last executing test programs: 19.841785618s ago: executing program 0 (id=1665): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xbe) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000003fc0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x18, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x11, 0x32, {@dev={0xfe, 0x80, '\x00', 0x30}}}}], 0x28}}], 0x1, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@weak_handle={0x77682a85, 0x3000, 0x1}}, &(0x7f0000000280)={0x0, 0x1, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 19.798727809s ago: executing program 0 (id=1666): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x109122, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 19.72976351s ago: executing program 0 (id=1672): r0 = userfaultfd(0x80000) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write(r0, &(0x7f0000000240)="96a2651d579b9da695523e1093450fdf19b395b56aa5eb6c8bd81f81e4c1f0465b526d9ff67bbbb58926d74e88c3dcde9175abe1f3de22886c2a5858bbd563add6", 0x41) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000002c0)=0x2) fchmod(r0, 0x47) truncate(&(0x7f0000000300)='./file0\x00', 0x80) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000340)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x6, 0x4, {{0xe, 0x4, 0x3, 0x3, 0x38, 0x67, 0x0, 0x8, 0x4, 0x0, @multicast1, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x42, [@private=0xa010101, @private=0xa010102, @loopback, @rand_addr=0x64010102, @remote]}, @generic={0x82, 0x8, "c2a76b330a0e"}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'gretap0\x00', &(0x7f0000000440)={'syztnl2\x00', r2, 0x0, 0x7800, 0x8, 0x9, {{0x2b, 0x4, 0x0, 0x8, 0xac, 0x68, 0x0, 0x8, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, {[@ssrr={0x89, 0x13, 0xd0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x38}, @remote]}, @timestamp_prespec={0x44, 0x2c, 0xaf, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0x9}, {@loopback, 0x80000001}, {@remote, 0x5}, {@loopback}, {@broadcast, 0x100}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x31, 0x0, 0x3, [0x77, 0x1, 0x9, 0x8, 0x400]}, @timestamp_addr={0x44, 0x3c, 0xc8, 0x1, 0x7, [{@private=0xa010100, 0x3}, {@local, 0x739}, {@loopback, 0x7}, {@remote, 0x2}, {@private=0xa010101, 0xbe98}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x8001}, {@remote, 0x4}]}]}}}}}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) sendmmsg(r1, &(0x7f0000001b40)=[{{&(0x7f0000000580)=@hci={0x1f, 0x1, 0x2}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000600)="da16a02599adc898da62bdeb7480d03f418cf30ff32cfcbd54c98ba67dd9b666e70182c885d2a2bb95d9ca55da0de4f1a4fd2e3e6839f729ee9cbf90530388", 0x3f}, {&(0x7f0000000640)}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="3042d269032f440655d35b23f55fca986fd3f77c249030c8af036288f60a69351c0f315e8b62d66df0fb6ef72a171c0d8bbf9bd28a1c0cbc4c83b6f1a7e33d2dde9f026ee7d512d4d020c7cb783a5077a6491c5fa794d161e9aca293ae9f8a6115d447596ce17416d8fd9cb9faabb5cf062b0587f58f3dcbe04caea41690e78756a8678a904e7eb2ec3ad4be942156942b042623aac41346b483599ea64a4e297f978124434514ff3e5f392618953a1ab993b0718b92216644a0a981852615d0da240389396d7d09bbd93573", 0xcc}, {&(0x7f0000001780)="aa1799356ac614e93360cb209cecb3b60cdda93c0ab3692250b485a45e05b1335b79531a8648cb89a0fcbd6e00b2e513065348f3ef49cc9f1df0d60600ef74227ae1e669cc4ba048438b0b2aa0bace29a40343f831f206c7b6108cfa5fd8ca47a5972708799c8a66769afc463a1068a45da238e84d6f41a8be596267ae11034fd4b4fdcd0e6ad2be6cc9e4", 0x8b}, {&(0x7f0000001840)="ac6accfa0ef300c04d726266affaaf25c2464f7b16012e92178bf82ea741fb493a6e7eae8294631d92d7d442e4ff0959af73a638e36f517286b64cd4a7d8416ade6f1ff3228f3f2d57f0ad3876bbbacb3861517ce98441cc14f63c2ad4e2ad04b619eef6b6366c5bcd257be5b0e9ae15268ba10c6c186da107e161a44c7cce", 0x7f}], 0x6, &(0x7f0000001940)=[{0xf0, 0x111, 0x81, "5575823a3346f73feb819c35152e15cea610ca782073987c6db621ee7b7ffb3adbfa1fdbb57e04d00f9868cdeea1e6e428fe32d750f8bf88d14aee96b308518961da36b86f91881faf31802b527c08066c095b2e8c669a0a7113722ed7f1a5d0375912a95d63c265569037ac6c2f78842a238ecf7f168666d13dafd9143f2407e30f4944d9a0f28a1890f0152265c938f0ba8ef7625fac758c9069857cf39c9f6b136547fa3e49541e7f294f2457f8d5a7ed96dd51463a525626855a866c9b73507cbb551669108137d4feb8d95adb0a6a5956997726c442f1"}], 0xf0}}, {{&(0x7f0000001a40)=@hci={0x1f, 0x3, 0x4}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001ac0)="c79454ff3f", 0x5}], 0x1}}], 0x2, 0x0) r3 = socket(0x2, 0x4, 0x2) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x38, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x38}}, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x74, r4, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20044094}, 0x80) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000001e40)=0x101) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000001e80)={0xc, {0xbd, "d46ddae9c69eaeafb2a4e6c5bac56a2f726c8e7673ba75ef60881bbcf09d4ae71d8ba269b37c1ab8021528a3500ae89727d2c6485715409c5539dbe8ea9065d426536ee305d892e68db1fc22f3ef2f115e7716d643a56ba2f4e615e8cf96f37225a88aa7587e62f94fc4898c57b8146f4d68fff5a6c777d5975d2a415cefd7752a179226cf3ba0a2f723960176654a17f11ef583265e76a676960170ef529ea00839fbb6a9ca9ff86aa77ed03c4754fd4aaa232eb4cc326ce98e9b2995"}}, 0xc3) r6 = syz_clone(0x40000, &(0x7f0000001f80)="cb757bbc8218b5e4866c03f93048723e5a3b41c02742af74a1329968c6e9c14546be240205c102b3833e8e2b2df615e6d53d5fc1777df6cddf840df8c4d3bf6d8b448c04ea201710ecef8af8d92ae9c436304576f12b3e2771499ff7e67e731dd57051793bede6412e29c2f60c8dd6346efb227453d726158cfe6d2c1a0338041790936ffc711a9cab4fcc2c138fe15496d4ca8e4773055fc3d1dc18a04df6d81f26a5099052a9dae9ab0ac1dd67318d03c2bac9114e4b63f0b0fe5e33bca28f3cb092aefd188f80e260897ae5ccde34e4ff8465802f9a3e38d3c1ffb825a31fdf2f3bffc04c630e5f", 0xe9, &(0x7f0000002080), &(0x7f00000020c0), &(0x7f0000002100)="2a824495c0ea6f24916e1c4ae815d5967163306ccc8e9eda7abb7d5e47a0584fa9d54c997f88117f2c23026c67560c6068189a0d34f0922988ddc0662c93f9dac0172512d20048f2b38c6de713ca7a1daea367cdc5bb8d0149f49d14ba2d076bb67e847ba718c8af1e53fd69d43ad1e0ae633475dbc01db8969b4e3c80acb8aabf803b0aa24a7517660763dfbb49dd631b6c864fae4b36345516023780d3606b4716e1a1e6b4c9347934b63684cc1ebc5aa387495644f65ce64a37115046e15c7f8154ca1090213ccdace05c9271") syz_pidfd_open(r6, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000022c0)={'syztnl2\x00', &(0x7f0000002200)={'syztnl0\x00', r2, 0x81, 0x10, 0x10001, 0xd97, {{0x1a, 0x4, 0x2, 0x3, 0x68, 0x67, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, {[@timestamp={0x44, 0x20, 0xb1, 0x0, 0xc, [0x3, 0xcba, 0x4, 0x7, 0x5, 0x76e, 0x3]}, @ssrr={0x89, 0x7, 0xb2, [@private=0xa010100]}, @rr={0x7, 0x7, 0x44, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x23, 0x76, [@dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x15}, @empty, @private=0xa010101, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010100]}]}}}}}) recvmsg$unix(r3, &(0x7f0000003a00)={&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000003900)=[{&(0x7f0000002380)=""/120, 0x78}, {&(0x7f0000002400)=""/33, 0x21}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/94, 0x5e}, {&(0x7f00000034c0)=""/235, 0xeb}, {&(0x7f00000035c0)=""/206, 0xce}, {&(0x7f00000036c0)=""/215, 0xd7}, {&(0x7f00000037c0)=""/175, 0xaf}, {&(0x7f0000003880)=""/30, 0x1e}, {&(0x7f00000038c0)=""/61, 0x3d}], 0xa, &(0x7f00000039c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x10040) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, &(0x7f0000003a40)={'IDLETIMER\x00'}, &(0x7f0000003a80)=0x1e) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000005) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000003ac0)=0x4, 0x4) read$FUSE(r7, &(0x7f0000003b00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r7, &(0x7f0000005b40)={0x18, 0xffffffffffffffda, r9, {0xe}}, 0x18) 19.679205921s ago: executing program 0 (id=1673): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_normal', 0x0, 0x117) read$FUSE(r0, &(0x7f0000001cc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x8008) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000080)={0x2, r4}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=r1) r5 = openat(0xffffffffffffff9c, 0x0, 0x1036e1, 0x130) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r5, &(0x7f0000000000)='./file0\x00', 0xc380, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 19.633120381s ago: executing program 0 (id=1675): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0xfffffffc, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000980)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f7395ee7ebb6f09b6e07fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b8"}) 19.620174701s ago: executing program 0 (id=1676): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x55, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xcf, 0xe0, 0x67, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x11, 0x81, 0x1, {0x22, 0x525}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x29, 0x3}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}}) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001440)={0x2c, &(0x7f00000012c0)={0x40, 0x2, 0x2, {0x2, 0xa}}, &(0x7f0000001300)={0x0, 0x3, 0x8, @string={0x8, 0x3, "bf335b7c4004"}}, 0x0, &(0x7f00000013c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xec, 0x0, 0x6, 0x2, "fafabfb1", "cc2fe6a4"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002b40)={0x24, 0x0, &(0x7f0000002a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4ff}}, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000002e80)={0x4, 0x6, 0x0, 0x3fa}, 0x10) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000002f80)={0x14, 0x0, &(0x7f0000002f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003080)={0x1c, &(0x7f0000002fc0)={0x20, 0x10, 0x20, "bdb78ca552f1ce8860620aa2abb4bef2ef6c80232140f83cd974270bdee1161f"}, 0x0, 0x0}) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000030c0)=""/56, &(0x7f0000003100)=0x38) writev(0xffffffffffffffff, &(0x7f00000037c0)=[{0x0}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) syz_clone(0x1000000, 0x0, 0x0, &(0x7f0000003b40), &(0x7f0000003b80), 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000008f00)) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000008f40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x130, 0x2, [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x7, 0x1, 0x2, 0x16, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x1, 0x8c}}}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0xbd, &(0x7f0000009100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xab, 0x3, 0x1, 0x7, 0x10, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x303, 0x4, 0x3, 0x95}, @processing_unit={0x9, 0x24, 0x7, 0x6, 0x2, 0x0, "d747"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x9, 0x8, 0x5, "d16f1230"}, @as_header={0x7, 0x24, 0x1, 0x40, 0x81, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0x31, 0x25, {0x7, 0x25, 0x1, 0x2, 0x5, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x6, 0x101, 0xc, "61498d918057854c97"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x3, 0x29, "", 'r'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x2, 0x9, 0x9, "dda1c5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xf9, 0x5, 0x6, {0x7, 0x25, 0x1, 0x3, 0xf9, 0xd}}}}}}}]}}, &(0x7f0000009500)={0xa, &(0x7f00000091c0)={0xa, 0x6, 0x200, 0xf8, 0x10, 0x23, 0xff, 0xc}, 0x3b, &(0x7f0000009200)={0x5, 0xf, 0x3b, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x8, 0x5, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0xaa, "847997e6ff01be782862d9b2a0e6777d"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x5, 0xbd, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x5, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x5, 0x7}]}, 0x7, [{0x4, &(0x7f0000009240)=@lang_id={0x4, 0x3, 0x820}}, {0x83, &(0x7f0000009280)=@string={0x83, 0x3, "d990fd6c012d9be36e8e7a7a31b0ad887d9ae9f467df62c0c67c97cb07a83788bb65522014000de0e4110d119a3a48ab5f82edf37e8877a39dbf1e2c8ac2fef2c69b904d296f48b8d40ee6db03b9233af35996305efaa5aa12e0c8d5f595eaf59012ac89cc8eba7b48fb98ac8ad718df7f3bd3967d0a74540d287d88541ba52245"}}, {0x86, &(0x7f0000009340)=@string={0x86, 0x3, "31a88864a1ebb3923ad147890d4991750b4c391b1f3e4c3bbfb85da03e37a5e6dd263a3562d73db00f0dac70ef452281ea9713f05173cb1da19c75a1df77b344977a7ef4a0f54cf5df6b03c515c54af79b62d371f5bafbc34d609867a4883136481df4863a7a228096d3e0c12e3538556da70d51c99d50a29aaaac4cab07371aeee807d2"}}, {0x4, &(0x7f0000009400)=@lang_id={0x4, 0x3, 0x405}}, {0x18, &(0x7f0000009440)=@string={0x18, 0x3, "9fed308ae6926d29f2b5b41152a638f1b6461e50c7d1"}}, {0x4, &(0x7f0000009480)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f00000094c0)=@lang_id={0x4, 0x3, 0x44a}}]}) syz_usb_ep_write(0xffffffffffffffff, 0x6, 0x42, &(0x7f0000009580)="b8081191e2c21e133bea9be287987de66d3a3ae3e447f23b5a0b559fca4d823608cc5ca04ed331d722e006fefdd21a0e4c98819ce16992669ae95800556d4175a169") 10.085505271s ago: executing program 3 (id=1712): r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) fchmod(r0, 0x19) r1 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0x2d, 0x2, 0x1, {0x22, 0x9b5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf, 0x4, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x3, 0x2, 0x1}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xc0, 0x7, 0x59, 0x8, 0x5}, 0x2a, &(0x7f00000000c0)={0x5, 0xf, 0x2a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7, 0x5, 0xfffc}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x80, 0xa, 0x42}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xb, 0xf, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0x1, 0xb9d}]}, 0xa, [{0xfa, &(0x7f0000000100)=@string={0xfa, 0x3, "cc2766abec82eab5dc0d8a1156a01e327bc8c0a145e1036cb6b6f9860606566fe0f1efad4420c82281bcf4db6783f13cf61ce19de7d2d5e8a522db7cc19ec29a74fc401aeb99fa8395b4ae91e96c26c9de52acc47031d3412cd8131616ef128584f7050d3a85b8f5817646878082611e64827a251fad16c0ecf88ec7557fb24b73256546516262ea93ed1983eab045f71dcf43e46fee66bce1df22f239fa1c0b626c8b43603f324b475f9254ed50db23d23db9650bbf7954835928c2e66728b6e4d9ea9571d3ce913038ebf593168b18a1dac0109e5cc160747d80ea3a7805a66f435679597cd05551e2478003d8dd5a26f7cdd42d2af23f"}}, {0x51, &(0x7f0000000200)=@string={0x51, 0x3, "7e565c104a26181325042e1d8832cc732c07231c69708bf199417b43520e3b7fbd13dc4edd9daba7c7b7cb9046314fd79b686143c048a5cb6a7d95477ff35994201d348a1dfd0fa894e32980b0a6fd"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc1a}}, {0x62, &(0x7f0000000300)=@string={0x62, 0x3, "ae2bb014f468f23accdcd4959b1bb9b51f8bec10d21b0f6743cc486d419d1e3fa3874ae90b803fd6c1c2ec7e0d7509a5b3c485f9b84989615a1687e3996cc89a4a8703ec377efe268ca6af72808e23d6d4a1abb2219f576e3508794e209f56aa"}}, {0x6, &(0x7f0000000380)=@string={0x6, 0x3, "31bf5a69"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x816}}, {0x2e, &(0x7f0000000400)=@string={0x2e, 0x3, "95c98ca1c8ad4402b6044812fbf8b8aeccf9817ca66bb7b7d064afc0c06a6a4b2f73889a6e230f4ea9af20d6"}}, {0x100, &(0x7f0000000440)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x861}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000740)={0x24, &(0x7f0000000640)={0x0, 0x0, 0x4, {0x4, 0x23, "5cc6"}}, &(0x7f0000000680)={0x0, 0x3, 0x2f, @string={0x2f, 0x3, "2ac73971818e9bc408f592573246a3dc74b74ff2b2ba149d4752ee4d15588a756b94841e745a1206c9e61e90a3"}}, &(0x7f00000006c0)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x7, "aec963d9"}, @main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f0000000700)={0x0, 0x21, 0x9, {0x9, 0x21, 0xd61, 0x5, 0x1, {0x22, 0xbe0}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000780)={0x20, 0x14, 0x12, "636d9f7c942d81058166a234d981284e04bf"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x7a}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x1, 0x70, "c89f0d026566756a60f38de8d5a6c2292f105dd3e26b80e9811d829a02b1b1a8faf066d8053a292ea7e5b2fc0077da88d6fa89b6d40e671bbcb1849d2555c4543a5a92087826e59fd0c8601d396f65688596a392c84e96ea302ca0d37397d96dd51eee28c59a50e1aa0fc0e1395375eb"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x81}}) syz_usb_control_io$hid(r1, &(0x7f0000000b00)={0x24, &(0x7f0000000940)={0x40, 0x9, 0x13, {0x13, 0xc, "4817582866d1a3d659e84becee70b008a0"}}, &(0x7f0000000980)={0x0, 0x3, 0xc4, @string={0xc4, 0x3, "bea505e5bc39352bffef69a3cd9ba1380a2edf4c096bd493ca9da863d030365f8fc11a5c8fdc76ad784aa5458d937e264b912b0ff40a3ae360664464dfb3b5b789fcf5c2e9432c3bd4b0af30bd80f5b68e85d626239ccce09c9f7d9495724bae6201bca83b800253d2301e35915ec4e180a073cb88186c2a11b61f742c5b596f4f31e9ee39e2b0b6ef34d1712a4b238ebcc13597505c7ebace7026801ac961ccb2d465582c26e7e9bc018942440835db80d3dd43498f1d553865f095efa952f6504e"}}, &(0x7f0000000a80)={0x0, 0x22, 0x17, {[@main=@item_4={0x3, 0x0, 0xc, "4431ee85"}, @global=@item_4={0x3, 0x1, 0x1, "3d60a3d2"}, @main=@item_4={0x3, 0x0, 0x0, "3fad76bc"}, @main=@item_012={0x1, 0x0, 0xa, "89"}, @global=@item_012={0x2, 0x1, 0x7, 'gS'}, @local=@item_012={0x2, 0x2, 0x4, "96da"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0x0, 0x1, {0x22, 0xe6f}}}}, &(0x7f0000000d00)={0x2c, &(0x7f0000000b40)={0x0, 0x16, 0x68, "328cfce393d8c0beb9a3af1efad9410a9689107d7dd8cfec69c289d5132058012606a3049e557f3754d8b159490ac2368767134632df21245c68b938985e2b27433bae8768254a39fad0e71f3a1ce5d84450f9fe25f39547aaff024f6c640b5437aabfeb3c0c58f6"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000c40)={0x20, 0x1, 0x62, "d7cc2adea609d32fadc2151e0bcef77a87b4bb2665cdce3652e1510b9b41f53e3d36d778f2fcfa8f20a64c7d3562d03871296feb0c6f8799dba6451d3728af441487ab8655fa76be145a2c898840976745fb5fb20d9471caf7577eda2dfc2a32e4bb"}, &(0x7f0000000cc0)={0x20, 0x3, 0x1, 0xa6}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x4082053, r0, 0x75bb2000) syz_usb_control_io(r1, &(0x7f0000000f80)={0x2c, &(0x7f0000000d40)={0x0, 0x23, 0x42, {0x42, 0x23, "2ce6d66623bbdbd972927592d4ed1b14c5490a8411b96d80d7a1c3edd75dd7bf7142267ee88df8ef3257e1fc2e5c5da3ca70a1c4b426afa74832c47fa979566a"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x88, @string={0x88, 0x3, "a0818e606994d044bf09ef33bbe1fef59b23059437ee835ff1e375072b6a644b74990b7a468667c41f0dc3810c8b9fb507b60ef895ec04c7b0a6328b3bb5c0c756a30189a91b6fbb7b00bbcc664bbf7154d925db4041f8c326c9d3daf85e479571056555c521f6d8ddbcf93b5da5ef936be3496e0f1db40e008d595a01d96e7c74d83f0f8f94"}}, &(0x7f0000000e80)={0x0, 0xf, 0x64, {0x5, 0xf, 0x64, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0xfe6d, 0xf00, 0x9, [0xff3f00, 0x0, 0x3fa0, 0xc0, 0x3f30]}, @generic={0x35, 0x10, 0x5, "4962826eca5fc6430b05893f0267e71863fa2152620b647489ecd16ac6acf4d21160364a74d45edd41b0bae659f7bc3a0b8b"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0xb2, 0x8, 0xb}]}}, &(0x7f0000000f00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x10, 0x3, 0x9, "6f671820", "4fab6f28"}}, &(0x7f0000000f40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x1, 0x28, 0x59, 0x1, 0x7}}}, &(0x7f0000001440)={0x84, &(0x7f0000000fc0)={0x40, 0x985746e4418f5833, 0x89, "352912593bbb7cab2b7e5c5d64027e58fe0511d4090ef129566da64853a4a87614f8d5ab0ec30a24393e7c9a0352ab36c9bb06016619051645e85b5c4bb20d1d37edb86ad3c999355d911092279256d3019158dd7bd93febe95564b3b2e4e962f6f0b52c86122834e2ac17e0b92d543d6ffaa62f4dbe7f87b5fc2cd59eda065edaed7e8bf5fe56221a"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001100)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001140)={0x20, 0x0, 0x8, {0x100, 0x10, [0xf000]}}, &(0x7f0000001180)={0x40, 0x7, 0x2, 0x1a83}, &(0x7f00000011c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000001200)={0x40, 0xb, 0x2, "7b88"}, &(0x7f0000001240)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000001280)={0x40, 0x13, 0x6}, &(0x7f00000012c0)={0x40, 0x17, 0x6}, &(0x7f0000001300)={0x40, 0x19, 0x2, "d17d"}, &(0x7f0000001340)={0x40, 0x1a, 0x2, 0xf864}, &(0x7f0000001380)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000013c0)={0x40, 0x1e, 0x1, 0xfc}, &(0x7f0000001400)={0x40, 0x21, 0x1, 0xc}}) read$FUSE(0xffffffffffffffff, &(0x7f0000001500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000003540)={0x18, 0x0, r2, {0x3}}, 0x18) syz_usb_control_io$hid(r1, &(0x7f00000036c0)={0x24, &(0x7f0000003580)={0x40, 0x22, 0x27, {0x27, 0x23, "b776a15230ade8318798117d8b2998ee181098588a80f9c953171d37b757af41f0125900c3"}}, &(0x7f00000035c0)={0x0, 0x3, 0x4e, @string={0x4e, 0x3, "64fb9d516c362f5b4c5acf675f344cdf2315979131a1645d74024e04c6907cd8530b620dbf7a690f40bf1cd3b436d55c08c405de0b21cf902497454ae0aa014323c5196d948bc42aacb16fd7"}}, &(0x7f0000003640)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0xb, "35f7"}, @local=@item_4={0x3, 0x2, 0x7, "1e64dcf7"}]}}, &(0x7f0000003680)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfc5, 0x81, 0x1, {0x22, 0x51d}}}}, &(0x7f0000003880)={0x2c, &(0x7f0000003700)={0x40, 0x7, 0xad, "a55d061287ff0fdd97a81ec24882fc680728aa3c0df98abd91d51f1922dcc447939a187ac3eea66c827f3cce57011c2dddeec9656b1347f706b2c3db076e640471cf16d16ddc53da1854b3443383c67f08dca2d32783cd529ce1ef1782c9ed80eeffd6da85dcb995474d31d2689c57df38fda2100401f69becf0761924b23b7f1e169aeb68c260a0cfc434346c2064dd58888bba856b683b39a8b55d332011110feac9ba54ed0eb4b8f6432416"}, &(0x7f00000037c0)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000003800)={0x0, 0x8, 0x1, 0x1}, 0xffffffffffffffff, &(0x7f0000003840)={0x20, 0x3, 0x1, 0x81}}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000003940)={0x14, &(0x7f00000038c0)={0x20, 0x2, 0x3a, {0x3a, 0x23, "aa31dd6da7a04bb91a6736417de91c34150c049722343e31f7ac853b396fd582af03e27d0022c14ff210ffcdc7fa979b997687aa96aa34ed"}}, &(0x7f0000003900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003b80)={0x44, &(0x7f0000003980)={0x40, 0x8, 0x27, "7c70ec205390bf07202dab85a37a79fe8b32d56708b1b17ca534462fa1a613ab99aa47568dd4af"}, &(0x7f00000039c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000003a00)={0x0, 0x8, 0x1, 0xfe}, &(0x7f0000003a40)={0x20, 0x80, 0x1c, {0x8, 0x5, 0x9, 0xf997, 0x4, 0xd2d, 0x2d, 0x10000, 0x3, 0x7, 0xfffa, 0x6}}, &(0x7f0000003a80)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000003ac0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000003b00)={0x20, 0x87, 0x2}, &(0x7f0000003b40)={0x20, 0x89, 0x2}}) syz_io_uring_setup(0x27d3, &(0x7f0000003c00)={0x0, 0xe52a, 0x800, 0x2, 0x273}, &(0x7f0000003c80), &(0x7f0000003cc0)) r3 = syz_usb_connect$cdc_ncm(0x6, 0x16e, &(0x7f0000003d00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15c, 0x2, 0x1, 0x2, 0x60, 0x62, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "84f227a897"}, {0x5, 0x24, 0x0, 0xccd}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x100, 0x2, 0x92}, {0x6, 0x24, 0x1a, 0x9, 0x1c}, [@mbim_extended={0x8, 0x24, 0x1c, 0xfc, 0xf, 0x4}, @country_functional={0x8, 0x24, 0x7, 0x81, 0x4, [0x1]}, @obex={0x5, 0x24, 0x15, 0x9}, @mdlm_detail={0xe6, 0x24, 0x13, 0x3, "60c0d8aa71300dd668d4914befd67564b9e591bcc6c1683ac32ca83b215ee37b1575a49901a1a823f5fd3a4d6b2e73f9385bf07eb045493fed5fbc8408a1209de4bcf9197109b8f2765df4d4a36f79d480fa1da03ce69beb0ba9af6ff55e65f98c4fed173d892fee92d61e16282ffa152f4814081d95f3610ce3fdf516d7ddc849387e9ee3d872f7856d560a4740ea1b932a67cec82a79d855ec68b9bed05f888e6764881647dc9543321ed96a9e45dd85b571750ca6f41b0457d3d16389d320e39bcf6a24b393b9fe4bc1dbe2c9ebd80caaac8339adf56c1dd58e0a4fcc4ef15d60"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x3, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0x6, 0xfb}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x95, 0x4}}}}}}}]}}, &(0x7f0000003f80)={0xa, &(0x7f0000003e80)={0xa, 0x6, 0x300, 0x5, 0x2, 0xe, 0xff, 0x7}, 0x46, &(0x7f0000003ec0)={0x5, 0xf, 0x46, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0xb, 0x5, 0x4, 0xf780, 0xfff9, [0xc0, 0x30, 0xc000, 0x60, 0xc0]}, @ssp_cap={0x10, 0x10, 0xa, 0x81, 0x1, 0x7, 0xf000, 0xca, [0xffc17f]}, @generic={0xa, 0x10, 0x4, "3d755fb41e9702"}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x6, 0x8, 0x5}]}, 0x1, [{0x4, &(0x7f0000003f40)=@lang_id={0x4, 0x3, 0x406}}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000004100)={0x14, &(0x7f0000003fc0)={0x40, 0x5, 0xd9, {0xd9, 0x4, "823086cb4ea3bf653a0ed62865fb986224a4acb26e986f85e251187fa09a441f431e1f4befdd5fe96407c353f92d5683c221739b67a0b738cee4ba221b0eb320259845776dde96d16f48bd50b567082f22345d6a76ef89be0f65c78784de72a881c38a3098110f7968487a5420a71a88d67717cf1c16f726ddbd6c632068bba6410a320e2fe692fde2cd609861a75832923004a8a5df46bdbd01d17569e04c23f50e2492cbba0c3b4e10ad301f7f7e0b3616ef6682826d3b274f6be20b353256a72b610409b671cfb52c6ef4ba67dd2e7d4910da9fe214"}}, &(0x7f00000040c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004340)={0x44, &(0x7f0000004140)={0x40, 0x11, 0xb, "84472d6632aea5ff6ffba8"}, &(0x7f0000004180)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000041c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000004200)={0x20, 0x80, 0x1c, {0x3ff, 0x1, 0x0, 0x800, 0x7, 0x6, 0xf, 0x7fff, 0x4, 0x3, 0x9}}, &(0x7f0000004240)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000004280)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000042c0)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000004300)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io(r3, &(0x7f0000004580)={0x2c, &(0x7f00000043c0)={0x0, 0xb, 0x59, {0x59, 0x3, "9005209d019df8e08c40c9284668a9981c04b76ec4e09f20b6d79178ba3f971c23dee2103d13b4650445cdc9e20fd503cb27c2e3c68928cd4da1c9703a4378606e0602b23867f8b72641a9f9fa5a2aa4b0d9c645a6a224"}}, &(0x7f0000004440)={0x0, 0x3, 0x65, @string={0x65, 0x3, "17a4980534d1c4e3e9a232f5cfb67a0d1c2f4bbd27963ae34671eeaab7a410c4cc55e7f22b5a9f2c798176aa28e08123e40f02877ca568d279944a0046c831bc29bb3c47f46ca8cd311adc9a170a47585d46afb87121007b1b9f66f948a522542d0863"}}, &(0x7f00000044c0)={0x0, 0xf, 0x31, {0x5, 0xf, 0x31, 0x5, [@wireless={0xb, 0x10, 0x1, 0xa, 0x89, 0xfc, 0x5a, 0xff7b, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x5, 0x0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xd0, 0x8, 0xffff}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x3b, 0x9, 0x7fff}]}}, &(0x7f0000004500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x70, 0x8, 0x3, 0x12, "7d4f589b", "b8ab67b8"}}, &(0x7f0000004540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0xa, 0x9, 0xd, 0x1, 0x8, 0x3}}}, &(0x7f0000004a80)={0x84, &(0x7f00000045c0)={0x40, 0x15, 0xdc, "ba32da1afdb39e8e2fe1183067adc9a551794afb5e8d39bad6310b9695e87d87f30d5be14056d0bb198d6e8b6ae2bf3b5dfaf7597bca04431bd20ab725c5426b2d67e7c5b5266423caf9c3bffb5f1cbf53f558fad01aca0664450127e131ca695166b1997e8d0560ab93724c4bf27dde83adad261ee7151812635d663c42042552fe743586a339abe41db37823dbe092b60af56b3e199b6ee3271d89104a462501cf92d1422a03b1ea960366c33991b73297b67601dd5122c7bfae90429c831d294f41e5c8353a75a666f92244c754a4123b626cb1f3064d3129afc8"}, &(0x7f00000046c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000004700)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000004740)={0x20, 0x0, 0x4}, &(0x7f0000004780)={0x20, 0x0, 0x8, {0x200, 0x4, [0x0]}}, &(0x7f00000047c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000004800)={0x40, 0x9, 0x1}, &(0x7f0000004840)={0x40, 0xb, 0x2, "956b"}, &(0x7f0000004880)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000048c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000004900)={0x40, 0x17, 0x6, @random="f3ad6d1759d8"}, &(0x7f0000004940)={0x40, 0x19, 0x2, "cc71"}, &(0x7f0000004980)={0x40, 0x1a, 0x2, 0x8}, &(0x7f00000049c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000004a00)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000004a40)={0x40, 0x21, 0x1}}) syz_usb_control_io$hid(r1, &(0x7f0000004e00)={0x24, &(0x7f0000004b40)={0x20, 0xe, 0xff, {0xff, 0x3, "27cc23a5be0076fdcf9f0623be4d6bfc6beefc05c9fda12eb53a2f22ac67c6b27ab38eeb0690d5c5fd4ca3f2d1c7527984cf1faa3f45192f9068cff466d7a71d535f6a2a934dccf883ff1aa85f740e683b6c054bbef64b6d5c72ce247097b507b87725f194cf2f856d1b0dd9ccebb47b527682fadd3f4084cd5c8f4e0a8779c4e6423a49ee54293f96188098d1b9b7821ec87ec5ef43a21e360211620c23afa14c2a801f8466d91a3af80cc489d20266cccc18a0ab6168861787853ab6f979ddc159f3dcd2a30f53279f05b40f23b824205a0f234112a37876265a2303efa8ee3c7aa8a6dbf8b7bf1b82f1b06832ce009f16185ba2f7f99102139ee166"}}, &(0x7f0000004c80)={0x0, 0x3, 0xda, @string={0xda, 0x3, "744412f19646c3803acb3d9eeb5e4e8f79ec4b1079c0f82d2d40de947f769300d67a8dbd0bfc0ff59000dec6f4353ee4964d27638bcd1f7816a836ed9a5c31aa9462156dad00f5458e331830d06bdd4ebf86e9e64224f35319e4afc3ba10901d9ecfb5105cfd06daffd4841b2b27540369a2cf187ddcab8b0223f2de4f12e28fb9861f303db5b953ffc9f9efa52d3c091e1bdba55f1eabd4311b07b4e1d50b2f13c5ebf11234f0792d1414f6b9b308106411d7b6fe8f903cd55de65092b0f70e689cbdd5b1a96cdfbdbfb05c5f72ff05204881e4df71c0d8"}}, &(0x7f0000004d80)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0xa, "2cfe5c12"}, @local]}}, &(0x7f0000004dc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0xee}}}}, &(0x7f00000050c0)={0x2c, &(0x7f0000004e40)={0x20, 0xa, 0xe5, "32e577c0b882901093cc28a50ddc9298cb66e85211908e6c8c6a37e35a1b8e96912b1d3c9c7d8492eb3a362e9acb9cab5f06966e790c8eb7e0558ef7b6c261caad9887cbc78115308622f4fd3d5d4ff83800f37d875fe311c4fa77d7321bc025fe8c2367cc563e123736fdac3b4bcda5dbe2ef7033a5de7a294f7ed3ea4458d4e1023af9cc3960cd1e884866a0a10df98da634b168a79de21dc57d9090161d1c42117ad1bb365f6fa7bf9d9dacc9fe722a2d01f8e1063c6bab9e16a1499bcce527790946dcfe5a7e06fc2dc847292046b43a4f0f9caa247589407164c5b9c36c306c8b5763"}, &(0x7f0000004f40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000004f80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000004fc0)={0x20, 0x1, 0x7f, "074d687a0beb3d595f4fc0e41fe7d2a1269c28dc12386747a7f3bd0d377626c24a64c8d6b7af988037c8c601b3f3da892964b4080593e78d3ad30209ca1039d2f834543c9f15dceb9f6168cc3bc177623866729d91cb7f37f41c3e89e8bf21dd9abd5ec8d9b1c1ed319c28bc9e87b1ed3f8e001fdc3ff23a566cb1925326d5"}, &(0x7f0000005080)={0x20, 0x3, 0x1, 0x7f}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000005100), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000005140)) r5 = syz_usb_connect$uac1(0x5, 0xc1, &(0x7f0000005180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x3, 0x1, 0x0, 0x20, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7f, 0x3e}, [@extension_unit={0xb, 0x24, 0x8, 0x3, 0x1, 0x4, "552bb4fb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x200, 0x9, 0x2, "8d9fbe4bf8"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6, 0x3, 0x7, "49f2f526f703532f"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x81, 0x1, 0xf1, 0x40, "", "047394"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xff, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0x2, 0x9, {0x7, 0x25, 0x1, 0x2, 0xf7, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x2, 0xbe}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x8, 0xcb, 'E', "b47c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x86, 0x7, 0xa, {0x7, 0x25, 0x1, 0x0, 0x6, 0x4}}}}}}}]}}, &(0x7f0000005540)={0xa, &(0x7f0000005280)={0xa, 0x6, 0x110, 0x5, 0xfa, 0x6, 0x40}, 0x13a, &(0x7f00000052c0)={0x5, 0xf, 0x13a, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xb, "37c3d0e01515ecaea7e4b2fa4c28e4a9"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0xd, 0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0xf, 0x1, 0x1, 0x5, 0x7f}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "8f4ba96902d46a57dd624f4b6b745be7"}, @generic={0xf8, 0x10, 0x4, "9081465df3041ef426122fc10fe2b4628e9a69b3d8220094d3b2a9977ac6595d513c45f86a49801a73de5739734b9d577458461cc1f341d28a7654ed010b0e70009ffd8a99565d81653947227a84f1f7d97a58b59c58fd83c6037b8eda6896f9410e6d86d76e3232d322c600ed91073f657cd8c2e9edcc4c2f2a4331ee64ea0417fe42489c2dfb7e587b02d6d6b12d3130a11d699fe3141d3ff4a036b5e5fdb1c144f704e20d2e598e6ee1bc9a66d4394d53c9cc89e2ae526c66e37c892b3b7a56600d6410699ede0b47765a7880eab79db75a07b622047e337cc110cb0c1da38c7dfad3a1dc47fb7717da16e479e64d0ddc5abac2"}]}, 0x3, [{0x8f, &(0x7f0000005400)=@string={0x8f, 0x3, "fc8bdbdd02bac63b5e9d1db466510edc68c16841076952d3b08a978a956199a98b45effe5c105d4df0ccc4f390a58b78939fca7f3aed7eb3954a40d87f6c741dfc0cbdf988d90a96e7a8404191fe4c059ce749bdd9465295bd4bf9f5fb37e8604876e4028862fbd84a7522499f74595b7477d6fee7da0ae43c17f015f77229a4c9d6dccda3271f0fa03a383c40"}}, {0x4, &(0x7f00000054c0)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000005500)=@lang_id={0x4, 0x3, 0x81a}}]}) syz_usb_control_io$uac1(r5, &(0x7f00000056c0)={0x14, &(0x7f0000005580)={0x20, 0x30, 0xe6, {0xe6, 0x2ee1951bd56e361a, "1e9926316fc22c1b3db5a7da1f5bf96eca182f4da974ad5edc6739679c3a3d50c9b9a5961924d418b4bde918ddea5524c2e44ce105b94b71103c405d836e3c5b8aade69db8ccca1f0bf8d39cec32b9792ca2b854d794235cc0ee7588f668057b835471668ab5562bab785274333a501198b469f6fa860f7cfd8d5b4d89940f5ec103445a61970903e6c7c74f5962c2bae291653432c86ab5e2bc0658ff7689ec7d695a73840eb81d87fee02851653c59e2521c9c287663ba3ecfb11ba16ac799f3b05017ea224917225859996417fc648b229822dd732603f2ef3d2f5b391650dda66071"}}, &(0x7f0000005680)={0x0, 0x3, 0x13, @string={0x13, 0x3, "3d217a241880652c612d7a0fcac4d8cba3"}}}, &(0x7f0000005900)={0x44, &(0x7f0000005700)={0x20, 0x11, 0x12, "7075b46c321376e3539abbf223b436c6a7a9"}, &(0x7f0000005740)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000005780)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000057c0)={0x20, 0x81, 0x3, "735fc9"}, &(0x7f0000005800)={0x20, 0x82, 0x1, "b7"}, &(0x7f0000005840)={0x20, 0x83, 0x1, 'q'}, &(0x7f0000005880)={0x20, 0x84, 0x4, "49a321d4"}, &(0x7f00000058c0)={0x20, 0x85, 0x3, "6c5e12"}}) rt_sigprocmask(0x2, &(0x7f0000005980)={[0x2]}, 0x0, 0x8) rt_sigpending(&(0x7f00000059c0), 0x8) r6 = syz_usb_connect$cdc_ecm(0x0, 0x78, &(0x7f0000005a00)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x1, 0x1, 0x4, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x6, 0x24, 0x6, 0x0, 0x0, "d3"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x3, 0x3, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x8}, @acm={0x4, 0x24, 0x2, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x7, 0xbb79}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xe, 0x17}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x2, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xff, 0x9, 0x80}}}}}]}}]}}, &(0x7f0000005b80)={0xa, &(0x7f0000005a80)={0xa, 0x6, 0x300, 0x2, 0x5, 0x2, 0x10, 0x5}, 0x2a, &(0x7f0000005ac0)={0x5, 0xf, 0x2a, 0x4, [@wireless={0xb, 0x10, 0x1, 0x9feca04a1e5f767a, 0x0, 0x24, 0x3, 0xb, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0xd0, "2ff2eb5b00bde613fe20fd9cfd2d461d"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x2, [{0x8, &(0x7f0000005b00)=@string={0x8, 0x3, "c4df6d52c2f1"}}, {0x4, &(0x7f0000005b40)=@lang_id={0x4, 0x3, 0x41d}}]}) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000005c80)={0x14, &(0x7f0000005bc0)={0x40, 0x23, 0x4d, {0x4d, 0xd, "23c12077dec318d391b44082d6174c14de15a2b420c2e74ec018ab5f0b6047d8444153069f3340502b54aa87d63818a7d367bef7892dfad7101d322a3a4f60f6010afdb44f59d7f49a4d94"}}, &(0x7f0000005c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000005e40)={0x1c, &(0x7f0000005cc0)={0x40, 0x6, 0xdf, "968449f0321ece76a9146deea6c76a15f59103ed95c1104b6dc4880f908891b92a09cb34dd160e31712f02b49d9911fddedf4a33d1dd8ddd41f31b0d9073da5060dee205be11832a5caf713e2e2f234dde56e7ea2529009d6cb6bbb5e82c3db87dc6ffb08440f295ed598e3054a506246cb19ac287fa2623a3bb1501badc34ebe50e1036838ebd153e3a705e97ad12e3510fdbd7f2cf24a966936af23b16a8382d5d869994a4597419666a7662dc1bbb540beb82f66ebfc4b1866146c4994700a847cfd6d70e0ae1a0b99c6e905cdd1a0f2e86aa44581efa888b126f0f79ce"}, &(0x7f0000005dc0)={0x0, 0xa, 0x1, 0xf2}, &(0x7f0000005e00)={0x0, 0x8, 0x1, 0x13}}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000005e80), 0x100, 0x0) sendmsg$can_bcm(r7, &(0x7f0000005fc0)={&(0x7f0000005ec0), 0x10, &(0x7f0000005f80)={&(0x7f0000005f00)={0x1, 0x0, 0x9, {}, {0x0, 0x2710}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x1}, 0x15, 0x1, 0x0, 0x0, "5b3c3f5b80e50006f7382e8e4da134ce847d39602e0ce280d999502450e8a5f0f076a61ec8bead3d2b43524ea43e2bf79bd0e384f95219604003fb30049266f4"}}, 0x80}, 0x1, 0x0, 0x0, 0x8891}, 0x40) syz_usb_control_io$hid(r1, &(0x7f0000006140)={0x24, &(0x7f0000006000)={0x0, 0x2, 0x55, {0x55, 0x9, "c07eedd955f0320d53020b4914d2646d912aed7eb647a498f9d239446f16048b81c760e5b10e81b43122fff5048952a42e8406f970aa2ae6d7e9640118c48652320eb6c55676654a386ed9caeb7ce088c2b9f5"}}, &(0x7f0000006080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}, &(0x7f00000060c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x9, "b3425f01"}]}}, &(0x7f0000006100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0x4, 0x1, {0x22, 0xe2a}}}}, &(0x7f0000006380)={0x2c, &(0x7f0000006180)={0x0, 0x10, 0x2f, "0964b426701d728f167236f9edcc285e9e13adceb10a3ebbe92374f5a6e1972a3806cfd37b652f4be90aec9d81807e"}, &(0x7f00000061c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000006200)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000006240)={0x20, 0x1, 0xf2, "424ae4ba27c5a12eb31c0f7ce4f17e72b4419f2d11cedd6f5a884804dd3e18c714df71416cdf8845a8eb6d41edfc7e919db6779a51407cb093cc2b04276c4a28adcc2e190e5a129132ca099877c964e864d0266f5814205b3d7bf82af94096d38b6fbe4b5a579e6eef93af3a509fb25cd21e99802ad9c85f186a32b5f847f9ddd0fb33bfb2fc93af661548ee10d326696bceea4955c99179439b6a88a29f1147006733d83e06d424ec18b268557a08316587e47e63a34a50535499f20e8103fd80404f66ca9d7813b8f5e67607fcd7c8f387c913ac29f7c60445599debf0dfe1e6fad7d7049bb2b1795b1d1a10d2195e3b54"}, &(0x7f0000006340)={0x20, 0x3, 0x1, 0x8}}) setns(r7, 0x20000) renameat2(r7, &(0x7f00000063c0)='./file0\x00', r7, &(0x7f0000006400)='./file0\x00', 0x1) umount2(&(0x7f0000006440)='./file0\x00', 0xe) 8.676782364s ago: executing program 1 (id=1713): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000000)={'wg1\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x90e, 0x10000000000001}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) socket(0xb, 0xa, 0x1) getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f00000001c0)={@broadcast, @multicast2}, &(0x7f0000000200)=0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) (async) close(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000000)={'wg1\x00'}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x90e, 0x10000000000001}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) (async) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) (async) socket(0xb, 0xa, 0x1) (async) getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f00000001c0)={@broadcast, @multicast2}, &(0x7f0000000200)=0x8) (async) 8.673420584s ago: executing program 2 (id=1714): r0 = creat(0x0, 0x0) ftruncate(r0, 0x17) uname(&(0x7f0000000000)=""/121) (async) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (rerun: 32) unshare(0x22020600) (async) lseek(r1, 0x10001, 0x0) 8.672341433s ago: executing program 3 (id=1715): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f00000001c0)={0x40, 0xa, 0xa, {0xa, 0xc, "c46c32155d690f22"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f00000001c0)={0x40, 0xa, 0xa, {0xa, 0xc, "c46c32155d690f22"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x80) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000280)=0xc) sendmmsg$unix(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r4, r5}}}], 0x20, 0x40044}}], 0x1, 0x4) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r3, &(0x7f0000000500)=ANY=[], 0x78) recvmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x41}], 0x1, 0x382, 0x0) (async) recvmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x41}], 0x1, 0x382, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r7, 0x545c, &(0x7f00000006c0)={0x0, 0x0, 0x5, 0x0, 0x0, "43e6323cce19dc42a867c4e745c80552a700"}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r8, &(0x7f0000000100)={0x1f, 0x3, @none, 0x0, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) connect$packet(r9, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) (async) connect$packet(r9, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) listen(r8, 0x0) (async) listen(r8, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)) 7.101135938s ago: executing program 1 (id=1716): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x55, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xcf, 0xe0, 0x67, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x11, 0x81, 0x1, {0x22, 0x525}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x29, 0x3}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}}) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001440)={0x2c, &(0x7f00000012c0)={0x40, 0x2, 0x2, {0x2, 0xa}}, &(0x7f0000001300)={0x0, 0x3, 0x8, @string={0x8, 0x3, "bf335b7c4004"}}, 0x0, &(0x7f00000013c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xec, 0x0, 0x6, 0x2, "fafabfb1", "cc2fe6a4"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002b40)={0x24, 0x0, &(0x7f0000002a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4ff}}, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000002e80)={0x4, 0x6, 0x0, 0x3fa}, 0x10) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000002f80)={0x14, 0x0, &(0x7f0000002f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003080)={0x1c, &(0x7f0000002fc0)={0x20, 0x10, 0x20, "bdb78ca552f1ce8860620aa2abb4bef2ef6c80232140f83cd974270bdee1161f"}, 0x0, 0x0}) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000030c0)=""/56, &(0x7f0000003100)=0x38) writev(0xffffffffffffffff, &(0x7f00000037c0)=[{0x0}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) syz_clone(0x1000000, 0x0, 0x0, &(0x7f0000003b40), &(0x7f0000003b80), 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000008f00)) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000008f40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x130, 0x2, [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x7, 0x1, 0x2, 0x16, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x1, 0x8c}}}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0xbe, &(0x7f0000009100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x3, 0x1, 0x7, 0x10, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x303, 0x4, 0x3, 0x95}, @processing_unit={0x9, 0x24, 0x7, 0x6, 0x2, 0x0, "d747"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x9, 0x8, 0x5, "d16f1230"}, @as_header={0x7, 0x24, 0x1, 0x40, 0x81, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0x31, 0x25, {0x7, 0x25, 0x1, 0x2, 0x5, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x6, 0x101, 0xc, "61498d918057854c97"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x3, 0x29, "", 'r'}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x2, 0x9, 0x9, "dda1c576"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xf9, 0x5, 0x6, {0x7, 0x25, 0x1, 0x3, 0xf9, 0xd}}}}}}}]}}, &(0x7f0000009500)={0xa, &(0x7f00000091c0)={0xa, 0x6, 0x200, 0xf8, 0x10, 0x23, 0xff, 0xc}, 0x3b, &(0x7f0000009200)={0x5, 0xf, 0x3b, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x8, 0x5, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0xaa, "847997e6ff01be782862d9b2a0e6777d"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x5, 0xbd, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x5, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x5, 0x7}]}, 0x7, [{0x4, &(0x7f0000009240)=@lang_id={0x4, 0x3, 0x820}}, {0x83, &(0x7f0000009280)=@string={0x83, 0x3, "d990fd6c012d9be36e8e7a7a31b0ad887d9ae9f467df62c0c67c97cb07a83788bb65522014000de0e4110d119a3a48ab5f82edf37e8877a39dbf1e2c8ac2fef2c69b904d296f48b8d40ee6db03b9233af35996305efaa5aa12e0c8d5f595eaf59012ac89cc8eba7b48fb98ac8ad718df7f3bd3967d0a74540d287d88541ba52245"}}, {0x86, &(0x7f0000009340)=@string={0x86, 0x3, "31a88864a1ebb3923ad147890d4991750b4c391b1f3e4c3bbfb85da03e37a5e6dd263a3562d73db00f0dac70ef452281ea9713f05173cb1da19c75a1df77b344977a7ef4a0f54cf5df6b03c515c54af79b62d371f5bafbc34d609867a4883136481df4863a7a228096d3e0c12e3538556da70d51c99d50a29aaaac4cab07371aeee807d2"}}, {0x4, &(0x7f0000009400)=@lang_id={0x4, 0x3, 0x405}}, {0x18, &(0x7f0000009440)=@string={0x18, 0x3, "9fed308ae6926d29f2b5b41152a638f1b6461e50c7d1"}}, {0x4, &(0x7f0000009480)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f00000094c0)=@lang_id={0x4, 0x3, 0x44a}}]}) syz_usb_ep_write(0xffffffffffffffff, 0x6, 0x42, &(0x7f0000009580)="b8081191e2c21e133bea9be287987de66d3a3ae3e447f23b5a0b559fca4d823608cc5ca04ed331d722e006fefdd21a0e4c98819ce16992669ae95800556d4175a169") 7.100768268s ago: executing program 2 (id=1717): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x200200, 0x0) syz_io_uring_setup(0x1210, &(0x7f00000000c0)={0x0, 0xd94b, 0x2000, 0x3, 0x196, 0x0, r0}, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) read(r1, &(0x7f0000000080)=""/93, 0xffffff6c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x200200, 0x0) (async) syz_io_uring_setup(0x1210, &(0x7f00000000c0)={0x0, 0xd94b, 0x2000, 0x3, 0x196, 0x0, r0}, 0x0, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) (async) read(r1, &(0x7f0000000080)=""/93, 0xffffff6c) (async) 5.528381263s ago: executing program 1 (id=1718): r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000440)={0xbf, 0x1, &(0x7f0000000040)}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480), 0x400, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000640)={&(0x7f00000004c0), 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd8, 0x2, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x0, 0x3ff]}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}, @CTA_LABELS_MASK={0x18, 0x17, [0x6, 0x6, 0x9d, 0x5, 0x2]}, @CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x3, 0x0, 0x200, 0xff, 0x5, 0x8, 0x6]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xe49}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x200}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1400000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0xd8}, 0x1, 0x0, 0x0, 0x841}, 0x200080d4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x148, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffffa}, {0x6, 0x16, 0xc}, {0x5}, {0x6, 0x11, 0x26}, {0x8, 0xb, 0x4377902c}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4a93}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x4}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000840}, 0x8000) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000900)={0x5, 0x0, 0x1000000000000000, 0x4, 0x3ff}) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000d40)={0xe4, 0x19, &(0x7f0000000940)}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000d80)={0x3, [0x0, 0x0, 0x0]}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000dc0)=0x3) socket$packet(0x11, 0x3, 0x300) getsockname$tipc(r2, &(0x7f0000000e00)=@name, &(0x7f0000000e40)=0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ec0), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000480}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x40, r5, 0x704, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0xc884}, 0x20000001) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000fc0)={[0x7, 0x2, 0x80, 0x9, 0x1, 0x8, 0x4, 0x8, 0x80000001, 0x3, 0x7fffffffffffffff, 0x8, 0x8, 0x1, 0x80000, 0xd], 0xeeef0000, 0x6984}) syz_open_dev$hiddev(&(0x7f0000001080), 0x5, 0x400000) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x48, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001200)='./binderfs/custom0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0xfffffffffffffff0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x7f) ioctl$KDADDIO(r1, 0x4b34, 0xfffffffffffffff7) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001240), 0x165840, 0x0) ioctl$TCGETS2(r7, 0x802c542a, &(0x7f0000001280)) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000012c0)={0x0, 0xfffffffffffffffd}) 5.527950413s ago: executing program 2 (id=1719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6, 0x0, 0x0, 0x3}]}) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000868000/0x5000)=nil, 0x5000, 0x100000c, 0x13, r2, 0x4a9b6000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000f00)={0x2020}, 0x2020) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6, 0x0, 0x0, 0x3}]}) (async) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) (async) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) mmap(&(0x7f0000868000/0x5000)=nil, 0x5000, 0x100000c, 0x13, r2, 0x4a9b6000) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) (async) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async) read$FUSE(r3, &(0x7f0000000f00)={0x2020}, 0x2020) (async) 5.526681373s ago: executing program 3 (id=1720): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000740)={0x4, 0x5, 0x0, {0x0, 0x6}}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000c40)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x01\xb6\x19|\x0eX?\x8cI<\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87\xd3H\x10(e#\x9e*LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9\xf2\xef\x83\xde~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1$\xe4\x00\x00\x00\x00\x00\x00\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^Gj\xee\xef\xa8\xd7\xf8\x93u\v5\x15\bZ\xb0j\x84\x94_\xbb\x8e4\xf4`F\x14\x12\xadV\x8dM\xae\xdd\x97\xc4\xb4\xabZ\xf5\x1d\xf1\xd3\x0f\x9d\x8cgm,\xba7\x91\xad\x9a\xa6\xb3\xa8A\xd5T\xd3\xbe\xc4\xc0\xdfF9ky\xa8s-w\xe6\xf0\xd9\xe0\x83 [ 66.352464][ T1895] __dump_stack+0x21/0x30 [ 66.352498][ T1895] dump_stack_lvl+0x10c/0x190 [ 66.352524][ T1895] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.352552][ T1895] ? is_bpf_text_address+0x17b/0x1a0 [ 66.352587][ T1895] ? kernel_text_address+0xa9/0xe0 [ 66.352613][ T1895] dump_stack+0x19/0x20 [ 66.352639][ T1895] should_fail_ex+0x3d9/0x530 [ 66.352667][ T1895] should_failslab+0xac/0x100 [ 66.352702][ T1895] __kmalloc_cache_noprof+0x41/0x3c0 [ 66.352730][ T1895] ? alloc_pipe_info+0xfb/0x600 [ 66.352759][ T1895] alloc_pipe_info+0xfb/0x600 [ 66.352787][ T1895] splice_direct_to_actor+0x96d/0xbc0 [ 66.352823][ T1895] ? kstrtouint+0x78/0xf0 [ 66.352848][ T1895] ? kstrtouint_from_user+0xfb/0x150 [ 66.352875][ T1895] ? __x64_sys_openat+0x13a/0x170 [ 66.352898][ T1895] ? x64_sys_call+0xe69/0x2ee0 [ 66.352928][ T1895] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 66.352954][ T1895] ? selinux_file_permission+0x309/0xb30 [ 66.352990][ T1895] ? avc_policy_seqno+0xd/0x30 [ 66.353014][ T1895] ? __cfi_direct_splice_actor+0x10/0x10 [ 66.353048][ T1895] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 66.353086][ T1895] do_splice_direct+0x182/0x270 [ 66.353121][ T1895] ? __cfi_do_splice_direct+0x10/0x10 [ 66.353156][ T1895] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 66.353180][ T1895] ? security_file_permission+0x2e/0xc0 [ 66.353213][ T1895] ? rw_verify_area+0xac/0x230 [ 66.353242][ T1895] do_sendfile+0x5c8/0xfb0 [ 66.353264][ T1895] ? vfs_writev+0xcf0/0xcf0 [ 66.353292][ T1895] ? __kasan_check_write+0x18/0x20 [ 66.353326][ T1895] ? ksys_write+0x1ef/0x250 [ 66.353355][ T1895] __x64_sys_sendfile64+0x193/0x1f0 [ 66.353390][ T1895] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 66.353425][ T1895] ? __kasan_check_read+0x15/0x20 [ 66.353453][ T1895] x64_sys_call+0xa26/0x2ee0 [ 66.353483][ T1895] do_syscall_64+0x58/0xf0 [ 66.353504][ T1895] ? clear_bhb_loop+0x50/0xa0 [ 66.353531][ T1895] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.353557][ T1895] RIP: 0033:0x7fa0f9f8e929 [ 66.353577][ T1895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.353597][ T1895] RSP: 002b:00007fa0fae2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 66.353624][ T1895] RAX: ffffffffffffffda RBX: 00007fa0fa1b5fa0 RCX: 00007fa0f9f8e929 [ 66.353642][ T1895] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 66.353657][ T1895] RBP: 00007fa0fae2c090 R08: 0000000000000000 R09: 0000000000000000 [ 66.353672][ T1895] R10: 0000000000003895 R11: 0000000000000246 R12: 0000000000000001 [ 66.353688][ T1895] R13: 0000000000000000 R14: 00007fa0fa1b5fa0 R15: 00007ffe716a4a88 [ 66.353707][ T1895] [ 66.654061][ T1095] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 66.685150][ T1897] SELinux: security_context_str_to_sid () failed with errno=-22 [ 66.814062][ T1095] usb 2-1: Using ep0 maxpacket: 16 [ 66.822636][ T1095] usb 2-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.836156][ T1095] usb 2-1: config 1 interface 0 has no altsetting 0 [ 66.846941][ T1095] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.40 [ 66.856106][ T1095] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.867233][ T1095] usb 2-1: Product: syz [ 66.871447][ T1095] usb 2-1: Manufacturer: syz [ 66.876226][ T1095] usb 2-1: SerialNumber: syz [ 66.968266][ T9] usb 4-1: USB disconnect, device number 22 [ 67.081978][ T1924] FAULT_INJECTION: forcing a failure. [ 67.081978][ T1924] name failslab, interval 1, probability 0, space 0, times 0 [ 67.094754][ T1924] CPU: 1 UID: 0 PID: 1924 Comm: syz.3.548 Not tainted 6.12.30-syzkaller-g668635cd345a #0 d19ba9d9380c3ec16bff3ad427c1e033f6258032 [ 67.094793][ T1924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.094808][ T1924] Call Trace: [ 67.094815][ T1924] [ 67.094826][ T1924] __dump_stack+0x21/0x30 [ 67.094859][ T1924] dump_stack_lvl+0x10c/0x190 [ 67.094885][ T1924] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.094916][ T1924] dump_stack+0x19/0x20 [ 67.094940][ T1924] should_fail_ex+0x3d9/0x530 [ 67.094988][ T1924] should_failslab+0xac/0x100 [ 67.095020][ T1924] __kmalloc_noprof+0x69/0x450 [ 67.095048][ T1924] ? alloc_pipe_info+0x218/0x600 [ 67.095067][ T1924] alloc_pipe_info+0x218/0x600 [ 67.095086][ T1924] splice_direct_to_actor+0x96d/0xbc0 [ 67.095116][ T1924] ? kstrtouint+0x78/0xf0 [ 67.095140][ T1924] ? kstrtouint_from_user+0xfb/0x150 [ 67.095164][ T1924] ? __x64_sys_openat+0x13a/0x170 [ 67.095185][ T1924] ? x64_sys_call+0xe69/0x2ee0 [ 67.095210][ T1924] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 67.095230][ T1924] ? selinux_file_permission+0x309/0xb30 [ 67.095256][ T1924] ? avc_policy_seqno+0xd/0x30 [ 67.095282][ T1924] ? __cfi_direct_splice_actor+0x10/0x10 [ 67.095314][ T1924] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 67.095349][ T1924] do_splice_direct+0x182/0x270 [ 67.095373][ T1924] ? __cfi_do_splice_direct+0x10/0x10 [ 67.095398][ T1924] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 67.095420][ T1924] ? security_file_permission+0x2e/0xc0 [ 67.095453][ T1924] ? rw_verify_area+0xac/0x230 [ 67.095478][ T1924] do_sendfile+0x5c8/0xfb0 [ 67.095499][ T1924] ? vfs_writev+0xcf0/0xcf0 [ 67.095512][ T1924] ? __kasan_check_write+0x18/0x20 [ 67.095531][ T1924] ? ksys_write+0x1ef/0x250 [ 67.095552][ T1924] __x64_sys_sendfile64+0x193/0x1f0 [ 67.095586][ T1924] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 67.095618][ T1924] ? __kasan_check_read+0x15/0x20 [ 67.095644][ T1924] x64_sys_call+0xa26/0x2ee0 [ 67.095665][ T1924] do_syscall_64+0x58/0xf0 [ 67.095679][ T1924] ? clear_bhb_loop+0x50/0xa0 [ 67.095697][ T1924] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.095723][ T1924] RIP: 0033:0x7f1c5618e929 [ 67.095741][ T1924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.095760][ T1924] RSP: 002b:00007f1c5700e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 67.095786][ T1924] RAX: ffffffffffffffda RBX: 00007f1c563b5fa0 RCX: 00007f1c5618e929 [ 67.095799][ T1924] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 67.095809][ T1924] RBP: 00007f1c5700e090 R08: 0000000000000000 R09: 0000000000000000 [ 67.095838][ T1924] R10: 0000000000003895 R11: 0000000000000246 R12: 0000000000000001 [ 67.095853][ T1924] R13: 0000000000000000 R14: 00007f1c563b5fa0 R15: 00007ffdd8302978 [ 67.095873][ T1924] [ 67.418277][ T1930] binder: Bad value for 'defcontext' [ 67.423677][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 67.423696][ T36] audit: type=1400 audit(1751315370.970:42524): avc: denied { write } for pid=1927 comm="syz.2.550" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.455831][ T36] audit: type=1400 audit(1751315370.970:42525): avc: denied { remove_name } for pid=1927 comm="syz.2.550" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.479198][ T36] audit: type=1400 audit(1751315370.970:42526): avc: denied { unlink } for pid=1927 comm="syz.2.550" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.724070][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 67.788758][ T1893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.797344][ T1893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.806053][ T1893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.814617][ T1893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.824426][ T1095] usbhid 2-1:1.0: can't add hid device: -71 [ 67.830399][ T1095] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 67.839126][ T1095] usb 2-1: USB disconnect, device number 13 [ 67.875238][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.886359][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.896146][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.909050][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 67.916666][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.925873][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.934873][ T9] usb 4-1: config 0 descriptor?? [ 68.084038][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 68.091169][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 7 [ 68.103854][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.112995][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.121027][ T10] usb 3-1: Product: 巆⊄푰邎ꮾ鐒핃⒁凟ㅥ犆킎ꈌꋉ큈ʀ鎐죴ⅸ㞩䷏붘ꐦ⬂㣹嘰䉊ⶤ↷螶Ѵ弽忏拷㫍Ი個㲿䘤터ꝷ맲콯癬䜨੢踧⑱峉颀侫굉퓩㼖公ㅹ蝬驘ଽѪ䁼䱾맸穇ꦆ撪池ꤵﲛ鵵屐夾박솽ଟ驨귏ⲹ깢沧ꂎ똗Ⰸよ⵨䝒홰쏾瞙♠珘⮏ [ 68.152140][ T10] usb 3-1: Manufacturer: 柾悥늼餄ꚭ걈車욯钎Ვ♅㯀땉䉄棃득뺖䧠ẅՑ헬鞤閿죔ꕹ뵳譛刕虷䦆鍫剻크䳊ꓲ [ 68.166470][ T10] usb 3-1: SerialNumber: 箌䪆鴕薚⦷蛐ⷀ䒚儢⸟앜鈃新හ몸捃㢆慼젍﷑䑜 [ 68.350271][ T1946] FAULT_INJECTION: forcing a failure. [ 68.350271][ T1946] name failslab, interval 1, probability 0, space 0, times 0 [ 68.362945][ T1946] CPU: 1 UID: 0 PID: 1946 Comm: syz.1.557 Not tainted 6.12.30-syzkaller-g668635cd345a #0 d19ba9d9380c3ec16bff3ad427c1e033f6258032 [ 68.362983][ T1946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.362997][ T1946] Call Trace: [ 68.363005][ T1946] [ 68.363014][ T1946] __dump_stack+0x21/0x30 [ 68.363046][ T1946] dump_stack_lvl+0x10c/0x190 [ 68.363087][ T1946] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.363113][ T1946] ? folios_put_refs+0x4d0/0x5c0 [ 68.363139][ T1946] dump_stack+0x19/0x20 [ 68.363164][ T1946] should_fail_ex+0x3d9/0x530 [ 68.363190][ T1946] should_failslab+0xac/0x100 [ 68.363223][ T1946] __kmalloc_noprof+0x69/0x450 [ 68.363249][ T1946] ? iter_file_splice_write+0x1d4/0x1100 [ 68.363283][ T1946] iter_file_splice_write+0x1d4/0x1100 [ 68.363323][ T1946] ? __cfi_iter_file_splice_write+0x10/0x10 [ 68.363361][ T1946] ? __kasan_check_write+0x18/0x20 [ 68.363388][ T1946] ? __cfi_iter_file_splice_write+0x10/0x10 [ 68.363423][ T1946] direct_splice_actor+0x279/0x4b0 [ 68.363446][ T1946] splice_direct_to_actor+0x4fb/0xbc0 [ 68.363482][ T1946] ? __cfi_direct_splice_actor+0x10/0x10 [ 68.363516][ T1946] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 68.363553][ T1946] do_splice_direct+0x182/0x270 [ 68.363589][ T1946] ? __cfi_do_splice_direct+0x10/0x10 [ 68.363624][ T1946] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 68.363647][ T1946] ? security_file_permission+0x2e/0xc0 [ 68.363680][ T1946] ? rw_verify_area+0xac/0x230 [ 68.363710][ T1946] do_sendfile+0x5c8/0xfb0 [ 68.363733][ T1946] ? vfs_writev+0xcf0/0xcf0 [ 68.363752][ T1946] ? __kasan_check_write+0x18/0x20 [ 68.363778][ T1946] ? ksys_write+0x1ef/0x250 [ 68.363805][ T1946] __x64_sys_sendfile64+0x193/0x1f0 [ 68.363851][ T1946] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 68.363885][ T1946] ? __kasan_check_read+0x15/0x20 [ 68.363912][ T1946] x64_sys_call+0xa26/0x2ee0 [ 68.363941][ T1946] do_syscall_64+0x58/0xf0 [ 68.363962][ T1946] ? clear_bhb_loop+0x50/0xa0 [ 68.363988][ T1946] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.364022][ T1946] RIP: 0033:0x7f6ccd18e929 [ 68.364041][ T1946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.364062][ T1946] RSP: 002b:00007f6cce00b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 68.364088][ T1946] RAX: ffffffffffffffda RBX: 00007f6ccd3b5fa0 RCX: 00007f6ccd18e929 [ 68.364107][ T1946] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 68.364123][ T1946] RBP: 00007f6cce00b090 R08: 0000000000000000 R09: 0000000000000000 [ 68.364139][ T1946] R10: 0000000000003895 R11: 0000000000000246 R12: 0000000000000001 [ 68.364153][ T1946] R13: 0000000000000000 R14: 00007f6ccd3b5fa0 R15: 00007ffebccb11c8 [ 68.364173][ T1946] [ 68.364516][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.445963][ T1943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.487967][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.495460][ T1943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.499880][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.515364][ T1943] binder: Binderfs stats mode cannot be changed during a remount [ 68.518795][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.692836][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.703321][ T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 68.710314][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.718584][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.730601][ T10] usb 3-1: USB disconnect, device number 19 [ 68.736880][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.745645][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 68.747340][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.754447][ T9] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 68.780005][ T9] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 68.802784][ T9] usb 4-1: USB disconnect, device number 23 [ 68.817608][ T1964] fido_id[1964]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 68.851215][ T36] audit: type=1400 audit(1751315372.390:42527): avc: denied { map } for pid=1965 comm="syz.1.563" path="socket:[14014]" dev="sockfs" ino=14014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.878330][ T36] audit: type=1400 audit(1751315372.390:42528): avc: denied { read } for pid=1965 comm="syz.1.563" path="socket:[14014]" dev="sockfs" ino=14014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.908921][ T1968] exFAT-fs (rnullb0): invalid boot record signature [ 68.916240][ T1968] exFAT-fs (rnullb0): failed to read boot sector [ 68.922823][ T1968] exFAT-fs (rnullb0): failed to recognize exfat type [ 69.071457][ T1975] FAULT_INJECTION: forcing a failure. [ 69.071457][ T1975] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 69.084835][ T1975] CPU: 1 UID: 0 PID: 1975 Comm: syz.1.567 Not tainted 6.12.30-syzkaller-g668635cd345a #0 d19ba9d9380c3ec16bff3ad427c1e033f6258032 [ 69.084875][ T1975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.084891][ T1975] Call Trace: [ 69.084899][ T1975] [ 69.084908][ T1975] __dump_stack+0x21/0x30 [ 69.084941][ T1975] dump_stack_lvl+0x10c/0x190 [ 69.084969][ T1975] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.084999][ T1975] dump_stack+0x19/0x20 [ 69.085033][ T1975] should_fail_ex+0x3d9/0x530 [ 69.085062][ T1975] should_fail_alloc_page+0xeb/0x110 [ 69.085097][ T1975] __alloc_pages_noprof+0x19d/0x6c0 [ 69.085123][ T1975] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 69.085150][ T1975] ? filemap_get_entry+0x3fb/0x460 [ 69.085176][ T1975] __folio_alloc_noprof+0x14/0x80 [ 69.085202][ T1975] __filemap_get_folio+0x461/0x7c0 [ 69.085227][ T1975] iomap_write_begin+0x447/0x1810 [ 69.085254][ T1975] ? __mark_inode_dirty+0x2ab/0xc40 [ 69.085285][ T1975] ? __cfi___mark_inode_dirty+0x10/0x10 [ 69.085316][ T1975] ? ifs_set_range_uptodate+0x340/0x340 [ 69.085343][ T1975] ? __kasan_check_write+0x18/0x20 [ 69.085371][ T1975] ? __block_commit_write+0x214/0x230 [ 69.085408][ T1975] ? __kasan_check_write+0x18/0x20 [ 69.085435][ T1975] ? folio_unlock+0x12f/0x1a0 [ 69.085457][ T1975] ? I_BDEV+0x11/0x30 [ 69.085487][ T1975] ? inode_to_bdi+0xa7/0x100 [ 69.085513][ T1975] ? fault_in_iov_iter_readable+0x1e1/0x330 [ 69.085547][ T1975] iomap_file_buffered_write+0x394/0xc10 [ 69.085574][ T1975] ? __cfi_iomap_file_buffered_write+0x10/0x10 [ 69.085604][ T1975] ? kiocb_invalidate_pages+0xb1/0xe0 [ 69.085629][ T1975] ? blkdev_direct_write+0x70/0x160 [ 69.085653][ T1975] blkdev_write_iter+0x5fc/0x770 [ 69.085677][ T1975] iter_file_splice_write+0x8fd/0x1100 [ 69.085718][ T1975] ? __cfi_iter_file_splice_write+0x10/0x10 [ 69.085758][ T1975] ? __kasan_check_write+0x18/0x20 [ 69.085786][ T1975] ? __cfi_iter_file_splice_write+0x10/0x10 [ 69.085822][ T1975] direct_splice_actor+0x279/0x4b0 [ 69.085845][ T1975] splice_direct_to_actor+0x4fb/0xbc0 [ 69.085885][ T1975] ? __cfi_direct_splice_actor+0x10/0x10 [ 69.085920][ T1975] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 69.085959][ T1975] do_splice_direct+0x182/0x270 [ 69.085995][ T1975] ? __cfi_do_splice_direct+0x10/0x10 [ 69.086037][ T1975] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 69.086061][ T1975] ? security_file_permission+0x2e/0xc0 [ 69.086095][ T1975] ? rw_verify_area+0xac/0x230 [ 69.086125][ T1975] do_sendfile+0x5c8/0xfb0 [ 69.086148][ T1975] ? vfs_writev+0xcf0/0xcf0 [ 69.086167][ T1975] ? __kasan_check_write+0x18/0x20 [ 69.086196][ T1975] ? ksys_write+0x1ef/0x250 [ 69.086225][ T1975] __x64_sys_sendfile64+0x193/0x1f0 [ 69.086259][ T1975] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 69.086293][ T1975] ? __kasan_check_read+0x15/0x20 [ 69.086321][ T1975] x64_sys_call+0xa26/0x2ee0 [ 69.086351][ T1975] do_syscall_64+0x58/0xf0 [ 69.086372][ T1975] ? clear_bhb_loop+0x50/0xa0 [ 69.086399][ T1975] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.086424][ T1975] RIP: 0033:0x7f6ccd18e929 [ 69.086444][ T1975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.086466][ T1975] RSP: 002b:00007f6cce00b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 69.086491][ T1975] RAX: ffffffffffffffda RBX: 00007f6ccd3b5fa0 RCX: 00007f6ccd18e929 [ 69.086510][ T1975] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 69.086525][ T1975] RBP: 00007f6cce00b090 R08: 0000000000000000 R09: 0000000000000000 [ 69.086540][ T1975] R10: 0000000000003895 R11: 0000000000000246 R12: 0000000000000001 [ 69.086555][ T1975] R13: 0000000000000000 R14: 00007f6ccd3b5fa0 R15: 00007ffebccb11c8 [ 69.086575][ T1975] [ 69.089702][ T36] audit: type=1400 audit(1751315372.640:42529): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.572932][ T36] audit: type=1400 audit(1751315373.120:42530): avc: denied { append } for pid=1980 comm="syz.1.570" name="pfkey" dev="proc" ino=4026532460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 69.586472][ T1989] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 69.603752][ T1989] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 69.612973][ T1989] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 69.621604][ T1989] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 69.624763][ T1990] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 69.636592][ T1990] rust_binder: Error while translating object. [ 69.655720][ T1990] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 69.662001][ T1990] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:400 [ 69.904055][ T31] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 69.904366][ T2040] cgroup: name respecified [ 69.995370][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 70.060740][ T36] audit: type=1400 audit(1751315373.610:42531): avc: granted { setsecparam } for pid=2060 comm="syz.3.596" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 70.081681][ T31] usb 2-1: No LPM exit latency info found, disabling LPM. [ 70.091045][ T31] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 70.101937][ T31] usb 2-1: config 1 interface 0 has no altsetting 0 [ 70.111069][ T31] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 70.120305][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.129596][ T31] usb 2-1: Manufacturer: ॼ䒥᎒㾘綡썬嚖ᜯ㙒䯢씨Ύ꼜腠뀒덓쟞辅⼒⭫⦰ö唈ꪳ䉛≵뭾斜䚖芣넪ဴ㓗䜅嚟⁶ɿ큁㛩霁눨༥砷꣓㉃Ⴆ쳊족ʉ膏⣲❇厀⇭쎆㐋ᄺพ姉鑄佔峯奠궧︋国ᏼꅵ鉛訉ꂅ⧕依ꯡ䍨首 [ 70.153455][ T2067] overlay: Unknown parameter 'obj_user' [ 70.154768][ T31] usb 2-1: SerialNumber: ꐙ粏쌓蟳쮅솟⎉廉鈑禾챣䲧ᰊ豰쇕샼돬业쨫ُ朗烾緊睳㜃ឌ摚赙煋Ώ➹鵬鹻鋆ᢢ驺찣涬圂䁿뉚꽯栶酅村룳Ԟ붜婣ᢣ壖䰉쭞뛯넃Ώ茱﫛咴栎ﾸꋔ㞽獉Ⴐត뺖‷ꏨ塎⮪ﰴｰ䦇ዐˠ颒揗즅꼫팭棯䛇辆퍌븆 [ 70.190414][ T31] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 70.201196][ T31] usb 2-1: no configuration chosen from 1 choice [ 70.290740][ T36] audit: type=1400 audit(1751315373.840:42532): avc: denied { map } for pid=2073 comm="syz.3.600" path="socket:[14437]" dev="sockfs" ino=14437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.341243][ T2074] binder: Bad value for 'max' [ 71.036431][ T2086] __nla_validate_parse: 24 callbacks suppressed [ 71.036448][ T2086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.605'. [ 71.237380][ T36] audit: type=1400 audit(1751315374.790:42533): avc: denied { mounton } for pid=2094 comm="syz.3.609" path="/105/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 71.311805][ T2102] netlink: 188 bytes leftover after parsing attributes in process `syz.3.612'. [ 71.321125][ T2102] rust_binder: Failed copying remainder into alloc: EFAULT [ 71.321143][ T2102] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 71.328449][ T2102] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 71.336753][ T2102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:319 [ 71.346831][ T2104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.396851][ T2108] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 21) [ 71.403310][ T2108] rust_binder: Error while translating object. [ 71.413863][ T2108] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 71.420094][ T2108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:325 [ 71.505684][ T2119] binder: Bad value for 'stats' [ 71.548040][ T2122] overlayfs: overlapping lowerdir path [ 71.548731][ T2121] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 71.623564][ T2140] TCP: TCP_TX_DELAY enabled [ 72.074095][ T2055] Bluetooth: hci0: command 0x1003 tx timeout [ 72.074091][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 72.239154][ T2173] kvm: kvm [2161]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x3172 [ 72.506397][ T2191] netlink: 40 bytes leftover after parsing attributes in process `syz.3.637'. [ 72.516991][ T2191] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 72.535318][ T31] usb 2-1: USB disconnect, device number 14 [ 72.595612][ T2204] binder: Unknown parameter 'q9ma' [ 72.606169][ T2204] tipc: Trying to set illegal importance in message [ 72.627777][ T2206] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.732480][ T2211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.646'. [ 72.783359][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 72.783380][ T36] audit: type=1400 audit(1751315376.330:42536): avc: denied { connect } for pid=2217 comm="syz.3.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.829242][ T36] audit: type=1400 audit(1751315376.380:42537): avc: denied { block_suspend } for pid=2229 comm="syz.0.652" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.024143][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 73.114162][ T364] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 73.175443][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 73.182498][ T31] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 73.193037][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.204535][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.213686][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.221745][ T31] usb 2-1: Product: syz [ 73.225989][ T31] usb 2-1: Manufacturer: syz [ 73.230591][ T31] usb 2-1: SerialNumber: syz [ 73.264063][ T364] usb 4-1: Using ep0 maxpacket: 8 [ 73.270387][ T364] usb 4-1: unable to get BOS descriptor or descriptor too short [ 73.278775][ T364] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 73.290368][ T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 73.301297][ T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 73.311004][ T364] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 73.320691][ T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 73.330373][ T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 28265, setting to 1024 [ 73.341442][ T364] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 73.352778][ T364] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 73.361929][ T364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.369955][ T364] usb 4-1: Product: syz [ 73.374155][ T364] usb 4-1: Manufacturer: syz [ 73.378797][ T364] usb 4-1: SerialNumber: syz [ 73.384412][ T364] usb 4-1: config 0 descriptor?? [ 73.392437][ T2234] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 73.399666][ T2234] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 73.438852][ T36] audit: type=1400 audit(1751315376.990:42538): avc: denied { accept } for pid=2214 comm="syz.1.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.442895][ T2215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.459320][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 73.472207][ T2215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.475494][ T36] audit: type=1400 audit(1751315376.990:42539): avc: denied { ioctl } for pid=2214 comm="syz.1.647" path="socket:[15134]" dev="sockfs" ino=15134 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.487948][ T2215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.515607][ T2215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.530002][ T31] usb 2-1: 0:2 : does not exist [ 73.536706][ T31] usb 2-1: USB disconnect, device number 15 [ 73.654056][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 73.660378][ T10] usb 3-1: config 162 has an invalid interface number: 87 but max is 0 [ 73.668805][ T10] usb 3-1: config 162 has no interface number 0 [ 73.675090][ T10] usb 3-1: config 162 interface 87 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 73.686168][ T10] usb 3-1: config 162 interface 87 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 73.697156][ T10] usb 3-1: config 162 interface 87 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 73.707961][ T10] usb 3-1: config 162 interface 87 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 73.719742][ T10] usb 3-1: config 162 interface 87 altsetting 1 endpoint 0x86 has invalid maxpacket 29791, setting to 1024 [ 73.731484][ T10] usb 3-1: config 162 interface 87 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 73.741813][ T10] usb 3-1: config 162 interface 87 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.754961][ T10] usb 3-1: config 162 interface 87 has no altsetting 0 [ 73.763329][ T10] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=32.4e [ 73.772431][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.780459][ T10] usb 3-1: Product: syz [ 73.784660][ T10] usb 3-1: Manufacturer: syz [ 73.789282][ T10] usb 3-1: SerialNumber: syz [ 73.794970][ T2245] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 74.004591][ T36] audit: type=1400 audit(1751315377.560:42540): avc: denied { getopt } for pid=2244 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.016109][ T2256] overlayfs: failed to clone upperpath [ 74.032020][ T2256] overlayfs: failed to clone upperpath [ 74.044692][ T10] pl2303 3-1:162.87: required endpoints missing [ 74.058923][ T10] usb 3-1: USB disconnect, device number 20 [ 74.068164][ T309] udevd[309]: setting mode of /dev/bus/usb/003/020 to 020664 failed: No such file or directory [ 74.085426][ T309] udevd[309]: setting owner of /dev/bus/usb/003/020 to uid=0, gid=0 failed: No such file or directory [ 74.132092][ T2264] rust_binder: Write failure EFAULT in pid:422 [ 74.434051][ T65] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 74.541938][ T2273] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.572097][ T2277] overlayfs: failed to resolve './file0': -2 [ 74.594052][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 74.601190][ T65] usb 2-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.614353][ T65] usb 2-1: config 1 interface 0 has no altsetting 0 [ 74.622599][ T65] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.40 [ 74.631766][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.639849][ T65] usb 2-1: Product: syz [ 74.644164][ T65] usb 2-1: Manufacturer: syz [ 74.648801][ T65] usb 2-1: SerialNumber: syz [ 74.816152][ T2297] random: crng reseeded on system resumption [ 75.124071][ T31] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 75.254142][ T31] usb 3-1: device descriptor read/64, error -71 [ 75.466523][ T2269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.475605][ T2269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.484193][ T2269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.492820][ T2269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.500682][ T31] usb 3-1: device descriptor read/64, error -71 [ 75.503843][ T65] usbhid 2-1:1.0: can't add hid device: -71 [ 75.513094][ T65] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 75.523525][ T65] usb 2-1: USB disconnect, device number 16 [ 75.755250][ T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 75.832116][ T65] usb 4-1: USB disconnect, device number 24 [ 75.864897][ T36] audit: type=1326 audit(1751315379.420:42541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2311 comm="syz.3.685" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c5618e929 code=0x0 [ 75.894101][ T31] usb 3-1: device descriptor read/64, error -71 [ 76.110845][ T36] audit: type=1400 audit(1751315379.660:42542): avc: denied { getopt } for pid=2325 comm="syz.1.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.130525][ T36] audit: type=1400 audit(1751315379.660:42543): avc: denied { setopt } for pid=2325 comm="syz.1.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.134093][ T31] usb 3-1: device descriptor read/64, error -71 [ 76.172297][ T2327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33552 sclass=netlink_route_socket pid=2327 comm=syz.1.690 [ 76.269917][ T31] usb usb3-port1: attempt power cycle [ 76.321110][ T2330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.691'. [ 76.509125][ T36] audit: type=1400 audit(1751315380.060:42544): avc: denied { read } for pid=2334 comm="syz.1.693" path="socket:[16674]" dev="sockfs" ino=16674 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.561351][ T36] audit: type=1400 audit(1751315380.110:42545): avc: denied { watch } for pid=2334 comm="syz.1.693" path="/155/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 76.614085][ T31] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 76.635229][ T31] usb 3-1: device descriptor read/8, error -71 [ 76.765181][ T31] usb 3-1: device descriptor read/8, error -71 [ 76.886692][ T2345] SELinux: security_context_str_to_sid () failed with errno=-22 [ 77.004279][ T31] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 77.025162][ T31] usb 3-1: device descriptor read/8, error -71 [ 77.134083][ T1106] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 77.155044][ T31] usb 3-1: device descriptor read/8, error -71 [ 77.264514][ T31] usb usb3-port1: unable to enumerate USB device [ 77.284140][ T1106] usb 4-1: Using ep0 maxpacket: 8 [ 77.291027][ T1106] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 77.301180][ T1106] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 77.312483][ T1106] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.321639][ T1106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.329658][ T1106] usb 4-1: Product: 㔥ິ偒믞ぇ㳱흡❛쯏薜‡谥꺽蒆ኽ瑫钹达ƭ氳來ꀀ֮쭿䘬⧂⊐욢侲ㆽ좘凧紨ꖼ㳈岆㨕㕶旬⃝忷썪뮕㣄슥鱏掷纝卛玽낥Å㯑뙔Ꮷ뿌음쿊鸏揿悉䈎◒ [ 77.351974][ T1106] usb 4-1: Manufacturer: 㹻퉕峖ìᢝￖ㲗徒∐협廓砧⹉㰪⿷另㥞╿຦⧳噩孌셊莔⬸晨⪉⺢퀛裒ꀌ맥伷轷ᕰ㊙Ჾ弥Ⓟ⨤⒐脗ಾ搱젘隯땶力ꖲ￪⒅䂓昜ၹ䚩썞ᛡ睏ૻ䊔ꭚ돇꙱銊膚䕫䅆稃썞᛻샚䇝蠵酇ꏃꝠ鈞脱獦憛∰ὉĜ䕪뎊꿸ꦶ뇿傱䬿食ᤵ쉘藎淠ඏ㇭得ࣈ⊨遲屏봓⡞헌蹄岟ᤛ疈娐 [ 77.387260][ T1106] usb 4-1: SerialNumber: ᐇ [ 77.534496][ T304] tipc: Subscription rejected, illegal request [ 77.555375][ T2370] tipc: Enabling of bearer rejected, media not registered [ 77.594875][ T1106] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 77.601668][ T1106] cdc_ncm 4-1:1.0: bind() failure [ 77.607669][ T1106] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 77.614505][ T1106] cdc_ncm 4-1:1.1: bind() failure [ 77.765613][ T2372] SELinux: security_context_str_to_sid () failed with errno=-22 [ 77.773894][ T2372] SELinux: security_context_str_to_sid () failed with errno=-22 [ 77.796363][ T65] usb 4-1: USB disconnect, device number 25 [ 77.940597][ T2383] 9pnet_fd: Insufficient options for proto=fd [ 78.034057][ T1106] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 78.139535][ T2410] binder: Unknown parameter 'fscontext?}' [ 78.140885][ T2408] binder: Unknown parameter 'fscontext?}' [ 78.161476][ T2414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=2414 comm=syz.0.721 [ 78.194077][ T1106] usb 2-1: Using ep0 maxpacket: 16 [ 78.202997][ T1106] usb 2-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.216871][ T1106] usb 2-1: config 1 interface 0 has no altsetting 0 [ 78.225407][ T1106] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.40 [ 78.236373][ T1106] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.244720][ T1106] usb 2-1: Product: syz [ 78.248957][ T1106] usb 2-1: Manufacturer: syz [ 78.255181][ T1106] usb 2-1: SerialNumber: syz [ 78.259696][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 78.259716][ T36] audit: type=1400 audit(1751315381.810:42549): avc: denied { read } for pid=2419 comm="syz.2.724" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.289728][ T36] audit: type=1400 audit(1751315381.810:42550): avc: denied { open } for pid=2419 comm="syz.2.724" path="/142/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.316934][ T36] audit: type=1400 audit(1751315381.820:42551): avc: denied { ioctl } for pid=2419 comm="syz.2.724" path="/142/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.421983][ T36] audit: type=1400 audit(1751315381.970:42552): avc: denied { module_load } for pid=2425 comm="syz.3.727" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 78.422782][ T2426] kernel read not supported for file /policy (pid: 2426 comm: syz.3.727) [ 78.455775][ T2426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.455809][ T2426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:398 [ 78.501509][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 78.521043][ T36] audit: type=1400 audit(1751315382.070:42553): avc: denied { read } for pid=94 comm="acpid" name="event8" dev="devtmpfs" ino=568 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 78.543484][ T36] audit: type=1400 audit(1751315382.070:42554): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=568 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 78.567607][ T36] audit: type=1400 audit(1751315382.070:42555): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=568 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 78.605901][ T2440] fuse: Bad value for 'user_id' [ 78.610903][ T2440] fuse: Bad value for 'user_id' [ 79.105850][ T2376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.114482][ T2376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.122957][ T2376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.131741][ T2376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.261176][ T1106] usbhid 2-1:1.0: can't add hid device: -71 [ 79.267599][ T1106] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 79.276924][ T1106] usb 2-1: USB disconnect, device number 17 [ 79.288780][ T36] audit: type=1400 audit(1751315382.840:42556): avc: denied { search } for pid=2463 comm="syz.0.740" name="/" dev="configfs" ino=1124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.625926][ T2480] overlay: filesystem on ./bus not supported as upperdir [ 79.655557][ T2485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.656477][ T2487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:458 [ 79.680789][ T2492] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.692602][ T36] audit: type=1400 audit(1751315383.240:42557): avc: denied { ioctl } for pid=2491 comm="syz.1.749" path="socket:[17110]" dev="sockfs" ino=17110 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.734993][ T2497] exFAT-fs (rnullb0): invalid boot record signature [ 79.741637][ T2497] exFAT-fs (rnullb0): failed to read boot sector [ 79.749315][ T2497] exFAT-fs (rnullb0): failed to recognize exfat type [ 79.760396][ T36] audit: type=1400 audit(1751315383.310:42558): avc: denied { read } for pid=2498 comm="syz.2.752" path="socket:[17129]" dev="sockfs" ino=17129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.830163][ T2504] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.831179][ T2504] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 79.837909][ T2504] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 79.846172][ T2504] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:469 [ 80.124061][ T1106] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 80.284060][ T1106] usb 2-1: Using ep0 maxpacket: 16 [ 80.290865][ T1106] usb 2-1: unable to get BOS descriptor or descriptor too short [ 80.299246][ T1106] usb 2-1: config 2 has an invalid interface number: 87 but max is 1 [ 80.307369][ T1106] usb 2-1: config 2 has an invalid descriptor of length 36, skipping remainder of the config [ 80.317578][ T1106] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 80.326484][ T1106] usb 2-1: config 2 has no interface number 0 [ 80.332580][ T1106] usb 2-1: config 2 interface 87 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.345586][ T1106] usb 2-1: config 2 interface 87 has no altsetting 0 [ 80.354439][ T1106] usb 2-1: string descriptor 0 read error: -22 [ 80.360693][ T1106] usb 2-1: New USB device found, idVendor=bd44, idProduct=3b47, bcdDevice=75.e7 [ 80.369781][ T1106] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.554090][ T2055] Bluetooth: hci0: command 0x1003 tx timeout [ 80.554090][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 80.612082][ T65] usb 2-1: USB disconnect, device number 18 [ 80.615260][ T2521] rust_binder: Write failure EFAULT in pid:409 [ 80.701236][ T2527] tipc: Enabling of bearer rejected, failed to enable media [ 80.874077][ T1106] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 81.024044][ T1106] usb 4-1: Using ep0 maxpacket: 32 [ 81.030286][ T1106] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 81.038756][ T1106] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 81.047391][ T1106] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 81.056417][ T1106] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 81.066162][ T1106] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 81.075961][ T1106] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 81.089055][ T1106] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 81.098209][ T1106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.107105][ T1106] usb 4-1: config 0 descriptor?? [ 81.315859][ T1106] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 81.515694][ T1106] usb 4-1: USB disconnect, device number 26 [ 81.525561][ T1106] usblp0: removed [ 81.536770][ T2548] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 81.726684][ T2555] rust_binder: 2555: no such ref 3 [ 81.751263][ T2557] rust_binder: Error in use_page_slow: ESRCH [ 81.751287][ T2557] rust_binder: use_range failure ESRCH [ 81.757440][ T2557] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 81.762929][ T2557] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 81.770881][ T2557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:467 [ 82.060114][ T2593] netlink: 436 bytes leftover after parsing attributes in process `syz.3.785'. [ 82.106471][ T2595] syzkaller0: entered promiscuous mode [ 82.111975][ T2595] syzkaller0: entered allmulticast mode [ 82.144078][ T1106] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 82.295397][ T1106] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.306408][ T1106] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.316193][ T1106] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 82.325891][ T1106] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.334847][ T1106] usb 3-1: config 0 descriptor?? [ 82.424080][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 82.459601][ T2614] batadv_slave_1: entered promiscuous mode [ 82.574062][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 82.579364][ T2615] batadv_slave_1: left promiscuous mode [ 82.580657][ T9] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 82.594162][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.602978][ T9] usb 4-1: config 0 descriptor?? [ 82.634080][ T65] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 82.746603][ T1106] belkin 0003:1020:0006.000C: unknown main item tag 0x3 [ 82.764217][ T1106] belkin 0003:1020:0006.000C: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.2-1/input0 [ 82.764253][ T65] usb 2-1: device descriptor read/64, error -71 [ 83.024108][ T65] usb 2-1: device descriptor read/64, error -71 [ 83.264053][ T65] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 83.394068][ T65] usb 2-1: device descriptor read/64, error -71 [ 83.625109][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 83.635770][ T65] usb 2-1: device descriptor read/64, error -71 [ 83.642106][ T9] asix 4-1:0.0: probe with driver asix failed with error -71 [ 83.650528][ T9] usb 4-1: USB disconnect, device number 27 [ 83.744141][ T65] usb usb2-port1: attempt power cycle [ 84.084091][ T65] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 84.105346][ T65] usb 2-1: device descriptor read/8, error -71 [ 84.143968][ T2662] netlink: 'syz.0.810': attribute type 4 has an invalid length. [ 84.151681][ T2662] netlink: 17 bytes leftover after parsing attributes in process `syz.0.810'. [ 84.235198][ T65] usb 2-1: device descriptor read/8, error -71 [ 84.404053][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 84.474148][ T65] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 84.495123][ T65] usb 2-1: device descriptor read/8, error -71 [ 84.555298][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 84.565029][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 84.574744][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.588950][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 84.598034][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.606112][ T9] usb 4-1: Product: syz [ 84.610267][ T9] usb 4-1: Manufacturer: syz [ 84.614893][ T9] usb 4-1: SerialNumber: syz [ 84.621627][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 84.627650][ T9] hub 4-1:1.0: probe with driver hub failed with error -5 [ 84.635857][ T65] usb 2-1: device descriptor read/8, error -71 [ 84.729729][ T2677] SELinux: Context system_u:object_r:etc_mail_t:s0 is not valid (left unmapped). [ 84.739497][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 84.739515][ T36] audit: type=1400 audit(1751315388.290:42569): avc: denied { relabelto } for pid=2676 comm="syz.0.816" name="file0" dev="tmpfs" ino=1817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:etc_mail_t:s0" [ 84.772597][ T65] usb usb2-port1: unable to enumerate USB device [ 84.779802][ T36] audit: type=1400 audit(1751315388.290:42570): avc: denied { associate } for pid=2676 comm="syz.0.816" name="file0" dev="tmpfs" ino=1817 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:etc_mail_t:s0" [ 84.821585][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 84.918726][ T1106] usb 3-1: USB disconnect, device number 25 [ 84.986994][ T2685] rust_binder: validate_parent_fixup: new_min_offset=14, sg_entry.length=0 [ 84.987020][ T2685] rust_binder: Error while translating object. [ 84.995825][ T2685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 85.002087][ T2685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:487 [ 85.323322][ T2693] overlayfs: failed to clone upperpath [ 85.338257][ T1106] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 85.350442][ T2695] binder: Unknown parameter 'context' [ 85.440648][ T36] audit: type=1400 audit(1751315388.990:42571): avc: denied { append } for pid=2700 comm="syz.1.824" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 85.464072][ T36] audit: type=1400 audit(1751315389.000:42572): avc: denied { create } for pid=2700 comm="syz.1.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 85.495406][ T1106] usb 3-1: not running at top speed; connect to a high speed hub [ 85.503807][ T1106] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1608, setting to 64 [ 85.514984][ T1106] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 1511, setting to 64 [ 85.526075][ T1106] usb 3-1: config 1 interface 0 has no altsetting 0 [ 85.534157][ T1106] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.543246][ T1106] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.551299][ T1106] usb 3-1: Product: 较ຽ䶖톖랎墨㜢秕ʛ箨忀暞㮝䘇뵶㬰ꃦ㫣ꢃ㾆⫭䖈ᔠ訧鶡혃狱᳃ኀ氅ᚻቇ愮ㄞ瘕䰼ᤏࡐ䆶ꯘ片⦚椬돱視揬ᴈ❈㥽ⓜ㜙䰗剢偻⦸⠗ʭ䡬䋮斈䄡仇売泜૝ᦘ䄧晶烐῾溘Ố劃뉙깄䊙뺴洹ꀋヵ鞙䵡쒢Ყ襗 [ 85.579900][ T1106] usb 3-1: Manufacturer: 槭ኛ錵車⹜䈏飹먦见㱧捪⢼훲沅ᲇ襸틆စ畀﨎棾獱쮧橉뽶⪹镗ẩﯬ鿑胐궭츲糖⍌铠䫌焝耦蝶೏랽럨㶕ᮤ,솮袩럫錽ᡟ糟኶巴뚕军둊鎘護厰ꋜ궓૗㈙橞ଗ딛ଧ๯䃠⍑예倣₍枮蹷꽮㺾惴摌㯎䓚䒼ڼφᾒ薅썵ഠ㔣ꅣ〕䤋㠊⑑理䯺Ūእ郸뎰톷Ꭳ돂謖 [ 85.613850][ T1106] usb 3-1: SerialNumber: 毅䂁舞Ỉ뷱츫씛⟑ߊ傸缰⛞웜二帎錦嶒㥵俓扰꭬﮷쳫篡Ꙥ䦤挱㸥蘖ࠃ푢ⶴ㬽὿꧕嬝ᯍ币䒂ꐡ኷弒缈Һ灿슛೟荂’뎰ﭠ쿜⃵㍜쓝봥傊朆軌Ṫ许砎扌㎗Ễ凮险グ阗Є⧨筓ﯤ睹囍Ὀ눞ꆮ龳၅ [ 85.644762][ T2688] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 85.652016][ T2688] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 85.724063][ T2668] usb 4-1: reset high-speed USB device number 28 using dummy_hcd [ 85.928446][ T65] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 86.063089][ T1106] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 86.073099][ T1106] usb 3-1: USB disconnect, device number 26 [ 86.085257][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.086789][ T2668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.096797][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.105699][ T2668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.115065][ T65] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.135740][ T65] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.144978][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.153715][ T65] usb 2-1: config 0 descriptor?? [ 86.165550][ T31] usb 4-1: USB disconnect, device number 28 [ 86.172243][ T31] usblp0: removed [ 86.562335][ T65] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd [ 86.571521][ T65] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 86.580941][ T65] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 86.678659][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.678689][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.691667][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.691695][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.691791][ T2742] rust_binder: Error in use_page_slow: ESRCH [ 86.698502][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.710790][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.710810][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.710826][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.710843][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.724302][ T2742] rust_binder: use_range failure ESRCH [ 86.736871][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.755141][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.755164][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.761742][ T2742] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 86.768202][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.776864][ T2742] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 86.782552][ T2742] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:431 [ 86.792296][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.801046][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.807791][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.814194][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.829396][ T31] usb 2-1: USB disconnect, device number 23 [ 86.836650][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.836673][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.844693][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.850081][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.857112][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.863068][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.869775][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.876068][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.884544][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.888998][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.895602][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.901910][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.908438][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.914811][ T65] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 86.921453][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.929005][ T2739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.996048][ T2746] tipc: Enabled bearer , priority 0 [ 87.003710][ T2746] tipc: Disabling bearer [ 87.084049][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 87.091330][ T65] usb 3-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.104589][ T65] usb 3-1: config 1 interface 0 has no altsetting 0 [ 87.113348][ T65] usb 3-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.40 [ 87.122580][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.130621][ T65] usb 3-1: Product: syz [ 87.134889][ T65] usb 3-1: Manufacturer: syz [ 87.139507][ T65] usb 3-1: SerialNumber: syz [ 87.150630][ T36] audit: type=1400 audit(1751315390.700:42573): avc: denied { create } for pid=2751 comm="syz.3.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 87.554077][ T1106] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 87.584109][ T10] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 87.705172][ T1106] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 87.713187][ T1106] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.723403][ T1106] usb 4-1: config 0 has no interface number 0 [ 87.729542][ T1106] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.742467][ T1106] usb 4-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 87.751553][ T1106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.755227][ T10] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 87.770883][ T10] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 87.774274][ T1106] usb 4-1: config 0 descriptor?? [ 87.781656][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 87.793205][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 87.805272][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.814120][ T10] usb 2-1: config 0 descriptor?? [ 87.819381][ T2759] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 87.958663][ T2740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.968265][ T2740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.978382][ T2740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.988258][ T2740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.014692][ T2757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.023975][ T2757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.032646][ T36] audit: type=1400 audit(1751315391.580:42574): avc: denied { mounton } for pid=2756 comm="syz.3.844" path="/proc/446/task" dev="proc" ino=18790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 88.113766][ T65] usbhid 3-1:1.0: can't add hid device: -71 [ 88.119810][ T65] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 88.133354][ T2798] netlink: 28 bytes leftover after parsing attributes in process `syz.0.858'. [ 88.136649][ T65] usb 3-1: USB disconnect, device number 27 [ 88.163621][ T363] usb 4-1: USB disconnect, device number 29 [ 88.256247][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 88.263757][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 88.269865][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 88.278850][ T10] usb 2-1: USB disconnect, device number 24 [ 88.600487][ T2821] rust_binder: Error in use_page_slow: ESRCH [ 88.600509][ T2821] rust_binder: use_range failure ESRCH [ 88.606726][ T2821] rust_binder: Failed to allocate buffer. len:104, is_oneway:false [ 88.612214][ T2821] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 88.620328][ T2821] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:509 [ 88.633706][ T36] audit: type=1400 audit(1751315392.180:42575): avc: denied { ioctl } for pid=2816 comm="syz.2.865" path="net:[4026532551]" dev="nsfs" ino=4026532551 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 88.647152][ T2823] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 88.667792][ T2823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 88.667839][ T2819] rust_binder: Error in use_page_slow: ESRCH [ 88.676533][ T2823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:454 [ 88.685925][ T2819] rust_binder: use_range failure ESRCH [ 88.701053][ T2819] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 88.706613][ T2819] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 88.720487][ T2825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.868'. [ 88.725771][ T2819] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:509 [ 88.876967][ T2841] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 88.894079][ T36] audit: type=1400 audit(1751315392.440:42576): avc: denied { append } for pid=2838 comm="syz.3.875" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 88.943645][ T2847] netlink: 'syz.2.878': attribute type 58 has an invalid length. [ 89.054050][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 89.130485][ T2855] rust_binder: Write failure EFAULT in pid:467 [ 89.131026][ T2855] rust_binder: Write failure EFAULT in pid:467 [ 89.166667][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.179465][ T2861] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 89.186169][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.194228][ T363] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 89.204086][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 89.211161][ T10] usb 2-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.224256][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 89.232812][ T10] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.40 [ 89.241979][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.250057][ T10] usb 2-1: Product: syz [ 89.254299][ T10] usb 2-1: Manufacturer: syz [ 89.258915][ T10] usb 2-1: SerialNumber: syz [ 89.285971][ T2868] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 89.305427][ T2872] netlink: 92 bytes leftover after parsing attributes in process `syz.0.886'. [ 89.345594][ T363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.356747][ T363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.366551][ T363] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 89.375753][ T363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.384791][ T363] usb 3-1: config 0 descriptor?? [ 89.792953][ T363] belkin 0003:1020:0006.000E: unknown main item tag 0x2 [ 89.800032][ T363] belkin 0003:1020:0006.000E: unknown global tag 0xc [ 89.806762][ T363] belkin 0003:1020:0006.000E: item 0 0 1 12 parsing failed [ 89.814165][ T363] belkin 0003:1020:0006.000E: parse failed [ 89.820092][ T363] belkin 0003:1020:0006.000E: probe with driver belkin failed with error -22 [ 89.893348][ T2887] tipc: Can't bind to reserved service type 0 [ 90.077232][ T2833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.085836][ T2833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.094395][ T2833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.102935][ T2833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.233091][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 90.239178][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 90.249054][ T10] usb 2-1: USB disconnect, device number 25 [ 90.888652][ T2931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2931 comm=syz.0.905 [ 91.194084][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 91.194140][ T2055] Bluetooth: hci0: command 0x1003 tx timeout [ 91.804087][ T1106] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 91.955348][ T1106] usb 2-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 91.970225][ T1106] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.972046][ T363] usb 3-1: USB disconnect, device number 28 [ 91.989290][ T1106] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 91.999011][ T1106] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.017353][ T1106] usb 2-1: config 0 descriptor?? [ 92.032079][ T1106] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 92.052943][ T36] audit: type=1400 audit(1751315395.600:42577): avc: denied { setopt } for pid=2956 comm="syz.0.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.163878][ T36] audit: type=1400 audit(1751315395.710:42578): avc: denied { ioctl } for pid=2960 comm="syz.3.918" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 92.233706][ T2951] syz.1.912: attempt to access beyond end of device [ 92.233706][ T2951] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 92.246796][ T2951] EXT4-fs (loop1): unable to read superblock [ 92.991695][ T36] audit: type=1400 audit(1751315396.540:42579): avc: denied { create } for pid=3020 comm="syz.2.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 93.011219][ T36] audit: type=1400 audit(1751315396.540:42580): avc: denied { accept } for pid=3020 comm="syz.2.939" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.029771][ T3023] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 93.093940][ T3026] rust_binder: Write failure EFAULT in pid:487 [ 93.185350][ T3030] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 93.227256][ T3033] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 93.227285][ T3033] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:494 [ 93.236837][ T3033] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 93.246084][ T3033] rust_binder: Read failure Err(EFAULT) in pid:494 [ 93.266069][ T36] audit: type=1400 audit(1751315396.820:42581): avc: denied { ioctl } for pid=3034 comm="syz.3.944" path="socket:[18286]" dev="sockfs" ino=18286 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 93.297865][ T36] audit: type=1400 audit(1751315396.820:42582): avc: denied { create } for pid=3034 comm="syz.3.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 93.479972][ T3050] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 93.505029][ T3050] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 93.658160][ T36] audit: type=1400 audit(1751315397.210:42583): avc: denied { mounton } for pid=3060 comm="syz.2.952" path="/proc/560/cgroup" dev="proc" ino=19421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 93.682144][ T36] audit: type=1400 audit(1751315397.210:42584): avc: denied { getattr } for pid=3060 comm="syz.2.952" path="net:[4026532551]" dev="nsfs" ino=4026532551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 93.894133][ T31] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 94.045213][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 94.055265][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 94.068956][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.078067][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 94.086103][ T31] usb 3-1: SerialNumber: syz [ 94.095402][ T31] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 94.302886][ T31] usb 3-1: USB disconnect, device number 29 [ 94.571875][ T36] audit: type=1326 audit(1751315398.120:42585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2950 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccd18e929 code=0x7fc00000 [ 94.645002][ T363] usb 2-1: USB disconnect, device number 26 [ 95.024879][ T36] audit: type=1400 audit(1751315398.580:42586): avc: denied { shutdown } for pid=3128 comm="syz.3.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.114083][ T363] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 95.220233][ T3142] usb usb6: usbfs: process 3142 (syz.2.978) did not claim interface 0 before use [ 95.285093][ T363] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 95.296189][ T363] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 95.306902][ T363] usb 2-1: config 0 interface 0 has no altsetting 0 [ 95.313564][ T363] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 95.322716][ T363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.331684][ T363] usb 2-1: config 0 descriptor?? [ 95.341950][ T3110] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 95.352488][ T363] usbhid 2-1:0.0: can't add hid device: -22 [ 95.361264][ T363] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 95.474078][ T1106] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 95.626401][ T1106] usb 3-1: unable to get BOS descriptor or descriptor too short [ 95.634864][ T1106] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x1 is Bulk; changing to Interrupt [ 95.644748][ T1106] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x82 is Bulk; changing to Interrupt [ 95.654715][ T1106] usb 3-1: config 1 interface 0 has no altsetting 0 [ 95.666043][ T1106] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 95.675117][ T1106] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.683188][ T1106] usb 3-1: SerialNumber: Њ [ 95.688815][ T3142] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 95.696067][ T3142] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 95.957696][ T1106] usb 3-1: USB disconnect, device number 30 [ 96.555671][ T3162] binder: Bad value for 'max' [ 96.671596][ T3171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.988'. [ 96.793060][ T3189] can0: slcan on ptm0. [ 96.795441][ T3192] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 96.806959][ T3192] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 96.815842][ T3192] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 96.823831][ T3192] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 97.034048][ T363] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 97.185038][ T363] usb 4-1: config 0 has no interfaces? [ 97.191848][ T363] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 97.200962][ T363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.204066][ T31] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 97.209071][ T363] usb 4-1: Product: syz [ 97.220786][ T363] usb 4-1: Manufacturer: syz [ 97.225418][ T363] usb 4-1: SerialNumber: syz [ 97.231191][ T363] usb 4-1: config 0 descriptor?? [ 97.365198][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 97.376190][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 97.387044][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 97.399955][ T31] usb 3-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 97.409014][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.417733][ T31] usb 3-1: config 0 descriptor?? [ 97.422963][ T3224] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 97.430195][ T3224] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 97.440201][ T363] usb 4-1: USB disconnect, device number 30 [ 97.505233][ T3189] can0 (unregistered): slcan off ptm0. [ 97.809259][ T307] usb 2-1: USB disconnect, device number 27 [ 98.025913][ T3283] random: crng reseeded on system resumption [ 98.042223][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 98.051177][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 98.061725][ T3284] random: crng reseeded on system resumption [ 98.067924][ T31] usb 3-1: USB disconnect, device number 31 [ 98.214525][ T3290] overlayfs: failed to resolve './file0': -2 [ 98.264084][ T307] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 98.344189][ T363] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 98.394047][ T307] usb 2-1: device descriptor read/64, error -71 [ 98.494148][ T363] usb 4-1: Using ep0 maxpacket: 16 [ 98.501303][ T363] usb 4-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.514508][ T363] usb 4-1: config 1 interface 0 has no altsetting 0 [ 98.522494][ T363] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.40 [ 98.531580][ T363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.539609][ T363] usb 4-1: Product: syz [ 98.543768][ T363] usb 4-1: Manufacturer: syz [ 98.548381][ T363] usb 4-1: SerialNumber: syz [ 98.587877][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 98.587897][ T36] audit: type=1400 audit(1751315402.140:42591): avc: denied { create } for pid=3293 comm="syz.2.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 98.654088][ T307] usb 2-1: device descriptor read/64, error -71 [ 98.709197][ T3298] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 98.709223][ T3298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:618 [ 98.825829][ T3324] tmpfs: Bad value for 'uid' [ 98.841520][ T3324] tmpfs: Bad value for 'uid' [ 98.847320][ T36] audit: type=1400 audit(98.829:42592): avc: denied { checkpoint_restore } for pid=3323 comm="syz.0.1027" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 98.847383][ T3328] /dev/rnullb0: Can't open blockdev [ 98.868790][ T3324] tmpfs: Bad value for 'uid' [ 98.878930][ T3324] tmpfs: Bad value for 'uid' [ 98.894059][ T307] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 98.955521][ T3345] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 99.034056][ T307] usb 2-1: device descriptor read/64, error -71 [ 99.284078][ T307] usb 2-1: device descriptor read/64, error -71 [ 99.369265][ T3288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.377892][ T3288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.386410][ T3288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.394187][ T307] usb usb2-port1: attempt power cycle [ 99.395278][ T3288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.424053][ T31] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 99.523447][ T363] usbhid 4-1:1.0: can't add hid device: -71 [ 99.529539][ T363] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 99.538311][ T363] usb 4-1: USB disconnect, device number 31 [ 99.594447][ T31] usb 3-1: too many configurations: 78, using maximum allowed: 8 [ 99.603045][ T31] usb 3-1: config 0 has no interfaces? [ 99.609455][ T31] usb 3-1: config 0 has no interfaces? [ 99.618157][ T31] usb 3-1: config 0 has no interfaces? [ 99.624512][ T31] usb 3-1: config 0 has no interfaces? [ 99.630805][ T31] usb 3-1: config 0 has no interfaces? [ 99.637211][ T31] usb 3-1: config 0 has no interfaces? [ 99.643486][ T31] usb 3-1: config 0 has no interfaces? [ 99.649891][ T31] usb 3-1: config 0 has no interfaces? [ 99.657040][ T31] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 99.666397][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.676162][ T31] usb 3-1: Product: syz [ 99.680420][ T31] usb 3-1: Manufacturer: syz [ 99.685245][ T31] usb 3-1: SerialNumber: syz [ 99.691047][ T31] usb 3-1: config 0 descriptor?? [ 99.734069][ T307] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 99.765146][ T307] usb 2-1: device descriptor read/8, error -71 [ 99.811162][ T36] audit: type=1400 audit(99.789:42593): avc: denied { ioctl } for pid=3380 comm="syz.0.1047" path="socket:[22345]" dev="sockfs" ino=22345 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.895130][ T307] usb 2-1: device descriptor read/8, error -71 [ 99.904463][ T363] usb 3-1: USB disconnect, device number 32 [ 99.934424][ T36] audit: type=1404 audit(99.919:42594): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 99.949854][ T36] audit: type=1400 audit(99.929:42595): avc: denied { write } for pid=3387 comm="syz.3.1050" path="socket:[22360]" dev="sockfs" ino=22360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 99.974232][ T36] audit: type=1400 audit(99.929:42596): avc: denied { create } for pid=3389 comm="syz.0.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 99.993955][ T36] audit: type=1400 audit(99.929:42597): avc: denied { bind } for pid=3387 comm="syz.3.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=0 [ 100.017131][ T36] audit: type=1400 audit(99.929:42598): avc: denied { read } for pid=3387 comm="syz.3.1050" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 100.039561][ T36] audit: type=1400 audit(99.929:42599): avc: denied { write } for pid=3387 comm="syz.3.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 100.063485][ T36] audit: type=1400 audit(99.929:42600): avc: denied { read write } for pid=3387 comm="syz.3.1050" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 101.327995][ T3452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3452 comm=syz.3.1077 [ 101.354688][ T3455] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1078'. [ 101.970537][ T3519] can0: slcan on ptm0. [ 102.024886][ T3518] can0 (unregistered): slcan off ptm0. [ 102.644213][ T3552] can0: slcan on ptm0. [ 102.685528][ T3551] can0 (unregistered): slcan off ptm0. [ 102.924505][ T3554] syz.0.1117(3554): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 103.233626][ T3583] can0: slcan on ptm0. [ 103.265730][ T3582] can0 (unregistered): slcan off ptm0. [ 103.288163][ T3587] syzkaller0: entered promiscuous mode [ 103.293743][ T3587] syzkaller0: entered allmulticast mode [ 103.594744][ T36] kauditd_printk_skb: 14381 callbacks suppressed [ 103.594763][ T36] audit: type=1400 audit(103.579:56784): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 103.602762][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 103.621657][ T36] audit: type=1400 audit(103.579:56785): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 103.628702][ T148] audit: audit_lost=67 audit_rate_limit=0 audit_backlog_limit=64 [ 103.648657][ T36] audit: type=1400 audit(103.579:56786): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 103.656740][ T148] audit: backlog limit exceeded [ 103.682282][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 103.683223][ T36] audit: type=1400 audit(103.579:56787): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 103.688891][ T148] audit: audit_lost=68 audit_rate_limit=0 audit_backlog_limit=64 [ 103.709671][ T36] audit: type=1400 audit(103.579:56788): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 103.826097][ T3600] netlink: 'syz.3.1133': attribute type 4 has an invalid length. [ 103.833919][ T3600] netlink: 'syz.3.1133': attribute type 7 has an invalid length. [ 103.841827][ T3600] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1133'. [ 103.864186][ T3600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3600 comm=syz.3.1133 [ 103.955255][ T3610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1138'. [ 104.101823][ T3637] syzkaller0: entered allmulticast mode [ 104.690767][ T3660] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1154'. [ 104.704015][ T3661] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1154'. [ 105.096131][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 105.103998][ T304] Bluetooth: hci1: Frame reassembly failed (-84) [ 107.114050][ T2055] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 107.114081][ T3684] Bluetooth: hci0: command 0x1003 tx timeout [ 107.120462][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 107.348122][ T3759] FAULT_INJECTION: forcing a failure. [ 107.348122][ T3759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.361808][ T3759] CPU: 1 UID: 0 PID: 3759 Comm: syz.3.1189 Not tainted 6.12.30-syzkaller-g668635cd345a #0 d19ba9d9380c3ec16bff3ad427c1e033f6258032 [ 107.361844][ T3759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.361859][ T3759] Call Trace: [ 107.361866][ T3759] [ 107.361875][ T3759] __dump_stack+0x21/0x30 [ 107.361907][ T3759] dump_stack_lvl+0x10c/0x190 [ 107.361935][ T3759] ? __cfi_dump_stack_lvl+0x10/0x10 [ 107.361963][ T3759] ? __cfi_avc_has_perm+0x10/0x10 [ 107.361991][ T3759] dump_stack+0x19/0x20 [ 107.362018][ T3759] should_fail_ex+0x3d9/0x530 [ 107.362046][ T3759] should_fail+0xf/0x20 [ 107.362072][ T3759] should_fail_usercopy+0x1e/0x30 [ 107.362101][ T3759] _copy_from_iter+0x1a3/0x14b0 [ 107.362136][ T3759] ? __cfi__copy_from_iter+0x10/0x10 [ 107.362172][ T3759] tun_get_user+0x40b/0x3450 [ 107.362200][ T3759] ? unwind_get_return_address+0x51/0x90 [ 107.362226][ T3759] ? _parse_integer_limit+0x195/0x1e0 [ 107.362252][ T3759] ? ptr_ring_consume+0x430/0x430 [ 107.362280][ T3759] ? _parse_integer+0x2e/0x40 [ 107.362315][ T3759] ? kstrtoull+0x13b/0x1e0 [ 107.362340][ T3759] ? __kasan_check_write+0x18/0x20 [ 107.362368][ T3759] ? ref_tracker_alloc+0x308/0x540 [ 107.362398][ T3759] ? __x64_sys_openat+0x13a/0x170 [ 107.362423][ T3759] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 107.362452][ T3759] ? selinux_file_permission+0x309/0xb30 [ 107.362491][ T3759] ? __kasan_check_write+0x18/0x20 [ 107.362520][ T3759] tun_chr_write_iter+0x1fc/0x310 [ 107.362548][ T3759] vfs_write+0x697/0xe80 [ 107.362576][ T3759] ? __cfi_tun_chr_write_iter+0x10/0x10 [ 107.362603][ T3759] ? __cfi_vfs_write+0x10/0x10 [ 107.362635][ T3759] ksys_write+0x141/0x250 [ 107.362664][ T3759] ? xfd_validate_state+0x68/0x150 [ 107.362690][ T3759] ? __cfi_ksys_write+0x10/0x10 [ 107.362720][ T3759] ? __kasan_check_read+0x15/0x20 [ 107.362752][ T3759] __x64_sys_write+0x7f/0x90 [ 107.362782][ T3759] x64_sys_call+0x271c/0x2ee0 [ 107.362813][ T3759] do_syscall_64+0x58/0xf0 [ 107.362834][ T3759] ? clear_bhb_loop+0x50/0xa0 [ 107.362861][ T3759] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 107.362888][ T3759] RIP: 0033:0x7f1c5618e929 [ 107.362907][ T3759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.362929][ T3759] RSP: 002b:00007f1c5700e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 107.362955][ T3759] RAX: ffffffffffffffda RBX: 00007f1c563b5fa0 RCX: 00007f1c5618e929 [ 107.362974][ T3759] RDX: 000000000000ffdd RSI: 0000200000000840 RDI: 0000000000000003 [ 107.362991][ T3759] RBP: 00007f1c5700e090 R08: 0000000000000000 R09: 0000000000000000 [ 107.363007][ T3759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.363022][ T3759] R13: 0000000000000000 R14: 00007f1c563b5fa0 R15: 00007ffdd8302978 [ 107.363042][ T3759] [ 107.680288][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 108.325566][ T3775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 108.604057][ T36] kauditd_printk_skb: 53009 callbacks suppressed [ 108.604079][ T36] audit: type=1400 audit(108.579:96585): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 108.616294][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 108.638512][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 108.645191][ T289] audit: audit_lost=4473 audit_rate_limit=0 audit_backlog_limit=64 [ 108.653114][ T289] audit: backlog limit exceeded [ 108.658419][ T36] audit: type=1400 audit(108.589:96586): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 108.679173][ T148] audit: audit_lost=4474 audit_rate_limit=0 audit_backlog_limit=64 [ 108.691125][ T148] audit: backlog limit exceeded [ 108.696371][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 108.702971][ T36] audit: type=1400 audit(108.589:96587): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 109.487518][ T3788] FAULT_INJECTION: forcing a failure. [ 109.487518][ T3788] name failslab, interval 1, probability 0, space 0, times 0 [ 109.504193][ T3788] CPU: 1 UID: 0 PID: 3788 Comm: syz.3.1201 Not tainted 6.12.30-syzkaller-g668635cd345a #0 d19ba9d9380c3ec16bff3ad427c1e033f6258032 [ 109.504230][ T3788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.504243][ T3788] Call Trace: [ 109.504250][ T3788] [ 109.504259][ T3788] __dump_stack+0x21/0x30 [ 109.504290][ T3788] dump_stack_lvl+0x10c/0x190 [ 109.504317][ T3788] ? __cfi_dump_stack_lvl+0x10/0x10 [ 109.504344][ T3788] ? inode_init_always_gfp+0x756/0x9e0 [ 109.504378][ T3788] ? new_inode+0x25/0x1e0 [ 109.504398][ T3788] ? proc_pid_make_inode+0x25/0x140 [ 109.504429][ T3788] ? proc_pident_instantiate+0x6d/0x2c0 [ 109.504462][ T3788] ? proc_tid_base_lookup+0x2f/0x40 [ 109.504485][ T3788] ? path_openat+0x12fe/0x34b0 [ 109.504503][ T3788] ? do_filp_open+0x1c6/0x3e0 [ 109.504523][ T3788] ? do_sys_openat2+0x12c/0x1c0 [ 109.504547][ T3788] dump_stack+0x19/0x20 [ 109.504574][ T3788] should_fail_ex+0x3d9/0x530 [ 109.504601][ T3788] should_failslab+0xac/0x100 [ 109.504635][ T3788] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 109.504665][ T3788] ? __alloc_skb+0x10c/0x370 [ 109.504700][ T3788] __alloc_skb+0x10c/0x370 [ 109.504734][ T3788] alloc_skb_with_frags+0xce/0x8b0 [ 109.504769][ T3788] ? __cfi_avc_has_perm+0x10/0x10 [ 109.504796][ T3788] sock_alloc_send_pskb+0x858/0x990 [ 109.504826][ T3788] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 109.504855][ T3788] ? iov_iter_advance+0x9b/0x1e0 [ 109.504889][ T3788] tun_get_user+0x970/0x3450 [ 109.504919][ T3788] ? _parse_integer_limit+0x195/0x1e0 [ 109.504945][ T3788] ? ptr_ring_consume+0x430/0x430 [ 109.504971][ T3788] ? _parse_integer+0x2e/0x40 [ 109.504996][ T3788] ? kstrtoull+0x13b/0x1e0 [ 109.505022][ T3788] ? __kasan_check_write+0x18/0x20 [ 109.505050][ T3788] ? ref_tracker_alloc+0x308/0x540 [ 109.505080][ T3788] ? __x64_sys_openat+0x13a/0x170 [ 109.505111][ T3788] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 109.505141][ T3788] ? selinux_file_permission+0x309/0xb30 [ 109.505179][ T3788] ? __kasan_check_write+0x18/0x20 [ 109.505208][ T3788] tun_chr_write_iter+0x1fc/0x310 [ 109.505247][ T3788] vfs_write+0x697/0xe80 [ 109.505274][ T3788] ? __cfi_tun_chr_write_iter+0x10/0x10 [ 109.505300][ T3788] ? __cfi_vfs_write+0x10/0x10 [ 109.505331][ T3788] ksys_write+0x141/0x250 [ 109.505359][ T3788] ? __cfi_ksys_write+0x10/0x10 [ 109.505386][ T3788] ? __kasan_check_read+0x15/0x20 [ 109.505412][ T3788] __x64_sys_write+0x7f/0x90 [ 109.505440][ T3788] x64_sys_call+0x271c/0x2ee0 [ 109.505470][ T3788] do_syscall_64+0x58/0xf0 [ 109.505491][ T3788] ? clear_bhb_loop+0x50/0xa0 [ 109.505517][ T3788] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.505542][ T3788] RIP: 0033:0x7f1c5618e929 [ 109.505560][ T3788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.505581][ T3788] RSP: 002b:00007f1c5700e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.505606][ T3788] RAX: ffffffffffffffda RBX: 00007f1c563b5fa0 RCX: 00007f1c5618e929 [ 109.505624][ T3788] RDX: 000000000000ffdd RSI: 0000200000000840 RDI: 0000000000000003 [ 109.505640][ T3788] RBP: 00007f1c5700e090 R08: 0000000000000000 R09: 0000000000000000 [ 109.505656][ T3788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.505671][ T3788] R13: 0000000000000000 R14: 00007f1c563b5fa0 R15: 00007ffdd8302978 [ 109.505691][ T3788] [ 109.892272][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 111.224124][ T3889] ptm ptm14: ldisc open failed (-12), clearing slot 14 [ 113.008776][ T3992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 113.107212][ T3958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1256'. [ 113.614110][ T36] kauditd_printk_skb: 29929 callbacks suppressed [ 113.614131][ T36] audit: type=1400 audit(113.599:123281): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 113.622708][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 113.647928][ T148] audit: audit_lost=5554 audit_rate_limit=0 audit_backlog_limit=64 [ 113.656062][ T148] audit: backlog limit exceeded [ 113.661319][ T36] audit: type=1400 audit(113.599:123282): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 113.661444][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 113.682351][ T148] audit: audit_lost=5555 audit_rate_limit=0 audit_backlog_limit=64 [ 113.688573][ T36] audit: type=1400 audit(113.599:123283): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 113.696857][ T148] audit: backlog limit exceeded [ 113.724465][ T36] audit: type=1400 audit(113.599:123284): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 116.959986][ T4168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 116.983237][ T4169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1337'. [ 117.771279][ T4209] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1352'. [ 117.994924][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 118.003142][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 118.010756][ T304] Bluetooth: hci1: Frame reassembly failed (-84) [ 118.014162][ T4230] syzkaller0: entered promiscuous mode [ 118.038168][ T4230] syzkaller0: entered allmulticast mode [ 118.624066][ T36] kauditd_printk_skb: 36059 callbacks suppressed [ 118.624085][ T36] audit: type=1400 audit(118.609:158369): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 118.632298][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 118.651444][ T36] audit: type=1400 audit(118.609:158370): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 118.657836][ T148] audit: audit_lost=5881 audit_rate_limit=0 audit_backlog_limit=64 [ 118.678285][ T36] audit: type=1400 audit(118.609:158371): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 118.686262][ T148] audit: backlog limit exceeded [ 118.706713][ T36] audit: type=1400 audit(118.609:158372): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 118.712173][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 118.737698][ T36] audit: type=1400 audit(118.609:158373): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 118.738466][ T148] audit: audit_lost=5882 audit_rate_limit=0 audit_backlog_limit=64 [ 119.267371][ T4242] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4242 comm=syz.3.1363 [ 120.074068][ T2055] Bluetooth: hci1: command 0x1003 tx timeout [ 120.080154][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 120.086334][ T2055] Bluetooth: hci0: command 0x1003 tx timeout [ 120.086362][ T3684] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 122.118172][ T4430] syzkaller0: left promiscuous mode [ 122.123841][ T4430] syzkaller0: left allmulticast mode [ 122.603464][ T4450] futex_wake_op: syz.1.1439 tries to shift op by -1; fix this program [ 123.642652][ T148] audit_log_start: 44666 callbacks suppressed [ 123.642672][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 123.644019][ T36] audit: type=1400 audit(123.609:202886): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 123.650401][ T4485] audit: audit_backlog=65 > audit_backlog_limit=64 [ 123.669852][ T36] audit: type=1400 audit(123.619:202887): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 123.678463][ T148] audit: audit_lost=5934 audit_rate_limit=0 audit_backlog_limit=64 [ 123.682461][ T36] audit: type=1400 audit(123.619:202888): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 123.707252][ T4485] audit: audit_lost=5935 audit_rate_limit=0 audit_backlog_limit=64 [ 123.723701][ T4488] audit: audit_backlog=65 > audit_backlog_limit=64 [ 123.731852][ T148] audit: backlog limit exceeded [ 123.751019][ T4485] audit: backlog limit exceeded [ 124.394518][ T4522] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1464'. [ 126.195140][ T4620] can0: slcan on ptm0. [ 126.254994][ T4619] can0 (unregistered): slcan off ptm0. [ 127.525373][ T4678] netlink: 316 bytes leftover after parsing attributes in process `syz.3.1514'. [ 127.552812][ T4678] netlink: 316 bytes leftover after parsing attributes in process `syz.3.1514'. [ 127.710272][ T4688] can0: slcan on ptm0. [ 127.775726][ T4687] can0 (unregistered): slcan off ptm0. [ 128.254710][ T4690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1523'. [ 128.644018][ T36] kauditd_printk_skb: 42022 callbacks suppressed [ 128.644080][ T36] audit: type=1400 audit(128.619:244909): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 128.652306][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 128.671366][ T36] audit: type=1400 audit(128.629:244910): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 128.677621][ T148] audit: audit_lost=5937 audit_rate_limit=0 audit_backlog_limit=64 [ 128.698153][ T36] audit: type=1400 audit(128.629:244911): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 128.706386][ T148] audit: backlog limit exceeded [ 128.726738][ T36] audit: type=1400 audit(128.629:244912): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 128.732296][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 128.752181][ T36] audit: type=1400 audit(128.629:244913): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 128.758715][ T148] audit: audit_lost=5938 audit_rate_limit=0 audit_backlog_limit=64 [ 129.586257][ T4746] can0: slcan on ptm0. [ 129.647989][ T4745] can0 (unregistered): slcan off ptm0. [ 129.658502][ T4748] ip_vti0: mtu less than device minimum [ 129.720029][ T4754] Bluetooth: hci0: Frame reassembly failed (-84) [ 129.728440][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 131.079007][ T4803] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1564'. [ 131.754008][ T3684] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 131.754027][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 133.654076][ T36] kauditd_printk_skb: 47268 callbacks suppressed [ 133.654098][ T36] audit: type=1400 audit(133.639:291974): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 133.662389][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 133.681118][ T36] audit: type=1400 audit(133.639:291975): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 133.688178][ T148] audit: audit_lost=6008 audit_rate_limit=0 audit_backlog_limit=64 [ 133.708153][ T36] audit: type=1400 audit(133.639:291976): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 133.708186][ T36] audit: type=1400 audit(133.639:291977): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 133.716507][ T148] audit: backlog limit exceeded [ 133.736607][ T36] audit: type=1400 audit(133.639:291978): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 133.736640][ T36] audit: type=1400 audit(133.639:291979): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 133.758600][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 134.830169][ T4941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4941 comm=syz.0.1611 [ 135.202074][ T4952] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4952 comm=syz.2.1614 [ 136.161086][ T5002] syz.3.1633: attempt to access beyond end of device [ 136.161086][ T5002] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 136.834113][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 138.664005][ T36] kauditd_printk_skb: 35233 callbacks suppressed [ 138.664025][ T36] audit: type=1400 audit(138.639:327004): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 138.704773][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 138.712394][ T148] audit: audit_lost=6079 audit_rate_limit=0 audit_backlog_limit=64 [ 138.719943][ T5157] audit: audit_backlog=65 > audit_backlog_limit=64 [ 138.726711][ T5156] audit: audit_backlog=65 > audit_backlog_limit=64 [ 138.733327][ T5156] audit: audit_lost=6080 audit_rate_limit=0 audit_backlog_limit=64 [ 138.743997][ T148] audit: backlog limit exceeded [ 138.748954][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 138.755581][ T36] audit: type=1400 audit(138.639:327005): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 138.776151][ T148] audit: audit_lost=6081 audit_rate_limit=0 audit_backlog_limit=64 [ 138.874013][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 138.874432][ T3684] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 139.320838][ T5180] netlink: 679 bytes leftover after parsing attributes in process `syz.3.1689'. [ 143.673995][ T36] kauditd_printk_skb: 44280 callbacks suppressed [ 143.674014][ T36] audit: type=1400 audit(143.649:369833): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 143.682290][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 143.701177][ T36] audit: type=1400 audit(143.659:369834): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 143.707596][ T148] audit: audit_lost=6566 audit_rate_limit=0 audit_backlog_limit=64 [ 143.728151][ T36] audit: type=1400 audit(143.659:369835): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 143.735965][ T148] audit: backlog limit exceeded [ 143.756548][ T36] audit: type=1400 audit(143.659:369836): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 143.761911][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 143.781890][ T36] audit: type=1400 audit(143.659:369837): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 143.788321][ T148] audit: audit_lost=6567 audit_rate_limit=0 audit_backlog_limit=64 [ 148.684079][ T36] kauditd_printk_skb: 49190 callbacks suppressed [ 148.684098][ T36] audit: type=1400 audit(148.669:419027): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 148.692320][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 148.711160][ T36] audit: type=1400 audit(148.669:419028): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 148.717591][ T148] audit: audit_lost=6568 audit_rate_limit=0 audit_backlog_limit=64 [ 148.738254][ T36] audit: type=1400 audit(148.669:419029): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 148.745987][ T148] audit: backlog limit exceeded [ 148.766567][ T36] audit: type=1400 audit(148.669:419030): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 148.773638][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 148.791946][ T36] audit: type=1400 audit(148.669:419031): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 148.798354][ T148] audit: audit_lost=6569 audit_rate_limit=0 audit_backlog_limit=64 [ 153.694037][ T36] kauditd_printk_skb: 50221 callbacks suppressed [ 153.694056][ T36] audit: type=1400 audit(153.669:469252): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 153.702400][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 153.721191][ T36] audit: type=1400 audit(153.679:469253): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 153.727583][ T148] audit: audit_lost=6570 audit_rate_limit=0 audit_backlog_limit=64 [ 153.748412][ T36] audit: type=1400 audit(153.679:469254): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 153.756003][ T148] audit: backlog limit exceeded [ 153.756409][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 153.778186][ T36] audit: type=1400 audit(153.679:469255): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 153.781678][ T148] audit: audit_lost=6571 audit_rate_limit=0 audit_backlog_limit=64 [ 153.788114][ T36] audit: type=1400 audit(153.679:469256): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 158.703978][ T36] kauditd_printk_skb: 51294 callbacks suppressed [ 158.703997][ T36] audit: type=1400 audit(158.679:519305): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 158.711983][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 158.731136][ T36] audit: type=1400 audit(158.689:519306): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 158.737410][ T148] audit: audit_lost=6987 audit_rate_limit=0 audit_backlog_limit=64 [ 158.758123][ T36] audit: type=1400 audit(158.689:519307): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 158.765804][ T148] audit: backlog limit exceeded [ 158.786504][ T36] audit: type=1400 audit(158.689:519308): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 158.791519][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 158.811926][ T36] audit: type=1400 audit(158.689:519309): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 158.818179][ T148] audit: audit_lost=6988 audit_rate_limit=0 audit_backlog_limit=64 [ 160.145593][ T363] ================================================================== [ 160.153690][ T363] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0 [ 160.160458][ T363] Write of size 8 at addr 0000000000000098 by task kworker/0:3/363 [ 160.168447][ T363] [ 160.170778][ T363] CPU: 0 UID: 0 PID: 363 Comm: kworker/0:3 Not tainted 6.12.30-syzkaller-g668635cd345a #0 d19ba9d9380c3ec16bff3ad427c1e033f6258032 [ 160.170805][ T363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.170818][ T363] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 160.170870][ T363] Call Trace: [ 160.170877][ T363] [ 160.170884][ T363] __dump_stack+0x21/0x30 [ 160.170905][ T363] dump_stack_lvl+0x10c/0x190 [ 160.170924][ T363] ? __cfi_dump_stack_lvl+0x10/0x10 [ 160.170943][ T363] ? wg_queue_enqueue_per_peer_tx+0x1eb/0x3d0 [ 160.170970][ T363] ? kthread+0x2ca/0x370 [ 160.170994][ T363] ? ret_from_fork_asm+0x1a/0x30 [ 160.171016][ T363] print_report+0x3d/0x70 [ 160.171031][ T363] kasan_report+0x163/0x1a0 [ 160.171056][ T363] ? down_write+0x83/0x2a0 [ 160.171077][ T363] ? down_write+0x83/0x2a0 [ 160.171097][ T363] kasan_check_range+0x299/0x2a0 [ 160.171122][ T363] __kasan_check_write+0x18/0x20 [ 160.171141][ T363] down_write+0x83/0x2a0 [ 160.171161][ T363] ? __cfi_down_write+0x10/0x10 [ 160.171181][ T363] ? _raw_spin_lock+0x8c/0x120 [ 160.171205][ T363] ? __cfi__raw_spin_lock+0x10/0x10 [ 160.171229][ T363] ? mutex_unlock+0x8b/0x240 [ 160.171247][ T363] ? __cfi_mutex_unlock+0x10/0x10 [ 160.171266][ T363] rust_binderfs_remove_file+0x6c/0x110 [ 160.171288][ T363] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 160.171319][ T363] ? unwind_next_frame+0x3c2/0x750 [ 160.171336][ T363] ? __kernel_text_address+0x11/0x40 [ 160.171353][ T363] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 160.171374][ T363] ? arch_stack_walk+0x139/0x170 [ 160.171397][ T363] ? ret_from_fork_asm+0x1a/0x30 [ 160.171419][ T363] ? stack_trace_save+0x9d/0xe0 [ 160.171438][ T363] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 160.171468][ T363] ? stack_depot_save_flags+0x38/0x800 [ 160.171489][ T363] ? update_load_avg+0x506/0x19a0 [ 160.171506][ T363] ? detach_entity_load_avg+0x7b0/0x7b0 [ 160.171534][ T363] ? kasan_save_stack+0x4d/0x60 [ 160.171556][ T363] ? kasan_save_stack+0x3e/0x60 [ 160.171577][ T363] ? __kasan_record_aux_stack+0xb2/0xd0 [ 160.171595][ T363] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 160.171613][ T363] ? __call_rcu_common+0xcc/0x6f0 [ 160.171635][ T363] ? call_rcu+0x14/0x20 [ 160.171656][ T363] ? __kasan_check_write+0x18/0x20 [ 160.171675][ T363] ? _raw_spin_trylock+0xaf/0x130 [ 160.171700][ T363] ? __cfi__raw_spin_trylock+0x10/0x10 [ 160.171726][ T363] ? _raw_spin_unlock+0x45/0x60 [ 160.171740][ T363] ? call_rcu_nocb+0x6bd/0xc10 [ 160.171759][ T363] ? swake_up_one_online_ipi+0x30/0x30 [ 160.171776][ T363] ? __cfi_delayed_put_task_struct+0x10/0x10 [ 160.171795][ T363] ? __call_rcu_common+0x40b/0x6f0 [ 160.171819][ T363] ? call_rcu_hurry+0x30/0x30 [ 160.171839][ T363] ? task_dead_fair+0x110/0x190 [ 160.171860][ T363] ? __cfi_task_dead_fair+0x10/0x10 [ 160.171882][ T363] ? call_rcu+0x14/0x20 [ 160.171914][ T363] ? put_task_struct_rcu_user+0x66/0xb0 [ 160.171930][ T363] ? __switch_to_asm+0x3d/0x70 [ 160.171951][ T363] ? __schedule+0x1463/0x1f10 [ 160.171986][ T363] ? kick_pool+0xad/0x550 [ 160.172001][ T363] process_scheduled_works+0x7d2/0x1020 [ 160.172027][ T363] worker_thread+0xc58/0x1250 [ 160.172049][ T363] ? try_to_wake_up+0xdd2/0x1aa0 [ 160.172076][ T363] kthread+0x2ca/0x370 [ 160.172099][ T363] ? __cfi_worker_thread+0x10/0x10 [ 160.172121][ T363] ? __cfi_kthread+0x10/0x10 [ 160.172145][ T363] ret_from_fork+0x64/0xa0 [ 160.172164][ T363] ? __cfi_kthread+0x10/0x10 [ 160.172187][ T363] ret_from_fork_asm+0x1a/0x30 [ 160.172210][ T363] [ 160.172216][ T363] ================================================================== [ 160.547943][ T363] Disabling lock debugging due to kernel taint [ 160.554189][ T363] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 160.562012][ T363] #PF: supervisor write access in kernel mode [ 160.568090][ T363] #PF: error_code(0x0002) - not-present page [ 160.574081][ T363] PGD 0 P4D 0 [ 160.577478][ T363] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 160.583578][ T363] CPU: 0 UID: 0 PID: 363 Comm: kworker/0:3 Tainted: G B 6.12.30-syzkaller-g668635cd345a #0 d19ba9d9380c3ec16bff3ad427c1e033f6258032 [ 160.598540][ T363] Tainted: [B]=BAD_PAGE [ 160.602709][ T363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.612810][ T363] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 160.629647][ T363] RIP: 0010:down_write+0x9a/0x2a0 [ 160.634709][ T363] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 160.654337][ T363] RSP: 0018:ffffc9000c15f500 EFLAGS: 00010256 [ 160.660427][ T363] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 160.668441][ T363] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000c15f520 [ 160.676459][ T363] RBP: ffffc9000c15f598 R08: ffffc9000c15f527 R09: 1ffff9200182bea4 [ 160.684463][ T363] R10: dffffc0000000000 R11: fffff5200182bea5 R12: dffffc0000000000 [ 160.692470][ T363] R13: 1ffff9200182bea0 R14: ffffc9000c15f520 R15: 0000000000000000 [ 160.700472][ T363] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 160.709429][ T363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.716041][ T363] CR2: 0000000000000098 CR3: 00000000072a8000 CR4: 00000000003526b0 [ 160.724041][ T363] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 160.732034][ T363] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 160.740026][ T363] Call Trace: [ 160.743324][ T363] [ 160.746279][ T363] ? __cfi_down_write+0x10/0x10 [ 160.751168][ T363] ? _raw_spin_lock+0x8c/0x120 [ 160.755967][ T363] ? __cfi__raw_spin_lock+0x10/0x10 [ 160.761223][ T363] ? mutex_unlock+0x8b/0x240 [ 160.765858][ T363] ? __cfi_mutex_unlock+0x10/0x10 [ 160.770910][ T363] rust_binderfs_remove_file+0x6c/0x110 [ 160.776497][ T363] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 160.789298][ T363] ? unwind_next_frame+0x3c2/0x750 [ 160.794443][ T363] ? __kernel_text_address+0x11/0x40 [ 160.799772][ T363] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 160.805960][ T363] ? arch_stack_walk+0x139/0x170 [ 160.810934][ T363] ? ret_from_fork_asm+0x1a/0x30 [ 160.815910][ T363] ? stack_trace_save+0x9d/0xe0 [ 160.820794][ T363] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 160.834066][ T363] ? stack_depot_save_flags+0x38/0x800 [ 160.839562][ T363] ? update_load_avg+0x506/0x19a0 [ 160.844619][ T363] ? detach_entity_load_avg+0x7b0/0x7b0 [ 160.850211][ T363] ? kasan_save_stack+0x4d/0x60 [ 160.855107][ T363] ? kasan_save_stack+0x3e/0x60 [ 160.859996][ T363] ? __kasan_record_aux_stack+0xb2/0xd0 [ 160.865573][ T363] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 160.871581][ T363] ? __call_rcu_common+0xcc/0x6f0 [ 160.876640][ T363] ? call_rcu+0x14/0x20 [ 160.880836][ T363] ? __kasan_check_write+0x18/0x20 [ 160.885982][ T363] ? _raw_spin_trylock+0xaf/0x130 [ 160.891068][ T363] ? __cfi__raw_spin_trylock+0x10/0x10 [ 160.896568][ T363] ? _raw_spin_unlock+0x45/0x60 [ 160.901445][ T363] ? call_rcu_nocb+0x6bd/0xc10 [ 160.906243][ T363] ? swake_up_one_online_ipi+0x30/0x30 [ 160.911732][ T363] ? __cfi_delayed_put_task_struct+0x10/0x10 [ 160.917827][ T363] ? __call_rcu_common+0x40b/0x6f0 [ 160.922981][ T363] ? call_rcu_hurry+0x30/0x30 [ 160.927696][ T363] ? task_dead_fair+0x110/0x190 [ 160.932588][ T363] ? __cfi_task_dead_fair+0x10/0x10 [ 160.937827][ T363] ? call_rcu+0x14/0x20 [ 160.942009][ T363] ? put_task_struct_rcu_user+0x66/0xb0 [ 160.947592][ T363] ? __switch_to_asm+0x3d/0x70 [ 160.952388][ T363] ? __schedule+0x1463/0x1f10 [ 160.957092][ T363] ? kick_pool+0xad/0x550 [ 160.961447][ T363] process_scheduled_works+0x7d2/0x1020 [ 160.967028][ T363] worker_thread+0xc58/0x1250 [ 160.971741][ T363] ? try_to_wake_up+0xdd2/0x1aa0 [ 160.976725][ T363] kthread+0x2ca/0x370 [ 160.980834][ T363] ? __cfi_worker_thread+0x10/0x10 [ 160.985987][ T363] ? __cfi_kthread+0x10/0x10 [ 160.990620][ T363] ret_from_fork+0x64/0xa0 [ 160.995080][ T363] ? __cfi_kthread+0x10/0x10 [ 160.999712][ T363] ret_from_fork_asm+0x1a/0x30 [ 161.004517][ T363] [ 161.007553][ T363] Modules linked in: [ 161.011484][ T363] CR2: 0000000000000098 [ 161.015668][ T363] ---[ end trace 0000000000000000 ]--- [ 161.021143][ T363] RIP: 0010:down_write+0x9a/0x2a0 [ 161.026211][ T363] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 161.045854][ T363] RSP: 0018:ffffc9000c15f500 EFLAGS: 00010256 [ 161.051954][ T363] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 161.059952][ T363] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000c15f520 [ 161.067952][ T363] RBP: ffffc9000c15f598 R08: ffffc9000c15f527 R09: 1ffff9200182bea4 [ 161.075959][ T363] R10: dffffc0000000000 R11: fffff5200182bea5 R12: dffffc0000000000 [ 161.083961][ T363] R13: 1ffff9200182bea0 R14: ffffc9000c15f520 R15: 0000000000000000 [ 161.091960][ T363] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 161.100933][ T363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.107620][ T363] CR2: 0000000000000098 CR3: 00000000072a8000 CR4: 00000000003526b0 [ 161.115635][ T363] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 161.123639][ T363] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 161.131640][ T363] Kernel panic - not syncing: Fatal exception [ 161.138099][ T363] Kernel Offset: disabled [ 161.142435][ T363] Rebooting in 86400 seconds..