last executing test programs: 56.372642931s ago: executing program 1 (id=1596): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = userfaultfd(0x801) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x7, 0x12) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'\x00', @remote}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close(0x4) 56.132994724s ago: executing program 1 (id=1599): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, 0x0) syz_fuse_handle_req(r0, &(0x7f00000067c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001fb000", 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 56.089090595s ago: executing program 1 (id=1601): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000058c0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc020000002b000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) 56.088859305s ago: executing program 1 (id=1603): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r1, &(0x7f0000000380)='./file1\x00', r1, &(0x7f00000003c0)='./bus\x00', 0x400) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') unlink(&(0x7f00000001c0)='./file0\x00') syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$TUNGETDEVNETNS(r0, 0xff05, 0x0) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 56.033279876s ago: executing program 1 (id=1605): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="44010000100001000000000000000000ffffffff000000000000000000000000ac1414bb00000000000000000000000000003b00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000fdffffffffffffff0400000000000000ffffffffffffff80020000000000000004000000000000000000004000000000000000000000000000000002000000000000000025bd7000000000000a000301000000000000000048000300"], 0x144}, 0x1, 0x0, 0x0, 0x44}, 0x4810) 55.914877708s ago: executing program 1 (id=1609): setfsgid(0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) 55.876854738s ago: executing program 32 (id=1609): setfsgid(0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) 55.094453911s ago: executing program 4 (id=1632): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000058c0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000010000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000090000000000000000000000000000000000000000000000010000000000000000040000000000000000000000000000feffffff00000000000000000000000044010500"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) 55.094093301s ago: executing program 4 (id=1634): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000058c0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc020000000000000000000000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000010000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000090000000300000000000000000000000000000000000000010000000000000000000000000000000000000000000000feffffff00000000000000000000000044010500e0000002000000000000000000000000000004d632"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) 55.086595381s ago: executing program 4 (id=1636): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000001) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r0, 0x2546c000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000000000000000000", 0x58}], 0x1) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001500)='\x00\x00\b\x00\xff\xff\xf7\xff\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q\x00\x00\x00\x00\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a\x00\x80\xff\xff\xff\xff\xff\xff\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xc3\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a\xde]X1`d\x9d\x9e\xd0\n\xa1\xa9\x8cO\xb8p\"\xe7\xdb\xab\x0eAW&+\xe8\xf7p\v\x01\\\x98\xeey\xc4c\x18\x91\xd9\x00\x1c\xf0.\x9f\x1e?\xea\xea\'0\"\x94\xd1\xd3P\xa8\xc5wP`\xa6\xd5Q\x11\xc3o\x04\vat\xb9}\x83g\xca\xfe\xf4\xe6;\x18\xb9\xe7<\xcf\x96~\x0f\xb0\xd3\x1bl\x9e\xc2\xc6\xcc\xbe\x8c#\xd0\x9f\x050\x1csf\x84\x06Z\xf4\xd2!\a\x8a\xc8\xbe\xdb\xf6y\x94Z\xed0\xdbZ\x9b8~\xc0\xbbU\xd5I\x14\xb6\xeb\xa7V\x00\x18A%') 55.027369001s ago: executing program 4 (id=1637): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80000006, 0x48002) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000e0100", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 55.026771812s ago: executing program 4 (id=1639): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 54.988569312s ago: executing program 4 (id=1640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x84}, 0x1, 0x0, 0xa00}, 0x0) 54.948580193s ago: executing program 33 (id=1640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x84}, 0x1, 0x0, 0xa00}, 0x0) 43.107085958s ago: executing program 5 (id=1963): r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "7af9c2add30c3b0d788d9a94b0731ab8d4a8502c36822594c41a3a588f9ea10f4ea91dff6ece7b715bd30d75c5da8c5c4dada466bf73ee60295d1d133135d5c7", 0x14}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000005050000000000009d07000000000000"]) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "e2455270ca32f823", "d9d34dd180c59cf225504907a6e24c3d", "96f36c9e", "5dfd234d3d1d207f"}, 0x28) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r1) r5 = syz_open_dev$usbfs(0x0, 0xf, 0x8041) ioctl$USBDEVFS_RELEASEINTERFACE(r5, 0x80045510, &(0x7f0000000100)=0x165) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="380100002100010000000000fefffffffc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000e8001100ac140700000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aaff7f00a80100000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ac1e0001000000000000000000000000ff040000003500000a00080000000000000000000000ffff7f000001fc02000000000000000000000000000064010102000000000000000000000000fc0200000000000000000000000000003c000000000000000800020047bd775504a517073403d06b57cb258465783676f656d128fde7449a2ad9d3903736ecc43107fbc77e319194a3c835cd549f301cc9139ea2db62e0ad33a1c1fbbd7a635b058a9fc822d174f2a0aed1efe1de062f513c7616a451158ef64bab06"], 0x138}}, 0x0) 43.071705578s ago: executing program 5 (id=1964): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe8000000000000000000000000000bbff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1a0}}, 0x100000000000000) 43.062856529s ago: executing program 5 (id=1965): futex_waitv(&(0x7f00000006c0)=[{0x7, 0x0, 0x82, 0xca9a3b}], 0x1, 0x0, 0x0, 0x1) syz_clone(0xea005a00, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) futex_waitv(&(0x7f00000006c0)=[{0x7, 0x0, 0x82, 0xca9a3b}], 0x1, 0x0, 0x0, 0x1) (async) syz_clone(0xea005a00, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) (async) 43.00157086s ago: executing program 5 (id=1966): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000058c0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000010000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000090000000000000000000000000000000000000000000000010000000000000100000000000000000000000000000000feffffff00000000000000000000000044010500"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) 42.99935468s ago: executing program 5 (id=1967): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000058c0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc020000000000000000000000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000010000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000090000000007000000000000000000000000000000000000010000000000000000000000000000000000000000000000feffffff00000000000000000000000044010500e0000002000000000000000000000000000004d632"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) 42.99908615s ago: executing program 5 (id=1968): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setstatus(r4, 0x4, 0x460c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]}) socket$inet6(0xa, 0x80002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r6 = dup(r5) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) readv(r4, &(0x7f0000000700)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {0x0}], 0x3) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x4, 0x10000, 0x100, 0x9004, 0x0, 0x8, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x3, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x1, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x9, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2b, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x981, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x0, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) ioctl$BLKRRPART(r9, 0x125f, 0x0) 27.845564175s ago: executing program 34 (id=1968): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setstatus(r4, 0x4, 0x460c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]}) socket$inet6(0xa, 0x80002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r6 = dup(r5) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) readv(r4, &(0x7f0000000700)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {0x0}], 0x3) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x4, 0x10000, 0x100, 0x9004, 0x0, 0x8, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x3, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x1, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x9, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2b, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x981, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x0, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) ioctl$BLKRRPART(r9, 0x125f, 0x0) 2.059010798s ago: executing program 6 (id=2713): openat$binderfs(0xffffffffffffff9c, &(0x7f0000002100)='./binderfs2/custom1\x00', 0x2, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x1}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x2040, 0xa440bbc8e621c4f7}, 0x18) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000200)='./file0\x00', 0x50) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@afid={'afid', 0x3d, 0x9}}], [{@obj_role={'obj_role', 0x3d, '{,'}}]}}) add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002100)='./binderfs2/custom1\x00', 0x2, 0x0) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x1}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x2040, 0xa440bbc8e621c4f7}, 0x18) (async) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) (async) mkdir(&(0x7f0000000200)='./file0\x00', 0x50) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@afid={'afid', 0x3d, 0x9}}], [{@obj_role={'obj_role', 0x3d, '{,'}}]}}) (async) add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) (async) 1.92372565s ago: executing program 6 (id=2718): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000100)=0x1, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0xff, 0x42) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000040)={0xc952}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x8914, &(0x7f0000000a40)={'ip6_vti0\x00', 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="55dd"}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000800)=0xc) fchown(r4, r6, 0x0) dup3(r0, r0, 0x0) r8 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain) add_key$keyring(&(0x7f0000000080), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r8) keyctl$chown(0x4, r8, r6, r7) 1.847412821s ago: executing program 6 (id=2720): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000058c0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000010000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000090000000000000000000000000000000000000000000000010000000000000000000000000000010000000000000000feffffff00000000000000000000000044010500"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) 1.804876942s ago: executing program 6 (id=2721): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x9, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 1.743291413s ago: executing program 3 (id=2723): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000010000000000000000000d000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0x80, {0x8080000, 0x3000}}, "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", "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"}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000002980)={{0x0, 0x0, 0x80}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) epoll_create(0x374) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0) 1.561653396s ago: executing program 3 (id=2724): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80000006, 0x48002) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000001200", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.523540106s ago: executing program 3 (id=2725): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000058c0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc02000000ffffffffffffff800000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) 1.435227458s ago: executing program 3 (id=2726): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xc92480, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="793ee8124cae238514b8c25ae999ed25fc14bf8b7b98a25a245fcba38072b1fedc29513a368f3753c8cd311777db79f9a772985bc9efa1243c41f1eeb4e1a07e2b57a390d4913acd4034182074ab783d616673714d72e8a273101c78ddc61411334318894a156cd2cc34f3f42052dd7e79c5c9c1ca3f59ee651bd294bf4d262b31cbe8f8f23a5504a804a083084d5519637e97e94880f549394676c0edec1af036823ea8c423a7792330b8491a5a4a01deb4660d6b420b1e394fb1cb9cde473f2000fe3c4acd591851c258cf231df8c46dd18cc78dbb72189af635ce08b35374c567aebce0303b716c9cacffb6f60e102f9172e0e1a91760c558b580a3c56b5682ade32ad42e7df55faa4e056f3568abf5dea4415018c211637c362ec3c40afa47a2960a2bb4b6936a83223898564e2667bbc1fb774199c99701a726073070c0e19f57a63f4a38d1b03a0c98f8fd20666abd5e66768182c4df12343bce3e617f62d29f2faa1d5fa831a0a582f4708b547aac5129985fa32b345a82aa89958370c1d331935b304a8ad2eeff24f520e667a37b7c0d8f93d35546b8300ec3dfebb32933938e32bfa54d563ef22bfeb6aa8f16765a3f4788e03477fe9236e3d5869335ec18058779c5e63ff5877369898fab14e58cd0608f6f4d423eb1bf09a6eff87d999fc9e7be28390d471acde8543d571246138da540956867a32f3bb1d2d91931dbcfb8ade5cc313dc54f64ad96b7ada7ff63ba1702576d2bc48a1c6cc4cec815e0b8aee9c31d5c5cb119952b8d321181c1a14793266df2cab56d161111caf86d4a7eafd42c2622a63862533d1ddbec5fdaa888d0a03240bb08476198ba789aa552d0ab149a07977da16d1ed4bc635d94225d1ac84c788407fd4425f5a56f687dcbe688b9d0b26cf86671f985028e2ae3592ffb82fd5587ccc3dcb406969e11be470b519eca6114895fd8a4b93b1c4d1a9ca4e0001a62185e72b6cff213c7ded22effa555b45aad686bf2b388c0530058feade244e0672b02128946c190b4c076fcde7e0bb6941852e2c2b90d5ebf53771583e749dc07627f840808ba034474da51eed8b04cbab8981fed4a96fbd4b7ce98e93afab9040581ee91eb42f5d5d8ada63cae87711aa82f8493ae3a64883b99a1a8466a5bdcb753927f22487f01f7782f7e8278ce98da8e76b5230d1f21fa89e02a5f59ec8ceb7b5bb90518a8745d9a43047cb74e9591ea0a0db79601656e784a9321c3d7ab6a14b3d030e3deb7aaff2a2c89cf7ee0e2072936dc7b43ccd6233fc75eca52994a6e9f8c7929f6c370c93aff6f46bbcf05c1d85cd5b126fc08cf1cad82d3218f4127be9aa6e21bba7f1fb9cc4ffe5fc293b903f5ab407d67418a24579704f9df8e08ea157c480b3115d48a9109138f6b391901367e66a7f7573bf20a6d12de0bdad082f08599f912e8860aa4b6a6ef2a5ea071af07be64925bea34913660918032b72b55d01f1d8e09a4e79d70b4bf9f43fa0862fa75d1a0eabe3a769d3df7bf5ce7e0449d54295c06d5396a8f049294e9ff6d60687786d7143e8cbd23c30e36ff7dbeb266f6e63952d65998d844251dcab1cac0669bd0561b5dfefd1c7e0ebbc1567526797b64c97a4f31f87de4e034071b2d48fcbd15ef386ca172c0af3d71aa98744047ee463b3a20a1ef9b8bf1753f83d0f3ca9604e2234a71c3d00f78fb8a0d093af48f2ac0a15ba0c7c21ddab80ce394dc6e6245784ea17dd3949b76e3ca91fd29ea51afe5e50d71ac1067b665d8f57ae49a7fd635146e04861406681637fcf6b53c1404b9b69f4743a93874f2953aa827aac1b5462c852beba5d1080889d05741a11b86436589e9d9e6ebbb3fe89da9dede91731ee70851c9e1501beaa155844f238b299216e69cb88153d20f113faa9a51fc147dd31c5820b46c0cf5136d08761a6cbbfab1652c656d6f7dc7ce1e6a084962ca9e07ebbf949392482b9fb942b6025b71a903c199ac858d99b7eb46e92360de03a0631bf77763d8c098879a9b50907bbf0d6868ea23eb8e471700214d984d661040c51a4b01488718dcf09b3cd50c720b627d664fee7a1ea50ae6951bc0d0f6f59839ebefc18b99c844ccbfb3c4c04d19f07879ce06a3137b59ebf4c7daa52e1d850924d4cf76630101d37881f30e914346ff4f6e73cdcfd56dd81058cb6763110d88d34cca16cbc7b51953d44e09c57b3565e6527aea04949cc28dc502811e82c8cd8ae181dedfca4a47d3b22626eac388f272995add71bb5504a38c03b5ca8381ce09f10acb5f5fade0942f30334a0ffd03dec00fc7a4976a95851d0f347fff16e5e6f663c5feefaf7efa743b2766f1d442ef882f4852318c25a81b3d2bd4fb5b683e3837ea7d4df69fcb8a87788a3a0a759c86877cf56caa98f5fa04c71652d44bf5250ee6f9c54794bed3b48e33a063161eb324456da5e28ebb5ba271dcc826bf7b646b6c89da67605cbb953c35c070e76be46ca66ccdd060fa07af82d53c525c19eb8eb6e08426f160340ec8ec6a57a5aa146f5b67d84184a46b4b8a1373669070123f8346cb607be14a4d5b9124b369289b0ee7f184d498ae3043b14f3ecad6e2b9e71661e85e2dc0b6b053300468d53e36f1e99545a33fc1b84da6fc20d8f7f7f9ae614588f351fa59c818ba833920164d9b434052f4e788bbdaf1e9913c822fca65e0cfad203bedc6be2abac264a0cec0dd4e813dd84d28d853cd9b85d9dc94b96a80643dd3e2aaf73ec85566124204f7b98abc8c5e354a66dc838c080d26cebd3bf388eb8018a06b15708311043a785a937e63c09465ffc71d1658d2a84ed6b346b68e98459cd0725efde386cce85928eaf90641c5ad4a7f1c733fd5238bdfe348456704546afc4a982b42e3a5bb473cd71dfef785473ff88175d92d2f72f1ac5cf77344c8dcc07a78be9575f1cde05e8c5e2950b1f597a21b4351295e9f59e926a8b03551934c73f090ca3fb644a4e95dfa91bad452f59a5cde71b50e8da90ead55ea96181cc1b5c6deea431f27666bc67d36b26004aac6c02c29c80c0d6de163660bf56c48bbd7c5a06d1ef622d5aab46a746b6fad00ef47ddad8290ee81509ebc19cb85acff4ffe3d9123774b76ef96db3cb942776eadad084bd7351c340fc219ea696df3657a992792890bece7dd84e08af3800535b0a0946f9af6ea30dc20916e133f8eda3aef83082c1497d606fb99e81bbeedb70d9d32f93fee0a2090136746fde09038d1f8a7ae494ac012665f3db1119c49650012ae7e172f9be15622d0e2458c431bf386b5163c444e2515f1c99d56d2843863eb5487bb346d324bcb163891b10db02cde5003c111c984c690927580964b9afcf6c6cd1d9ccf30339f3d7fb8ac348604634848c85bb9a11969152d2b1bbd870c3fd95251d38f39a5ee0d48962e414ef7225150dd3134a87cc954eadf8e1a78ff8914de38f4d9dbbcc01553d2992f64b14377e21658cf2573393301bd0a46654cf5fb5d6a1a6f452450db63300b3dd037c5678c85f84b69cf52036bde51f6af406b82b8ce0c3bb64dbd538dab2e6ecbf4da5a57d43ac5aa0e2aa1cf466167662d088a09e109a95040865fd6bcfd68e5f6d6f3990c82f201da1bd0f4a5332bf6155584afbb70197d4e59e829312a3db47a7095c08251a7f574d4869177ab8c0a380adf87be8a1a016bcb8061e3f2a3f69661cfdb54a48e951c45d257fd3efb8dcda01d25274df0adcc0bf797caeb9296322738a972d8e40b07509e3505ffeb2c08793c75783a4c65fd11dc5af607dc3700cbd44f431eb4eec603185dfa8cc5e4693b737bae7c8b1ecf24798a3c72da8d688f5454947c99c339b752d027248ec9c08fb42df0a302ddd3c823ca1ad9cbfc2b2bdf3e7c9181da0ba1878ec434b5049163ef309892652ccd365df8d8260dce74e0d9a0aff0e1e56ab831bffc582f5d13d288dde7c3bc1548cb446d54f360b6656b99ad812d7f98e71cc21918336b1592ff22cacf28b602c4f3053a619899a5903ce80dbba757f6012ee4dbaa375fed540fe02fb66c82841606429ad00685c6fabc130b9b556020fd04b39b1fd0aab194c85a0fc95fc51ea8838ccf388e77cc85744e6770e75f570c0abd0834135192a9e1a54fd90db93b2ed733e3c2491adfb3bd9078b9c75f6157c7af332d7a3f3f2354539083b05100b9dd3ca90e073df2c2ba3f348c780151ae629afa20870dd7842f5c71f163accc6376370a7c5cab922d09d87d89aa451c47e8f54ee5d761d83b057d31120ccb26c818ea1ebc0683ad26e3b3cc62cd3be1f622203c87f39f0c5789be119589cc9ea57f0b04592bbde0a18bb59e36b6e92f4f7ccd01789b58adac60c803c8f072a4e9c280f3245604a2dbfa8ba7c21a918654c75fe48b5748d91112f5b61af65da4b355bb8f0a180254c7af66b56a7b1790afb8d589fb386db3cf84c5f41545a6a1a65ddb6f9888b5a08787626792bc609f397978310263858c2209230ad88965aeb1f533ee3271c8cc033ea128a181032e0fb469ab8e4e5453ea92444e02d4c8cb2dd7289225d070d6a0f22fa73512466d458b343ae80a950a92e0df66817d25ce5ca5fa64e5b31e3ffebdd8ce49d66fb31d01ac3d096889b30c6a7f50b7d50f422d2442ec56c10e61a41054c150c6fa922ae176e4aa82eaede99a5e6249edec0b066fac5caf6280079babdd528d2f4c0556f74f3329e7f57e6f56b8a5423894bcf87246e7db449784d88c9e459549ca7e4670504427d95a9505ca2a243a28475ebcb2c0380b9825bcb9eab3a4a7fbdcc85ce514b8e839761526508d4d782691605bf326297d5ceed21e6832462194dd8dbe6976f4a3049e48a0aa52318f49be25933eb3d9ca9b0916c90a17dfb22f8066dc95d0dd25925e1ddbe46e589523051a34514f3ab114154e0ffd9ee0a463f4c6d0e0734863d081049ffb02f906fa30eef1d15b6dc95fd71a7fe148504ee1d532d81aae2e783746c821a40db2dc03119d8b51e56e8624473c709ce339171737660add577066960031b6f7a1d871a1c6b46f678a85ece774aca728ceebdb4a3f9b6ea169cde4bc390536f71ccfb63afcaf7c8e02cc90d47a238747d341508754dba5eec12cbf3c1dd38a56bdb15161709297308f0d4aaa878078b9978cf1760a3d81ddef482baaa47d4578fb492d749a824868ea6de3a51a17a0dbefc4046156e0dd28f59ec4d5099b33e66cfa369438c7503e5c9a4aa7a779422c51154c21cf12ecf3233e3112751a29bec131d50fd434bc9825dbf528e725cd4299d9d3adb3b4d20adb4a721ec7e4d2d4f1b3254a059b24ac500cd11871098c016394b5679a696869035dd14fecf924a2eb20dab48f86270c08e19f41034a07c3cdae33e0322052f5fc74bcda7731ceb5eae50de0e3643e326f7d40d76ca124e59fd6eab80e0c40a4a1729081f2078c878f506800189b4068064f8003fc38c20fc666a525ee19b128cb0b341988868d07988b175fca82ffe8da18edce9dc1e3df170d774cf39b740d153a903497701bd71be079dd8211ad2d3a9eaaabb2402823cb8979797af079979c1355d923896e598132fc991e4e532310d0e25c5ae227d22c014400127f37a1828474a53dac446c508c3e94808cc5ad2b2ed756cf2f04dd62692db1d83019d1500d146c3e0d765b8f12ff650d0fa8f83358a761f1e54c041b134703d8c3059aa1f3106f6011b4df33f2dd738c2da81b43cdf9da65b5033c829d4f5a1a6c1cf8ea2e74fd5fdf2e751b62d138fa6672a12fad88d128872e6c958f4902a6b444b17bd24dc2dc0b9d27dfa5d11ba700de9b116ad2679c71e8d4d7de323e33f1b5ef967e87c7cb1ddccfc1a36ab7c27a6b969751307b55f9237040afa34ec6d45f575841afee0053b985b889ae3e016202fe93012104e13e99e9c2f62bb978f0b217fb1f5ae4b1e93845f381c47529f77f7b642ce8cffdabd1429bd1b95174c33c144fd00cff2fe538e5837d62b593a9afc7aecd2efc25b565dbf9420348d20169b4f556d87cd415a7002690ddc8332099043f34b32e83dfe9651f94745645ea379d97f82eb1fc24ccb9ff51a880ca28016235ec9ab7e9a23d05f48013ad867920cb5974e06ef48e73c46e57ad248ed70442d3e0575b232c21c84eef0f84edcc714deca1cc4fb6fb5b201fbbd94e9dcb6094bd4cebbecc690d00bb940c6c840f69e1f9e2babe60c014d3f5b292c2c45bfdbed136c08a11d2e1aa7df5839cd7156f670a542ca8ad23ae0e564e8f87b30407cfd498191b902539585ca241bd4a4106a4712383140c6ec6283a2bf74454b959b8677c23561c73f9feac98a7b28fda204a87984570558ab269cdb23184d374ab172d3d9faac113c450f2faca565007b7c5013f02c66c408c81bc731f8559802fa452a0028bbcfc387389a00958b9adb83517940dd6b8f1386b971b2d92a4980e486d7954889323f6f8ba4452ba0002c984e6aa91d7642e0f8e92321494394b264cfa30cbaf9df96bd62d9b098554a8a8554fe84c95699a87b0da4e541d9395c5a4a69302bd3503ff763467beb111a3650287cebc4cd0804841f3990899992d2aacaff2bc1f7464fd9670450cad2ee153e8ed45331f694048fc0c4e2e7d034ab69e159226542fdb90449da050363bf7b683a2215bf5272d4c18fd2ebee8bd29dc180f448b1f85f4429d066c692a350aa9f036ee43ee74f942bba2164f692cfa70b79cb8149a6a79fbf3197101f75933cb0458dc2b9ffd7a987cd9a139cbb853064bc62343e305052a4f77e72c98760b972ac3ac84b374f4422bf44d15334f38291c61ff630a818a34d33d516da256e1ad5e187a79846dcc087a761df9e664afc9785115a6b78dca0908d0957be795a3001ca2d3ad9fc544f992660b643da5edade7890217d07452ffa7454fa59907cb325c9dd445fee201bcffc8dce888da13059bee2286a5ef0e863dc107478f12baf983209060b1aee7286bee1e699b84332327c845a1574b8a0897eb1cd31b4a7498a33fe1e2dc4f8afcafff76eeee019c8c73cf8de0285e342e08ad0a9a43f7260bd5fbc903ebe099c73850982e2e8533c97a26f67855c155a3bfb025b2277e9b627a0bc860c1be18875241a9f8b4fc61039f9d71f7bbc537d2f51f1a5e840dbff7786f4a374f51cb2e657a6f2c8052cfc3ffa7e603a1266df3eec49c00a40d6f82b1b4a670b99534f401866ed6401602f8da9bb7243a97321cfb7540734aee1b75cab753db13f81a4bc67bf01bd467c44852bca45e699bfeb783326f631deb5d22c47b97d9d0c2adbe97c373e149321613a0d6f25dd822d8fa76431b97e88aa397eb467ffaead4fe9c196fd69b81db3906f3b4eb40fdaa19bd5607f7a3bd442c88731014da0af1d33be3e63f3967b00f193e37419f18df4f013017bd280091679e14428cdab0a8a77522a2b6a3337021d3bbc8b7e8774fdd2f387d5d455d10d91bb7c05a15e2950a51b00edea2b5723539770d321c8f9d4e5d24f291e033acb2e4a5c1f8671fe91150d023dd031cadead806bcfa69bc44946935d1e49a628bfcbffaedebd5789a6828950414052d9f7d261e69c841da3291270d7387662f74e20651b6c75722b530aef69cae0c2c9ef5663bedfa37e0192369c3aea78991e0ffef0bff4157d25edd29acd148a3b255157a84c4dfa25b5af681fbe93015382bdf742c1a5076caa52b5370943d02fb98531be900ed3687b4dd076daeebbd3025db56a8c7628a0542a4ac23626b3549abf114127627e44f5df17a81328bd84132e36cb6127c4081199b4fca0dff46021396038c37c832c9bf2fe43729ea45b6ee6aa5f34b2869965f78481d56e6f8ca913301e4fc61b2616c9ea23dcce1f9ec2a0ad97959f00e6c1a99fe5c9be180e1d03826b433a120c654171afedabd20fa42b8bfd3d0bfe64a560cccb9cd001220965576e6f1664097cd3e28d9bbb63c84c801f832e7ca8afff3bae368b66b3b62907881a3c3ae821d5a8725cd11fb3219eb956dd586254a88ab4788e432da28db60a4fe97f203e27d4052cbee48d2edb022d8c72e2a3499378f4ef7076abf712c3a24ba10e43f8b0efdc226c8b10788f0160d1ed23ddc002ea200a4825dc9bf25f56d2d134d25cb2603fa28df93c58820a7ceb690a950f7a6fd1b893ef414d50b57468343a96f55625a141293e6a4e8d0a6aa824a0c31b206c75b48540dc46b20f0f55e5adf8c2514b01ccf4f15faa43df71aa711f8d76ba335a881887c0648aafc434810bbf808eebc1cc9161ac4e111496e4d68400d52c96dc93abdb47ef1901b1674888bb836362786444916135e22f9b10d37400748d6a11fee36b75e6caeba02790665045a274e50ded6fa969fe715751d429c2ace6c2faa5848ab1417e003c49c29d0efe18f1d157c5ac8cd3db4d7209fec82c77b7de669e8d0034eff8c2e49f731f76b0fccc9b65b6a8ed1efe50e407570d73c61403eabb8c376bd3326e57d490bcd74bc1a520cc4522ae65aa025e4782d54a4f82a042da6f9273678de3621527a6f4bab529c7e17726e094d00eacb739e931f3afa8dad84a6d1e89f8024c194833742b967e4cfc8f63fcbf591fb469e25bc6a9267b85d4031bb4b434f2f0b2c1e38dd27c894b029b41455477b8d69f95b8dfb7a22890ce7d71660c6f4a84dfb843172d711f9520063a7f935dffbc10abfb0f44f95af6fa49b2f0fdeef56fa960a98f369b574435cbb18b14b96b8937cd2f6737075c04dad79b77b786f203b2951e4bdf1228449a83306cb0e5a98c3976ce8b63a389be9ce4a5adaedd30a4e069152c35e49bb0e42a3873fd3c88e277cdefb816b0286ad1f12d6ca33805e90e4391f5a59bbc86479c9bea9d71fbc5253cf3017fd6862daf0f72d52c2bb44247b6a303722387cd01cefcb14e79bb6fd507daf09833aa094868132df358725a4db57dd1e2e37bcb37536ad59d8b68e4293d15f38715c68885126c0fff1eafe295aeb4a88919561e03cd4f7436cea1ee69bd66e308425e41eee1dc9e9609ec211aca2cae25ed4369c9fcd7bfe316c9f2b9707b6e3789f6c41a70e28121a26d5591ce94cd60900b27ebfb995d34cd509fd0c8fe204969e5ef6ccd9c1605c47da01a437cbfe612d928a63c83d998dc2de6ea4695f36865febbe065db2f75c2a700c4b23251fec61bedf33e45eb8fde785178647999b9a0069aa45fa01f4ed8ecb072de1e256a8b95365831aa975b249f57bd38064edc6886620ad24ddd589dbe3587c23bf12a71a7edf34b8c46a079adbe410fe32abb408a264a01f3ecaa115e4ad2e47e9bed54df1fcff145222c544c89b15b2943e5e6ce37477ecf4e17fbe33d74e60461c52c3682cdb7b0d1ba016cf7756ae9042b296c308da630b7021a20c71600b21198221a3fb905c2716ea4b6a35af3fc204dceb81bb4270b51a7f552e33aecf4a704b5c6e3538e7d91da4166d747ed854de3dc15ef3b07a04d9237ce0351b446c09cd2b4e87aae02e08dceab1d35c31334520eb3979617928048d3510d9f3d5db36477fb1ec21ad57e7d757eb7accfb1875b59bd1627b62f33ca853e11b211f3a02500e43c5655dac4c8ba62247da245453cb690700de3b9521e5d2841fcdb73d550f4ad20f53b3f0ec2f229e7bc564daf94a42044c2a8f93b13d11e9e27562c290f47017e507275f12932f3c608b2ac955c15cfa100fd5df86a223d4acd4350dedfa26d15c3e3595cb003b1187a77f784385b59e582308cecfd6e53a4be286e6b27b2e66dff8a578f30bd89f5cee1014a55423b5297dc23c5d9e0fef458d8c5df03c989ff7f1f0ca8ed10e97c1040e07bcccb3e4bf5cf8e6ca08a23fc75fc861e6749fa29ac8a8be70c341627b0b8a75f02eb1493ca574c98fa69efb5d76261391195687d947dc785a712d61a7e1a9b954d5b4c159fb4ac0710eacb0086419d12176681a911c10364011b151edaa0323d1a1ae040f9f26be099465a8c67fa522b6805df36ac81cd422e4c34028882ceec4b4fb08d86c05aa4c16a02fe99eea84c75a0821373188489198c2296f290efd5c905e1a5ce0091b4da05e376a416d80720e14c17d2bb84b91cf989fa72c3822d37661467e811b0b1fa6e4948dab66911f5e0394d211e773d66ab2c94a4a14329abb1e9307ff36701908ef85cea4d8ceeaf24520b53ed0e401a166aa05f821cbbc5d1f0d16e4e5d14a4d04e5e5224a2b5a7f34dfc03b691487e1d7199675f00b137c37a87cfed418e013d0b3c3862da3f812d2adda99cc8ab4da10d3ab9d392bef7c9b11ca49fcf7f7af9f6010772b1a04b143eaf940d56865887b202fe0b8f70fe2d45bcb0c20e95abdf2e76d32160df1fcef36aff0ce2e9af3453904f7b2eb43a1bad754e3f1216258f49d34fe6462354366e82a86c4ed81a4021afce5b66039622c6b9c9a24c5f0e57ade4b8e64104e6bd4237fb98c55a6f3c2a5128e96c14bdb1615a0b9c0da306454b76d5f698e321d48719a3171083b41455f59f28560dc616250be61a598b1e753943ead0ca5270bd2039b2f5e480349455011f86d2d8f46ec562f8b1e57872576127f3a050fc6e32e7c4c4c7ab1d2855e8c8d649b8eb00f1d8d02c80a39eb6c1b23fb1d5ba28742e217a02276c724b8b32ca2d39bd3f71cc7fc2a9dd52a28c4ca566038fa2967881c9303ba138bc8054761651e7ee7e6b8960346f227a07007c74280f8419e6baf856e2473cb91ad9c206df2f7a8073ca3462cdb23ba5dd538efa2af2b0b43049a29931e315c4c9290b99c7edeb7b938ea05bfe3744735fb2e550a7e15b7d7d6a17dbd87add165d7a13668884fb235b1fd70e4c3a67895ea0c9b8824b8b14d41a9ce80debc8ee3bef4a57d40994d2d422e2621dd9fdcbe1edb712ffe43774cbbe5839a8146a936317310c3be4daa693685262ee3a44aabe86281b0927e78df3ca4086a81e8d7af261fc51d3eb75cd8852729adfd68579958b61aec37f4f6bbecb4a3f09eea3ce0a49d35666d1050f65da5d5e917d79390d0133e81d07aa285c53d3c7d3bfb82d7cb8e6ecf4f8203b78787963277e98c5dd8cdeb2d83b049d9671b98563eb006ae8148215eb87004551aa357016cf88caba47d4fe3f4209ba0190f5020c5a8ae6e37e60c9a3fe856fbbfa0acf3dd1a2953fb31f0c913a9f8bc6a7bd4feffb8dcacbd764f84eb370cc7baaafd48c9a8972b22c989a49b9f5ca332a1331fd591d412892f45a080d6a3f5effc802364d0ddf03cb391d97ba4fc8371a91650a8a28c5e6221f66d15b4a4b0afe7502034a60c9a1bab525b51225ef9d40ba9a5e870faf19fab07933f2840c4ba52b9a82442c207147bd7327da8468ff6ce98c3de6f7092db9e1673dfbd54d31c4f0462524483edc8f73274137ab5770230a87118751f97d915644f793da732cbb2936c08595209fc42a1ee095591ca9ab503e27ff19b5ee3375a79921f3ffae984a89b1e49eaf21a9d6c1d7c14138b97fdbbf824e3bfb06457aaf1b78ff393bde10b7bbd9bd2d632013d6dd33a12be84dc33afaef1a6f259439356e89290de74007e1bf127594db485b9d07c2dd67876401922bc943a45c743377c", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x29, 0x1, 0x800, 0xbe2, 0x200, 0xffff, 0x12800, 0x0, 0x0, 0x1, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone(0x802400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r4, 0x293f000) 1.334523139s ago: executing program 2 (id=2733): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001e00010026bd706e6e24139e07"], 0x40}}, 0x90) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff7, 0xfffffffffffffd80, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0x59, 0x2, 0x2}, @fd, @fda={0x66646185, 0x2, 0x1, 0x3f}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 1.30057003s ago: executing program 2 (id=2734): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000058c0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000080ffffffffffffff0000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) 1.30010757s ago: executing program 3 (id=2735): sched_getattr(0x0, &(0x7f0000000080)={0x38}, 0x38, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x0) fcntl$getflags(r0, 0x3) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) 1.2976206s ago: executing program 0 (id=2736): r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "7af9c2add30c3b0d788d9a94b0731ab8d4a8502c36822594c41a3a588f9ea10f4ea91dff6ece7b715bd30d75c5da8c5c4dada466bf73ee60295d1d133135d5c7", 0x14}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000005050000000000009d07000000000000"]) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "e2455270ca32f823", "d9d34dd180c59cf225504907a6e24c3d", "96f36c9e", "5dfd234d3d1d207f"}, 0x28) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r1) r5 = syz_open_dev$usbfs(0x0, 0xf, 0x8041) ioctl$USBDEVFS_RELEASEINTERFACE(r5, 0x80045510, &(0x7f0000000100)=0x165) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="380100002100010000000000fefffffffc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) 1.29749351s ago: executing program 2 (id=2737): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="400100001000010000000000000000000000000000000000000000b3d043fc00fe8000000000000000000000000000bb0000fff720000001006999fb82000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000400000000000000001a0000000000000000000000000000040000000000000000000040000000000000000000000000000000000000000000000000000000000000000002000001"], 0x140}}, 0x4810) 1.230620631s ago: executing program 3 (id=2738): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x122}], 0x1, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) getsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = syz_clone(0x20801000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ptrace$setsig(0x4203, r1, 0x1, &(0x7f0000000000)={0x26, 0x6, 0x4}) 1.230538991s ago: executing program 2 (id=2739): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000058c0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000010000000000000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000900000000000000000000000000000000000000000000000100000000000000ffffffffffffff800000000000000000feffffff00000000000000000000000044010500"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) 1.229670901s ago: executing program 2 (id=2740): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x8b, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902790003010100040904000000010100000a24010300080202000000000000001cafc00904010000010200000904010101010200000a240201400300004dff090501090002077f0227250181020100090402000001020305000905820920000e580107250185040500"/139], 0x0) 1.196612471s ago: executing program 0 (id=2741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000010000100000000cc81b3f7c4078f57"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = dup3(r2, r1, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet6(0xa, 0x1, 0x0) r9 = dup2(r8, r8) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000000640)={@remote, @private0={0xfc, 0x0, '\x00', 0x10}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40000, 0x40, 0x5, 0x100, 0x0, 0x40180043}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r7, 0x1, 0x0, 0x0, {0x27}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r5, 0x400, 0x70bd28, 0x9, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040012) r14 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r14, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r14, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f00000001c0)=0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r15, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, r16, 0x0, 0x0, 0x3}]) io_getevents(r15, 0x5, 0x5, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x0) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x32}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x20000000029}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 975.922625ms ago: executing program 0 (id=2742): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) keyctl$link(0x8, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x89250) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x80802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='\v\x00'], 0x1c7) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2d, 'cpuacct'}, {0x2b, 'freezer'}, {0x2d, 'devices'}]}, 0x1b) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 739.317209ms ago: executing program 0 (id=2743): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000080)={'veth1_to_bridge\x00'}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0xfff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0xff06, &(0x7f0000000000)={@fd, @fd, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 739.114419ms ago: executing program 0 (id=2744): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) write$cgroup_int(r1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 724.973839ms ago: executing program 0 (id=2745): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x50, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000040)='attr\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x110a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 92.334419ms ago: executing program 6 (id=2746): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00'/10, 0xa, 0xb00, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) 39.1925ms ago: executing program 6 (id=2747): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/wake_unlock', 0x399ac5, 0x26) read$FUSE(r0, &(0x7f0000000ac0)={0x2020}, 0x2020) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x5) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000094}]}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000800500"]) getdents64(r6, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x98, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x1001, 0x3}, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/11, 0xb, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@fda={0x66646185, 0x3, 0x1, 0x1201}, @flat=@binder={0x73622a85, 0x1101}, @ptr={0x70742a85, 0x1, &(0x7f0000000500)=""/90, 0x5a, 0x0, 0x3f}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) write$cgroup_type(r0, &(0x7f0000000340), 0x9) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/wake_unlock', 0x399ac5, 0x26) (async) read$FUSE(r0, &(0x7f0000000ac0)={0x2020}, 0x2020) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x5) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000094}]}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000800500"]) (async) getdents64(r6, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x98, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x1001, 0x3}, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/11, 0xb, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@fda={0x66646185, 0x3, 0x1, 0x1201}, @flat=@binder={0x73622a85, 0x1101}, @ptr={0x70742a85, 0x1, &(0x7f0000000500)=""/90, 0x5a, 0x0, 0x3f}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) (async) write$cgroup_type(r0, &(0x7f0000000340), 0x9) (async) 0s ago: executing program 2 (id=2748): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x80, 0x0, &(0x7f0000000580)=[@acquire, @dead_binder_done, @decrefs={0x40046307, 0x1}, @acquire={0x40046305, 0x2}, @request_death, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/225, 0xe1, 0x2, 0x30}, @fda={0x66646185, 0x3, 0x1, 0x19}, @fda={0x66646185, 0x5, 0x2, 0x24}}, &(0x7f0000000380)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)={0x2c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000540)=[@acquire, @release], 0x0, 0x0, 0x0}) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) close(r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x480000000000000) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010004007324b2780300004000000000ecff000000000000"]) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f00000001c0)=ANY=[@ANYBLOB="74a2f2e443b37b20b554028b69228b3d955b148da0df4dc1ee2c7c67cf2ebcc4651f6907212f2e1c54e5d678d00d85515f9ff001f55bc6d78111dc0d5d7632eb4f9f45a369dfc95bdd54ef62187ebe772cbef769440a"]) kernel console output (not intermixed with test programs): =202 compat=0 ip=0x7f26cf18e929 code=0x7ffc0000 [ 101.481298][ T36] audit: type=1326 audit(1750463638.461:5678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3885 comm="syz.3.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cf18e929 code=0x7ffc0000 [ 101.506927][ T3898] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1440'. [ 101.536621][ T3900] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1442'. [ 101.568769][ T3906] rust_binder: Write failure EFAULT in pid:1013 [ 101.587100][ T3912] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 101.593629][ T3912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1017 [ 101.854214][ T611] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 102.014118][ T611] usb 2-1: Using ep0 maxpacket: 16 [ 102.022151][ T611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.034598][ T611] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 102.048711][ T611] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 102.058914][ T611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.070180][ T611] usb 2-1: config 0 descriptor?? [ 102.420877][ T3918] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.420936][ T3918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:805 [ 102.481025][ T3920] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.481338][ T3919] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:805 [ 102.774133][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 102.934153][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 102.940696][ T10] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 102.952625][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.961574][ T10] usb 1-1: config 0 descriptor?? [ 102.974074][ T49] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 102.984514][ T49] usb 3-1: USB disconnect, device number 26 [ 104.175360][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 104.185748][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register: ffffffe0 [ 104.196534][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 104.206926][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading Medium Status register: ffffffe0 [ 104.334931][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 104.354146][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 104.386335][ T3954] __nla_validate_parse: 1 callbacks suppressed [ 104.386354][ T3954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1463'. [ 104.407052][ T3957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1464'. [ 104.421437][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 104.438402][ T3963] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1466'. [ 104.450592][ T3959] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1465'. [ 104.461682][ T3959] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1465'. [ 104.471533][ T3960] netlink: 'syz.2.1465': attribute type 4 has an invalid length. [ 104.474285][ T3966] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1467'. [ 104.507289][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 104.507305][ T36] audit: type=1400 audit(1750463641.721:5681): avc: denied { getopt } for pid=3967 comm="syz.3.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.508710][ T3968] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1468'. [ 104.545972][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 104.548270][ T3968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:956 [ 104.572295][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 104.600617][ T3974] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1472'. [ 104.625590][ T611] usb 2-1: string descriptor 0 read error: -71 [ 104.644507][ T611] usbhid 2-1:0.0: can't add hid device: -71 [ 104.660614][ T611] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 104.682668][ T611] usb 2-1: USB disconnect, device number 23 [ 104.695199][ T3995] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 104.711192][ T3995] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 104.725867][ T3995] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 104.757174][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 104.834552][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 104.943866][ T4016] rust_binder: Write failure EINVAL in pid:1049 [ 104.961164][ T4020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1488'. [ 104.976967][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 105.002070][ T4025] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1490'. [ 105.048621][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 105.074067][ T36] audit: type=1326 audit(1750463642.281:5682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad5f8e929 code=0x7ffc0000 [ 105.104837][ T4038] binder: Unknown parameter 'context' [ 105.116899][ T36] audit: type=1326 audit(1750463642.311:5683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ad5f8e929 code=0x7ffc0000 [ 105.140540][ T36] audit: type=1326 audit(1750463642.311:5684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad5f8e929 code=0x7ffc0000 [ 105.171562][ T36] audit: type=1326 audit(1750463642.311:5685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ad5f8e929 code=0x7ffc0000 [ 105.195371][ T4039] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 105.195755][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 105.205492][ T36] audit: type=1326 audit(1750463642.311:5686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad5f8e929 code=0x7ffc0000 [ 105.238544][ T36] audit: type=1326 audit(1750463642.311:5687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ad5f8e929 code=0x7ffc0000 [ 105.262353][ T36] audit: type=1326 audit(1750463642.311:5688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad5f8e929 code=0x7ffc0000 [ 105.288173][ T36] audit: type=1326 audit(1750463642.311:5689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ad5f8e929 code=0x7ffc0000 [ 105.288507][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 105.311885][ T36] audit: type=1326 audit(1750463642.311:5690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.1.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad5f8e929 code=0x7ffc0000 [ 105.376025][ T4046] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 105.407849][ T4052] incfs_lookup_dentry err:-1 [ 105.417772][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 105.420734][ T4052] incfs: Can't find or create .index dir in ./file0 [ 105.436184][ T3976] overlayfs: statfs failed on './file0' [ 105.437422][ T4052] incfs: mount failed -1 [ 105.494112][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 105.523686][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 105.545490][ T4058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:966 [ 105.601856][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 105.631831][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 105.649813][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 105.659578][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 105.674217][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.687869][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.702179][ T4075] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.702595][ T4075] rust_binder: Error in use_page_slow: ESRCH [ 105.709782][ T4075] rust_binder: use_range failure ESRCH [ 105.719305][ T4075] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 105.719413][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 105.726115][ T4075] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 105.734215][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 105.743967][ T4075] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:820 [ 105.754927][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.788355][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 105.799811][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 105.811793][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 105.814491][ T4083] serio: Serial port ttynull [ 105.823669][ T9] usb 2-1: config 0 descriptor?? [ 105.837765][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 105.848936][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 105.863513][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 105.864078][ T611] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 105.874712][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 105.894591][ T4084] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 105.902433][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 105.913313][ T4084] rust_binder: Write failure EINVAL in pid:880 [ 105.921647][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 105.944263][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 105.954520][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 105.974399][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 105.985298][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 105.996216][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 106.008816][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 106.020576][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 106.032706][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 106.044960][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 106.045416][ T611] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 106.063509][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 106.073231][ T611] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 106.095520][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 106.095796][ T611] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 106.112285][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 106.118811][ T611] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 106.130125][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 106.138634][ T611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.149491][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 106.158032][ T4067] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 106.169316][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 106.184622][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 106.195022][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 106.205339][ T961] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 106.214679][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 106.225186][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 106.235292][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 106.246558][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 106.256802][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 106.266994][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 106.278776][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 106.292280][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 106.302924][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 106.315091][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 106.326229][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 106.336381][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 106.348403][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 106.358833][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 106.369808][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 106.381484][ T961] usb 3-1: not running at top speed; connect to a high speed hub [ 106.389658][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 106.401784][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 106.412391][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 106.423458][ T961] usb 3-1: config 3 has an invalid interface number: 214 but max is 3 [ 106.433266][ T961] usb 3-1: config 3 has an invalid interface number: 33 but max is 3 [ 106.443558][ T961] usb 3-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 106.454109][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 106.465309][ T961] usb 3-1: config 3 has an invalid interface number: 248 but max is 3 [ 106.475878][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Could not register MDIO bus (err -5) [ 106.487984][ T961] usb 3-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 106.498198][ T961] usb 3-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 106.507224][ T10] asix 1-1:0.0: probe with driver asix failed with error -5 [ 106.518506][ T961] usb 3-1: config 3 has an invalid interface number: 22 but max is 3 [ 106.527378][ T10] usb 1-1: USB disconnect, device number 24 [ 106.534408][ T961] usb 3-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 106.543885][ T961] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 106.555008][ T961] usb 3-1: config 3 has no interface number 0 [ 106.561813][ T961] usb 3-1: config 3 has no interface number 1 [ 106.568411][ T961] usb 3-1: config 3 has no interface number 2 [ 106.575021][ T961] usb 3-1: config 3 has no interface number 3 [ 106.581159][ T961] usb 3-1: config 3 interface 214 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 106.592400][ T961] usb 3-1: config 3 interface 214 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 106.606416][ T961] usb 3-1: config 3 interface 33 altsetting 6 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 106.617682][ T961] usb 3-1: config 3 interface 33 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 106.629181][ T961] usb 3-1: config 3 interface 33 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 106.639856][ T961] usb 3-1: config 3 interface 33 altsetting 6 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 106.652028][ T961] usb 3-1: config 3 interface 33 altsetting 6 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 106.663488][ T961] usb 3-1: config 3 interface 33 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 106.674986][ T961] usb 3-1: config 3 interface 33 altsetting 6 has 7 endpoint descriptors, different from the interface descriptor's value: 16 [ 106.688408][ T961] usb 3-1: too many endpoints for config 3 interface 248 altsetting 191: 151, using maximum allowed: 30 [ 106.699892][ T961] usb 3-1: config 3 interface 248 altsetting 191 endpoint 0x9 has invalid maxpacket 544, setting to 64 [ 106.711441][ T961] usb 3-1: config 3 interface 248 altsetting 191 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 106.722611][ T961] usb 3-1: config 3 interface 248 altsetting 191 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 106.734168][ T961] usb 3-1: config 3 interface 248 altsetting 191 has a duplicate endpoint with address 0x2, skipping [ 106.746133][ T961] usb 3-1: config 3 interface 248 altsetting 191 has a duplicate endpoint with address 0x4, skipping [ 106.757386][ T961] usb 3-1: config 3 interface 248 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 106.768814][ T961] usb 3-1: config 3 interface 248 altsetting 191 has 9 endpoint descriptors, different from the interface descriptor's value: 151 [ 106.782378][ T961] usb 3-1: config 3 interface 22 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 106.795903][ T961] usb 3-1: config 3 interface 214 has no altsetting 0 [ 106.802787][ T961] usb 3-1: config 3 interface 33 has no altsetting 0 [ 106.809696][ T961] usb 3-1: config 3 interface 248 has no altsetting 0 [ 106.816854][ T961] usb 3-1: config 3 interface 22 has no altsetting 0 [ 106.825833][ T961] usb 3-1: New USB device found, idVendor=0471, idProduct=0310, bcdDevice=9a.7b [ 106.835359][ T961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.843672][ T961] usb 3-1: Product: syz [ 106.847876][ T961] usb 3-1: SerialNumber: syz [ 107.066032][ T961] usb 3-1: USB disconnect, device number 27 [ 107.768002][ T4118] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 108.084105][ T49] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 108.204824][ T9] usb 2-1: string descriptor 0 read error: -71 [ 108.214074][ T49] usb 3-1: device descriptor read/64, error -71 [ 108.214445][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 108.226523][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 108.238909][ T9] usb 2-1: USB disconnect, device number 24 [ 108.299918][ T4131] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 108.300118][ T4131] rust_binder: Failed to allocate buffer. len:48, is_oneway:false [ 108.454157][ T49] usb 3-1: device descriptor read/64, error -71 [ 108.704138][ T49] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 108.834139][ T49] usb 3-1: device descriptor read/64, error -71 [ 108.946682][ T4137] binder: Binderfs stats mode cannot be changed during a remount [ 109.038275][ T4144] rust_binder: Write failure EINVAL in pid:843 [ 109.075946][ T49] usb 3-1: device descriptor read/64, error -71 [ 109.104293][ T4156] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.110174][ T4156] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:853 [ 109.130561][ T4163] rust_binder: Write failure EINVAL in pid:856 [ 109.204163][ T49] usb usb3-port1: attempt power cycle [ 109.534092][ T367] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 109.554224][ T49] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 109.575474][ T49] usb 3-1: device descriptor read/8, error -71 [ 109.694124][ T367] usb 1-1: Using ep0 maxpacket: 16 [ 109.700606][ T367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.712328][ T367] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 109.725245][ T367] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 109.734345][ T367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.744239][ T49] usb 3-1: device descriptor read/8, error -71 [ 109.750508][ T367] usb 1-1: config 0 descriptor?? [ 109.984117][ T49] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 110.005170][ T49] usb 3-1: device descriptor read/8, error -71 [ 110.103926][ T611] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 110.114160][ T611] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input19 [ 110.127698][ T611] usb 4-1: USB disconnect, device number 26 [ 110.129387][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 110.136049][ T49] usb 3-1: device descriptor read/8, error -71 [ 110.221757][ T4195] __nla_validate_parse: 10 callbacks suppressed [ 110.221777][ T4195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1560'. [ 110.254342][ T49] usb usb3-port1: unable to enumerate USB device [ 110.304386][ T4202] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1562'. [ 110.325588][ T4204] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1563'. [ 110.421176][ T4215] rust_binder: Write failure EINVAL in pid:1123 [ 110.428694][ T4217] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1568'. [ 110.460469][ T4222] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 110.609122][ T4237] No source specified [ 110.621303][ T4237] No source specified [ 110.625378][ T4237] No source specified [ 110.629441][ T4237] No source specified [ 110.633473][ T4237] No source specified [ 110.637553][ T4237] No source specified [ 110.641583][ T4237] No source specified [ 110.645763][ T4237] No source specified [ 110.649835][ T4237] No source specified [ 110.653862][ T4237] No source specified [ 110.657958][ T4237] No source specified [ 110.664153][ T4237] No source specified [ 110.873832][ T4256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1583'. [ 110.899019][ T4258] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1584'. [ 110.975758][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 110.975765][ T4266] random: crng reseeded on system resumption [ 110.975792][ T36] audit: type=1400 audit(1750463648.191:5714): avc: denied { write } for pid=4265 comm="syz.2.1588" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 111.030833][ T4272] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1590'. [ 111.384112][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 111.534058][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 111.541477][ T9] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 111.554252][ T9] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1023 [ 111.565362][ T9] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 1024 [ 111.575895][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 111.584417][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.593930][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.602454][ T9] usb 3-1: Product: 迼ﱘ巳嬰熊 [ 111.608006][ T9] usb 3-1: Manufacturer: я [ 111.612675][ T9] usb 3-1: SerialNumber: и [ 111.618518][ T4283] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 111.643203][ T4283] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 111.745176][ T36] audit: type=1400 audit(1750463648.961:5715): avc: denied { create } for pid=289 comm="syz-executor" name="#87" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 111.766153][ T36] audit: type=1400 audit(1750463648.961:5716): avc: denied { link } for pid=289 comm="syz-executor" name="#87" dev="tmpfs" ino=2665 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 111.788834][ T36] audit: type=1400 audit(1750463648.961:5717): avc: denied { rename } for pid=289 comm="syz-executor" name="#88" dev="tmpfs" ino=2665 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 111.828472][ T4310] rust_binder: Write failure EFAULT in pid:1007 [ 111.840021][ T4312] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1607'. [ 111.866920][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 111.871957][ T4314] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1608'. [ 111.879898][ T9] usb 3-1: USB disconnect, device number 32 [ 111.895115][ T45] bridge_slave_1: left allmulticast mode [ 111.900849][ T45] bridge_slave_1: left promiscuous mode [ 111.910816][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.919357][ T45] bridge_slave_0: left allmulticast mode [ 111.925131][ T45] bridge_slave_0: left promiscuous mode [ 111.930997][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.018746][ T36] audit: type=1400 audit(1750463649.231:5718): avc: denied { mounton } for pid=4320 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 112.072480][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.079578][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.086909][ T4320] bridge_slave_0: entered allmulticast mode [ 112.093691][ T4320] bridge_slave_0: entered promiscuous mode [ 112.098244][ T4325] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1613'. [ 112.100625][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.116374][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.123584][ T4320] bridge_slave_1: entered allmulticast mode [ 112.130069][ T4320] bridge_slave_1: entered promiscuous mode [ 112.142594][ T45] veth1_macvtap: left promiscuous mode [ 112.148271][ T45] veth0_vlan: left promiscuous mode [ 112.258970][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.266132][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.286825][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.293900][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.314229][ T367] usb 1-1: string descriptor 0 read error: -71 [ 112.321833][ T4320] veth0_vlan: entered promiscuous mode [ 112.329316][ T367] usbhid 1-1:0.0: can't add hid device: -71 [ 112.329576][ T4338] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 112.340022][ T367] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 112.355147][ T4320] veth1_macvtap: entered promiscuous mode [ 112.358086][ T36] audit: type=1400 audit(1750463649.561:5719): avc: denied { relabelto } for pid=4337 comm="syz.0.1618" name="354" dev="tmpfs" ino=1989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 112.367122][ T367] usb 1-1: USB disconnect, device number 25 [ 112.394634][ T36] audit: type=1400 audit(1750463649.561:5720): avc: denied { associate } for pid=4337 comm="syz.0.1618" name="354" dev="tmpfs" ino=1989 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 112.430439][ T36] audit: type=1400 audit(1750463649.641:5721): avc: denied { mounton } for pid=4320 comm="syz-executor" path="/root/syzkaller.gTLTK6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 112.483768][ T36] audit: type=1400 audit(1750463649.691:5722): avc: denied { write } for pid=288 comm="syz-executor" name="354" dev="tmpfs" ino=1989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 112.511258][ T36] audit: type=1400 audit(1750463649.691:5723): avc: denied { remove_name } for pid=288 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 112.679348][ T4365] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 112.827588][ T305] bridge_slave_1: left allmulticast mode [ 112.833523][ T305] bridge_slave_1: left promiscuous mode [ 112.839578][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.847236][ T305] bridge_slave_0: left allmulticast mode [ 112.853029][ T305] bridge_slave_0: left promiscuous mode [ 112.858880][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.952104][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.959295][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.966479][ T4389] bridge_slave_0: entered allmulticast mode [ 112.972705][ T4389] bridge_slave_0: entered promiscuous mode [ 112.979439][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.986632][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.993761][ T4389] bridge_slave_1: entered allmulticast mode [ 113.000473][ T4389] bridge_slave_1: entered promiscuous mode [ 113.006346][ T961] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 113.015519][ T305] veth1_macvtap: left promiscuous mode [ 113.021030][ T305] veth0_vlan: left promiscuous mode [ 113.085122][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.092194][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.099487][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.106536][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.128868][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.136516][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.151920][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.159000][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.166554][ T961] usb 3-1: Using ep0 maxpacket: 16 [ 113.168043][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.172738][ T961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.178752][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.195974][ T4389] veth0_vlan: entered promiscuous mode [ 113.203570][ T961] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.210847][ T4389] veth1_macvtap: entered promiscuous mode [ 113.223002][ T961] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 113.232116][ T961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.246117][ T961] usb 3-1: config 0 descriptor?? [ 113.545266][ T4428] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.596968][ T4433] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:890 [ 113.608495][ T4435] overlay: ./file0 is not a directory [ 113.885558][ T4450] binder: Bad value for 'stats' [ 114.702110][ T4474] rust_binder: Read failure Err(EAGAIN) in pid:1039 [ 114.760969][ T4486] rust_binder: Write failure EINVAL in pid:52 [ 114.860435][ T4506] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 114.875712][ T4508] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1047 [ 114.888934][ T4508] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1047 [ 115.294711][ T4457] overlayfs: statfs failed on './file0' [ 115.326192][ T4518] __nla_validate_parse: 13 callbacks suppressed [ 115.326209][ T4518] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1691'. [ 115.352081][ T4520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1692'. [ 115.665928][ T4524] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1694'. [ 115.762554][ T961] usb 3-1: string descriptor 0 read error: -71 [ 115.766717][ T4534] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1697'. [ 115.791619][ T961] usbhid 3-1:0.0: can't add hid device: -71 [ 115.802791][ T961] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 115.815220][ T961] usb 3-1: USB disconnect, device number 33 [ 115.953013][ T4559] overlayfs: failed to resolve './file1/file0': -2 [ 115.985868][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 115.985885][ T36] audit: type=1400 audit(1750463653.201:5734): avc: denied { map } for pid=4563 comm="syz.2.1711" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 115.994051][ T4570] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1712'. [ 116.035127][ T4573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1713'. [ 116.056129][ T4577] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1715'. [ 116.070953][ T4579] capability: warning: `syz.5.1717' uses 32-bit capabilities (legacy support in use) [ 116.092194][ T4582] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 116.092536][ T4583] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.109213][ T4588] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1719'. [ 116.123893][ T4590] binder: Unknown parameter 'coyBLV"i5ntext' [ 116.171812][ T36] audit: type=1326 audit(1750463653.381:5735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4595 comm="syz.2.1723" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f6ef538e929 code=0x0 [ 116.260308][ T4611] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 116.283699][ T4611] rust_binder: Write failure EINVAL in pid:99 [ 116.334083][ T611] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 116.341727][ T4622] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1734'. [ 116.387135][ T4627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1736'. [ 116.494068][ T611] usb 1-1: Using ep0 maxpacket: 16 [ 116.501749][ T611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.514633][ T4651] rust_binder: Error while translating object. [ 116.514657][ T4651] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 116.520814][ T4651] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118 [ 116.530301][ T611] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.552365][ T611] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 116.561463][ T611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.570227][ T611] usb 1-1: config 0 descriptor?? [ 116.637455][ T4657] rust_binder: Error in use_page_slow: ESRCH [ 116.637474][ T4657] rust_binder: use_range failure ESRCH [ 116.642181][ T4658] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 116.643677][ T4657] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 116.649197][ T4658] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 116.657530][ T4657] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 116.665395][ T4658] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:124 [ 116.674867][ T4657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:124 [ 116.724135][ T4665] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:131 [ 117.047317][ T4705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.047350][ T4705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.054149][ T4705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.060599][ T4705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.067084][ T4705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.073624][ T4705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.080550][ T4705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.087156][ T4705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.093713][ T4705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.100499][ T4705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.106892][ T4705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.113785][ T4705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.207443][ T4714] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.214490][ T4714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:181 [ 117.221782][ T36] audit: type=1400 audit(1750463654.431:5736): avc: granted { setsecparam } for pid=4713 comm="syz.5.1772" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 117.231691][ T4714] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.255667][ T4714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:181 [ 117.332295][ T4726] rust_binder: Write failure EINVAL in pid:192 [ 117.414967][ T4734] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 117.421276][ T4734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1010 [ 117.503245][ T4750] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 117.671462][ T4777] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.671679][ T4777] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 117.678211][ T4777] rust_binder: Read failure Err(EFAULT) in pid:216 [ 117.766314][ T4786] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.773020][ T4786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:222 [ 117.794241][ T36] audit: type=1326 audit(1750463655.011:5737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4792 comm="syz.2.1808" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ef538e929 code=0x0 [ 117.830507][ T36] audit: type=1400 audit(1750463655.041:5738): avc: denied { read } for pid=4785 comm="syz.5.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.099950][ T4824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.108834][ T4824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.117491][ T4825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.126519][ T4825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.334105][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 118.464082][ T9] usb 3-1: device descriptor read/64, error -71 [ 118.704136][ T9] usb 3-1: device descriptor read/64, error -71 [ 118.737465][ T4833] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.737562][ T4833] rust_binder: inc_ref_done called when no active inc_refs [ 118.944111][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 119.034058][ T31] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 119.084181][ T9] usb 3-1: device descriptor read/64, error -71 [ 119.110326][ T611] usb 1-1: string descriptor 0 read error: -71 [ 119.124910][ T611] usbhid 1-1:0.0: can't add hid device: -71 [ 119.130935][ T611] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 119.141339][ T611] usb 1-1: USB disconnect, device number 26 [ 119.190828][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 119.198999][ T31] usb 6-1: not running at top speed; connect to a high speed hub [ 119.208679][ T31] usb 6-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 119.219065][ T31] usb 6-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 119.232309][ T31] usb 6-1: config 1 interface 0 has no altsetting 0 [ 119.240475][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 119.249589][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.258847][ T31] usb 6-1: Product: syz [ 119.263150][ T31] usb 6-1: Manufacturer: syz [ 119.267937][ T31] usb 6-1: SerialNumber: syz [ 119.334479][ T9] usb 3-1: device descriptor read/64, error -71 [ 119.413628][ T36] audit: type=1400 audit(1750463656.621:5739): avc: denied { accept } for pid=4866 comm="syz.3.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 119.444377][ T9] usb usb3-port1: attempt power cycle [ 119.483209][ T31] usb 6-1: USB disconnect, device number 2 [ 119.544454][ T4878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1100 [ 119.544934][ T4878] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.723308][ T4889] KVM: debugfs: duplicate directory 4889-7 [ 119.784086][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 119.805082][ T9] usb 3-1: device descriptor read/8, error -71 [ 119.935105][ T9] usb 3-1: device descriptor read/8, error -71 [ 119.976737][ T36] audit: type=1400 audit(1750463657.191:5740): avc: denied { listen } for pid=4903 comm="syz.3.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.073545][ T4915] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.174096][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 120.180953][ T4917] rust_binder: Error while translating object. [ 120.188449][ T4917] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 120.194729][ T4917] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:246 [ 120.215273][ T9] usb 3-1: device descriptor read/8, error -71 [ 120.244089][ T4101] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 120.355062][ T9] usb 3-1: device descriptor read/8, error -71 [ 120.394075][ T4101] usb 4-1: Using ep0 maxpacket: 16 [ 120.400353][ T4101] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.411359][ T4101] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 120.424238][ T4101] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 120.433277][ T4101] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.446774][ T4101] usb 4-1: config 0 descriptor?? [ 120.464150][ T9] usb usb3-port1: unable to enumerate USB device [ 120.556423][ T4924] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 120.598257][ T4928] __nla_validate_parse: 15 callbacks suppressed [ 120.598275][ T4928] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1857'. [ 120.855807][ T4101] hid_map_usage: 4377 callbacks suppressed [ 120.855819][ T4101] HID 045e:07da: Invalid code 65791 type 1 [ 120.869912][ T4101] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000F/input/input22 [ 120.882403][ T4101] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 120.959023][ T4954] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4954 comm=syz.5.1865 [ 121.044262][ T4962] binder: Bad value for 'stats' [ 121.045990][ T4963] binder: Bad value for 'stats' [ 121.104680][ T4966] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1870'. [ 121.138513][ T4973] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1873'. [ 121.166199][ T4981] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1877'. [ 121.187405][ T4983] cgroup: Invalid name [ 121.248745][ T4989] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1880'. [ 121.253141][ T4991] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.271119][ T4991] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 121.280918][ T4991] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:271 [ 121.486054][ T5016] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1892'. [ 121.577259][ T5024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1896'. [ 121.594849][ T5026] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1897'. [ 121.661373][ T31] usb 4-1: USB disconnect, device number 27 [ 121.749135][ T5040] binfmt_misc: register: failed to install interpreter file ./file0 [ 121.952898][ T5044] netlink: 324 bytes leftover after parsing attributes in process `syz.5.1902'. [ 122.081367][ T5056] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.193969][ T5059] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.221679][ T5070] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1913'. [ 122.265860][ T5073] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1136 [ 122.354636][ T5088] rust_binder: Error while translating object. [ 122.370016][ T5088] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 122.379683][ T5088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1143 [ 122.392523][ T5096] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.411580][ T36] audit: type=1400 audit(1750463659.611:5741): avc: denied { map } for pid=5095 comm="syz.0.1924" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 122.444712][ T36] audit: type=1400 audit(1750463659.611:5742): avc: denied { execute } for pid=5095 comm="syz.0.1924" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 122.468647][ T36] audit: type=1400 audit(1750463659.641:5743): avc: denied { read } for pid=5100 comm="syz.2.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 122.520178][ T36] audit: type=1326 audit(1750463659.731:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.5.1930" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7f891ab8e929 code=0x0 [ 122.739626][ T5143] rust_binder: Error in use_page_slow: ESRCH [ 122.739644][ T5143] rust_binder: use_range failure ESRCH [ 122.745665][ T5143] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 122.751189][ T5143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 122.754071][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 122.759135][ T5143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1165 [ 122.914078][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 122.929426][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.940358][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.953148][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 122.962182][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.971062][ T9] usb 3-1: config 0 descriptor?? [ 123.554066][ T961] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 123.694067][ T611] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 123.714055][ T961] usb 4-1: Using ep0 maxpacket: 32 [ 123.720218][ T961] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 123.728647][ T961] usb 4-1: config 0 has no interface number 0 [ 123.734790][ T961] usb 4-1: config 0 interface 2 has no altsetting 0 [ 123.742871][ T961] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 123.751991][ T961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.760003][ T961] usb 4-1: Product: syz [ 123.764185][ T961] usb 4-1: Manufacturer: syz [ 123.768788][ T961] usb 4-1: SerialNumber: syz [ 123.773988][ T961] usb 4-1: config 0 descriptor?? [ 123.855143][ T611] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.866722][ T611] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 123.875862][ T611] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.883940][ T611] usb 6-1: Product: syz [ 123.888135][ T611] usb 6-1: Manufacturer: syz [ 123.892730][ T611] usb 6-1: SerialNumber: syz [ 123.897923][ T611] usb 6-1: config 0 descriptor?? [ 123.903630][ T611] cdc_acm 6-1:0.0: skipping garbage [ 123.985889][ T5151] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1173 [ 124.037563][ T5164] rust_binder: Error while translating object. [ 124.047013][ T5164] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 124.053196][ T5164] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1173 [ 124.104512][ T31] usb 6-1: USB disconnect, device number 3 [ 124.796461][ T36] audit: type=1326 audit(1750463662.011:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.5.1968" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f891ab8e929 code=0x0 [ 125.413897][ T36] audit: type=1326 audit(1750463662.621:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.0.1971" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfb238e929 code=0x0 [ 125.532814][ T9] usb 3-1: string descriptor 0 read error: -71 [ 125.550014][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 125.556221][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 125.565792][ T9] usb 3-1: USB disconnect, device number 38 [ 125.579193][ T36] audit: type=1400 audit(1750463662.791:5747): avc: denied { setattr } for pid=5221 comm="syz.2.1974" name="NETLINK" dev="sockfs" ino=36786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.603311][ T36] audit: type=1400 audit(1750463662.791:5748): avc: denied { create } for pid=5221 comm="syz.2.1974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 125.715241][ T5230] binder: Bad value for 'stats' [ 125.739095][ T5234] __nla_validate_parse: 11 callbacks suppressed [ 125.739109][ T5234] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1980'. [ 125.874281][ T5241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1983'. [ 126.403845][ T5250] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1987'. [ 126.419063][ T961] usb 4-1: invalid MIDI in EP 0 [ 126.429023][ T961] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 126.442370][ T961] usb 4-1: USB disconnect, device number 28 [ 126.452218][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 126.486725][ T5257] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1990'. [ 126.675714][ T5269] rust_binder: Got transaction with invalid offset. [ 126.675742][ T5269] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 126.682451][ T5269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1188 [ 126.782276][ T5294] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2004'. [ 126.832774][ T5300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2007'. [ 126.934073][ T961] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 126.980181][ T5310] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2010'. [ 127.016869][ T5314] random: crng reseeded on system resumption [ 127.043188][ T5316] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2013'. [ 127.078633][ T5320] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 127.078649][ T5320] rust_binder: Read failure Err(EFAULT) in pid:1234 [ 127.084068][ T961] usb 4-1: Using ep0 maxpacket: 16 [ 127.101791][ T961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.112738][ T961] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 127.125705][ T961] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 127.134779][ T961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.143474][ T961] usb 4-1: config 0 descriptor?? [ 127.395053][ T5348] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2026'. [ 127.474641][ T5358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2029'. [ 127.554443][ T961] HID 045e:07da: Invalid code 65791 type 1 [ 127.556472][ T36] audit: type=1400 audit(1750463664.771:5749): avc: denied { ioctl } for pid=5361 comm="syz.2.2031" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 127.564558][ T961] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0010/input/input23 [ 127.601100][ T961] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 127.630334][ T5362] block device autoloading is deprecated and will be removed. [ 127.641745][ T5362] syz.2.2031: attempt to access beyond end of device [ 127.641745][ T5362] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 127.922957][ T5378] SELinux: policydb version 1398536454 does not match my version range 15-33 [ 127.931889][ T5378] SELinux: failed to load policy [ 128.160803][ T5399] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 128.212954][ T5400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1050 [ 128.254076][ T961] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 128.362108][ T367] usb 4-1: USB disconnect, device number 29 [ 128.414093][ T961] usb 3-1: Using ep0 maxpacket: 16 [ 128.420491][ T961] usb 3-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 128.432105][ T961] usb 3-1: New USB device found, idVendor=9e88, idProduct=9e8f, bcdDevice=9b.e4 [ 128.441195][ T961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.449212][ T961] usb 3-1: Product: syz [ 128.453392][ T961] usb 3-1: Manufacturer: syz [ 128.458005][ T961] usb 3-1: SerialNumber: syz [ 128.935765][ T36] audit: type=1400 audit(1750463666.151:5750): avc: denied { mount } for pid=5405 comm="syz.3.2051" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 128.940990][ T5406] rust_binder: Write failure EFAULT in pid:1196 [ 129.012969][ T36] audit: type=1400 audit(1750463666.221:5751): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 129.112834][ T5420] binder: Bad value for 'max' [ 129.112869][ T5421] binder: Bad value for 'max' [ 129.231014][ T5435] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 129.231030][ T5435] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 129.238751][ T5435] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 129.734087][ T4101] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 129.894064][ T4101] usb 4-1: Using ep0 maxpacket: 16 [ 129.900280][ T4101] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.911247][ T4101] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 129.924053][ T4101] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 129.933093][ T4101] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.941803][ T4101] usb 4-1: config 0 descriptor?? [ 130.240329][ T5472] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.244349][ T5472] rust_binder: Error while translating object. [ 130.250837][ T5472] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 130.257044][ T5472] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1083 [ 130.266861][ T5472] rust_binder: Write failure EINVAL in pid:1083 [ 130.350070][ T4101] HID 045e:07da: Invalid code 65791 type 1 [ 130.364159][ T4101] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0011/input/input24 [ 130.377089][ T4101] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 130.477663][ T5482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.972040][ T961] ftdi_sio 3-1:64.0: Ignoring interface reserved for JTAG [ 130.989817][ T961] usb 3-1: USB disconnect, device number 39 [ 131.030132][ T5493] __nla_validate_parse: 7 callbacks suppressed [ 131.030151][ T5493] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2089'. [ 131.133045][ T5505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2094'. [ 131.153192][ T4101] usb 4-1: USB disconnect, device number 30 [ 131.241904][ T5515] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2099'. [ 131.444829][ T5536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.444961][ T5536] rust_binder: Error in use_page_slow: ESRCH [ 131.451442][ T5536] rust_binder: use_range failure ESRCH [ 131.457537][ T5536] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 131.462993][ T5536] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 131.471168][ T5536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1102 [ 131.480945][ T5537] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.490215][ T5538] rust_binder: Error in use_page_slow: ESRCH [ 131.496710][ T5538] rust_binder: use_range failure ESRCH [ 131.502736][ T5538] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 131.508256][ T5538] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 131.516297][ T5538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1102 [ 131.542608][ T5542] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2110'. [ 131.625054][ T5546] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 131.625079][ T5546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1112 [ 131.634617][ T5546] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 131.643816][ T5546] rust_binder: Read failure Err(EFAULT) in pid:1112 [ 131.679097][ T5554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.686101][ T5554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.742582][ T5557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2116'. [ 131.853751][ T5561] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2118'. [ 131.869299][ T5561] rust_binder: Write failure EINVAL in pid:1125 [ 131.897670][ T5567] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2121'. [ 131.967387][ T36] audit: type=1400 audit(1750463669.181:5752): avc: denied { map } for pid=5577 comm="syz.0.2125" path="socket:[40213]" dev="sockfs" ino=40213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 131.990558][ T36] audit: type=1400 audit(1750463669.181:5753): avc: denied { accept } for pid=5577 comm="syz.0.2125" path="socket:[40213]" dev="sockfs" ino=40213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 132.164468][ T5596] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2133'. [ 132.414114][ T4101] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 132.564061][ T5601] rust_binder: Error in use_page_slow: ESRCH [ 132.564085][ T5601] rust_binder: use_range failure ESRCH [ 132.570123][ T4101] usb 3-1: Using ep0 maxpacket: 16 [ 132.570175][ T5601] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 132.576855][ T4101] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.580778][ T5601] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 132.588816][ T4101] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 132.599844][ T5601] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1234 [ 132.609040][ T4101] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 132.640369][ T4101] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.642761][ T5607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2137'. [ 132.652197][ T4101] usb 3-1: config 0 descriptor?? [ 132.861642][ T5622] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2143'. [ 133.076428][ T4101] HID 045e:07da: Invalid code 65791 type 1 [ 133.089009][ T4101] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0012/input/input25 [ 133.102232][ T4101] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 133.454066][ T367] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 133.584075][ T367] usb 1-1: device descriptor read/64, error -71 [ 133.824080][ T367] usb 1-1: device descriptor read/64, error -71 [ 133.883440][ T611] usb 3-1: USB disconnect, device number 40 [ 134.065325][ T367] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 134.204140][ T367] usb 1-1: device descriptor read/64, error -71 [ 134.444105][ T367] usb 1-1: device descriptor read/64, error -71 [ 134.554165][ T367] usb usb1-port1: attempt power cycle [ 134.605058][ T5706] SELinux: security_context_str_to_sid () failed with errno=-22 [ 134.773072][ T5725] netlink: 'syz.3.2188': attribute type 4 has an invalid length. [ 134.781254][ T5726] netlink: 'syz.3.2188': attribute type 4 has an invalid length. [ 134.894088][ T367] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 134.904662][ T31] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 134.915285][ T367] usb 1-1: device descriptor read/8, error -71 [ 135.015368][ T5749] rust_binder: Write failure EINVAL in pid:1336 [ 135.045108][ T367] usb 1-1: device descriptor read/8, error -71 [ 135.057590][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 135.063739][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.075012][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.087846][ T31] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 135.096927][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.105524][ T31] usb 3-1: config 0 descriptor?? [ 135.294083][ T367] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 135.315009][ T367] usb 1-1: device descriptor read/8, error -71 [ 135.445028][ T367] usb 1-1: device descriptor read/8, error -71 [ 135.513099][ T31] HID 045e:07da: Invalid code 65791 type 1 [ 135.520746][ T31] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0013/input/input26 [ 135.533323][ T31] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 135.554250][ T367] usb usb1-port1: unable to enumerate USB device [ 136.267238][ T5757] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 136.267266][ T5757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1149 [ 136.306868][ T5764] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 136.316622][ T961] usb 3-1: USB disconnect, device number 41 [ 136.317342][ T5763] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 136.329053][ T5765] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 136.335563][ T5764] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 136.339007][ T5763] input: syz0 as /devices/virtual/input/input27 [ 136.460909][ T5770] __nla_validate_parse: 6 callbacks suppressed [ 136.460921][ T5770] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2206'. [ 136.493849][ T5774] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 136.493983][ T5774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1166 [ 136.862837][ T36] audit: type=1326 audit(1750463674.071:5754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5786 comm="syz.3.2214" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26cf18e929 code=0x0 [ 136.913394][ T5796] binder: Bad value for 'context' [ 136.921878][ T5798] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2219'. [ 137.234078][ T961] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 137.385379][ T961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.396463][ T961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.406280][ T961] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 137.415362][ T961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.423822][ T961] usb 3-1: config 0 descriptor?? [ 137.465078][ T5815] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2227'. [ 137.830776][ T961] saitek 0003:06A3:0CCB.0014: item fetching failed at offset 0/3 [ 137.838840][ T961] saitek 0003:06A3:0CCB.0014: parse failed [ 137.844964][ T961] saitek 0003:06A3:0CCB.0014: probe with driver saitek failed with error -22 [ 138.032117][ T31] usb 3-1: USB disconnect, device number 42 [ 138.044174][ T4101] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 138.194104][ T4101] usb 4-1: Using ep0 maxpacket: 16 [ 138.200339][ T4101] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.211383][ T4101] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 138.224205][ T4101] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 138.233253][ T4101] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.241851][ T4101] usb 4-1: config 0 descriptor?? [ 138.589655][ T5842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.616175][ T5848] random: crng reseeded on system resumption [ 138.642478][ T5849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1192 [ 138.650197][ T4101] HID 045e:07da: Invalid code 65791 type 1 [ 138.654833][ T5853] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2242'. [ 138.663014][ T4101] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0015/input/input28 [ 138.689736][ T4101] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 138.811319][ T36] audit: type=1400 audit(1750463676.021:5755): avc: denied { shutdown } for pid=5865 comm="syz.0.2248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.866348][ T36] audit: type=1400 audit(1750463676.021:5756): avc: denied { connect } for pid=5865 comm="syz.0.2248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.928786][ T5877] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2250'. [ 138.953896][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.964249][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.977868][ T5871] bridge_slave_0: entered allmulticast mode [ 138.990881][ T5871] bridge_slave_0: entered promiscuous mode [ 139.001722][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.010428][ T5882] random: crng reseeded on system resumption [ 139.016507][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.033979][ T5871] bridge_slave_1: entered allmulticast mode [ 139.040370][ T5871] bridge_slave_1: entered promiscuous mode [ 139.109160][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.116235][ T5871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.123549][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.130624][ T5871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.154565][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.162018][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.171742][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.178807][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.187749][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.194808][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.229052][ T5871] veth0_vlan: entered promiscuous mode [ 139.240079][ T5871] veth1_macvtap: entered promiscuous mode [ 139.359233][ T36] audit: type=1400 audit(1750463676.571:5757): avc: denied { sqpoll } for pid=5898 comm="syz.2.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 139.465638][ T4101] usb 4-1: USB disconnect, device number 31 [ 139.566911][ T305] bridge_slave_1: left allmulticast mode [ 139.572585][ T305] bridge_slave_1: left promiscuous mode [ 139.578280][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.585756][ T305] bridge_slave_0: left allmulticast mode [ 139.591382][ T305] bridge_slave_0: left promiscuous mode [ 139.597078][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.795014][ T305] veth1_macvtap: left promiscuous mode [ 139.800515][ T305] veth0_vlan: left promiscuous mode [ 140.021415][ T5916] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2265'. [ 140.129494][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.130616][ T5933] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2272'. [ 140.137188][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.168526][ T5923] bridge_slave_0: entered allmulticast mode [ 140.174948][ T5923] bridge_slave_0: entered promiscuous mode [ 140.181427][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.189661][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.196809][ T5923] bridge_slave_1: entered allmulticast mode [ 140.203321][ T5923] bridge_slave_1: entered promiscuous mode [ 140.228307][ T5944] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 140.237028][ T5944] rust_binder: Write failure EINVAL in pid:28 [ 140.298998][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.312137][ T5923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.319438][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.326478][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.372128][ T5923] veth0_vlan: entered promiscuous mode [ 140.403605][ T5923] veth1_macvtap: entered promiscuous mode [ 140.435049][ T5967] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 140.440689][ T5967] rust_binder: Write failure EFAULT in pid:1237 [ 140.473515][ T5970] random: crng reseeded on system resumption [ 140.514354][ T4101] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 140.607740][ T5978] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 140.609655][ T5979] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 140.620016][ T5981] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2291'. [ 140.621672][ T5979] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1242 [ 140.644851][ T4101] usb 3-1: device descriptor read/64, error -71 [ 140.654088][ T611] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 140.715461][ T5990] netlink: 324 bytes leftover after parsing attributes in process `syz.6.2295'. [ 140.814296][ T611] usb 4-1: Using ep0 maxpacket: 16 [ 140.823085][ T611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.834606][ T611] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 140.847656][ T611] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 140.856716][ T611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.865313][ T611] usb 4-1: config 0 descriptor?? [ 140.894139][ T4101] usb 3-1: device descriptor read/64, error -71 [ 141.134129][ T4101] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 141.264076][ T4101] usb 3-1: device descriptor read/64, error -71 [ 141.272967][ T611] HID 045e:07da: Invalid code 65791 type 1 [ 141.280651][ T611] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0016/input/input29 [ 141.293214][ T611] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 141.504111][ T4101] usb 3-1: device descriptor read/64, error -71 [ 141.614348][ T4101] usb usb3-port1: attempt power cycle [ 141.954119][ T4101] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 141.975141][ T4101] usb 3-1: device descriptor read/8, error -71 [ 142.077763][ T49] usb 4-1: USB disconnect, device number 32 [ 142.105250][ T4101] usb 3-1: device descriptor read/8, error -71 [ 142.345897][ T4101] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 142.365126][ T4101] usb 3-1: device descriptor read/8, error -71 [ 142.495132][ T4101] usb 3-1: device descriptor read/8, error -71 [ 142.596225][ T5999] random: crng reseeded on system resumption [ 142.604423][ T4101] usb usb3-port1: unable to enumerate USB device [ 142.756004][ T6030] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2313'. [ 142.779284][ T6034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.801300][ T6041] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2318'. [ 143.094073][ T49] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 143.244097][ T49] usb 1-1: Using ep0 maxpacket: 16 [ 143.250310][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.261378][ T49] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 143.274209][ T49] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 143.283262][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.291815][ T49] usb 1-1: config 0 descriptor?? [ 143.352760][ T6061] binder: Unknown parameter '3t' [ 143.501628][ T6068] 9pnet_virtio: no channels available for device ./file0 [ 143.703458][ T49] HID 045e:07da: Invalid code 65791 type 1 [ 143.716638][ T49] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0017/input/input31 [ 143.732285][ T6084] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2336'. [ 143.740654][ T6089] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2339'. [ 143.746947][ T49] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 143.853409][ T6106] tipc: Enabling of bearer rejected, failed to enable media [ 143.865862][ T6106] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 143.938732][ T6114] kvm_intel: kvm [6113]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 144.002723][ T6114] kvm: pic: non byte write [ 144.012327][ T6114] rust_binder: Write failure EINVAL in pid:1422 [ 144.079371][ T6127] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2356'. [ 144.120454][ T6133] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2359'. [ 144.244125][ T611] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 144.394078][ T611] usb 7-1: Using ep0 maxpacket: 16 [ 144.400294][ T611] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.410561][ T611] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.420842][ T611] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.430931][ T611] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.438959][ T611] usb 7-1: Product: syz [ 144.443115][ T611] usb 7-1: Manufacturer: syz [ 144.447744][ T611] usb 7-1: SerialNumber: syz [ 144.505260][ T31] usb 1-1: USB disconnect, device number 31 [ 144.655668][ T6121] rust_binder: Error in use_page_slow: ESRCH [ 144.655689][ T6121] rust_binder: use_range failure ESRCH [ 144.661690][ T6121] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 144.667730][ T6121] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 144.675676][ T6121] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:55 [ 144.690342][ T611] usb 7-1: USB disconnect, device number 2 [ 145.015773][ T6149] binder: Unknown parameter 'defcontext01777777777777777777777' [ 145.036923][ T6151] SELinux: policydb version -845211227 does not match my version range 15-33 [ 145.045901][ T367] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 145.049622][ T6151] SELinux: failed to load policy [ 145.204057][ T367] usb 3-1: Using ep0 maxpacket: 16 [ 145.215718][ T367] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 145.216422][ T6165] rust_binder: Write failure EFAULT in pid:57 [ 145.224927][ T367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.225575][ T367] usb 3-1: config 0 descriptor?? [ 145.314092][ T611] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 145.337634][ T36] audit: type=1400 audit(1750463682.551:5758): avc: denied { setattr } for pid=6173 comm="syz.6.2375" name="" dev="pipefs" ino=45075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 145.474564][ T611] usb 1-1: Using ep0 maxpacket: 32 [ 145.475982][ T6184] netlink: 324 bytes leftover after parsing attributes in process `syz.6.2379'. [ 145.481523][ T611] usb 1-1: config 1 interface 0 altsetting 19 endpoint 0x81 has an invalid bInterval 107, changing to 10 [ 145.500361][ T611] usb 1-1: config 1 interface 0 altsetting 19 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 145.513378][ T611] usb 1-1: config 1 interface 0 has no altsetting 0 [ 145.521313][ T611] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.530440][ T611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.538486][ T611] usb 1-1: Product: syz [ 145.542659][ T611] usb 1-1: Manufacturer: syz [ 145.547355][ T611] usb 1-1: SerialNumber: syz [ 145.552808][ T6151] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 145.646260][ T367] cherry 0003:046A:0027.0018: item fetching failed at offset 2/5 [ 145.654231][ T367] cherry 0003:046A:0027.0018: probe with driver cherry failed with error -22 [ 146.286531][ T611] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 146.303284][ T611] usb 1-1: USB disconnect, device number 32 [ 146.304241][ T6195] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2383'. [ 146.313103][ T6194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.594124][ T4101] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 146.644087][ T611] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 146.754090][ T4101] usb 4-1: Using ep0 maxpacket: 16 [ 146.760316][ T4101] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.771315][ T4101] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 146.784163][ T4101] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 146.793245][ T4101] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.802049][ T4101] usb 4-1: config 0 descriptor?? [ 146.814068][ T611] usb 1-1: Using ep0 maxpacket: 16 [ 146.820301][ T611] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.830478][ T611] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.840864][ T611] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.850037][ T611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.858068][ T611] usb 1-1: Product: syz [ 146.862226][ T611] usb 1-1: Manufacturer: syz [ 146.866839][ T611] usb 1-1: SerialNumber: syz [ 147.081080][ T611] usb 1-1: USB disconnect, device number 33 [ 147.209902][ T4101] HID 045e:07da: Invalid code 65791 type 1 [ 147.217726][ T4101] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0019/input/input32 [ 147.230268][ T4101] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 147.725208][ T6240] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2399'. [ 147.744107][ T36] audit: type=1400 audit(1750463684.951:5759): avc: denied { append } for pid=6241 comm="syz.0.2400" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 147.744375][ T6242] netlink: 424 bytes leftover after parsing attributes in process `syz.0.2400'. [ 147.800608][ T6246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.813925][ T9] usb 3-1: USB disconnect, device number 47 [ 147.858231][ T6252] rust_binder: Write failure EINVAL in pid:106 [ 147.858597][ T6252] rust_binder: Write failure EINVAL in pid:106 [ 147.914184][ T6254] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2406'. [ 148.021644][ T367] usb 4-1: USB disconnect, device number 33 [ 148.034143][ T611] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 148.059893][ T36] audit: type=1400 audit(1750463685.271:5760): avc: denied { read } for pid=6262 comm="syz.6.2410" path="socket:[46278]" dev="sockfs" ino=46278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.184085][ T611] usb 1-1: Using ep0 maxpacket: 16 [ 148.190333][ T611] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.200445][ T611] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.210806][ T611] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.219903][ T611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.227918][ T611] usb 1-1: Product: syz [ 148.232068][ T611] usb 1-1: Manufacturer: syz [ 148.236664][ T611] usb 1-1: SerialNumber: syz [ 148.244071][ T9] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 148.374075][ T9] usb 3-1: device descriptor read/64, error -71 [ 148.446843][ T611] usb 1-1: USB disconnect, device number 34 [ 148.455323][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 148.590606][ T36] audit: type=1326 audit(1750463685.801:5761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.3.2413" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26cf18e929 code=0x0 [ 148.624072][ T9] usb 3-1: device descriptor read/64, error -71 [ 148.652848][ T6271] rust_binder: Error while translating object. [ 148.652877][ T6271] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 148.659136][ T6271] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1477 [ 148.864105][ T9] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 148.925882][ T6279] tipc: Started in network mode [ 148.930798][ T6279] tipc: Node identity 7f000001, cluster identity 4711 [ 148.937856][ T6279] tipc: Enabled bearer , priority 10 [ 148.981396][ T6286] __vm_enough_memory: pid: 6286, comm: syz.6.2419, bytes: 281474976845824 not enough memory for the allocation [ 149.004082][ T9] usb 3-1: device descriptor read/64, error -71 [ 149.024056][ T6290] netlink: 324 bytes leftover after parsing attributes in process `syz.6.2421'. [ 149.105423][ T6292] random: crng reseeded on system resumption [ 149.142496][ T6298] syz.6.2425 uses obsolete (PF_INET,SOCK_PACKET) [ 149.244097][ T9] usb 3-1: device descriptor read/64, error -71 [ 149.354213][ T9] usb usb3-port1: attempt power cycle [ 149.372702][ T6307] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2428'. [ 149.454124][ T4101] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 149.590483][ T6331] Unsupported ieee802154 address type: 0 [ 149.614128][ T4101] usb 7-1: Using ep0 maxpacket: 16 [ 149.623162][ T4101] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.633515][ T4101] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.645807][ T4101] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.655043][ T4101] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.659056][ T6337] syzkaller0: entered promiscuous mode [ 149.663072][ T4101] usb 7-1: Product: syz [ 149.668694][ T6337] syzkaller0: entered allmulticast mode [ 149.672838][ T4101] usb 7-1: Manufacturer: syz [ 149.683189][ T4101] usb 7-1: SerialNumber: syz [ 149.694096][ T31] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 149.694096][ T9] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 149.725038][ T9] usb 3-1: device descriptor read/8, error -71 [ 149.855386][ T9] usb 3-1: device descriptor read/8, error -71 [ 149.864184][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 149.864251][ T6342] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2443'. [ 149.870489][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.889320][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 149.901673][ T6344] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 149.902203][ T6344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1505 [ 149.904590][ T31] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 149.931761][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.937743][ T4101] usb 7-1: USB disconnect, device number 3 [ 149.943573][ T31] usb 1-1: config 0 descriptor?? [ 150.054141][ T10] tipc: Node number set to 2130706433 [ 150.094086][ T9] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 150.114823][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 150.115482][ T9] usb 3-1: device descriptor read/8, error -71 [ 150.265211][ T9] usb 3-1: device descriptor read/8, error -71 [ 150.354082][ T31] HID 045e:07da: Invalid code 65791 type 1 [ 150.361677][ T31] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001A/input/input33 [ 150.374219][ T9] usb usb3-port1: unable to enumerate USB device [ 150.375183][ T31] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 150.486008][ T6358] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2449'. [ 150.505657][ T6360] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 150.556817][ T36] audit: type=1400 audit(1750463687.771:5762): avc: denied { execute } for pid=6365 comm="syz.6.2453" path="/dev/bus/usb/001/008" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 150.814589][ T6381] rust_binder: Write failure EFAULT in pid:1517 [ 150.894096][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 150.907696][ T6388] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.915363][ T6388] rust_binder: Error in use_page_slow: ESRCH [ 150.915386][ T6388] rust_binder: use_range failure ESRCH [ 150.921433][ T6388] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 150.927144][ T6388] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 150.935005][ T6388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1524 [ 150.955670][ T6391] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2464'. [ 151.022405][ T6399] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2468'. [ 151.064227][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 151.070619][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.080881][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.091463][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.100706][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.108726][ T9] usb 7-1: Product: syz [ 151.112877][ T9] usb 7-1: Manufacturer: syz [ 151.117482][ T9] usb 7-1: SerialNumber: syz [ 151.166159][ T4101] usb 1-1: USB disconnect, device number 35 [ 151.332439][ T9] usb 7-1: USB disconnect, device number 4 [ 151.373685][ T6431] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2483'. [ 151.450981][ T6438] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2486'. [ 151.467116][ T6433] usb usb5: usbfs: process 6433 (syz.2.2484) did not claim interface 32 before use [ 151.477659][ T6433] SELinux: policydb magic number 0x20 does not match expected magic number 0xf97cff8c [ 151.487766][ T6433] SELinux: failed to load policy [ 151.590184][ T36] audit: type=1400 audit(1750463688.801:5763): avc: denied { map } for pid=6446 comm="syz.2.2490" path="socket:[47187]" dev="sockfs" ino=47187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.704062][ T961] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 151.773508][ T6465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:130 [ 151.773657][ T6459] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 151.783058][ T6459] rust_binder: Error in use_page_slow: EBUSY [ 151.786745][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2499'. [ 151.793712][ T6459] rust_binder: use_range failure EBUSY [ 151.808318][ T6459] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 151.813764][ T6459] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 151.821448][ T6459] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 151.848066][ T6459] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:130 [ 151.865771][ T961] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 151.882474][ T6473] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 151.884780][ T961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.906399][ T961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.929121][ T961] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 151.950235][ T961] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 151.962838][ T961] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 151.973324][ T961] usb 4-1: Manufacturer: syz [ 151.981565][ T961] usb 4-1: config 0 descriptor?? [ 151.997907][ T6486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 151.997937][ T6486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:173 [ 152.200979][ T961] usbhid 4-1:0.0: can't add hid device: -71 [ 152.217714][ T6504] No source specified [ 152.222635][ T6504] input: syz1 as /devices/virtual/input/input34 [ 152.229142][ T961] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 152.241845][ T961] usb 4-1: USB disconnect, device number 34 [ 152.294080][ T611] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 152.444105][ T611] usb 7-1: Using ep0 maxpacket: 16 [ 152.450281][ T611] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.460544][ T611] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.470847][ T611] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.479922][ T611] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.487911][ T611] usb 7-1: Product: syz [ 152.492067][ T611] usb 7-1: Manufacturer: syz [ 152.496661][ T611] usb 7-1: SerialNumber: syz [ 152.534099][ T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 152.541774][ T961] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 152.694074][ T961] usb 4-1: Using ep0 maxpacket: 16 [ 152.699279][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 152.705664][ T961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.713153][ T611] usb 7-1: USB disconnect, device number 5 [ 152.716607][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.733906][ T961] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 152.746765][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 152.757989][ T961] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 152.767246][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 152.778432][ T961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.786484][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 152.795809][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.803969][ T961] usb 4-1: config 0 descriptor?? [ 152.810193][ T9] usb 3-1: config 0 descriptor?? [ 152.815476][ T6506] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 152.823202][ T9] hub 3-1:0.0: USB hub found [ 153.023723][ T9] hub 3-1:0.0: 2 ports detected [ 153.216051][ T961] HID 045e:07da: Invalid code 65791 type 1 [ 153.227123][ T961] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001B/input/input35 [ 153.240038][ T961] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 153.435408][ T6528] __nla_validate_parse: 2 callbacks suppressed [ 153.435425][ T6528] netlink: 324 bytes leftover after parsing attributes in process `syz.6.2525'. [ 153.515698][ T6536] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2529'. [ 153.593983][ T6547] random: crng reseeded on system resumption [ 153.614435][ T6547] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 153.621814][ T6547] rust_binder: Write failure EINVAL in pid:1342 [ 153.694118][ T49] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 153.838882][ T36] audit: type=1400 audit(1750463691.051:5764): avc: denied { mount } for pid=6554 comm="syz.0.2537" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 153.860911][ T49] usb 7-1: Using ep0 maxpacket: 16 [ 153.866557][ T36] audit: type=1400 audit(1750463691.051:5765): avc: denied { mounton } for pid=6554 comm="syz.0.2537" path="/551/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 153.889203][ T36] audit: type=1400 audit(1750463691.051:5766): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 153.910684][ T49] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.920817][ T49] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.931917][ T6563] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.935169][ T49] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.950831][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.958856][ T49] usb 7-1: Product: syz [ 153.963013][ T49] usb 7-1: Manufacturer: syz [ 153.967646][ T49] usb 7-1: SerialNumber: syz [ 154.025176][ T961] usb 4-1: USB disconnect, device number 35 [ 154.177872][ T49] usb 7-1: USB disconnect, device number 6 [ 154.344970][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 154.424081][ T4101] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 154.574107][ T4101] usb 1-1: Invalid ep0 maxpacket: 64 [ 154.707524][ T6576] rust_binder: Write failure EFAULT in pid:200 [ 154.715723][ T4101] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 154.733530][ T6581] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2548'. [ 154.846892][ T305] bridge_slave_1: left allmulticast mode [ 154.852566][ T305] bridge_slave_1: left promiscuous mode [ 154.858383][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.866251][ T305] bridge_slave_0: left allmulticast mode [ 154.872272][ T305] bridge_slave_0: left promiscuous mode [ 154.877948][ T4101] usb 1-1: Invalid ep0 maxpacket: 64 [ 154.878264][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.883427][ T4101] usb usb1-port1: attempt power cycle [ 154.980573][ T6572] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.987746][ T6572] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.994991][ T6572] bridge_slave_0: entered allmulticast mode [ 155.001365][ T6572] bridge_slave_0: entered promiscuous mode [ 155.007869][ T6572] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.014985][ T6572] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.022160][ T6572] bridge_slave_1: entered allmulticast mode [ 155.028505][ T6572] bridge_slave_1: entered promiscuous mode [ 155.035470][ T305] veth1_macvtap: left promiscuous mode [ 155.039067][ T6506] rust_binder: inc_ref_done called when no active inc_refs [ 155.040985][ T305] veth0_vlan: left promiscuous mode [ 155.093509][ T6593] rust_binder: Error while translating object. [ 155.093547][ T6593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 155.108434][ T6593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:151 [ 155.185645][ T6572] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.201806][ T6572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.209129][ T6572] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.216170][ T6572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.235115][ T4101] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 155.260184][ T6572] veth0_vlan: entered promiscuous mode [ 155.264418][ T4101] usb 1-1: Invalid ep0 maxpacket: 64 [ 155.271676][ T6572] veth1_macvtap: entered promiscuous mode [ 155.321273][ T6601] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2544'. [ 155.374099][ T49] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 155.404222][ T4101] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 155.424519][ T4101] usb 1-1: Invalid ep0 maxpacket: 64 [ 155.430409][ T4101] usb usb1-port1: unable to enumerate USB device [ 155.435510][ T36] audit: type=1400 audit(1750463692.641:5767): avc: denied { name_bind } for pid=6606 comm="syz.3.2556" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 155.534330][ T49] usb 7-1: Using ep0 maxpacket: 16 [ 155.540823][ T49] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.551154][ T49] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.561551][ T49] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.570793][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.579088][ T49] usb 7-1: Product: syz [ 155.583260][ T49] usb 7-1: Manufacturer: syz [ 155.588030][ T49] usb 7-1: SerialNumber: syz [ 155.603143][ T6621] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2562'. [ 155.802370][ T49] usb 7-1: USB disconnect, device number 7 [ 155.864508][ T9] usb 3-1-port2: cannot reset (err = -110) [ 155.870562][ T9] usb 3-1-port2: cannot reset (err = -32) [ 155.876531][ T9] usb 3-1-port2: cannot reset (err = -32) [ 155.882531][ T9] usb 3-1-port2: cannot reset (err = -32) [ 155.888444][ T9] usb 3-1-port2: cannot reset (err = -32) [ 155.894242][ T9] usb 3-1-port2: Cannot enable. Maybe the USB cable is bad? [ 155.902433][ T9] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 155.909578][ T9] usb 3-1-port2: cannot reset (err = -32) [ 155.915732][ T9] usb 3-1-port2: cannot reset (err = -32) [ 155.921847][ T9] usb 3-1-port2: cannot reset (err = -32) [ 155.927792][ T9] usb 3-1-port2: cannot reset (err = -32) [ 155.933666][ T9] usb 3-1-port2: cannot reset (err = -32) [ 155.939464][ T9] usb 3-1-port2: Cannot enable. Maybe the USB cable is bad? [ 155.946863][ T9] usb 3-1-port2: attempt power cycle [ 156.128369][ T49] usb 3-1: USB disconnect, device number 52 [ 156.154139][ T611] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 156.202708][ T6634] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 156.211765][ T6634] rust_binder: Write failure EFAULT in pid:161 [ 156.294547][ T6636] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2569'. [ 156.309747][ T611] usb 4-1: Using ep0 maxpacket: 16 [ 156.331174][ T611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.345534][ T611] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 156.365898][ T611] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 156.372813][ T6644] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2573'. [ 156.375193][ T611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.394927][ T611] usb 4-1: config 0 descriptor?? [ 156.592764][ T36] audit: type=1400 audit(1750463693.801:5768): avc: denied { setattr } for pid=6645 comm="syz.6.2574" name="KEY" dev="sockfs" ino=47953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 156.754204][ T49] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 156.834255][ T1467] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 156.915211][ T49] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 156.925125][ T49] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 156.936244][ T49] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.945337][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.953373][ T49] usb 3-1: Product: syz [ 156.957545][ T49] usb 3-1: Manufacturer: syz [ 156.962136][ T49] usb 3-1: SerialNumber: syz [ 156.967676][ T6653] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 156.975307][ T6653] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 156.984137][ T1467] usb 7-1: Invalid ep0 maxpacket: 64 [ 157.114083][ T1467] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 157.207789][ T36] audit: type=1326 audit(1750463694.421:5769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.0.2580" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fcfb238e929 code=0x0 [ 157.264093][ T1467] usb 7-1: Invalid ep0 maxpacket: 64 [ 157.275051][ T1467] usb usb7-port1: attempt power cycle [ 157.303373][ T36] audit: type=1326 audit(1750463694.511:5770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.0.2584" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfb238e929 code=0x0 [ 157.389300][ T49] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 157.398903][ T49] usb 3-1: USB disconnect, device number 57 [ 157.624107][ T1467] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 157.644386][ T1467] usb 7-1: Invalid ep0 maxpacket: 64 [ 157.774072][ T1467] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 157.794398][ T1467] usb 7-1: Invalid ep0 maxpacket: 64 [ 157.799893][ T1467] usb usb7-port1: unable to enumerate USB device [ 158.021090][ T6689] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2589'. [ 158.234047][ T6716] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2601'. [ 158.388098][ T6737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1399 [ 158.644076][ T367] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 158.814053][ T367] usb 1-1: Using ep0 maxpacket: 16 [ 158.820418][ T367] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.830928][ T367] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.841499][ T367] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.850997][ T367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.859263][ T367] usb 1-1: Product: syz [ 158.863566][ T367] usb 1-1: Manufacturer: syz [ 158.868452][ T367] usb 1-1: SerialNumber: syz [ 158.920904][ T611] usb 4-1: string descriptor 0 read error: -71 [ 158.934584][ T611] usbhid 4-1:0.0: can't add hid device: -71 [ 158.940628][ T611] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 158.953316][ T611] usb 4-1: USB disconnect, device number 36 [ 158.973467][ T6743] rust_binder: Error while translating object. [ 158.973512][ T6743] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 158.979897][ T6743] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29 [ 159.061808][ T6745] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2613'. [ 159.084126][ T367] usb 1-1: USB disconnect, device number 40 [ 159.264617][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 159.515156][ T6755] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 89) [ 159.515186][ T6755] rust_binder: Error while translating object. [ 159.525951][ T6755] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 159.532188][ T6755] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:231 [ 159.660097][ T36] audit: type=1326 audit(1750463696.871:5771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6762 comm="syz.0.2622" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfb238e929 code=0x0 [ 159.668985][ T6765] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2623'. [ 159.726001][ T6768] netlink: 324 bytes leftover after parsing attributes in process `syz.6.2624'. [ 159.817943][ T6776] rust_binder: Error while translating object. [ 159.817971][ T6776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 159.824320][ T6776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:247 [ 160.094085][ T31] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 160.264062][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 160.270456][ T31] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.280796][ T31] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.291255][ T31] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.300477][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.308667][ T31] usb 7-1: Product: syz [ 160.312871][ T31] usb 7-1: Manufacturer: syz [ 160.317506][ T31] usb 7-1: SerialNumber: syz [ 160.510745][ T6791] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2635'. [ 160.537832][ T31] usb 7-1: USB disconnect, device number 12 [ 160.556693][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 160.610997][ T36] audit: type=1400 audit(1750463697.821:5772): avc: denied { read } for pid=6792 comm="syz.0.2636" path="socket:[50409]" dev="sockfs" ino=50409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 160.801459][ T6809] rust_binder: Write failure EINVAL in pid:57 [ 160.856817][ T6811] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2644'. [ 160.891057][ T6813] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 161.056729][ T6821] bond_slave_0: entered allmulticast mode [ 161.066778][ T36] audit: type=1400 audit(1750463698.271:5773): avc: denied { create } for pid=6820 comm="syz.6.2648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 161.411245][ T36] audit: type=1400 audit(1750463698.621:5774): avc: denied { name_bind } for pid=6826 comm="syz.0.2650" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 161.918136][ T6831] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2651'. [ 161.958942][ T6837] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2654'. [ 161.978159][ T6839] fuse: Bad value for 'rootmode' [ 161.984072][ T36] audit: type=1400 audit(1750463699.191:5775): avc: denied { setattr } for pid=6838 comm="syz.6.2655" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:modules_conf_t:s0" [ 162.106963][ T6842] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 162.107137][ T6842] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 162.939615][ T6853] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2661'. [ 163.024419][ T6867] netlink: 324 bytes leftover after parsing attributes in process `syz.6.2666'. [ 163.218202][ T6882] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:100 [ 163.219185][ T6882] rust_binder: Error while translating object. [ 163.229135][ T6882] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 163.235614][ T6882] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:100 [ 163.528774][ T36] audit: type=1400 audit(1750463700.741:5776): avc: denied { append } for pid=6879 comm="syz.6.2671" name="pfkey" dev="proc" ino=4026532978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 163.614085][ T961] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 163.761458][ T6891] 8021q: VLANs not supported on ip6tnl0 [ 163.774092][ T961] usb 4-1: Using ep0 maxpacket: 32 [ 163.780182][ T961] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 163.788361][ T961] usb 4-1: config 0 has no interface number 0 [ 163.795510][ T961] usb 4-1: config 0 interface 2 has no altsetting 0 [ 163.809664][ T961] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 163.818836][ T961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.826926][ T961] usb 4-1: Product: syz [ 163.831164][ T961] usb 4-1: Manufacturer: syz [ 163.835794][ T961] usb 4-1: SerialNumber: syz [ 163.841421][ T961] usb 4-1: config 0 descriptor?? [ 164.044119][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 164.056124][ T36] audit: type=1400 audit(1750463701.271:5777): avc: denied { mount } for pid=6885 comm="syz.3.2674" name="/" dev="ramfs" ino=50533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 164.079474][ T961] usb 4-1: invalid MIDI out EP 0 [ 164.096616][ T961] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 164.106964][ T961] usb 4-1: USB disconnect, device number 37 [ 164.112556][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 164.194095][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 164.200660][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.210878][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.225096][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.234204][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.241623][ T6901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:114 [ 164.242210][ T9] usb 7-1: Product: syz [ 164.242911][ T6901] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2679'. [ 164.251522][ T9] usb 7-1: Manufacturer: syz [ 164.269252][ T9] usb 7-1: SerialNumber: syz [ 164.307007][ T36] audit: type=1400 audit(1750463701.521:5778): avc: denied { read } for pid=6904 comm="syz.3.2681" path="socket:[51394]" dev="sockfs" ino=51394 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.401365][ T6910] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2683'. [ 164.434294][ T36] audit: type=1400 audit(1750463701.651:5779): avc: denied { mount } for pid=6913 comm="syz.3.2685" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 164.494666][ T9] usb 7-1: USB disconnect, device number 13 [ 164.507889][ T312] udevd[312]: setting owner of /dev/snd/controlC0 to uid=0, gid=29 failed: No such file or directory [ 164.559024][ T6922] rust_binder: Error in use_page_slow: ESRCH [ 164.559040][ T6922] rust_binder: use_range failure ESRCH [ 164.566970][ T6922] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 164.572452][ T6922] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 164.580685][ T6922] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1422 [ 164.704074][ T611] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 164.866078][ T611] usb 4-1: config 1 interface 0 altsetting 128 endpoint 0x82 is Bulk; changing to Interrupt [ 164.876261][ T611] usb 4-1: config 1 interface 0 altsetting 128 endpoint 0x3 is Bulk; changing to Interrupt [ 164.886650][ T611] usb 4-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.899884][ T611] usb 4-1: config 1 interface 0 has no altsetting 0 [ 164.908629][ T611] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.917902][ T611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.926072][ T611] usb 4-1: Product: 괿햕번穭蠇䵚褞≃쒸୧勇弣࣌筀覕됡ﳭ鸾⍉뜊黃蹇钳鈇冨Ѿ㛊爼ꙧ껼렪엺﨡ঊﰍ䯟᫔웽ོ훸釄ᨩ鴴鄈ὡꈳሻ꼫齜霎限亢鶸⻽ፎ﯅駍㛼ಯᳬ쇳╵婾흊վ翭䨮羾욀 [ 164.949585][ T611] usb 4-1: Manufacturer: ࠔ [ 164.954344][ T611] usb 4-1: SerialNumber: ᵰ䰉創몼귁ೊ컸┰놱䯱뎇偷轁듗ⲷ൓。깐⃏쉁⊂袽␴葶儜ꆤ⸟桨ᵵ㚜န惐߇뜡호鋃皶 [ 164.971269][ T6914] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 164.978933][ T6914] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 165.042623][ T6924] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2689'. [ 165.053640][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2689'. [ 165.063050][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2689'. [ 165.097376][ T36] audit: type=1400 audit(1750463702.311:5780): avc: denied { read } for pid=94 comm="acpid" name="mouse3" dev="devtmpfs" ino=1032 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 165.097932][ T6929] SELinux: security_context_str_to_sid () failed with errno=-22 [ 165.119245][ T36] audit: type=1400 audit(1750463702.311:5781): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/mouse3" dev="devtmpfs" ino=1032 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 165.126863][ T6930] SELinux: security_context_str_to_sid () failed with errno=-22 [ 165.149705][ T36] audit: type=1400 audit(1750463702.311:5782): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/mouse3" dev="devtmpfs" ino=1032 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 165.188130][ T6914] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 165.200071][ T611] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 165.215770][ T611] usb 4-1: USB disconnect, device number 38 [ 165.434883][ T36] audit: type=1400 audit(1750463702.651:5783): avc: denied { setattr } for pid=6954 comm="syz.6.2701" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 165.456654][ T36] audit: type=1400 audit(1750463702.651:5784): avc: denied { write } for pid=6954 comm="syz.6.2701" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 165.528864][ T6963] binder: Bad value for 'max' [ 165.721694][ T6979] netlink: 324 bytes leftover after parsing attributes in process `syz.6.2711'. [ 165.744194][ T6983] fuse: Bad value for 'fd' [ 165.842003][ T6994] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2716'. [ 165.925341][ T6998] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 165.925366][ T6998] rust_binder: Read failure Err(EFAULT) in pid:315 [ 166.304131][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 166.356816][ T7017] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2727'. [ 166.391617][ T7021] binder: Bad value for 'stats' [ 166.452862][ T7031] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 166.452889][ T7031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:259 [ 166.474086][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 166.497470][ T9] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 166.506617][ T9] usb 7-1: config 0 has no interface number 0 [ 166.515291][ T7039] binder: Bad value for 'stats' [ 166.522106][ T7041] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2737'. [ 166.523282][ T9] usb 7-1: config 0 interface 184 has no altsetting 0 [ 166.546567][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 166.555981][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.564444][ T9] usb 7-1: Product: syz [ 166.568616][ T9] usb 7-1: Manufacturer: syz [ 166.576292][ T9] usb 7-1: SerialNumber: syz [ 166.582201][ T9] usb 7-1: config 0 descriptor?? [ 166.588854][ T9] smsc75xx v1.0.0 [ 166.687872][ T7051] rust_binder: Error while translating object. [ 166.687900][ T7051] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 166.694246][ T7051] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1439 [ 166.814111][ T611] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 166.814111][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 166.944146][ T10] usb 4-1: device descriptor read/64, error -71 [ 166.984094][ T611] usb 3-1: Using ep0 maxpacket: 16 [ 166.989325][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 166.990401][ T611] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.000370][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 167.010357][ T611] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.020282][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 167.038366][ T611] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.043887][ T7055] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 167.048090][ T611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.048110][ T9] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61 [ 167.056288][ T611] usb 3-1: Product: syz [ 167.079101][ T611] usb 3-1: Manufacturer: syz [ 167.086926][ T611] usb 3-1: SerialNumber: syz [ 167.098981][ T7059] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.150929][ T7060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1449 [ 167.194085][ T10] usb 4-1: device descriptor read/64, error -71 [ 167.197862][ T7006] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 167.209644][ T7006] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:319 [ 167.220795][ T1467] usb 7-1: USB disconnect, device number 14 [ 167.306586][ T611] usb 3-1: USB disconnect, device number 58 [ 167.434112][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 167.564081][ T10] usb 4-1: device descriptor read/64, error -71 [ 167.745619][ T7064] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 167.746220][ T7066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.804114][ T10] usb 4-1: device descriptor read/64, error -71 [ 167.823228][ T7069] rust_kernel: panicked at drivers/android/binder/node.rs:877:13: [ 167.823228][ T7069] attempt to subtract with overflow [ 167.836333][ T7069] ------------[ cut here ]------------ [ 167.837384][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 167.837398][ T36] audit: type=1400 audit(1750463705.051:5788): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 167.841788][ T7069] kernel BUG at rust/helpers/bug.c:7! [ 167.842070][ T7069] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 167.848237][ T36] audit: type=1400 audit(1750463705.051:5789): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.869561][ T7069] CPU: 0 UID: 0 PID: 7069 Comm: syz.2.2748 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 167.869592][ T7069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.869605][ T7069] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 167.869638][ T7069] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 ec 07 a3 7b 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 a6 c3 ea f7 90 90 90 90 90 90 90 90 90 [ 167.875754][ T36] audit: type=1400 audit(1750463705.051:5790): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.881915][ T7069] RSP: 0018:ffffc900101ada90 EFLAGS: 00010246 [ 167.881936][ T7069] RAX: 0000000000000061 RBX: 1ffff92002035b54 RCX: ab496fcb97575300 [ 167.903659][ T36] audit: type=1400 audit(1750463705.051:5791): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.916686][ T7069] RDX: ffffc90003e4b000 RSI: 0000000000004cd7 RDI: 0000000000004cd8 [ 167.916704][ T7069] RBP: ffffc900101ada90 R08: 0000000000000003 R09: 0000000000000004 [ 167.916716][ T7069] R10: dffffc0000000000 R11: fffffbfff0e5f224 R12: 0000000000000000 [ 167.916729][ T7069] R13: dffffc0000000000 R14: ffffc900101adac0 R15: ffffc900101adaf0 [ 167.916743][ T7069] FS: 00007f3d7251b6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 167.927600][ T36] audit: type=1400 audit(1750463705.051:5792): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 167.932037][ T7069] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.932054][ T7069] CR2: 00007f3d7251af98 CR3: 000000013ad40000 CR4: 00000000003526b0 [ 167.952182][ T36] audit: type=1400 audit(1750463705.051:5793): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 167.972884][ T7069] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 167.972903][ T7069] DR3: 000000000000000c DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 167.972913][ T7069] Call Trace: [ 167.972921][ T7069] [ 167.972929][ T7069] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 167.980592][ T36] audit: type=1400 audit(1750463705.051:5794): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 167.986939][ T7069] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 167.986971][ T7069] ? kernel_text_address+0xa9/0xe0 [ 168.019211][ T36] audit: type=1400 audit(1750463705.221:5795): avc: denied { create } for pid=7073 comm="syz.0.2749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 168.023417][ T7069] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 168.032505][ T7074] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2749'. [ 168.039337][ T7069] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 168.039368][ T7069] ? arch_stack_walk+0x10b/0x170 [ 168.054072][ T36] audit: type=1400 audit(1750463705.221:5796): avc: denied { write } for pid=7073 comm="syz.0.2749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 168.068928][ T7069] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 168.068969][ T7069] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 168.068993][ T7069] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 168.088243][ T36] audit: type=1400 audit(1750463705.221:5797): avc: denied { nlmsg_write } for pid=7073 comm="syz.0.2749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 168.107674][ T7069] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 168.107712][ T7069] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 168.107733][ T7069] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 168.107759][ T7069] ? __se_sys_ioctl+0x132/0x1b0 [ 168.107777][ T7069] ? __x64_sys_ioctl+0x7f/0xa0 [ 168.107794][ T7069] ? x64_sys_call+0x1878/0x2ee0 [ 168.107816][ T7069] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 168.107842][ T7069] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 168.107866][ T7069] ? kasan_save_alloc_info+0x40/0x50 [ 168.107883][ T7069] ? __kasan_kmalloc+0x96/0xb0 [ 168.361813][ T7069] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 168.368422][ T7069] ? __kasan_check_write+0x18/0x20 [ 168.373521][ T7069] ? _raw_spin_lock+0x8c/0x120 [ 168.378272][ T7069] ? __cfi__raw_spin_lock+0x10/0x10 [ 168.383457][ T7069] ? mutex_unlock+0x8b/0x240 [ 168.388030][ T7069] ? __kasan_check_write+0x18/0x20 [ 168.393127][ T7069] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 168.402667][ T7069] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 168.412572][ T7069] ? is_bpf_text_address+0x17b/0x1a0 [ 168.417849][ T7069] ? kernel_text_address+0xa9/0xe0 [ 168.422945][ T7069] ? unwind_get_return_address+0x51/0x90 [ 168.428562][ T7069] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 168.434706][ T7069] ? arch_stack_walk+0x10b/0x170 [ 168.439630][ T7069] ? stack_depot_save_flags+0x38/0x800 [ 168.445075][ T7069] ? kasan_save_alloc_info+0x40/0x50 [ 168.450348][ T7069] ? kasan_save_track+0x4f/0x80 [ 168.455190][ T7069] ? kasan_save_track+0x3e/0x80 [ 168.460025][ T7069] ? kasan_save_alloc_info+0x40/0x50 [ 168.465296][ T7069] ? __kasan_kmalloc+0x96/0xb0 [ 168.470049][ T7069] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 168.476627][ T7069] ? krealloc_noprof+0x8d/0x130 [ 168.481467][ T7069] ? rust_helper_krealloc+0x33/0xd0 [ 168.486739][ T7069] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 168.496270][ T7069] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 168.506755][ T7069] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20 [ 168.516024][ T7069] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 168.524695][ T7069] ? __se_sys_ioctl+0x132/0x1b0 [ 168.529545][ T7069] ? __x64_sys_ioctl+0x7f/0xa0 [ 168.534296][ T7069] ? do_syscall_64+0x58/0xf0 [ 168.538870][ T7069] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 168.544931][ T7069] ? __kasan_kmalloc+0x96/0xb0 [ 168.549686][ T7069] ? kasan_save_alloc_info+0x40/0x50 [ 168.554952][ T7069] ? __kasan_kmalloc+0x96/0xb0 [ 168.559702][ T7069] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 168.566274][ T7069] ? __kasan_check_write+0x18/0x20 [ 168.571374][ T7069] ? _raw_spin_lock+0x8c/0x120 [ 168.576121][ T7069] ? __cfi__raw_spin_lock+0x10/0x10 [ 168.581308][ T7069] ? __asan_memset+0x39/0x50 [ 168.585883][ T7069] ? _raw_spin_unlock+0x45/0x60 [ 168.590719][ T7069] ? rust_helper_spin_unlock+0x19/0x30 [ 168.596164][ T7069] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0xdfc/0x1440 [ 168.606649][ T7069] ? 0xffffffff81000000 [ 168.610787][ T7069] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 168.621533][ T7069] ? kvm_sched_clock_read+0x15/0x30 [ 168.626722][ T7069] ? sched_clock_noinstr+0xd/0x30 [ 168.631736][ T7069] ? sched_clock+0x44/0x60 [ 168.636135][ T7069] ? sched_clock_cpu+0x75/0x400 [ 168.640973][ T7069] ? sched_balance_newidle+0x845/0xe00 [ 168.646428][ T7069] ? 0xffffffff81000000 [ 168.650570][ T7069] ? __cfi___switch_to+0x10/0x10 [ 168.655591][ T7069] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 168.664704][ T7069] ? finish_task_switch+0x1de/0x780 [ 168.669891][ T7069] ? __switch_to_asm+0x3d/0x70 [ 168.674644][ T7069] ? avc_has_extended_perms+0x7c7/0xdd0 [ 168.680175][ T7069] ? __asan_memcpy+0x5a/0x80 [ 168.684751][ T7069] ? avc_has_extended_perms+0x921/0xdd0 [ 168.690282][ T7069] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 168.699813][ T7069] ? do_vfs_ioctl+0xeda/0x1e30 [ 168.704566][ T7069] ? __futex_queue+0x19a/0x340 [ 168.709323][ T7069] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 168.714943][ T7069] ? __cfi___futex_queue+0x10/0x10 [ 168.720046][ T7069] ? futex_wait_setup+0x1bc/0x260 [ 168.725058][ T7069] ? __futex_wait+0x218/0x2a0 [ 168.729724][ T7069] ? ioctl_has_perm+0x384/0x4d0 [ 168.734566][ T7069] ? has_cap_mac_admin+0xd0/0xd0 [ 168.739496][ T7069] ? futex_wake+0x63a/0x900 [ 168.743982][ T7069] ? futex_setup_timer+0xb4/0xd0 [ 168.748916][ T7069] ? futex_wait+0x288/0x540 [ 168.753406][ T7069] ? __cfi_futex_wait+0x10/0x10 [ 168.758245][ T7069] ? selinux_file_ioctl+0x6e0/0x1360 [ 168.763522][ T7069] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 168.769060][ T7069] ? do_futex+0x309/0x500 [ 168.773381][ T7069] ? __cfi_do_futex+0x10/0x10 [ 168.778062][ T7069] ? __fget_files+0x2c5/0x340 [ 168.782729][ T7069] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 168.791224][ T7069] ? __se_sys_ioctl+0x114/0x1b0 [ 168.796066][ T7069] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 168.805256][ T7069] __se_sys_ioctl+0x132/0x1b0 [ 168.809949][ T7069] __x64_sys_ioctl+0x7f/0xa0 [ 168.814526][ T7069] x64_sys_call+0x1878/0x2ee0 [ 168.819194][ T7069] do_syscall_64+0x58/0xf0 [ 168.823599][ T7069] ? clear_bhb_loop+0x35/0x90 [ 168.828269][ T7069] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 168.834153][ T7069] RIP: 0033:0x7f3d7178e929 [ 168.838555][ T7069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.858162][ T7069] RSP: 002b:00007f3d7251b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.866565][ T7069] RAX: ffffffffffffffda RBX: 00007f3d719b5fa0 RCX: 00007f3d7178e929 [ 168.874524][ T7069] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 168.882483][ T7069] RBP: 00007f3d71810b39 R08: 0000000000000000 R09: 0000000000000000 [ 168.890442][ T7069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.898401][ T7069] R13: 0000000000000000 R14: 00007f3d719b5fa0 R15: 00007ffd7574ab58 [ 168.906367][ T7069] [ 168.909370][ T7069] Modules linked in: [ 168.915216][ T7069] ---[ end trace 0000000000000000 ]--- [ 168.923119][ T10] usb usb4-port1: attempt power cycle [ 168.928571][ T7069] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 168.933874][ T7069] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 ec 07 a3 7b 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 a6 c3 ea f7 90 90 90 90 90 90 90 90 90 [ 168.939714][ T7071] binder: Unknown parameter 'tC{ Ti"' [ 168.954044][ T7069] RSP: 0018:ffffc900101ada90 EFLAGS: 00010246 [ 168.965975][ T7069] RAX: 0000000000000061 RBX: 1ffff92002035b54 RCX: ab496fcb97575300 [ 168.974188][ T7069] RDX: ffffc90003e4b000 RSI: 0000000000004cd7 RDI: 0000000000004cd8 [ 168.982258][ T7069] RBP: ffffc900101ada90 R08: 0000000000000003 R09: 0000000000000004 [ 168.990484][ T7069] R10: dffffc0000000000 R11: fffffbfff0e5f224 R12: 0000000000000000 [ 168.998872][ T7069] R13: dffffc0000000000 R14: ffffc900101adac0 R15: ffffc900101adaf0 [ 169.006917][ T7069] FS: 00007f3d7251b6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 169.016191][ T7069] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.022950][ T7069] CR2: 00007fcfb315dd58 CR3: 000000013ad40000 CR4: 00000000003526b0 [ 169.031005][ T7069] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 169.039055][ T7069] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 169.047145][ T7069] Kernel panic - not syncing: Fatal exception [ 169.053484][ T7069] Kernel Offset: disabled [ 169.057815][ T7069] Rebooting in 86400 seconds..