1681] SELinux: security_context_str_to_sid () failed with errno=-22 [ 57.220100][ T1692] overlayfs: failed to clone upperpath [ 57.236057][ T1692] overlayfs: failed to clone upperpath [ 57.343161][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 57.343183][ T36] audit: type=1400 audit(2000000015.050:336): avc: denied { getopt } for pid=1707 comm="syz.3.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.531354][ T36] audit: type=1400 audit(2000000015.240:337): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 57.673163][ T65] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 57.793175][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 57.824204][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.834640][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 57.846636][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 57.856426][ T65] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.870207][ T65] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 57.879434][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.888370][ T65] usb 2-1: config 0 descriptor?? [ 57.895468][ T65] usb 2-1: MIDIStreaming interface descriptor not found [ 57.943173][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 57.949431][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 57.960395][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 57.970105][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 57.983940][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 57.993097][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.005487][ T9] usb 3-1: Product: syz [ 58.009909][ T9] usb 3-1: Manufacturer: syz [ 58.014592][ T9] usb 3-1: SerialNumber: syz [ 58.227445][ T36] audit: type=1400 audit(2000000015.940:338): avc: denied { validate_trans } for pid=1714 comm="syz.2.437" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 58.249817][ T9] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 58.257757][ T9] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 58.272679][ T9] usb 3-1: USB disconnect, device number 16 [ 58.283206][ T530] udevd[530]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 58.500099][ T751] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0003, bcdDevice= 0.40 [ 58.509810][ T751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.521608][ T751] usb 1-1: can't set config #1, error -71 [ 58.528465][ T751] usb 1-1: USB disconnect, device number 15 [ 58.638263][ T36] audit: type=1400 audit(2000000016.350:339): avc: denied { ioctl } for pid=1736 comm="syz.0.444" path="socket:[11437]" dev="sockfs" ino=11437 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.838538][ T308] usb 2-1: USB disconnect, device number 12 [ 58.866553][ T36] audit: type=1400 audit(2000000016.580:340): avc: denied { mount } for pid=1757 comm="syz.1.451" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.986298][ T751] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 59.093179][ T78] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 59.154214][ T751] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 59.165285][ T751] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 59.177685][ T751] usb 1-1: config 0 interface 0 has no altsetting 0 [ 59.184652][ T751] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 59.193764][ T751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.203379][ T308] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 59.207568][ T751] usb 1-1: config 0 descriptor?? [ 59.216314][ T1739] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 59.253173][ T78] usb 3-1: Using ep0 maxpacket: 16 [ 59.259693][ T78] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 59.270932][ T78] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 59.281082][ T78] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 59.291253][ T78] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 59.301483][ T78] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 59.315724][ T78] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 59.325140][ T78] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 59.333475][ T78] usb 3-1: SerialNumber: syz [ 59.341919][ T1755] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 59.350546][ T78] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 59.358858][ T78] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 59.373169][ T308] usb 2-1: Using ep0 maxpacket: 16 [ 59.379712][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.390966][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.401072][ T308] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 59.414198][ T308] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 59.423464][ T308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.433495][ T308] usb 2-1: config 0 descriptor?? [ 59.641698][ T751] logitech 0003:046D:C286.0003: unknown main item tag 0x6 [ 59.653420][ T751] logitech 0003:046D:C286.0003: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.0-1/input0 [ 59.667811][ T751] logitech 0003:046D:C286.0003: no inputs found [ 59.852716][ T308] usbhid 2-1:0.0: can't add hid device: -71 [ 59.858872][ T308] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 59.867729][ T308] usb 2-1: USB disconnect, device number 13 [ 60.342797][ T1773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.351400][ T1773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.367843][ T36] audit: type=1400 audit(2000000018.080:341): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.444090][ T751] usb 1-1: USB disconnect, device number 16 [ 60.483529][ T65] usb 3-1: USB disconnect, device number 17 [ 60.502092][ T36] audit: type=1400 audit(2000000018.210:342): avc: denied { setopt } for pid=1789 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 60.534107][ T36] audit: type=1400 audit(2000000018.250:343): avc: denied { execute } for pid=1792 comm="syz.0.461" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.380365][ T36] audit: type=1400 audit(2000000019.090:344): avc: denied { create } for pid=1806 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.556471][ T1809] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 61.564529][ T1809] kvm: requested 14247 ns i8254 timer period limited to 200000 ns [ 61.572807][ T1809] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 61.623014][ T36] audit: type=1400 audit(2000000019.330:345): avc: denied { ioctl } for pid=1814 comm="syz.1.467" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 61.772841][ T1823] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 61.883254][ T1825] kvm: pic: non byte write [ 62.143221][ T308] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 62.193189][ T65] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 62.223168][ T78] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 62.294257][ T308] usb 1-1: config 164 has too many interfaces: 52, using maximum allowed: 32 [ 62.303182][ T308] usb 1-1: config 164 has an invalid descriptor of length 117, skipping remainder of the config [ 62.313728][ T308] usb 1-1: config 164 has 0 interfaces, different from the descriptor's value: 52 [ 62.322969][ T308] usb 1-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 62.332119][ T308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.353166][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 62.359495][ T65] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 62.367788][ T65] usb 3-1: config 4 has no interface number 0 [ 62.373983][ T65] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.383226][ T78] usb 2-1: Using ep0 maxpacket: 16 [ 62.385237][ T65] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.392133][ T78] usb 2-1: config 0 has no interfaces? [ 62.400313][ T65] usb 3-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00 [ 62.407874][ T78] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 62.414909][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.424500][ T78] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.437888][ T65] hub 3-1:4.128: USB hub found [ 62.440242][ T78] usb 2-1: Product: syz [ 62.449015][ T78] usb 2-1: Manufacturer: syz [ 62.453749][ T78] usb 2-1: SerialNumber: syz [ 62.459240][ T78] usb 2-1: config 0 descriptor?? [ 62.542291][ T1831] netlink: 'syz.0.472': attribute type 27 has an invalid length. [ 62.562347][ T1831] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.569717][ T1831] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.636400][ T65] hub 3-1:4.128: 10 ports detected [ 62.642326][ T65] hub 3-1:4.128: Using single TT (err -22) [ 62.649845][ T65] hub 3-1:4.128: insufficient power available to use all downstream ports [ 62.651131][ T308] usb 1-1: string descriptor 0 read error: -71 [ 62.669600][ T308] usb 1-1: USB disconnect, device number 17 [ 62.672882][ T9] usb 2-1: USB disconnect, device number 14 [ 62.720130][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 62.720149][ T36] audit: type=1400 audit(2000000020.430:347): avc: denied { append } for pid=1864 comm="syz.0.483" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.748951][ T36] audit: type=1400 audit(2000000020.430:348): avc: denied { mounton } for pid=1864 comm="syz.0.483" path="/63/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 62.837164][ T36] audit: type=1400 audit(2000000020.550:349): avc: denied { read } for pid=1839 comm="syz.2.474" name="msr" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 62.871797][ T36] audit: type=1400 audit(2000000020.550:350): avc: denied { open } for pid=1839 comm="syz.2.474" path="/dev/cpu/1/msr" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 62.886036][ T1840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.895460][ T36] audit: type=1400 audit(2000000020.570:351): avc: denied { ioctl } for pid=1839 comm="syz.2.474" path="/dev/cpu/1/msr" dev="devtmpfs" ino=18 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 62.904845][ T1840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.942320][ T65] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 62.949018][ T65] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 62.972243][ T1874] tipc: Can't bind to reserved service type 2 [ 62.979484][ T65] usb 3-1: USB disconnect, device number 18 [ 63.014649][ T1877] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 63.022699][ T1877] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 63.031228][ T1877] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 63.039186][ T1877] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 63.178271][ T1887] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.249616][ T1889] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:221 [ 63.261216][ T1889] rust_binder: Error while translating object. [ 63.270771][ T1889] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.277258][ T1889] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:221 [ 63.683255][ T65] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 63.844825][ T1916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.853473][ T1916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.864775][ T1916] netlink: 'syz.1.499': attribute type 4 has an invalid length. [ 63.894200][ T1961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.902883][ T1961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.911663][ T1963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.922213][ T1963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.954101][ T65] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 63.961707][ T65] usb 2-1: can't read configurations, error -71 [ 63.983076][ T1965] rust_binder: Error while translating object. [ 63.983167][ T1965] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 63.989411][ T1965] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:381 [ 64.583188][ T65] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 64.743152][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 64.753878][ T65] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 64.762095][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.780965][ T65] usb 2-1: config 0 has no interface number 0 [ 64.789763][ T65] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 64.799104][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.807237][ T65] usb 2-1: Product: syz [ 64.812005][ T65] usb 2-1: Manufacturer: syz [ 64.818480][ T65] usb 2-1: SerialNumber: syz [ 64.824257][ T65] usb 2-1: config 0 descriptor?? [ 64.830214][ T65] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 64.837040][ T65] usb 2-1: No valid video chain found. [ 64.916149][ T36] audit: type=1400 audit(2000000022.630:352): avc: denied { getopt } for pid=1979 comm="syz.2.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.032034][ T78] usb 2-1: USB disconnect, device number 16 [ 65.293176][ T308] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 65.444420][ T308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 57343, setting to 64 [ 65.455420][ T308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 65.466627][ T308] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 65.475752][ T308] usb 3-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 65.483883][ T308] usb 3-1: Product: syz [ 65.488070][ T308] usb 3-1: Manufacturer: syz [ 65.492666][ T308] usb 3-1: SerialNumber: syz [ 65.498086][ T308] usb 3-1: config 0 descriptor?? [ 65.503506][ T1985] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 65.661616][ T1998] rust_binder: Error while translating object. [ 65.661649][ T1998] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 65.668063][ T1998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:399 [ 65.690167][ T2000] tmpfs: Unknown parameter '@^$^' [ 65.727346][ T2004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:403 [ 65.727787][ T2004] rust_binder: Error while translating object. [ 65.737319][ T2004] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.743637][ T2004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:403 [ 65.766228][ T308] usb 3-1: USB disconnect, device number 19 [ 66.103177][ T78] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 66.263183][ T78] usb 2-1: Using ep0 maxpacket: 8 [ 66.269676][ T78] usb 2-1: unable to get BOS descriptor or descriptor too short [ 66.278212][ T78] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 66.289883][ T78] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 66.300847][ T78] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 66.310565][ T78] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 66.317532][ T36] audit: type=1400 audit(2000000024.030:353): avc: denied { mounton } for pid=2042 comm="syz.2.544" path="/105/file0" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 66.322126][ T78] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 66.354162][ T78] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 28265, setting to 1024 [ 66.365308][ T78] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 66.377125][ T78] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 66.386233][ T78] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.394284][ T78] usb 2-1: Product: syz [ 66.398458][ T78] usb 2-1: Manufacturer: syz [ 66.403070][ T78] usb 2-1: SerialNumber: syz [ 66.408484][ T78] usb 2-1: config 0 descriptor?? [ 66.415629][ T2028] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 66.422868][ T2028] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 66.547235][ T2050] overlayfs: failed to clone upperpath [ 66.631205][ T2028] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 66.631244][ T2028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:413 [ 66.648534][ T78] usb 2-1: USB disconnect, device number 17 [ 66.815924][ T2080] kvm: pic: non byte read [ 66.820419][ T2080] kvm: pic: non byte read [ 66.824925][ T2080] kvm: pic: non byte read [ 66.829346][ T2080] kvm: pic: non byte read [ 66.833814][ T2080] kvm: pic: non byte read [ 66.838253][ T2080] kvm: pic: non byte read [ 66.842704][ T2080] kvm: pic: non byte read [ 66.847222][ T2080] kvm: pic: non byte read [ 66.851674][ T2080] kvm: pic: non byte read [ 66.856155][ T2080] kvm: pic: non byte read [ 66.915963][ T2084] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 66.923660][ T2084] rust_binder: Write failure EINVAL in pid:423 [ 66.924049][ T2084] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 66.937407][ T2084] rust_binder: Write failure EINVAL in pid:423 [ 67.013225][ T751] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 67.087640][ T36] audit: type=1400 audit(2000000024.800:354): avc: denied { setopt } for pid=2090 comm="syz.1.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.169794][ T2105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 67.183177][ T751] usb 3-1: Using ep0 maxpacket: 8 [ 67.191318][ T751] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 67.201736][ T751] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 67.213648][ T2109] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.213687][ T2109] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:436 [ 67.224419][ T751] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 67.242942][ T751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.251063][ T751] usb 3-1: Product: syz [ 67.255435][ T751] usb 3-1: Manufacturer: syz [ 67.260063][ T751] usb 3-1: SerialNumber: syz [ 67.389056][ T36] audit: type=1326 audit(2000000025.100:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2118 comm="syz.3.571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4a618e929 code=0x0 [ 67.470762][ T751] usb 3-1: 0:2 : does not exist [ 67.506776][ T751] usb 3-1: USB disconnect, device number 20 [ 67.517912][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 67.547599][ T2128] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 67.558736][ T2128] /dev/sg0: Can't lookup blockdev [ 68.253198][ T78] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 68.261747][ T36] audit: type=1326 audit(2000000025.970:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.3.584" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4a618e929 code=0x0 [ 68.335342][ T2162] netlink: 393 bytes leftover after parsing attributes in process `syz.3.586'. [ 68.383176][ T78] usb 2-1: device descriptor read/64, error -71 [ 68.483355][ T36] audit: type=1400 audit(2000000026.200:357): avc: denied { ioctl } for pid=2171 comm="syz.0.589" path="mnt:[4026532299]" dev="nsfs" ino=4026532299 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.523282][ T36] audit: type=1400 audit(2000000026.240:358): avc: denied { listen } for pid=2173 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.595604][ T2176] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 68.604395][ T2176] rust_binder: Write failure EINVAL in pid:277 [ 68.633167][ T78] usb 2-1: device descriptor read/64, error -71 [ 68.883160][ T78] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 68.993091][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 69.039899][ T78] usb 2-1: device descriptor read/64, error -71 [ 69.283190][ T78] usb 2-1: device descriptor read/64, error -71 [ 69.393284][ T78] usb usb2-port1: attempt power cycle [ 69.626097][ T2204] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 69.626126][ T2204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:292 [ 69.648332][ T36] audit: type=1400 audit(2000000027.360:359): avc: denied { append } for pid=2205 comm="syz.0.603" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.688826][ T36] audit: type=1400 audit(2000000027.400:360): avc: denied { create } for pid=2210 comm="syz.0.604" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 69.730660][ T36] audit: type=1400 audit(2000000027.400:361): avc: denied { link } for pid=2210 comm="syz.0.604" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 69.773962][ T78] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 69.774420][ T36] audit: type=1400 audit(2000000027.400:362): avc: denied { rename } for pid=2210 comm="syz.0.604" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 69.794524][ T78] usb 2-1: device descriptor read/8, error -71 [ 69.933417][ T36] audit: type=1400 audit(2000000027.650:363): avc: denied { read } for pid=2221 comm="syz.0.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 69.958028][ T78] usb 2-1: device descriptor read/8, error -71 [ 70.203249][ T78] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 70.224267][ T78] usb 2-1: device descriptor read/8, error -71 [ 70.354257][ T78] usb 2-1: device descriptor read/8, error -71 [ 70.413243][ T308] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 70.463275][ T78] usb usb2-port1: unable to enumerate USB device [ 70.564417][ T308] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 70.573068][ T308] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.583366][ T308] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 70.592344][ T308] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 70.606916][ T308] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 70.616067][ T308] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 70.624275][ T308] usb 1-1: Product: syz [ 70.628713][ T308] usb 1-1: Manufacturer: syz [ 70.655163][ T36] audit: type=1400 audit(2000000028.370:364): avc: denied { getopt } for pid=2237 comm="syz.3.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.705368][ T2248] overlayfs: failed to clone upperpath [ 70.714428][ T2249] overlayfs: failed to clone upperpath [ 71.043153][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 71.043193][ T2195] Bluetooth: hci0: command 0x1003 tx timeout [ 71.056409][ T2285] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 71.065199][ T2224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.075259][ T2285] rust_binder: Write failure EINVAL in pid:443 [ 71.083775][ T2224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.164964][ T9] usb 1-1: USB disconnect, device number 18 [ 71.184447][ T2296] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 71.192327][ T2296] rust_binder: Write failure EINVAL in pid:445 [ 71.192532][ T2296] rust_binder: Write failure EINVAL in pid:445 [ 71.200959][ T36] audit: type=1400 audit(2000000028.910:365): avc: denied { read write } for pid=2293 comm="syz.1.634" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 71.286500][ T2296] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 71.294016][ T2296] rust_binder: Write failure EINVAL in pid:445 [ 71.553217][ T65] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 71.693179][ T65] usb 2-1: device descriptor read/64, error -71 [ 71.933227][ T65] usb 2-1: device descriptor read/64, error -71 [ 72.183204][ T65] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 72.233199][ T78] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 72.313206][ T65] usb 2-1: device descriptor read/64, error -71 [ 72.384575][ T78] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.395575][ T78] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.405489][ T78] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.418431][ T78] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.427523][ T78] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.436188][ T78] usb 3-1: config 0 descriptor?? [ 72.563193][ T65] usb 2-1: device descriptor read/64, error -71 [ 72.646119][ T78] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 72.661889][ T2340] FAT-fs (rnullb0): bogus number of reserved sectors [ 72.669944][ T78] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 72.673277][ T65] usb usb2-port1: attempt power cycle [ 72.686144][ T2340] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 72.696643][ T78] usb 3-1: USB disconnect, device number 21 [ 72.721617][ T2341] fido_id[2341]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 72.865014][ T2365] binder: Bad value for 'stats' [ 73.043345][ T65] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 73.064409][ T65] usb 2-1: device descriptor read/8, error -71 [ 73.173235][ T78] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 73.193227][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 73.202254][ T65] usb 2-1: device descriptor read/8, error -71 [ 73.313260][ T78] usb 1-1: device descriptor read/64, error -71 [ 73.343222][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 73.350236][ T9] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 73.363288][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 73.371395][ T9] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.40 [ 73.380511][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.388789][ T9] usb 3-1: Product: syz [ 73.393021][ T9] usb 3-1: Manufacturer: syz [ 73.397695][ T9] usb 3-1: SerialNumber: syz [ 73.443179][ T65] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 73.469176][ T65] usb 2-1: device descriptor read/8, error -71 [ 73.553610][ T78] usb 1-1: device descriptor read/64, error -71 [ 73.604246][ T65] usb 2-1: device descriptor read/8, error -71 [ 73.622706][ T9] usbhid 3-1:1.0: can't add hid device: -71 [ 73.636930][ T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 73.649105][ T9] usb 3-1: USB disconnect, device number 22 [ 73.723296][ T65] usb usb2-port1: unable to enumerate USB device [ 73.793170][ T78] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 73.923155][ T78] usb 1-1: device descriptor read/64, error -71 [ 74.101287][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 74.101307][ T36] audit: type=1400 audit(2000000031.810:368): avc: denied { mount } for pid=2435 comm="syz.2.684" name="/" dev="ramfs" ino=16898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 74.164153][ T78] usb 1-1: device descriptor read/64, error -71 [ 74.273245][ T78] usb usb1-port1: attempt power cycle [ 74.327279][ T2455] netlink: 76 bytes leftover after parsing attributes in process `syz.2.689'. [ 74.583173][ T65] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 74.613159][ T78] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 74.634270][ T78] usb 1-1: device descriptor read/8, error -71 [ 74.734358][ T65] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 74.742587][ T65] usb 3-1: config 1 has no interface number 0 [ 74.748750][ T65] usb 3-1: config 1 interface 105 has no altsetting 0 [ 74.757081][ T65] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 74.766232][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.774279][ T65] usb 3-1: Product: syz [ 74.774412][ T78] usb 1-1: device descriptor read/8, error -71 [ 74.778466][ T65] usb 3-1: Manufacturer: syz [ 74.778485][ T65] usb 3-1: SerialNumber: syz [ 74.985968][ T65] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 74.996985][ T65] usb 3-1: USB disconnect, device number 23 [ 75.033230][ T78] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 75.054303][ T78] usb 1-1: device descriptor read/8, error -71 [ 75.184597][ T78] usb 1-1: device descriptor read/8, error -71 [ 75.237514][ T2491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'. [ 75.237542][ T2492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'. [ 75.256393][ T36] audit: type=1400 audit(2000000032.970:369): avc: denied { read } for pid=2490 comm="syz.1.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.293319][ T78] usb usb1-port1: unable to enumerate USB device [ 75.517859][ T2506] netlink: 80 bytes leftover after parsing attributes in process `syz.2.705'. [ 75.550490][ T2512] capability: warning: `syz.2.706' uses 32-bit capabilities (legacy support in use) [ 75.661458][ T2523] __vm_enough_memory: pid: 2523, comm: syz.2.709, bytes: 70373039144960 not enough memory for the allocation [ 75.923166][ T65] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 75.957758][ T2529] /dev/loop0: Can't lookup blockdev [ 76.073180][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 76.079572][ T65] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 76.087861][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.098025][ T65] usb 3-1: config 1 has no interface number 0 [ 76.104906][ T65] usb 3-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 76.118027][ T65] usb 3-1: config 1 interface 105 has no altsetting 0 [ 76.126415][ T65] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 76.135541][ T65] usb 3-1: New USB device strings: Mfr=1, Product=35, SerialNumber=3 [ 76.143808][ T65] usb 3-1: Product: syz [ 76.148238][ T65] usb 3-1: Manufacturer: syz [ 76.152855][ T65] usb 3-1: SerialNumber: syz [ 76.266260][ T2549] syz.3.719: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 76.284158][ T2549] CPU: 0 UID: 0 PID: 2549 Comm: syz.3.719 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 76.284184][ T2549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.284205][ T2549] Call Trace: [ 76.284210][ T2549] [ 76.284217][ T2549] __dump_stack+0x21/0x30 [ 76.284241][ T2549] dump_stack_lvl+0x10c/0x190 [ 76.284260][ T2549] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.284281][ T2549] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 76.284297][ T2549] dump_stack+0x19/0x20 [ 76.284316][ T2549] warn_alloc+0x1bc/0x2a0 [ 76.284333][ T2549] ? do_syscall_64+0x58/0xf0 [ 76.284347][ T2549] ? __cfi_warn_alloc+0x10/0x10 [ 76.284364][ T2549] ? __get_vm_area_node+0x1dc/0x3a0 [ 76.284381][ T2549] ? packet_set_ring+0x735/0x2880 [ 76.284397][ T2549] __vmalloc_node_range_noprof+0x68e/0x1420 [ 76.284416][ T2549] ? kasan_save_track+0x3e/0x80 [ 76.284438][ T2549] ? __kasan_kmalloc+0x96/0xb0 [ 76.284461][ T2549] ? __kmalloc_noprof+0x1b1/0x450 [ 76.284484][ T2549] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 76.284503][ T2549] ? __asan_memset+0x39/0x50 [ 76.284522][ T2549] ? __alloc_pages_noprof+0xba/0x6c0 [ 76.284538][ T2549] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 76.284556][ T2549] ? packet_set_ring+0x735/0x2880 [ 76.284570][ T2549] vzalloc_noprof+0xfd/0x1d0 [ 76.284587][ T2549] ? packet_set_ring+0x735/0x2880 [ 76.284602][ T2549] ? kasan_save_alloc_info+0x40/0x50 [ 76.284619][ T2549] ? __cfi_vzalloc_noprof+0x10/0x10 [ 76.284640][ T2549] ? packet_set_ring+0x669/0x2880 [ 76.284657][ T2549] packet_set_ring+0x735/0x2880 [ 76.284675][ T2549] ? _raw_spin_lock_bh+0x90/0x120 [ 76.284703][ T2549] ? packet_mmap+0x570/0x570 [ 76.284717][ T2549] ? _raw_spin_unlock_bh+0x54/0x60 [ 76.284731][ T2549] ? lock_sock_nested+0x1f5/0x290 [ 76.284753][ T2549] ? __asan_memcpy+0x5a/0x80 [ 76.284772][ T2549] ? check_stack_object+0x12c/0x140 [ 76.284794][ T2549] ? __kasan_check_write+0x18/0x20 [ 76.284813][ T2549] ? _copy_from_user+0x8b/0xb0 [ 76.284837][ T2549] packet_setsockopt+0xc5d/0x12a0 [ 76.284863][ T2549] ? __cfi_packet_setsockopt+0x10/0x10 [ 76.284896][ T2549] ? selinux_socket_setsockopt+0x2ea/0x390 [ 76.284918][ T2549] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 76.284941][ T2549] ? do_futex+0x309/0x500 [ 76.284965][ T2549] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 76.284982][ T2549] ? security_socket_setsockopt+0x33/0xd0 [ 76.285004][ T2549] ? __cfi_packet_setsockopt+0x10/0x10 [ 76.285030][ T2549] do_sock_setsockopt+0x26a/0x400 [ 76.285050][ T2549] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 76.285069][ T2549] __x64_sys_setsockopt+0x1b8/0x250 [ 76.285088][ T2549] x64_sys_call+0x2adc/0x2ee0 [ 76.285109][ T2549] do_syscall_64+0x58/0xf0 [ 76.285123][ T2549] ? clear_bhb_loop+0x50/0xa0 [ 76.285143][ T2549] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.285161][ T2549] RIP: 0033:0x7fb4a618e929 [ 76.285180][ T2549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.285195][ T2549] RSP: 002b:00007fb4a7023038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 76.285213][ T2549] RAX: ffffffffffffffda RBX: 00007fb4a63b5fa0 RCX: 00007fb4a618e929 [ 76.285226][ T2549] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000088 [ 76.285237][ T2549] RBP: 00007fb4a6210b39 R08: 000000000000001c R09: 0000000000000000 [ 76.285248][ T2549] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 76.285259][ T2549] R13: 0000000000000000 R14: 00007fb4a63b5fa0 R15: 00007ffd64af29c8 [ 76.285273][ T2549] [ 76.285315][ T2549] Mem-Info: [ 76.640129][ T65] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 76.642287][ T2549] active_anon:9297 inactive_anon:0 isolated_anon:0 [ 76.642287][ T2549] active_file:21494 inactive_file:7422 isolated_file:0 [ 76.642287][ T2549] unevictable:0 dirty:67 writeback:9 [ 76.642287][ T2549] slab_reclaimable:6380 slab_unreclaimable:69235 [ 76.642287][ T2549] mapped:26615 shmem:2364 pagetables:975 [ 76.642287][ T2549] sec_pagetables:3 bounce:0 [ 76.642287][ T2549] kernel_misc_reclaimable:0 [ 76.642287][ T2549] free:1518874 free_pcp:2895 free_cma:0 [ 76.649829][ T65] usb 3-1: USB disconnect, device number 24 [ 76.693697][ T2549] Node 0 active_anon:37188kB inactive_anon:0kB active_file:85976kB inactive_file:29688kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106460kB dirty:268kB writeback:36kB shmem:9456kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4652kB pagetables:3900kB sec_pagetables:12kB all_unreclaimable? no [ 76.732696][ T2549] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966016kB mlocked:0kB bounce:0kB free_pcp:5804kB local_pcp:5804kB free_cma:0kB [ 76.762999][ T2549] lowmem_reserve[]: 0 3921 3921 [ 76.768048][ T2549] Normal free:3119636kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37188kB inactive_anon:0kB active_file:85976kB inactive_file:29688kB unevictable:0kB writepending:304kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:2044kB local_pcp:1368kB free_cma:0kB [ 76.774259][ T2559] usb usb8: usbfs: process 2559 (syz.0.721) did not claim interface 0 before use [ 76.799711][ T2549] lowmem_reserve[]: 0 0 0 [ 76.813371][ T2549] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 76.833296][ T2549] Normal: 2*4kB (UE) 117*8kB (UM) 297*16kB (UM) 238*32kB (ME) 352*64kB (ME) 102*128kB (UME) 41*256kB (UME) 24*512kB (UME) 18*1024kB (UME) 8*2048kB (UME) 733*4096kB (M) = 3108864kB [ 76.852708][ T2549] 31276 total pagecache pages [ 76.857548][ T2549] 0 pages in swap cache [ 76.861819][ T2549] Free swap = 124772kB [ 76.866069][ T2549] Total swap = 124996kB [ 76.870261][ T2549] 2097051 pages RAM [ 76.874264][ T2549] 0 pages HighMem/MovableOnly [ 76.878979][ T2549] 351517 pages reserved [ 76.883201][ T2549] 0 pages cma reserved [ 76.890140][ T2549] Memory allocations: [ 76.894340][ T2549] 0 B 0 init/main.c:1370 func:do_initcalls [ 76.901641][ T2549] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 76.909802][ T2549] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 76.917524][ T2549] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 76.925648][ T2549] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 76.933660][ T2549] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 76.942340][ T2549] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 76.950406][ T2549] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 76.958371][ T2549] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 76.966495][ T2549] 0 B 0 init/initramfs.c:101 func:find_link [ 77.161225][ T2561] futex_wake_op: syz.3.722 tries to shift op by 144; fix this program [ 77.213929][ T36] audit: type=1400 audit(2000000034.930:370): avc: denied { setattr } for pid=2585 comm="syz.2.731" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 77.248154][ T2591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.732'. [ 77.297593][ T36] audit: type=1400 audit(2000000035.010:371): avc: denied { execmod } for pid=2594 comm="syz.3.734" path="/dev/rnullb0" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.376823][ T2605] fuse: Bad value for 'fd' [ 77.560432][ T2618] can0: slcan on ptm0. [ 77.568264][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.575594][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 78.053746][ T36] audit: type=1400 audit(2000000035.770:372): avc: denied { watch watch_reads } for pid=2653 comm="syz.3.750" path="/310/file0" dev="tmpfs" ino=1711 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.093621][ T2654] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2654 comm=syz.3.750 [ 78.106596][ T2654] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2654 comm=syz.3.750 [ 78.453203][ T307] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 78.603207][ T307] usb 3-1: Using ep0 maxpacket: 16 [ 78.609485][ T307] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 78.617723][ T307] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.627851][ T307] usb 3-1: config 0 has no interface number 0 [ 78.635407][ T307] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 78.644511][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.652615][ T307] usb 3-1: Product: syz [ 78.656844][ T307] usb 3-1: Manufacturer: syz [ 78.659066][ T2666] overlayfs: failed to clone upperpath [ 78.661464][ T307] usb 3-1: SerialNumber: syz [ 78.672367][ T307] usb 3-1: config 0 descriptor?? [ 78.882117][ T307] usb 3-1: USB disconnect, device number 25 [ 79.405735][ T2684] overlayfs: conflicting lowerdir path [ 79.603466][ T2195] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.664266][ T2616] can0 (unregistered): slcan off ptm0. [ 79.714365][ T2706] overlayfs: failed to clone upperpath [ 79.757358][ T65] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 79.919424][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.930504][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.941694][ T65] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.954809][ T65] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 79.965019][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.980825][ T65] usb 3-1: config 0 descriptor?? [ 80.388718][ T65] dragonrise 0003:0079:0011.0005: unknown main item tag 0x0 [ 80.396835][ T65] dragonrise 0003:0079:0011.0005: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.2-1/input0 [ 80.516184][ T2773] : renamed from vcan0 (while UP) [ 80.597861][ T2687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.606515][ T2687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.615245][ T78] usb 3-1: USB disconnect, device number 26 [ 81.189104][ T2793] fuse: Bad value for 'group_id' [ 81.194146][ T2793] fuse: Bad value for 'group_id' [ 81.258198][ T2804] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 81.374545][ T2809] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 81.479092][ T2817] binder: Bad value for 'max' [ 81.571614][ T2821] overlayfs: failed to clone upperpath [ 81.594618][ T36] audit: type=1326 audit(2000000039.310:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2822 comm="syz.3.795" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4a618e929 code=0x0 [ 81.743222][ T65] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 81.894372][ T65] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 81.908241][ T65] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.917525][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 81.925633][ T65] usb 2-1: SerialNumber: syz [ 82.467383][ T36] audit: type=1400 audit(2000000040.180:374): avc: denied { map } for pid=2828 comm="syz.3.797" path="socket:[19173]" dev="sockfs" ino=19173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.733654][ T2819] binder: Unknown parameter '' [ 82.739834][ T65] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 82.751641][ T65] usb 2-1: USB disconnect, device number 26 [ 83.288316][ T36] audit: type=1400 audit(2000000041.000:375): avc: denied { read } for pid=2856 comm="syz.0.808" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 83.311618][ T36] audit: type=1400 audit(2000000041.000:376): avc: denied { open } for pid=2856 comm="syz.0.808" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 83.335426][ T36] audit: type=1400 audit(2000000041.000:377): avc: denied { ioctl } for pid=2856 comm="syz.0.808" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 83.346920][ T2862] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 83.360663][ T36] audit: type=1400 audit(2000000041.060:378): avc: denied { create } for pid=2861 comm="syz.0.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.360704][ T2862] rust_binder: Error while translating object. [ 83.393423][ T2862] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 83.399635][ T2862] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:380 [ 83.424281][ T2864] 9pnet_fd: Insufficient options for proto=fd [ 83.441761][ T2864] netlink: 'syz.0.811': attribute type 4 has an invalid length. [ 83.453211][ T2864] netlink: 'syz.0.811': attribute type 4 has an invalid length. [ 83.703171][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 83.853149][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 83.859536][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 83.868135][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 83.876813][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 83.885855][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 83.895556][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 83.905242][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 83.918337][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 83.927465][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.936216][ T9] usb 2-1: config 0 descriptor?? [ 84.143184][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 84.287177][ T36] audit: type=1326 audit(2000000042.000:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2898 comm="syz.2.824" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa77d58e929 code=0x0 [ 84.345021][ T9] usb 2-1: USB disconnect, device number 27 [ 84.351812][ T9] usblp0: removed [ 84.368442][ T36] audit: type=1326 audit(2000000042.080:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2901 comm="syz.3.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a618e929 code=0x7ffc0000 [ 84.391979][ T36] audit: type=1326 audit(2000000042.080:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2901 comm="syz.3.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a618e929 code=0x7ffc0000 [ 84.416609][ T36] audit: type=1326 audit(2000000042.130:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2901 comm="syz.3.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4a618e929 code=0x7ffc0000 [ 84.930297][ T2914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.019554][ T2916] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 85.100460][ T2919] rust_binder: Write failure EINVAL in pid:549 [ 85.166332][ T2921] syz.1.831 (2921): /proc/2920/oom_adj is deprecated, please use /proc/2920/oom_score_adj instead. [ 85.262414][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.263180][ T2928] rust_binder: Error while translating object. [ 85.270000][ T2928] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 85.276820][ T2928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:556 [ 85.543212][ T9] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 85.705095][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 85.714170][ T9] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 85.725301][ T9] usb 2-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.738679][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 85.747551][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0340, bcdDevice= 0.40 [ 85.756824][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.765240][ T9] usb 2-1: Product: syz [ 85.769540][ T9] usb 2-1: Manufacturer: syz [ 85.774281][ T9] usb 2-1: SerialNumber: syz [ 85.784578][ T2928] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.913160][ T751] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 86.063262][ T751] usb 3-1: Using ep0 maxpacket: 16 [ 86.070160][ T751] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 86.080331][ T751] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.094525][ T751] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 86.103703][ T751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.111780][ T751] usb 3-1: Product: syz [ 86.116016][ T751] usb 3-1: Manufacturer: 뭘ꠓ怃☉㲯獦챑〶䯚㓩鿙㧯矵험법쯺梊༞蹑岏⹖劓歀ꃡ芜❄ꝧ☰̻魑숿䋫 证皷䉇瀑拜⩌悓遙牢㈇̝쩳륰翥꼫욥燚켬㍓轀焯䄐푭昷饋谍䜛冮亨굺ଂꚵ䒘䉵窅䵔൯Ⴄ꾆ﱒ씞후ᘧ⎼磧ᵸ莛蠉橺㽎늢拉暷엛П⦚버㵌⋮쯦㘼烨挡⋥ꅴ鳁໳툥쉦祼㠑샡盳쾄 [ 86.151272][ T751] usb 3-1: SerialNumber: syz [ 86.157223][ T2940] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 86.197681][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 86.203730][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 86.214181][ T9] usb 2-1: USB disconnect, device number 28 [ 86.370418][ T751] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 86.382524][ T751] usb 3-1: USB disconnect, device number 27 [ 86.390277][ T751] usblp0: removed [ 86.905908][ T2960] fuse: Bad value for 'rootmode' [ 87.143206][ T307] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 87.230264][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 87.230284][ T36] audit: type=1400 audit(2000000044.940:428): avc: denied { getopt } for pid=2961 comm="syz.1.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 87.232182][ T2964] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.268592][ T2969] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.276873][ T2969] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.283954][ T2969] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 87.297574][ T307] usb 3-1: Using ep0 maxpacket: 16 [ 87.300653][ T2969] rust_binder: Write failure EINVAL in pid:399 [ 87.304875][ T307] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 87.319445][ T307] usb 3-1: config 1 has no interface number 0 [ 87.321102][ T2971] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.325810][ T307] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 87.342250][ T307] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 87.352395][ T307] usb 3-1: config 1 interface 105 has no altsetting 0 [ 87.360621][ T307] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 87.369773][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.377863][ T307] usb 3-1: Product: syz [ 87.382090][ T307] usb 3-1: Manufacturer: syz [ 87.386793][ T307] usb 3-1: SerialNumber: syz [ 87.392574][ T2960] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 87.403248][ T2960] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 87.431434][ T36] audit: type=1400 audit(2000000045.140:429): avc: denied { load_policy } for pid=2975 comm="syz.0.851" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 87.431438][ T2976] SELinux: policydb magic number 0x6d000000 does not match expected magic number 0xf97cff8c [ 87.471813][ T2967] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.500367][ T2976] SELinux: failed to load policy [ 87.507801][ T2980] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 87.528487][ T2980] rust_binder: Write failure EINVAL in pid:406 [ 87.565570][ T2990] FAT-fs (rnullb0): bogus number of reserved sectors [ 87.578999][ T2990] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 87.628313][ T3001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.635105][ T3007] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.720581][ T3016] rust_binder: Write failure EINVAL in pid:591 [ 87.729296][ T3016] rust_binder: Error while translating object. [ 87.735920][ T3016] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 87.742130][ T3016] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:591 [ 87.811640][ T2960] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 87.828416][ T2960] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 87.857211][ T3028] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.857361][ T3028] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 87.864079][ T3028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:600 [ 87.878167][ T36] audit: type=1400 audit(2000000045.590:430): avc: denied { accept } for pid=3027 comm="syz.1.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.975125][ T36] audit: type=1326 audit(2000000045.690:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3033 comm="syz.1.868" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4bf078e929 code=0x0 [ 88.638013][ T2960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.647135][ T2960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.656270][ T307] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 88.668789][ T307] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 6a:0d:23:38:34:b0 [ 88.682624][ T307] usb 3-1: USB disconnect, device number 28 [ 88.689377][ T307] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 88.728633][ T307] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 88.741605][ T307] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 88.754625][ T307] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 89.073160][ T751] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 89.244230][ T751] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 89.255337][ T751] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 89.266434][ T751] usb 2-1: config 0 interface 0 has no altsetting 0 [ 89.273148][ T751] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 89.282222][ T751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.293349][ T751] usb 2-1: config 0 descriptor?? [ 89.298642][ T3057] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 89.515838][ T3057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.524451][ T3057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.688823][ T3140] incfs: Options parsing error. -22 [ 89.694151][ T3140] incfs: mount failed -22 [ 89.716570][ T3142] incfs: Options parsing error. -22 [ 89.721921][ T3142] incfs: mount failed -22 [ 89.734915][ T751] logitech 0003:046D:C286.0006: unknown main item tag 0x6 [ 89.744139][ T751] logitech 0003:046D:C286.0006: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.1-1/input0 [ 89.763584][ T751] logitech 0003:046D:C286.0006: no inputs found [ 89.989571][ T3155] netlink: 'syz.3.898': attribute type 9 has an invalid length. [ 90.033231][ T751] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 90.184503][ T751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.194392][ T751] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 90.203566][ T751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.212570][ T751] usb 3-1: config 0 descriptor?? [ 90.619579][ T751] hid (null): global environment stack underflow [ 90.627094][ T751] itetech 0003:258A:6A88.0007: unknown main item tag 0x1 [ 90.634431][ T751] itetech 0003:258A:6A88.0007: global environment stack underflow [ 90.642523][ T751] itetech 0003:258A:6A88.0007: item 0 2 1 11 parsing failed [ 90.650162][ T751] itetech 0003:258A:6A88.0007: probe with driver itetech failed with error -22 [ 90.774989][ T3173] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 90.782954][ T3173] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 90.791547][ T3173] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 90.799589][ T3173] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 90.924435][ T31] usb 3-1: USB disconnect, device number 29 [ 91.456612][ T36] audit: type=1400 audit(2000000049.170:432): avc: denied { write } for pid=3185 comm="syz.2.908" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.498421][ T36] audit: type=1400 audit(2000000049.210:433): avc: denied { unlink } for pid=291 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.538218][ T3189] kvm: pic: non byte write [ 91.675182][ T31] ================================================================== [ 91.683308][ T31] BUG: KASAN: null-ptr-deref in _raw_spin_lock+0x7f/0x120 [ 91.690472][ T31] Write of size 4 at addr 0000000000000080 by task kworker/1:0/31 [ 91.698308][ T31] [ 91.700663][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 91.700708][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.700725][ T31] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 91.700793][ T31] Call Trace: [ 91.700801][ T31] [ 91.700811][ T31] __dump_stack+0x21/0x30 [ 91.700840][ T31] dump_stack_lvl+0x10c/0x190 [ 91.700867][ T31] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.700897][ T31] print_report+0x3d/0x70 [ 91.700919][ T31] kasan_report+0x163/0x1a0 [ 91.700953][ T31] ? _raw_spin_lock+0x7f/0x120 [ 91.700989][ T31] ? __cfi__raw_spin_lock+0x10/0x10 [ 91.701023][ T31] ? _raw_spin_lock+0x7f/0x120 [ 91.701057][ T31] kasan_check_range+0x299/0x2a0 [ 91.701103][ T31] __kasan_check_write+0x18/0x20 [ 91.701144][ T31] _raw_spin_lock+0x7f/0x120 [ 91.701183][ T31] ? __cfi__raw_spin_lock+0x10/0x10 [ 91.701217][ T31] ? dput+0x42f/0x510 [ 91.701259][ T31] d_delete+0x4a/0x120 [ 91.701295][ T31] rust_binderfs_remove_file+0xec/0x110 [ 91.701325][ T31] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 91.701370][ T31] ? update_curr_dl_se+0x10c/0xb20 [ 91.701402][ T31] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 91.701429][ T31] ? update_curr+0x60d/0xc60 [ 91.701471][ T31] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 91.701525][ T31] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 91.701562][ T31] ? update_load_avg+0x506/0x19a0 [ 91.701597][ T31] ? detach_entity_load_avg+0x7b0/0x7b0 [ 91.701632][ T31] ? dequeue_entity+0xa9c/0x1750 [ 91.701666][ T31] ? ret_from_fork+0x64/0xa0 [ 91.701700][ T31] ? calibrate_delay_converge+0x2e0/0x2e0 [ 91.701733][ T31] ? kvm_sched_clock_read+0x15/0x30 [ 91.701763][ T31] ? sched_clock_noinstr+0xd/0x30 [ 91.701790][ T31] ? sched_clock+0x44/0x60 [ 91.701814][ T31] ? sched_clock_cpu+0x75/0x400 [ 91.701841][ T31] ? sched_balance_newidle+0x845/0xe00 [ 91.701874][ T31] ? __cfi_sched_clock_cpu+0x10/0x10 [ 91.701910][ T31] ? __kasan_check_write+0x18/0x20 [ 91.701937][ T31] ? __switch_to+0xc7b/0x1310 [ 91.701965][ T31] ? psi_group_change+0xb44/0x1130 [ 91.701992][ T31] ? __cfi___switch_to+0x10/0x10 [ 91.702021][ T31] ? _raw_spin_unlock+0x45/0x60 [ 91.702042][ T31] ? __switch_to_asm+0x3d/0x70 [ 91.702073][ T31] ? __schedule+0x1463/0x1f10 [ 91.702098][ T31] ? kick_pool+0xb9/0x550 [ 91.702120][ T31] process_scheduled_works+0x7d2/0x1020 [ 91.702157][ T31] worker_thread+0xc58/0x1250 [ 91.702193][ T31] kthread+0x2ca/0x370 [ 91.702226][ T31] ? __cfi_worker_thread+0x10/0x10 [ 91.702266][ T31] ? __cfi_kthread+0x10/0x10 [ 91.702305][ T31] ret_from_fork+0x64/0xa0 [ 91.702332][ T31] ? __cfi_kthread+0x10/0x10 [ 91.702365][ T31] ret_from_fork_asm+0x1a/0x30 [ 91.702399][ T31] [ 91.702408][ T31] ================================================================== [ 91.744833][ T36] audit: type=1400 audit(2000000049.450:434): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[1612]" dev="pipefs" ino=1612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 91.746061][ T31] Disabling lock debugging due to kernel taint [ 91.746089][ T31] BUG: kernel NULL pointer dereference, address: 0000000000000080 [ 91.746103][ T31] #PF: supervisor write access in kernel mode [ 91.746116][ T31] #PF: error_code(0x0002) - not-present page [ 92.059815][ T31] PGD 0 P4D 0 [ 92.063203][ T31] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 92.069366][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G B 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 92.084226][ T31] Tainted: [B]=BAD_PAGE [ 92.088473][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.098536][ T31] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 92.115505][ T31] RIP: 0010:_raw_spin_lock+0x95/0x120 [ 92.120906][ T31] Code: 7d 7a c7 44 24 20 00 00 00 00 be 04 00 00 00 e8 11 fe 53 fc 4c 89 f7 be 04 00 00 00 e8 04 fe 53 fc 8b 44 24 20 b9 01 00 00 00 0f b1 0b 75 32 48 c7 04 24 0e 36 e0 45 4b c7 04 3c 00 00 00 00 [ 92.140619][ T31] RSP: 0018:ffffc900002074e0 EFLAGS: 00010297 [ 92.146706][ T31] RAX: 0000000000000000 RBX: 0000000000000080 RCX: 0000000000000001 [ 92.154690][ T31] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000207500 [ 92.162672][ T31] RBP: ffffc90000207560 R08: 0000000000000003 R09: 0000000000000004 [ 92.170683][ T31] R10: dffffc0000000000 R11: fffff52000040ea0 R12: 1ffff92000040e9c [ 92.178674][ T31] R13: dffffc0000000000 R14: ffffc90000207500 R15: dffffc0000000000 [ 92.186663][ T31] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 92.195609][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.202211][ T31] CR2: 0000000000000080 CR3: 0000000102730000 CR4: 00000000003526b0 [ 92.210215][ T31] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.218194][ T31] DR3: 3a810b1eb6134bdc DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.226182][ T31] Call Trace: [ 92.229468][ T31] [ 92.232408][ T31] ? __cfi__raw_spin_lock+0x10/0x10 [ 92.237635][ T31] ? dput+0x42f/0x510 [ 92.241639][ T31] d_delete+0x4a/0x120 [ 92.245732][ T31] rust_binderfs_remove_file+0xec/0x110 [ 92.251292][ T31] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 92.264068][ T31] ? update_curr_dl_se+0x10c/0xb20 [ 92.269199][ T31] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 92.275274][ T31] ? update_curr+0x60d/0xc60 [ 92.279877][ T31] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 92.293088][ T31] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 92.299175][ T31] ? update_load_avg+0x506/0x19a0 [ 92.304217][ T31] ? detach_entity_load_avg+0x7b0/0x7b0 [ 92.309780][ T31] ? dequeue_entity+0xa9c/0x1750 [ 92.314735][ T31] ? ret_from_fork+0x64/0xa0 [ 92.319344][ T31] ? calibrate_delay_converge+0x2e0/0x2e0 [ 92.325083][ T31] ? kvm_sched_clock_read+0x15/0x30 [ 92.330306][ T31] ? sched_clock_noinstr+0xd/0x30 [ 92.335366][ T31] ? sched_clock+0x44/0x60 [ 92.339799][ T31] ? sched_clock_cpu+0x75/0x400 [ 92.344667][ T31] ? sched_balance_newidle+0x845/0xe00 [ 92.350136][ T31] ? __cfi_sched_clock_cpu+0x10/0x10 [ 92.355432][ T31] ? __kasan_check_write+0x18/0x20 [ 92.360562][ T31] ? __switch_to+0xc7b/0x1310 [ 92.365253][ T31] ? psi_group_change+0xb44/0x1130 [ 92.370392][ T31] ? __cfi___switch_to+0x10/0x10 [ 92.375348][ T31] ? _raw_spin_unlock+0x45/0x60 [ 92.380210][ T31] ? __switch_to_asm+0x3d/0x70 [ 92.384993][ T31] ? __schedule+0x1463/0x1f10 [ 92.389681][ T31] ? kick_pool+0xb9/0x550 [ 92.394020][ T31] process_scheduled_works+0x7d2/0x1020 [ 92.399589][ T31] worker_thread+0xc58/0x1250 [ 92.404287][ T31] kthread+0x2ca/0x370 [ 92.408378][ T31] ? __cfi_worker_thread+0x10/0x10 [ 92.413540][ T31] ? __cfi_kthread+0x10/0x10 [ 92.418151][ T31] ret_from_fork+0x64/0xa0 [ 92.422578][ T31] ? __cfi_kthread+0x10/0x10 [ 92.427191][ T31] ret_from_fork_asm+0x1a/0x30 [ 92.431970][ T31] [ 92.434999][ T31] Modules linked in: [ 92.438910][ T31] CR2: 0000000000000080 [ 92.443078][ T31] ---[ end trace 0000000000000000 ]--- [ 92.448547][ T31] RIP: 0010:_raw_spin_lock+0x95/0x120 [ 92.453946][ T31] Code: 7d 7a c7 44 24 20 00 00 00 00 be 04 00 00 00 e8 11 fe 53 fc 4c 89 f7 be 04 00 00 00 e8 04 fe 53 fc 8b 44 24 20 b9 01 00 00 00 0f b1 0b 75 32 48 c7 04 24 0e 36 e0 45 4b c7 04 3c 00 00 00 00 [ 92.474004][ T31] RSP: 0018:ffffc900002074e0 EFLAGS: 00010297 [ 92.480081][ T31] RAX: 0000000000000000 RBX: 0000000000000080 RCX: 0000000000000001 [ 92.488059][ T31] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000207500 [ 92.496044][ T31] RBP: ffffc90000207560 R08: 0000000000000003 R09: 0000000000000004 [ 92.504024][ T31] R10: dffffc0000000000 R11: fffff52000040ea0 R12: 1ffff92000040e9c [ 92.512007][ T31] R13: dffffc0000000000 R14: ffffc90000207500 R15: dffffc0000000000 [ 92.519988][ T31] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 92.528925][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.535523][ T31] CR2: 0000000000000080 CR3: 0000000102730000 CR4: 00000000003526b0 [ 92.543506][ T31] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.551491][ T31] DR3: 3a810b1eb6134bdc DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.559485][ T31] Kernel panic - not syncing: Fatal exception [ 92.565843][ T31] Kernel Offset: disabled [ 92.570171][ T31] Rebooting in 86400 seconds..