last executing test programs: 2m21.626759459s ago: executing program 3 (id=762): modify_ldt$write(0x2000, 0x0, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') setns(r0, 0x8000000) (async) epoll_create1(0x0) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6d61783d38303030008e000030304430313537373737373dad37372c00"]) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) lseek(r2, 0x7fa2, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0x8, 0x20000800, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1}, 0x10) (async) read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0xfffffffffffffd73) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000002f40)={{r0}, 0x0, 0x8, @inherit={0x50, &(0x7f0000000180)=ANY=[@ANYBLOB="01ebfe0000003c2bb38d9550761a0000050000000000000001000002010000e40500000000000000050000000000f8ff050000000000000069900000001f000004eaffffff0000000400000000000000"]}, @subvolid=0x401}) 2m21.569710209s ago: executing program 3 (id=763): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x40901, 0x0) write$FUSE_DIRENT(r0, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x200001d0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) 2m21.49343015s ago: executing program 3 (id=765): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a80)={'syz1\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xe) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffff) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x149a82, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x4d, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000180)={0x2020}, 0x2020) syz_io_uring_setup(0x6f66, &(0x7f0000000000)={0x0, 0x76f5, 0x800, 0x2, 0x201, 0x0, r2}, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000100)) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000021c0)=0x216008, 0x4) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 2m21.376264752s ago: executing program 3 (id=767): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000280)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) chdir(&(0x7f0000000240)='./file0\x00') pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="2c008f27", @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf2508000000180001801400020076657468315f746f5f62617461647600"], 0x2c}, 0x1, 0x0, 0x0, 0x24}, 0xc0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r4 = mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x80, 0x80, 0x40003, 0x3b4f, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x68, 0xe0, 0x5, 0x4, 0x0, @remote, @private=0xa0100fd}}}}) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000d4d1a5e9067e1496c368e30c2b8e5dcadcef2c244a9cde644718ff5c3d25059b8f5d8000d07cff9c458377bb8c0398ad5c4363bc0c1cac16315fae15ffccc131490dbe70e34ebc6a64", @ANYRESHEX=r2, @ANYRESHEX=r3, @ANYRES32=0x0, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x4040) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000680)={{0x0, 0x0, 0x7, 0x1, 0x9}, 0xe93, 0x0, 'id0\x00', 'timer0\x00', 0x0, 0x8, 0x2, 0x0, 0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) openat(r7, &(0x7f0000000040)='.\x00', 0x200002, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000880)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) splice(r7, 0x0, r8, 0x0, 0x7dfc, 0xc) ioctl$FICLONERANGE(r10, 0x4020940d, &(0x7f0000000300)={{r9}, 0x1000000000000001, 0x1, 0x5}) r11 = memfd_create(&(0x7f0000000900)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd&\xd9\x00\x00\x00\x00\x00\x00/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x7) fcntl$addseals(r11, 0x409, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f00000003c0)=[@free_buffer={0x40086303, r4}, @release, @register_looper, @enter_looper, @increfs_done={0x40106308, 0x3}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}, @decrefs, @enter_looper], 0x0, 0x0, 0x0}) 2m21.209946015s ago: executing program 3 (id=769): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000400)=@ethtool_cmd={0x4d, 0x2, 0xffbf, 0xffff, 0x7, 0x6, 0x40, 0x80, 0x5, 0xb4, 0x5, 0x81, 0x6, 0x2c, 0x40, 0x8, [0x8, 0xc]}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@flat, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, 0x0}, 0x10}], 0x5e, 0x0, &(0x7f0000000280)="27340dbe79e8af432ff4fa2360c88df5a04d8e7eeb14f8d0fab09d900a6bb5bc0f07887e054cb7693ae1fb57bdf9173c6f2dd3f6284401f0a87fa2166027d3eda04b0809ab53399e60c5169690bcaa67b7123d2729933e63d78255ba0d07"}) 2m20.793596521s ago: executing program 3 (id=770): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x101}) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02050b0204000001000000000000000002000100ffffff7db000000000000051e5200056eca678c64f2f036b190fa769e0f28cb4d8cf2588ccc4f54eda6cb1b1ad6a774a5cbfd617916fdcb69bf3fba1d04319cc38d73da79b003a60e13a54987b6b52b8f7edccefbc9234c5af192157507a9eef9a8ba04156b21711fb5e1a660000000100000000c78fa584f3fb84b00df6f9b73d2423f37ed6cf791bc27417108a1e3c2851a7372f2f1455dde8031e8590c18097f7d9e7ce24bfbdc9f6e88731af487ff2"], 0x20}}, 0x84) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) (async) creat(0x0, 0xd931d3864d39dcca) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 2m20.688464523s ago: executing program 32 (id=770): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x101}) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02050b0204000001000000000000000002000100ffffff7db000000000000051e5200056eca678c64f2f036b190fa769e0f28cb4d8cf2588ccc4f54eda6cb1b1ad6a774a5cbfd617916fdcb69bf3fba1d04319cc38d73da79b003a60e13a54987b6b52b8f7edccefbc9234c5af192157507a9eef9a8ba04156b21711fb5e1a660000000100000000c78fa584f3fb84b00df6f9b73d2423f37ed6cf791bc27417108a1e3c2851a7372f2f1455dde8031e8590c18097f7d9e7ce24bfbdc9f6e88731af487ff2"], 0x20}}, 0x84) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) (async) creat(0x0, 0xd931d3864d39dcca) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 46.382075098s ago: executing program 1 (id=2226): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f00000000c0)=""/55, 0x37) (fail_nth: 1) 46.349797189s ago: executing program 1 (id=2227): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x5) (async, rerun: 32) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) (async) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000001700)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@remote, 0x0}, &(0x7f0000000200)=0x14) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) (rerun: 64) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) (async) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435e", 0x73) (async) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) (async, rerun: 32) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async, rerun: 32) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) mount$bind(0x0, &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r9 = socket(0x80000000000000a, 0xa, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2f, &(0x7f0000000200)={0x8, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x10000000, @remote}}}, 0x108) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000640)={[0x8, 0x7, 0x8002, 0x7, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41847}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="20002cbd7000fcdbdf251400000008000800070000006800018008000100", @ANYRES32=r4, @ANYBLOB="084fd26b", @ANYRES32=0x0, @ANYBLOB="08000300030000001400020062617461647630000000000000000000140002006261746164765f736c6176655f3100001400020076657468315f746f5f626f6e6400000008000300000000000800030002000000"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010029bd7000000000000c000000200001801400020073797a5f74756e00000000000000000008000300020000001800038014000380100001800800010004000000040003"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x1001, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0xfffffffffffffc96, 0x2, 0x2}, @fd, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 46.090056703s ago: executing program 1 (id=2229): creat(0x0, 0x20) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') unshare(0x22020600) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x298}]}) lseek(r0, 0x10001, 0x0) 46.004756204s ago: executing program 1 (id=2230): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000300)={0xdf, 0x0, 0x8000}) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f00000001c0)={0x0, 0x0, 0x6}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000080)={0xe1, 0x900, 0x2000}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000100001a4745c345971df160003000000060001"], 0x1c}}, 0x0) (async) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, 0x0, 0x0, r0) (async) ioprio_set$pid(0x1, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KVM_CAP_HYPERV_SYNIC2(r0, 0x4068aea3, &(0x7f0000000240)) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="00f3adc37a3d0ae85cbfbab798"], 0x1c}}, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async) ptrace$setregs(0xd, r6, 0x4, &(0x7f00000002c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab602000000ee8100e2838c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4205, r6, 0x200, &(0x7f0000000080)={0x0, 0x3000}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, 0x0, r10, r11) 45.961328575s ago: executing program 1 (id=2231): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) truncate(&(0x7f00000000c0)='./file0\x00', 0x6) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x11) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x60a702, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="180000006a00150000000008ffffff2e00000097"], 0x18}], 0x1}, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000b967d435786a8764e6a77a4003ca0d3703db637a636ab22f82a2e5c69c64b61de65ba454c610a294e70aa9d2b1a77c844b00006e80ff5aeeed68343511b0c31faa7394e697640ca3082a1c3a33", @ANYRES16=r5, @ANYBLOB="01002abd7000ffdbdf252b0000000c009900020000007d0000000a007e000101010101010000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x42084) add_key$user(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x3}, &(0x7f0000000780)="b0e2adeeb4346df3291a2912b4b1c369eb5b59c7bf5099aa8d177e6eb910b2ce0e4b3ee9f9badecb9f7913d559013d1d3ee7c1bdce6f1777229fad0d9a9b0f9785963a0379089d584c5b4bed2409f759353f70eacfadaf478babcf2ce69d8b65346804b796b7815f2589c63784c36b077831394bcfab9bf7418ca07f49cbddb794e2dcfd30fed1811f9cd1bba6d5f461a8cf639a66520057aa351d518c5758dd4e3193d9e834042cabdc858cd16f79e5337ce9075ca16fdaeaf18e36f9c4ba82f5562a6a29473a84683a8d46b9701ccc621523fac00a8680024d5df035223469e662", 0xe2, 0xfffffffffffffffc) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r6, 0x7d23000) getsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000100)=0x4) getsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xca800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) socket$packet(0x11, 0x2, 0x300) 45.713886558s ago: executing program 1 (id=2232): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f1ffffff210000400000000009"]) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x30) r4 = gettid() (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r6, 0x407, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000660001"], 0x1c}}, 0x0) (async) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) vmsplice(r6, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r8 = getuid() read$FUSE(r6, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r5, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000002400)={{}, {0x1, 0x1}, [{0x2, 0x6, r8}, {0x2, 0x2, 0xee00}], {0x4, 0x1}, [{0x8, 0x4, r9}, {0x8, 0x4, r10}], {0x10, 0x3}, {0x20, 0x4}}, 0x44, 0x3) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000002480), 0x14000, 0x0) (async) syz_open_procfs(r4, &(0x7f0000000080)='totmaps\x00') (async) fcntl$setpipe(r6, 0x407, 0x2000000) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 45.713428638s ago: executing program 33 (id=2232): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f1ffffff210000400000000009"]) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x30) r4 = gettid() (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r6, 0x407, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000660001"], 0x1c}}, 0x0) (async) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) vmsplice(r6, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r8 = getuid() read$FUSE(r6, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r5, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000002400)={{}, {0x1, 0x1}, [{0x2, 0x6, r8}, {0x2, 0x2, 0xee00}], {0x4, 0x1}, [{0x8, 0x4, r9}, {0x8, 0x4, r10}], {0x10, 0x3}, {0x20, 0x4}}, 0x44, 0x3) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000002480), 0x14000, 0x0) (async) syz_open_procfs(r4, &(0x7f0000000080)='totmaps\x00') (async) fcntl$setpipe(r6, 0x407, 0x2000000) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 2.568883932s ago: executing program 5 (id=2971): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)="a02d", 0x2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000103}]}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) close(r6) (async, rerun: 32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) (async) ioctl$KVM_GET_PIT(r8, 0xc048ae65, 0x0) (async) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETOWNER(r6, 0xff02, 0x0) (async) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2000000}) 2.452372154s ago: executing program 5 (id=2975): openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2.421238374s ago: executing program 5 (id=2976): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x60, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x800) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000002480)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002440)={&(0x7f00000021c0)={0x270, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x130, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "6c7ee78000fbff87ee02a42aaa58c81dc2c4d897bbe3ffca"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xdf, 0x3, "07854eb73286af634d6102071b7a2d572e87469bb60e2e07b25a0a0c37716b3ccf51bd59a8962df95a7fb3b90fd5cb438bccdf8c233bb0969ebbf76144d25f59c89c3e9ea072abad11839391c8b81216ab7292ebc13aef53128cdf7e007983124662fb2287936052fcd86e42e9d9a65ce8c67c3d6cfd9c3575d6e8437b0ee74d83b7a5dcabd6d19953ebd130a1b5e673918e08dd2e16e05e246d14ecf7281697f50b2bb937507dbaf57ab68ba11b50388c9dac135da51656a5db0d669fb2da48c7e52882bc572e3a2517e63409fced9e248b2c8d00be419fb4c0dc"}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x69}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1256}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa4b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x951}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1041}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x800}, 0x20000815) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002140)={0x6c, 0x0, &(0x7f0000001fc0)=[@exit_looper, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001f00)={@ptr={0x70742a85, 0x1, &(0x7f0000000f00)=""/4096, 0x1000, 0x2, 0xe}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x0, 0x2, 0xe}}, &(0x7f0000001f80)={0x0, 0x28, 0x40}}, 0x400}, @decrefs, @decrefs={0x40046307, 0x3}, @decrefs={0x40046307, 0x2}], 0xc7, 0x0, &(0x7f0000002040)="f388edecdb14cce28dc6f5d5dc22e61f2e06889dc71ff7603bb8a67aaa5ff6b707f71bd563fe478010309e70f9fed802428329e0aae18e4bb99d6abebaac0ace26f187dd236758f9e2d2ff52e2a7ed43081da11e0fbf31d21bfe791726bcf5d077085203e2212e038716d29f41b5b4b5bd2417ccde33919d6abbe206258d4b3532a30314905a1898fccc14a41d048b7adaac7b23e1da2d9703a31e87df5542c5549510d182c6177b636cf4e04f8257f107b4214280368ce7de2b10ed5051c505595d18dcdd3a77"}) r5 = syz_usb_connect$uac1(0x0, 0xe8, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd6, 0x3, 0x1, 0x1, 0x30, 0x7d, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x2}, [@selector_unit={0x8, 0x24, 0x5, 0x2, 0x6, "4ff86f"}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x5, 0x4, [0x6, 0x5, 0x1, 0xc040521d9ebd0676], 0x8f}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x2, '6'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xad88, 0x7, 0x8, "b0109ed11f"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7, 0xfff, 0x4}, @as_header={0x7, 0x24, 0x1, 0xcf, 0x3, 0x2}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x1, 0x29, 0x9, "c2ced65cab422b"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x3, 0xa, 0xb, {0x7, 0x25, 0x1, 0x1, 0x2, 0x9502}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x401, 0x1, 0x40, "e9a45f"}, @as_header={0x7, 0x24, 0x1, 0xf, 0x6, 0x4}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x3, 0x2, 0x80, 0x4a, "32e5"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x2, 0x9, 0xa, "", 'N'}, @as_header={0x7, 0x24, 0x1, 0x2, 0x3, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xd6, 0x4, 0x1, {0x7, 0x25, 0x1, 0x1, 0xfd, 0x2}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x5, 0x9, 0x5a, 0x10}, 0x120, &(0x7f0000000340)={0x5, 0xf, 0x120, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x8, 0x6, 0x100}, @generic={0xe8, 0x10, 0xa, "992ce8d35fc9ded07b9bfeaf46991720172d4177bae56aeb858b6595e016ce5b7c67f1a298f2e6b474ec9858c08130910ae736faf950b1f1afc15cef2386bf3e344bd579ccef660d1e95caa337924f3d0669a1ae36cf5832583b4a00e6193cbab0e46d91851aa5d8f26f6a82dea7069d9eb1e6b15ea8d4934d76343d151d486a0d0e0f5c07d245d741b7ff45a1dda95063207647f0c3ba74d0413455ee1b751a6df7fa95f3f2584577356091b2c5d501c09a822c0fa02b3a8a33a60887d28b7f1dde377d527e4f030dd21dc17635810ab8e85237e7b3ab0a0efffe048b519e16bc1d9b0a86"}, @ssp_cap={0x18, 0x10, 0xa, 0x4e, 0x3, 0xffff, 0x0, 0x101, [0xc030, 0x3f0f, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "2c0a06bfe64d31043fc9e220df9fb487"}]}, 0xa, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x804}}, {0x67, &(0x7f0000000500)=@string={0x67, 0x3, "aad6b25b8198b666a0e157588fed67cc95f8587815aa87f4b0c994f08ebd3c6ac9d8f6c9be12f5d00626a4ecbfc89eb2f580df50e6f87d4b7c667251fc993e5c9f7a0eee02feba5ca7108fbae4e0a9f664c09a442ad8015c630d3e9b0dedac4bbda7560e8a"}}, {0xe7, &(0x7f0000000600)=@string={0xe7, 0x3, "029d7f3429270881b80fa393f9164191356eff7cbcb6bec7ecd8460a10a2e0e116caf986ade8ea647a2129e8220c0350c4cd5a269133ecb9fa22d07b2864e0e024e2a575851e67029b7d3170a0cfe66be6b06d5bc63c83ef50c26f9c451921313c115e0aec62141ab28841dbd5f6c293bfc89fa210d1fa8434d76745f51e7c5b96e879783a4345c1b99ba4ffef79a8d56c4c437ecc08e555f1c9308a36c90f1ce26ee0928b31c53e5c68233868dcce202da296f37f5da213e62be4f5be44b4dc84285dcf5f39d868781e8fe1df2922117ee08a57ab4d29188b61f61f4175e53d1ffe6538b1"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x448}}, {0x44, &(0x7f0000000740)=@string={0x44, 0x3, "6bd5906a5253e42003690c4d32ddda2d011b0b421560dfe85dc8877105a0386cd866826353819f28df4daafbae22bb89a555ae262849ca804da8ae54c7937472cd1a"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x411}}, {0x79, &(0x7f0000000800)=@string={0x79, 0x3, "1b13accc9fa0fdd2eaecff9c0079cb8b85562815a560e956609c578999a78a0dc6e001d9a3c6a13e72e3810387459e06b4a35d4cb189457796ba22395acd5af2d5fa101146efa61ea41746aa0de950ad07ce937e9c2483494243c545ed4215ab9743dff28f2a8a5f6f5b4e8fe45224d841230843e5c04f"}}, {0x32, &(0x7f0000000880)=@string={0x32, 0x3, "5d909a34a719d78df4e37acbb96828a9d33d95e217ee809677b3933418de5c15b742fb0de930e2f7cc118e97742f4af7"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x3c25}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000000b80)={0x14, &(0x7f00000009c0)={0x0, 0xe, 0xd7, {0xd7, 0x4, "86d51a0b299efa53988e97a98df735771977e433d285205d9927612173b822e3b14ea03738cc7e07055664564d585376115f1fb8e6bb1773af94295147da8d4c499092420d268181307d87f4a749cf87f2d718abfb1d93bdcc9efc4f00565f7c5f055ebcc80e98e87ee7ca6d56d35f712fdc11db4b227dd95e439ac76b38d72292d79f3a1626354d308d2bb038f32243eb4bdec1f7b58d11fb177df44d4d55670d4fc01dbd2b2a6c45097e34664ed22363b07e5ca1386591f63ad99f2c97f44bc53d9cff101932b35e7285690ff0eed679d998f8b9"}}, &(0x7f0000000ac0)={0x0, 0x3, 0xb5, @string={0xb5, 0x3, "9c2f3b4ade967cca201328b54c46302e356714adf56e76781469ca8c2405a31bd72680ee192a76b60c8e8fc1b80f403a423f249ec72516ee4d399b0b7d2476a90c7834e5a282a031034529f2c79542d6476086ac69310ea646dbc7576088a898f86e36b92ee3e164b303d9ea2424c0e172037f49f5998e5ef0712b6bef09f3361ebf6180b051eb4658b7d4db6a3eb97bc0b8d8a5ab0ea2884f283c15b7463c457b3fe023ee59d14e7ea21bbd75aef471ef6666"}}}, &(0x7f0000000e80)={0x44, &(0x7f0000000bc0)={0x0, 0x15, 0xc0, "b6405698dd78a487a3675a9f409bd8dc18569713ee93d9f0d1c4a502ca3020e967cbe6f09449b91ed2b7b66e935867f04beae61b3d12f0dd84470df969e0ba2d06030534733819bc9fdde5fccbdc0bf99e8ebe65d53d06d818b0f87ad924885337794cd4fc8b3949d872f965c0cc1e7ba8cc0afbbad2939e5fdfcb24a3cffec0d1baf3b7d2df047204047b9618675558a1d889c27c17b1eb292d5ba712dae83a0961cac35ca3e90f4d9a97f02c5b312c82f308038dd109440f7ffda47582e2d7"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000d40)={0x20, 0x81, 0x3, "e0abb7"}, &(0x7f0000000d80)={0x20, 0x82, 0x2, "cf7a"}, &(0x7f0000000dc0)={0x20, 0x83, 0x3, "03651a"}, &(0x7f0000000e00)={0x20, 0x84, 0x4, "895d5d43"}, &(0x7f0000000e40)={0x20, 0x85, 0x3, "1cbc9d"}}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x0, 0x0, 0x16}, @fda={0x66646185, 0x5, 0x0, 0x1a}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 692.896719ms ago: executing program 5 (id=2996): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlink(&(0x7f0000000080)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000180)) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008002e00"], 0x1c}], 0x1}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x73, 0x141341) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x1, 0x18, 0xd3, 0x5fe1, 0x0, 0xe55, 0x0}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) 615.738831ms ago: executing program 5 (id=2997): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101601, 0x0) close_range(r0, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x70000, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "27f8ebe26ef85e15", "262ef7afd75fcc65c51af61c9e732711", "b51d5e32", "ced139641d7afca8"}, 0x28) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f00000000c0)={0x7, {{0xa, 0x4e20, 0x40, @mcast1, 0x5}}}, 0x88) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xde4}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80080}, 0x8000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x7}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = signalfd4(r2, &(0x7f0000000340)={[0x9]}, 0x8, 0x40000) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e23, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7ff}, {0xa, 0x4e24, 0x6, @local, 0x5}, 0x0, {[0x400, 0x0, 0xc, 0x839, 0x6, 0x9, 0x89, 0x5]}}, 0x5c) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) close_range(r5, r1, 0x2) socket(0x6, 0x80000, 0xde) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x274, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x0, 0x40}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x200, 0x1, 0x4, 0x1, 0xff}, 0x8, &(0x7f00000004c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x421}}, {0x5e, &(0x7f0000000540)=@string={0x5e, 0x3, "4afea83d720ac6dd3710d690ccc2f65b6ec14c09edf509c0dfc23412cf757a0713da405652cfb487ad0a6f68380edd5e4f449b1b967a9e49ee1bc47363acdc4f4cf788a16b7d9f8025ebbb29391c1dd8099fc11fe97ecd2b51e7caa1"}}, {0x7b, &(0x7f00000005c0)=@string={0x7b, 0x3, "f7163d49a40852e154e92d5e68d9cede4aae9a4f550aa312b1e87e04b77ab54c3ccc1e1b208ce33237d2fcd82b3a3fe459006107c9244f1cc0cd08eee2b76f02b8917c418e5523756dc91b0959b632d282fd756bd7d0c8ead493e0b7a7b81776cf402f7581611730c099f7f48e1831a329cd30c32bceddc88e"}}, {0x5a, &(0x7f0000000640)=@string={0x5a, 0x3, "de091bcaa24fbe46b41b90fa193a20f612519209a0c0787014d771ab61d98e23ef64d7e0534659be1bd282902d1eddf26fe8ec01abdfe58654de7ddcb3a01511ad7e47de3efb8fd54393fb669ce41f85f678f90b54223588"}}, {0x16, &(0x7f00000006c0)=@string={0x16, 0x3, "2e6a0169dcb6057728df2cd925cb8d11bb3b4d17"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x449}}]}) pwritev(r3, &(0x7f0000001e40)=[{&(0x7f00000007c0)="8c4d4e4225ddfa153cbe543938b0feaee0d10ccaa35a63eaeac09245a2c001cb86b917b919ef704a27e2da54a835a004898acfc1f395e4139103c84bbab525b95b8d22fd6fbf5168d9b567fa7f6ee551eb1b1d86190ca0dc3dd1f8221a232e762338948eecaea797d13502780f3279452cd40e2ed19abb18f1d341e585c0361b3e0c10cbb8982f", 0x87}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="5b9f6d6564c220a249273c5e15a076f476b6cac1f860492757f86875417354abc7e20391e0430acc8546dd0dda9630be30cfadfcc2a12aa3f8a64831695c2341efb96bd6dfdc88fe949548d242ab44864d", 0x51}, {&(0x7f0000001900)="646a14adb15b19145fa28f65c0a23d2e485c933f7e4fc9253650893594b03d1824b5f75a4f62626d851817340c9615b189a4af398246f30532452030eb45cdb37b5e76a9da814bba8d0745ccc1d71f7b71ee3c9eddc064986348ea75a62fb4be0b041950c95222904e4fa3e84b2733662f9a4e24dfe03dfce9f661b7dbab430494a51de0c70315e410b72fb5d370b6c9489b8491c20b68e30f53274a7ceb79886a08f7fd2764a67d49b06849ef0e2858b9cdb26664483ea02cf1dc56e4df26b96480", 0xc2}, {&(0x7f0000001a00)="b61278ffdcfa7ee1f6fbc38a9faefd6a1e72a97d97769f08fea10e06da72e2484080b434f7ae379c095a140137dfe981dee2562ccd63200fab68dfa63f8993e472d63606a2f28192614a137efa5bcd95e9ba864ac98494930adbdc1e988d847746a30b41e05abb682297ec68734536f3ca41f48dbbf501b4f2b0e435e0d8b85dd5274599dce7aa25d52cccfaf96cb024", 0x90}, {&(0x7f0000001ac0)="dd9674bb7edc1d8dcb9ad0bc95ff5b2b6617763c3c0fc250dadfa450811922644041099a00119411a7ad19b971fd1aca2661728fddde11d6e6fd6b113ccf824272aedb81321cac693ec9f0bc0c5280cc146b405e4b52f08fe8096d04165e8997ffa627993514185a2aa5cfd716b3bed75a66a397f50c4004d1d25dd20fa9df25ec9259259d9a89e8242c555dc2fcb96d4c801ebcac7fcaf7d0c820b6ccd9af2b51b6478fb4be7e4e38eafe818a8d8eb0c5231ebfc07c10cda1c7e2d2bb20d1ebd67d9768385d234274c822b3c6fe5ffbfa9f75", 0xd3}, {&(0x7f0000001bc0)="9bbb1f296412ca54547da1729e8a8a151e598e92163edd3cfcaa50b0fce4ba20c890c1bddf6d4ea5a86af1de633581399790360ea71e0b3e8acc756dfb345ebb0a66ea5fd94e0c5e25917bf04c0aec7928e606d13af3b3e486a77c5876163015c31db657e69c0065024c0f47925ed4aa928c345da64692888a104ab77a9d5851981e587a67ce7d71ebe314ffe0e68eff11fb94025937", 0x96}, {&(0x7f0000001c80)="d7e7a38f72c0687b47f578caafb853afa8cebb1e7f423810d4a9eeb324d5258ef0dd1c472d965464d284a9bd17692ae0c9c073cb9aa825083400c7c5471b7257f9dbba00379edd16371bea5163cac92dbba2a27a039fe636754dce507288ce99d0c8d1fb785e3320ade122c58cd139a7dc93713e7d4a18a4a195920cad524a0889754faa3b94e52a1f916d7b981dc0922877b4d10b8f23ff6fcf4a51c3df24dcae0de35ff697cb4d168a92dc3d07c6c4d495fa018f3e399829ff77e35195af696772d5abb52c846690594c072dbdf5d81362715a2a08e1faf9fd8f0f437227aa9c29f7f1b83301778c86a10ecbbcff", 0xef}, {&(0x7f0000001d80)="be73f97a76df64b92837fdced99c51fa8a3c1df65050ebdb3852db50789d2f19f13d9084547a23f50f313cacd21dd50a414afb5e540ff7d11500f0f45867009eb99d7a4a43bda29c7566ca69e9f7f43501d216ec98b5f03d6ecbdca6a40a57a00353354bb63740ddebc2671689a1872146396f10dfea0747aba05f1c67f4856322f79913e81c45da378088898aa6f35db12deafc14107569b549d88702765a3fbddf5ef91234", 0xa6}], 0x9, 0x7, 0x2) openat$cgroup_subtree(r4, &(0x7f0000001f00), 0x2, 0x0) r6 = openat(r4, &(0x7f0000001f40)='./file0\x00', 0x210000, 0x20) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000001f80)={0x40000, 0x0, [0x1, 0x5, 0xffffffffffffffff, 0xd4e6, 0x7, 0x9, 0x1000, 0x8]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000002040), r4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x24, r8, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x100}}, ["", "", ""]}, 0x24}}, 0x20000010) r9 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r9, &(0x7f00000023c0)={0x0, &(0x7f0000002140)=[@code={0x1, 0x8a, {"b9e0080000b8012f470fba000000000f30f26fc74424000001c0fec744240200000000c7442406000000000f011424c74424005d000000c744240267000000ff2c2466450fc7770466b844000f00d8c481b95c13470f01c9c744240000000100c74424027a6f1765c7442406000000000f011424f2440f1a17"}}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x2, 0x18, {0xfff, 0x6}}, @uexit={0x0, 0x18, 0x2}, @code={0x1, 0x80, {"c1df00c4c2d19a730066440f38826c82f5f22e260f0966b8a9000f00d0c7442400b1000000c74424020d000000ff1c24c744240006000000c74424020fd30000ff2c2448b854030000000000000f23c00f21f83503000a000f23f866baa100b8961d0000efc4c379149d0300000069"}}, @code={0x1, 0x60, {"262e67f0f61478c4012c5685d152000066b8ed008ed80f019e00000000c4a1f9d7e866410f38812066b818010f00d048b806000000000000000f23d00f21f835100000030f23f8470f092e430f78ca"}}, @code={0x1, 0x75, {"430f32440fc71c3d93630000f30fc7b2e97a8679c4832d7ea975c7906000c744240079000000c744240200100000c7442406000000000f011c24660f3880be56538484a766baf80cb82afb0085ef66bafc0c66b8000066ef660f38818dad0000000f01c2"}}, @cpuid={0x2, 0x18, {0x0, 0x4}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x8001}], 0x26f}) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000002400)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 418.050834ms ago: executing program 2 (id=3002): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0xa, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) listen(r1, 0x5) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0xfffb, @none, 0x3, 0x1}, 0xe) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{}], 0x1, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000040), 0x20d0881, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/273]) 417.341304ms ago: executing program 2 (id=3003): openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000080)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 414.544504ms ago: executing program 2 (id=3004): mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)={[], [{@flag='dirsync'}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0xa02, 0x0, 0xffffffffffff6253}]}) tkill(0xffffffffffffffff, 0x1d) 414.183984ms ago: executing program 2 (id=3005): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x50, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000280)={{r2, r3+10000000}}, &(0x7f00000002c0)) (async) r4 = gettid() r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000140)={0x2, 'macvlan0\x00', {}, 0x5}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x6, 0x7, 0x6a16, "39e5d635e531"}}) clock_gettime(0x1, &(0x7f00000001c0)) (async) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r8, 0x7, 0xffffffffffffffff, 0x0) syz_open_procfs(r8, &(0x7f0000000180)='net/sctp\x00') 387.087914ms ago: executing program 2 (id=3006): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0xffffffffffffff01, r1, 'id0\x00'}) connect$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x1001, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0xfffffffffffffc96, 0x2, 0x2}, @fd, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 376.486845ms ago: executing program 2 (id=3007): prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffe000/0x2000)=nil) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000500)={[{0x3d, 0x4e00, "3c33b7ed517b703099adda799acb2f627c1cac13fe839adf879439c9350f643d06a72f22fb7b256144d03c42c23b92ebfd109cf30ba269755236c683f4"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x50, r1, 0x45802000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 280.511296ms ago: executing program 4 (id=3014): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x260302, 0x5) openat(r4, &(0x7f0000000140)='./file0\x00', 0x400, 0x52) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 221.885047ms ago: executing program 4 (id=3015): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x395e000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) fsmount(r1, 0x0, 0x4) read$FUSE(r1, &(0x7f0000004200)={0x2020}, 0x2020) openat$sysfs(0xffffffffffffff9c, 0x0, 0x161b82, 0x0) mkdir(0x0, 0x136) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x395e000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) (async) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x4) (async) read$FUSE(r1, &(0x7f0000004200)={0x2020}, 0x2020) (async) openat$sysfs(0xffffffffffffff9c, 0x0, 0x161b82, 0x0) (async) mkdir(0x0, 0x136) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async) 221.593447ms ago: executing program 0 (id=3016): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x211000, 0x1000}, 0x20) madvise(&(0x7f0000234000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) tkill(r2, 0x12) ptrace(0x4208, r2) tkill(r2, 0x12) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000280)={0x0, 'lo\x00', {0x3}, 0x81}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x4, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x6, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r4, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r4, &(0x7f0000000000)="8f2a0a80a7", 0x5) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r5, 0x45809000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_RUN(r3, 0xae80, 0x0) 221.063577ms ago: executing program 0 (id=3017): r0 = socket$inet(0x2, 0x80000, 0x3c8) cachestat(r0, &(0x7f0000000000)={0x80000001, 0x639}, &(0x7f0000000040), 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) getpeername$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000180)={'veth1_to_batadv\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x8000, 0x1, 0x1, 0x8, {{0x36, 0x4, 0x0, 0x2, 0xd8, 0x66, 0x0, 0xff, 0x4, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x54, 0x5e, 0x3, 0x9, [{@empty, 0x4}, {@rand_addr=0x64010102}, {@rand_addr=0x64010100, 0x3}, {@multicast2, 0x1}, {@broadcast, 0x10000}, {@broadcast, 0x9}, {@multicast1, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}, {@empty, 0xe8b5}, {@local, 0xb5d}]}, @cipso={0x86, 0x27, 0x1, [{0x0, 0x6, "ca9837a5"}, {0x4, 0xc, "716721f8c3141f75e486"}, {0x2, 0xf, "b8ea146825396b9be62b5df1c0"}]}, @cipso={0x86, 0x35, 0x0, [{0x5, 0x2}, {0x6, 0x4, "c92f"}, {0x5, 0x2}, {0x6, 0xb, "6f229cedb8f0faa72c"}, {0x6, 0xa, "13b94e90fa85008c"}, {0x0, 0x12, "9838aa83be5b7284b89dcd4e1f2584a7"}]}, @end, @end, @noop, @lsrr={0x83, 0xf, 0xc2, [@private=0xa010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) getsockopt$inet_mreqn(r0, 0x0, 0x3, &(0x7f00000003c0)={@rand_addr, @remote, 0x0}, &(0x7f0000000400)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x1, 0x8, 0x31b7, 0x0, {{0x9, 0x4, 0x0, 0x7, 0x24, 0x65, 0x0, 0xd, 0x6, 0x0, @loopback, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0x38, 0x1, 0x6, [{@remote, 0x307}]}, @end]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000740)={'syztnl1\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x40, 0x7f00, 0x4, 0x2a48, {{0x1e, 0x4, 0x0, 0x8, 0x78, 0x65, 0x0, 0xfe, 0x4, 0x0, @private=0xa010102, @multicast1, {[@cipso={0x86, 0x30, 0x3, [{0x2, 0xa, "e9c504907fa790b0"}, {0x6, 0x3, "80"}, {0x6, 0xf, "afa7e678dbef2b1f59651645ae"}, {0x0, 0xe, "494adc9a1f2e28c702811a91"}]}, @rr={0x7, 0xb, 0x50, [@private=0xa010100, @empty]}, @timestamp_addr={0x44, 0x14, 0xc3, 0x1, 0x7, [{@private=0xa010101, 0x800}, {@loopback, 0x6}]}, @generic={0x88, 0xc, "cc78b61457a5dd8aba3b"}, @generic={0x89, 0x7, "e8b6cdd013"}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000940)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x16c, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000980)=0x800000) clock_settime(0x6, &(0x7f00000009c0)={0x0, 0x3938700}) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), r2) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x178, r12, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x164, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xae, 0x3, "c01e7347c903acf74083811e76e0f6d08d58fa6f910f9fcae5431c4e44c2e63281e1059eeaf51ba496daa30a25bbdf4520af858e5e384abc230d9bade0f70b39cced0c2c2b039d13baae8100d8dd0a3df2c088dacd419274504d74a7a354f4ca2cd52393639b1aea96caf3b29fdf5aa0fad024d848b243ef0290f3739c7a241e35de9718da9ffd2d7a79ee520537cb4b70af09b17fc262364aa3aadb81768c3cff12b8765332931157b7"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfabd}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "2ea1e579e9827fa4ccc39a3bc68053a65a0c0c399f4d2966da64ac7172"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "17c62baf9a14f4f5ab2a45839d92b71c269f323496b5167d9e764447"}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x11}, 0x4080) r13 = creat(&(0x7f0000000c80)='./file0\x00', 0x20) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r13, 0x8008f513, &(0x7f0000000cc0)) r14 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r14, 0x0, 0x2e, &(0x7f0000000d00)="6fa7d9bee8027fca4058cadd95e464c730e921da67e2dbbb8bfb2aa520d4fcb41ae4849982e1996bbd58807f5604fb37ee0f55642a3feba8ca4127c530144d08f021c628d2b7b35481573a201919533f06c81554ae924661f38d484f25594168b676b21b9ecb9028754766d505eda3246dbdbe7a2eddc774b3e9cc2364c8c0d0e3cec73d3a8b9ab8a71b8936e93c049ebe682a074e2f55db5855c0c339a411e3", 0xa0) r15 = accept4$unix(r13, &(0x7f0000000dc0), &(0x7f0000000e40)=0x6e, 0x0) connect$unix(r15, &(0x7f0000000e80)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$KVM_HAS_DEVICE_ATTR(r13, 0x4018aee3, &(0x7f0000000f40)=@attr_other={0x0, 0x94bd, 0x4c9, &(0x7f0000000f00)=0x3}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, r13, 0x0) 206.804647ms ago: executing program 0 (id=3018): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000002100000005002000000000000c001f0070687930", @ANYBLOB="10ff4c44cf"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4090) r3 = getpgid(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r5) sendmsg$netlink(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000880)=[{0x0, 0x790}], 0x1, &(0x7f0000000b00)=[@cred={{0x1c, 0x1, 0x2, {r3, r5, 0xee01}}}], 0x20, 0x40000}, 0x400c810) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0xa0}, 0x1, 0x0, 0x0, 0x40000001}, 0x80) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_GET_API_VERSION(r8, 0xae00, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd}, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r12, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r13, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0557114d03bed665369e49180b38c8bb959a54172b8d5461ad4873b59da573edb8e05a5bef891012361090ae88ca63bd67756d5b33907a9a4759fed41ab977be261f64d6301200dc8e9714b4185f"]) read$FUSE(r13, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r13, &(0x7f0000004300)={0x50, 0x0, r14, {0x7, 0x2b, 0x0, 0x80040}}, 0x50) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f0000000040)=0x20, 0x4) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) 191.437837ms ago: executing program 0 (id=3019): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) msync(&(0x7f0000640000/0xd000)=nil, 0xd000, 0x3) 125.801378ms ago: executing program 0 (id=3020): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018200000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000200)) mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x4008024, &(0x7f0000000040)={[{@stats}]}) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = epoll_create1(0x80000) fremovexattr(r2, &(0x7f0000000480)=@known='trusted.overlay.upper\x00') setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000001040)={0x40, 0x2, 0x3}, 0x10) listen(0xffffffffffffffff, 0x0) bind$tipc(r1, &(0x7f0000001900)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x0, 0x2}}, 0x10) rt_sigaction(0x34, &(0x7f00000000c0)={&(0x7f0000000000)="263ef0107600c4a200f312dc33470f01d7660f485fa26666470f1a5bde400f442ff20f1ac7c4c1fee64f0bf2416e", 0x0, &(0x7f0000000080)="f0428089c59dffff0cc482e53faa000000000fe0a8420000002e98660faef2c461f81363f7f040ff4701c441fde6b044000000660f3a1432ba67f2470fc2f209", {[0x8]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f4800cc97e0b5000000c48155dc43000fe3c7c4816dfd1d82c0b0b145ab660fde5d0566470fd8dbc4a14975210f16670d4798", 0x0, &(0x7f0000000140)="f3460f8dc7acbb3ec481916856910f18c93ef30f7fa9c0000000c46235dde7f3ad8f491801960a000000c4815572f7e245d8f8652edae9"}, 0x8, &(0x7f00000001c0)) socket(0x10, 0x3, 0x0) (async) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018200000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) (async) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000200)) (async) mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x4008024, &(0x7f0000000040)={[{@stats}]}) (async) socket$tipc(0x1e, 0x5, 0x0) (async) epoll_create1(0x80000) (async) fremovexattr(r2, &(0x7f0000000480)=@known='trusted.overlay.upper\x00') (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000001040)={0x40, 0x2, 0x3}, 0x10) (async) listen(0xffffffffffffffff, 0x0) (async) bind$tipc(r1, &(0x7f0000001900)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x0, 0x2}}, 0x10) (async) rt_sigaction(0x34, &(0x7f00000000c0)={&(0x7f0000000000)="263ef0107600c4a200f312dc33470f01d7660f485fa26666470f1a5bde400f442ff20f1ac7c4c1fee64f0bf2416e", 0x0, &(0x7f0000000080)="f0428089c59dffff0cc482e53faa000000000fe0a8420000002e98660faef2c461f81363f7f040ff4701c441fde6b044000000660f3a1432ba67f2470fc2f209", {[0x8]}}, &(0x7f0000000180)={&(0x7f0000000100)="8f4800cc97e0b5000000c48155dc43000fe3c7c4816dfd1d82c0b0b145ab660fde5d0566470fd8dbc4a14975210f16670d4798", 0x0, &(0x7f0000000140)="f3460f8dc7acbb3ec481916856910f18c93ef30f7fa9c0000000c46235dde7f3ad8f491801960a000000c4815572f7e245d8f8652edae9"}, 0x8, &(0x7f00000001c0)) (async) 109.106548ms ago: executing program 4 (id=3021): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYRESHEX]) 97.310138ms ago: executing program 0 (id=3022): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x30) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x1201000, 0x1000, 0x10000, 0x2}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0xb8, 0x0, &(0x7f0000000680)=[@enter_looper, @request_death={0x400c630e, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/72, 0x48, 0x2, 0x17}, @flat=@binder={0x73622a85, 0x180, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/240, 0xf0, 0x0, 0x3b}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@fda={0x66646185, 0x6, 0x2, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/253, 0xfd, 0x2, 0x2d}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000640)={0x0, 0x20, 0x48}}}, @increfs={0x40046304, 0x3}, @increfs_done], 0x4, 0x0, &(0x7f0000000740)="ddf77218"}) fcntl$setpipe(r0, 0x407, 0x2000000) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 97.024518ms ago: executing program 4 (id=3023): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0xc0042, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 21.655159ms ago: executing program 4 (id=3024): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x891d, &(0x7f0000001b00)={'ip_vti0\x00', 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 21.23421ms ago: executing program 5 (id=3025): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000000)=[@increfs_done={0x40106308, 0x3}, @decrefs, @increfs_done={0x40106308, 0x3}, @enter_looper, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=3026): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x1, 0x3) syz_clone3(&(0x7f00000002c0)={0x1000000, &(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200), {0x17}, &(0x7f0000002f40)=""/4096, 0x1000, &(0x7f0000003f40)=""/4096, &(0x7f0000000280)=[r0, r0, r0], 0x3}, 0x58) r2 = syz_open_procfs(r1, &(0x7f0000000140)='limits\x00') write$selinux_load(0xffffffffffffffff, 0x0, 0x2046) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x5411, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x50cf, &(0x7f0000000000)={0x0, 0xfffffffc, 0x40000, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000540)={'gre0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x7800, 0x20, 0xfff, 0x2, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x67, 0x0, 0x3, 0x2f, 0x0, @broadcast, @multicast1}}}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r8 = dup(r4) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) read$FUSE(r2, &(0x7f0000000f00)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): one upperpath [ 164.214742][ T5736] overlayfs: failed to clone upperpath [ 164.295477][ T9] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 164.408712][ T381] hid-steam 0003:28DE:1142.001E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 164.446932][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 164.455033][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 164.463640][ T9] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.476523][ T381] hid-steam 0003:28DE:1142.001E: Steam wireless receiver connected [ 164.485457][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 164.493139][ T381] hid-steam 0003:28DE:1142.001F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 164.507444][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 164.518570][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.526760][ T9] usb 5-1: Manufacturer: 탈ᖩ쒸阡翀⎇碭밨񦅡 [ 164.533582][ T9] usb 5-1: SerialNumber: syz [ 164.609979][ T5704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.618683][ T5704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.627846][ T381] usb 2-1: USB disconnect, device number 54 [ 164.635068][ T381] hid-steam 0003:28DE:1142.001E: Steam wireless receiver disconnected [ 164.740501][ T5731] rust_binder: Got transaction with invalid offset. [ 164.740542][ T5731] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 164.747433][ T5731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:507 [ 164.760433][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 164.783460][ T9] usb 5-1: USB disconnect, device number 27 [ 164.790778][ T9] usblp0: removed [ 165.158405][ T36] audit: type=1400 audit(1750879440.276:607): avc: denied { attach_queue } for pid=5795 comm="syz.1.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 165.292591][ T5803] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 165.381976][ T36] audit: type=1400 audit(1750879440.496:608): avc: denied { write } for pid=5806 comm="syz.4.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 165.402433][ T5808] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:514 [ 165.435521][ T336] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 165.596497][ T336] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 165.606552][ T336] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 165.616252][ T336] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.630622][ T336] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 165.639778][ T336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.647842][ T336] usb 2-1: Product: syz [ 165.652029][ T336] usb 2-1: Manufacturer: syz [ 165.656684][ T336] usb 2-1: SerialNumber: syz [ 165.662720][ T336] hub 2-1:1.0: bad descriptor, ignoring hub [ 165.668699][ T336] hub 2-1:1.0: probe with driver hub failed with error -5 [ 165.820410][ T36] audit: type=1400 audit(1750879440.936:609): avc: denied { map } for pid=5818 comm="syz.2.1867" path="socket:[30141]" dev="sockfs" ino=30141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.844681][ T36] audit: type=1400 audit(1750879440.936:610): avc: denied { accept } for pid=5818 comm="syz.2.1867" path="socket:[30141]" dev="sockfs" ino=30141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.870948][ T336] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 166.155667][ T9] usb 2-1: USB disconnect, device number 55 [ 166.163340][ T9] usblp0: removed [ 166.222211][ T36] audit: type=1326 audit(1750879441.336:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.0.1874" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f038478e929 code=0x0 [ 166.251123][ T5842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1871'. [ 166.260954][ T36] audit: type=1400 audit(1750879441.376:612): avc: denied { append } for pid=5832 comm="syz.4.1871" name="pfkey" dev="proc" ino=4026532988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 166.465490][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 166.491063][ T5847] netlink: 'syz.2.1876': attribute type 15 has an invalid length. [ 166.508956][ T5847] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1876'. [ 166.571355][ T5849] /dev/rnullb0: Can't lookup blockdev [ 166.616568][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.631169][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.641252][ T9] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 166.650521][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.659805][ T9] usb 2-1: config 0 descriptor?? [ 166.818727][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.826013][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.833109][ T5868] bridge_slave_0: entered allmulticast mode [ 166.842034][ T5868] bridge_slave_0: entered promiscuous mode [ 166.851966][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.859075][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.866362][ T5868] bridge_slave_1: entered allmulticast mode [ 166.872732][ T5868] bridge_slave_1: entered promiscuous mode [ 166.882974][ T12] bridge_slave_1: left allmulticast mode [ 166.888745][ T12] bridge_slave_1: left promiscuous mode [ 166.894464][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.902326][ T12] bridge_slave_0: left allmulticast mode [ 166.908089][ T12] bridge_slave_0: left promiscuous mode [ 166.913765][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.017528][ T12] tipc: Left network mode [ 167.033617][ T12] veth1_macvtap: left promiscuous mode [ 167.039423][ T12] veth0_vlan: left promiscuous mode [ 167.082559][ T9] hid-steam 0003:28DE:1142.0020: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 167.105598][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.112673][ T5868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.120001][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.127073][ T5868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.145511][ T9] hid-steam 0003:28DE:1142.0020: Steam wireless receiver connected [ 167.157396][ T5876] fuse: Unknown parameter '0x00000000000000030x0000000000000004' [ 167.166701][ T36] audit: type=1326 audit(1750879442.286:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5877 comm="syz.4.1886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb76b58e929 code=0x0 [ 167.179603][ T9] hid-steam 0003:28DE:1142.0021: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 167.218799][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.229076][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.249710][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.256807][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.267608][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.274673][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.283759][ T9] usb 2-1: USB disconnect, device number 56 [ 167.296177][ T9] hid-steam 0003:28DE:1142.0020: Steam wireless receiver disconnected [ 167.327607][ T5868] veth0_vlan: entered promiscuous mode [ 167.342836][ T5868] veth1_macvtap: entered promiscuous mode [ 167.407724][ T5898] binder: Unknown parameter 'posixacl' [ 167.477061][ T5903] binder: Unknown parameter 'stts' [ 167.945497][ T64] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 168.010428][ T5925] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 168.095529][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 168.116040][ T64] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.136911][ T64] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 168.146643][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.160246][ T64] usb 3-1: Product: syz [ 168.166623][ T64] usb 3-1: Manufacturer: syz [ 168.171267][ T64] usb 3-1: SerialNumber: syz [ 168.183644][ T5936] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 168.183674][ T5936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:532 [ 168.193576][ T64] usb 3-1: config 0 descriptor?? [ 168.279027][ T5939] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 168.347663][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 168.347684][ T36] audit: type=1326 audit(1750879443.466:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.4.1912" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb76b58e929 code=0x0 [ 168.411758][ T64] usb 3-1: USB disconnect, device number 12 [ 168.826986][ T5981] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 168.834166][ T5981] rust_binder: Write failure EINVAL in pid:1005 [ 168.838642][ T337] raw-gadget.1 gadget.0: failed to queue disconnect event [ 168.854077][ T5981] binder: Unknown parameter 'fscontext?}' [ 168.923454][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.947080][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.975501][ T36] audit: type=1400 audit(1750879444.076:617): avc: denied { setattr } for pid=5987 comm="syz.2.1925" name="/" dev="incremental-fs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 169.000419][ T5979] bridge_slave_0: entered allmulticast mode [ 169.007023][ T5979] bridge_slave_0: entered promiscuous mode [ 169.014515][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.021888][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.029130][ T5979] bridge_slave_1: entered allmulticast mode [ 169.065761][ T5979] bridge_slave_1: entered promiscuous mode [ 169.161630][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.168770][ T5979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.176155][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.183221][ T5979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.223510][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.243457][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.267530][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.274633][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.285775][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.292865][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.335095][ T5979] veth0_vlan: entered promiscuous mode [ 169.350283][ T5979] veth1_macvtap: entered promiscuous mode [ 169.356161][ T336] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 169.405713][ T6006] rust_binder: Error in use_page_slow: ESRCH [ 169.405739][ T6006] rust_binder: use_range failure ESRCH [ 169.416137][ T6006] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 169.423279][ T6006] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 169.433250][ T6006] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:2 [ 169.520735][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.544583][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.565108][ T336] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 169.574991][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.590241][ T336] usb 3-1: config 0 descriptor?? [ 169.645876][ T6020] rust_binder: Error while translating object. [ 169.645933][ T6020] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 169.652398][ T6020] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:563 [ 169.777771][ T6027] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 169.869335][ T6039] rust_binder: Write failure EINVAL in pid:1016 [ 169.910895][ T6041] batadv_slave_1: entered promiscuous mode [ 169.924046][ T6042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1016 [ 169.924185][ T6042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1016 [ 169.933614][ T6041] batadv_slave_1: left promiscuous mode [ 169.949737][ T6041] mmap: syz.0.1944 (6041): VmData 29077504 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 169.980933][ T6044] FAT-fs (rnullb0): bogus number of reserved sectors [ 169.987902][ T6044] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 170.013870][ T336] hid-steam 0003:28DE:1142.0022: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 170.055460][ T64] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 170.086028][ T336] hid-steam 0003:28DE:1142.0022: Steam wireless receiver connected [ 170.087894][ T6054] rust_binder: Write failure EFAULT in pid:28 [ 170.105605][ T336] hid-steam 0003:28DE:1142.0023: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 170.195496][ T64] usb 5-1: device descriptor read/64, error -71 [ 170.271362][ T6064] input: syz1 as /devices/virtual/input/input21 [ 170.356626][ T304] tipc: Subscription rejected, illegal request [ 170.379057][ T6076] binder: Unknown parameter 'UV\W"HG%Uw!o)M- ;&TCNŪq&"M~ D;[9r$B޼tLMe"Xer  G' [ 170.435516][ T64] usb 5-1: device descriptor read/64, error -71 [ 170.449338][ T6081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.669510][ T36] audit: type=1326 audit(1750879445.786:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6094 comm="syz.2.1961" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbbf98e929 code=0x0 [ 170.698841][ T64] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 170.768952][ T36] audit: type=1400 audit(1750879445.886:619): avc: denied { accept } for pid=6100 comm="syz.1.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 170.802820][ T6106] can0: slcan on ttyS3. [ 170.825966][ T6112] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=26 [ 170.825993][ T6112] rust_binder: Error while translating object. [ 170.835102][ T6112] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 170.842644][ T6112] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1032 [ 170.852334][ T64] usb 5-1: device descriptor read/64, error -71 [ 170.927068][ T6127] binder: Unknown parameter 'fowner<18446744073709551615' [ 171.115478][ T64] usb 5-1: device descriptor read/64, error -71 [ 171.225532][ T64] usb usb5-port1: attempt power cycle [ 171.231398][ T6153] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 171.240530][ T6153] rust_binder: Write failure EINVAL in pid:1044 [ 171.275627][ T584] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 171.535508][ T2320] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 171.565525][ T64] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 171.588228][ T64] usb 5-1: device descriptor read/8, error -71 [ 171.611271][ T6173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.621484][ T6173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.705502][ T2320] usb 2-1: Using ep0 maxpacket: 8 [ 171.712814][ T2320] usb 2-1: config 1 interface 0 altsetting 104 endpoint 0x81 has an invalid bInterval 71, changing to 10 [ 171.724223][ T2320] usb 2-1: config 1 interface 0 altsetting 104 bulk endpoint 0x82 has invalid maxpacket 32 [ 171.734508][ T2320] usb 2-1: config 1 interface 0 altsetting 104 bulk endpoint 0x3 has invalid maxpacket 1024 [ 171.744698][ T2320] usb 2-1: config 1 interface 0 has no altsetting 0 [ 171.752310][ T64] usb 5-1: device descriptor read/8, error -71 [ 171.759875][ T2320] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.769103][ T2320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.777394][ T2320] usb 2-1: Product: ➌잲䱳┩蹨鍉㇑⢊턩춲빅蛻䄽⃙砄ﻘ磡ಊ쵟먮駰涶阛⺢☑ᦍ蟱ꈸ軙㞸뱨ꡖㅎᥩ쇂㵼糺䔲騭觳ꮼ [ 171.794172][ T2320] usb 2-1: Manufacturer: մ涂ゖ噒埬ң椚鿿스䀝䘖㣚謈ǚ杦㒺Ėꄧ튵휾跆湭닆﮷壸탊㐳챨冹ꫝ⭙底쩞梫榬밬눋티ഩ☡咡抜칆⬡생䩪ẙ揆䁺덳繂稧阆೹⥊۳紇﫠㭃척甆淃怱ﳱ✮髑⣲⃶펋臌ᴃ펤ァ⥾ꌕ垬끳ᛮ㌃ହ㓒 [ 171.821388][ T2320] usb 2-1: SerialNumber: ᡫྎᑹ躼ਚ꒗몽퉃⫦ྙ聠죎춬菔ى爫潣砸蝒ᑰꞢ䠭ဍ熚揧䓄ꔄ㈄礒倰믝춻ᅽ䀵肂耹剡 [ 171.838089][ T6163] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 171.845307][ T6163] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 171.995465][ T64] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 172.016401][ T64] usb 5-1: device descriptor read/8, error -71 [ 172.061431][ T2320] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 172.071303][ T2320] usb 2-1: USB disconnect, device number 57 [ 172.146485][ T64] usb 5-1: device descriptor read/8, error -71 [ 172.255571][ T64] usb usb5-port1: unable to enumerate USB device [ 172.434050][ T6182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.443151][ T6182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.779126][ T6186] tipc: Started in network mode [ 172.784059][ T6186] tipc: Node identity fa96f3b216ba, cluster identity 4711 [ 172.792012][ T6186] tipc: Enabled bearer , priority 0 [ 172.815511][ T64] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 172.926649][ T6186] tipc: Disabling bearer [ 172.965538][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 172.975483][ T64] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 172.988794][ T64] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 173.011406][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.028947][ T64] usb 2-1: Product: syz [ 173.035068][ T64] usb 2-1: Manufacturer: syz [ 173.039973][ T64] usb 2-1: SerialNumber: syz [ 173.045245][ T36] audit: type=1326 audit(1750879448.156:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6192 comm="syz.2.1990" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbbf98e929 code=0x0 [ 173.068430][ T64] usb 2-1: config 0 descriptor?? [ 173.078362][ T64] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 173.087006][ T64] usb 2-1: Detected FT232R [ 173.087285][ T6200] __vm_enough_memory: pid: 6200, comm: syz.4.1992, bytes: 70373039144960 not enough memory for the allocation [ 173.122014][ T6203] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 173.122042][ T6203] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 173.132240][ T6203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:584 [ 173.286851][ T64] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 173.503828][ T64] ftdi_sio 2-1:0.0: GPIO initialisation failed: -32 [ 173.511586][ T64] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 173.984651][ T6219] rust_binder: Failed copying remainder into alloc: EFAULT [ 173.984679][ T6219] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 173.992479][ T6219] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 174.001087][ T6219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:72 [ 174.132889][ T6222] rust_binder: Error while translating object. [ 174.142079][ T6222] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 174.148372][ T6222] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:597 [ 174.211201][ T6223] netlink: 'syz.1.1987': attribute type 4 has an invalid length. [ 174.228646][ T6223] netlink: 'syz.1.1987': attribute type 27 has an invalid length. [ 174.236563][ T36] audit: type=1326 audit(1750879449.346:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.0.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab8b8e929 code=0x7fc00000 [ 174.260120][ T6223] netlink: 2973 bytes leftover after parsing attributes in process `syz.1.1987'. [ 174.752637][ T36] audit: type=1400 audit(1750879449.866:622): avc: denied { create } for pid=6231 comm="syz.2.2001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 174.783346][ T6232] rust_binder: Error in use_page_slow: ESRCH [ 174.783366][ T6232] rust_binder: use_range failure ESRCH [ 174.789890][ T6232] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 174.795555][ T6232] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 174.805495][ T6232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:78 [ 174.844213][ T6237] rust_binder: Write failure EFAULT in pid:80 [ 174.854421][ T36] audit: type=1326 audit(1750879449.966:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz.0.2004" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ab8b8e929 code=0x0 [ 175.443252][ T36] audit: type=1400 audit(1750879450.556:624): avc: denied { unmount } for pid=2626 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 175.534975][ T6258] input: syz0 as /devices/virtual/input/input24 [ 175.541409][ T6258] input: failed to attach handler leds to device input24, error: -6 [ 175.581139][ T64] usb 2-1: USB disconnect, device number 58 [ 175.588767][ T64] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 175.600240][ T64] ftdi_sio 2-1:0.0: device disconnected [ 175.663459][ T36] audit: type=1400 audit(1750879450.776:625): avc: denied { validate_trans } for pid=6265 comm="syz.1.2013" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 175.663497][ T6267] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 175.696331][ T2320] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 175.726772][ T36] audit: type=1400 audit(1750879450.846:626): avc: denied { map } for pid=6272 comm="syz.1.2015" path="socket:[34832]" dev="sockfs" ino=34832 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 175.819614][ T6286] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.856594][ T2320] usb 5-1: config 0 has an invalid interface number: 144 but max is 0 [ 175.871828][ T2320] usb 5-1: config 0 has no interface number 0 [ 175.886585][ T2320] usb 5-1: New USB device found, idVendor=0e8d, idProduct=3329, bcdDevice=25.0f [ 175.895741][ T2320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.903853][ T2320] usb 5-1: Product: syz [ 175.908715][ T2320] usb 5-1: Manufacturer: syz [ 175.915460][ T2320] usb 5-1: SerialNumber: syz [ 175.924178][ T2320] usb 5-1: config 0 descriptor?? [ 176.051403][ T6311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=6311 comm=syz.0.2028 [ 176.075552][ T6309] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2027'. [ 176.101136][ T6313] rust_binder: Error while translating object. [ 176.101157][ T6314] rust_binder: Error while translating object. [ 176.101165][ T6313] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 176.108336][ T6314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 176.123171][ T6313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1081 [ 176.123564][ T6314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1081 [ 176.146180][ T9] usb 5-1: USB disconnect, device number 32 [ 176.435477][ T584] usb 3-1: device descriptor read/64, error -110 [ 176.547391][ T6343] overlayfs: workdir and upperdir must be separate subtrees [ 176.660729][ T36] audit: type=1400 audit(1750879451.776:627): avc: denied { execheap } for pid=6348 comm="syz.2.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 176.691494][ T584] usb 3-1: device descriptor read/64, error -32 [ 176.708375][ T6349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=6349 comm=syz.2.2039 [ 176.935512][ T584] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 177.055468][ T31] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 177.069092][ T584] usb 3-1: device descriptor read/64, error -32 [ 177.226910][ T31] usb 5-1: not running at top speed; connect to a high speed hub [ 177.239887][ T31] usb 5-1: config 6 has an invalid interface number: 133 but max is 2 [ 177.251885][ T31] usb 5-1: config 6 has an invalid interface number: 154 but max is 2 [ 177.260684][ T31] usb 5-1: config 6 has an invalid interface number: 59 but max is 2 [ 177.269921][ T31] usb 5-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 177.279107][ T31] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 177.290035][ T31] usb 5-1: config 6 has 4 interfaces, different from the descriptor's value: 3 [ 177.299371][ T31] usb 5-1: config 6 has no interface number 1 [ 177.299436][ T6377] netlink: 'syz.0.2050': attribute type 64 has an invalid length. [ 177.315223][ T31] usb 5-1: config 6 has no interface number 2 [ 177.322599][ T584] usb 3-1: device descriptor read/64, error -32 [ 177.329204][ T31] usb 5-1: config 6 has no interface number 3 [ 177.335742][ T31] usb 5-1: config 6 interface 133 altsetting 0 endpoint 0x3 has invalid maxpacket 1015, setting to 64 [ 177.346943][ T31] usb 5-1: config 6 interface 133 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 177.363562][ T31] usb 5-1: config 6 interface 133 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 177.375437][ T31] usb 5-1: config 6 interface 133 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 177.386688][ T31] usb 5-1: config 6 interface 133 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 177.397822][ T31] usb 5-1: config 6 interface 133 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 177.409627][ T31] usb 5-1: config 6 interface 0 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 177.420474][ T31] usb 5-1: config 6 interface 0 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 177.431471][ T31] usb 5-1: config 6 interface 0 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 177.461812][ T31] usb 5-1: config 6 interface 0 altsetting 10 has 4 endpoint descriptors, different from the interface descriptor's value: 11 [ 177.475486][ T31] usb 5-1: too many endpoints for config 6 interface 154 altsetting 182: 85, using maximum allowed: 30 [ 177.492214][ T31] usb 5-1: config 6 interface 154 altsetting 182 has a duplicate endpoint with address 0x6, skipping [ 177.503375][ T31] usb 5-1: config 6 interface 154 altsetting 182 has a duplicate endpoint with address 0x1, skipping [ 177.514531][ T31] usb 5-1: config 6 interface 154 altsetting 182 has an invalid descriptor for endpoint zero, skipping [ 177.528272][ T584] raw-gadget.0 gadget.2: failed to queue resume event [ 177.535180][ T31] usb 5-1: config 6 interface 154 altsetting 182 has an invalid descriptor for endpoint zero, skipping [ 177.546260][ T31] usb 5-1: config 6 interface 154 altsetting 182 has an invalid descriptor for endpoint zero, skipping [ 177.557489][ T31] usb 5-1: config 6 interface 154 altsetting 182 has 7 endpoint descriptors, different from the interface descriptor's value: 85 [ 177.570877][ T31] usb 5-1: config 6 interface 59 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 177.583864][ T31] usb 5-1: config 6 interface 0 has no altsetting 0 [ 177.591496][ T584] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 177.599356][ T31] usb 5-1: config 6 interface 154 has no altsetting 0 [ 177.606294][ T31] usb 5-1: config 6 interface 59 has no altsetting 0 [ 177.614348][ T31] usb 5-1: New USB device found, idVendor=0af0, idProduct=7021, bcdDevice=b2.18 [ 177.623458][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.631582][ T31] usb 5-1: Product: syz [ 177.635792][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 177.642925][ T31] usb 5-1: Manufacturer: 㜵፝ヅ⽸柱ꬤཾ今賓圅웳ൿ䃡퇅렩Ӹ᩟⁲돲㛵븱鬛鷜ꈔ桱鷉੓芡틼岏庍鄦姶↙괤⼻띛ᠼ昐삵ᦻ싇㐺衙襁䎿ꛧ莢꺝囈氵跎ණআ [ 177.662858][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 177.669997][ T31] usb 5-1: SerialNumber: syz [ 177.674635][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 177.681772][ T584] usb 3-1: device descriptor read/8, error -32 [ 177.689109][ T6355] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 177.705493][ T381] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 177.798835][ T6392] netlink: 'syz.2.2055': attribute type 4 has an invalid length. [ 177.825662][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 177.832967][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 177.840296][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 177.847413][ T584] usb 3-1: device descriptor read/8, error -32 [ 177.860291][ T6392] netlink: 'syz.2.2055': attribute type 4 has an invalid length. [ 177.868177][ T381] usb 2-1: Using ep0 maxpacket: 32 [ 177.875243][ T6392] netlink: 'syz.2.2055': attribute type 4 has an invalid length. [ 177.883873][ T381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.894865][ T381] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 177.905108][ T381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.914080][ T381] usb 2-1: config 0 descriptor?? [ 177.921590][ T31] usb 5-1: USB disconnect, device number 33 [ 177.955500][ T584] raw-gadget.0 gadget.2: failed to queue suspend event [ 177.962709][ T584] raw-gadget.0 gadget.2: failed to queue reset event [ 178.035609][ T584] raw-gadget.0 gadget.2: failed to queue resume event [ 178.076986][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2060'. [ 178.105461][ T584] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 178.137419][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 178.149069][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 178.158577][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 178.175530][ T584] usb 3-1: device descriptor read/8, error -32 [ 178.177941][ T6411] can0 (unregistered): slcan off ttyS3. [ 178.232271][ T6426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:119 [ 178.268018][ T36] audit: type=1400 audit(1750879453.386:628): avc: denied { write } for pid=6429 comm="syz.2.2064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 178.315642][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 178.322954][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 178.327636][ T381] usbhid 2-1:0.0: can't add hid device: -71 [ 178.330275][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 178.338116][ T381] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 178.343053][ T584] usb 3-1: device descriptor read/8, error -32 [ 178.356082][ T381] usb 2-1: USB disconnect, device number 59 [ 178.465477][ T584] raw-gadget.0 gadget.2: failed to queue suspend event [ 178.481790][ T336] usb 3-1: USB disconnect, device number 13 [ 178.485294][ T6458] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=26 [ 178.487923][ T6458] rust_binder: Error while translating object. [ 178.489916][ T6460] binder: Bad value for 'max' [ 178.510457][ T336] hid-steam 0003:28DE:1142.0022: Steam wireless receiver disconnected [ 178.517845][ T6458] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 178.518841][ T6458] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:616 [ 178.526297][ T336] raw-gadget.0 gadget.2: failed to queue reset event [ 178.580146][ T6469] __vm_enough_memory: pid: 6469, comm: syz.2.2071, bytes: 70373039144960 not enough memory for the allocation [ 178.635544][ T336] raw-gadget.0 gadget.2: failed to queue resume event [ 178.650950][ T36] audit: type=1326 audit(1750879453.766:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab8b8e929 code=0x50000 [ 178.691787][ T36] audit: type=1326 audit(1750879453.766:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab8b8e929 code=0x50000 [ 178.732969][ T336] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 178.742281][ T6485] rust_binder: Write failure EINVAL in pid:144 [ 178.744244][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 178.758313][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 178.766051][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 178.773176][ T336] raw-gadget.0 gadget.2: failed to queue reset event [ 178.786584][ T6490] rust_binder: Write failure EINVAL in pid:623 [ 178.845515][ T336] raw-gadget.0 gadget.2: failed to queue resume event [ 178.905507][ T336] usb 3-1: device descriptor read/64, error -32 [ 178.913985][ T6502] rust_binder: Error while translating object. [ 178.914015][ T6502] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 178.945530][ T6502] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:148 [ 179.015607][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 179.033544][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 179.040704][ T6511] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 179.050089][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 179.056057][ T6515] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 179.057438][ T336] raw-gadget.0 gadget.2: failed to queue reset event [ 179.135480][ T336] raw-gadget.0 gadget.2: failed to queue resume event [ 179.205468][ T336] usb 3-1: device descriptor read/64, error -32 [ 179.245580][ T36] kauditd_printk_skb: 3334 callbacks suppressed [ 179.245596][ T36] audit: type=1326 audit(1750879454.366:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7ab8b8d3df code=0x50000 [ 179.276346][ T36] audit: type=1326 audit(1750879454.366:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab8b8e929 code=0x50000 [ 179.299558][ T6534] netlink: 'syz.2.2092': attribute type 63 has an invalid length. [ 179.305492][ T36] audit: type=1326 audit(1750879454.366:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab8b8e929 code=0x50000 [ 179.307423][ T6534] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2092'. [ 179.330894][ T36] audit: type=1326 audit(1750879454.366:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab8b8e929 code=0x50000 [ 179.339506][ T336] raw-gadget.0 gadget.2: failed to queue suspend event [ 179.363184][ T36] audit: type=1326 audit(1750879454.366:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab8b8e929 code=0x50000 [ 179.382831][ T6535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.394660][ T36] audit: type=1326 audit(1750879454.366:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab8b8e929 code=0x50000 [ 179.401259][ T336] raw-gadget.0 gadget.2: failed to queue reset event [ 179.427067][ T36] audit: type=1326 audit(1750879454.366:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab8b8e929 code=0x50000 [ 179.430958][ T6534] gretap0: entered allmulticast mode [ 179.454093][ T381] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 179.462646][ T6535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.467404][ T36] audit: type=1326 audit(1750879454.366:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab8b8e929 code=0x50000 [ 179.493484][ T6534] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 179.500826][ T36] audit: type=1326 audit(1750879454.366:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab8b8e929 code=0x50000 [ 179.525517][ T336] raw-gadget.0 gadget.2: failed to queue resume event [ 179.537109][ T36] audit: type=1326 audit(1750879454.366:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab8b8e929 code=0x50000 [ 179.573589][ T6537] fuse: Unknown parameter 'q~"|mc(Ά6_օ;Lx೩$ Z>)' [ 179.605529][ T336] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 179.623406][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 179.630913][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 179.638223][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 179.645386][ T336] raw-gadget.0 gadget.2: failed to queue reset event [ 179.725460][ T336] raw-gadget.0 gadget.2: failed to queue resume event [ 179.776501][ T6564] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.776553][ T6564] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:648 [ 179.786466][ T336] usb 3-1: device descriptor read/64, error -32 [ 179.905603][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 179.912898][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 179.920333][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 179.927758][ T336] raw-gadget.0 gadget.2: failed to queue reset event [ 179.995635][ T336] raw-gadget.0 gadget.2: failed to queue resume event [ 180.055463][ T31] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 180.063298][ T336] usb 3-1: device descriptor read/64, error -32 [ 180.129415][ T6575] rust_binder: inc_ref_done called when no active inc_refs [ 180.155458][ T381] usb 2-1: device descriptor read/64, error -71 [ 180.174025][ T6577] rust_binder: Got transaction with invalid offset. [ 180.174074][ T6577] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 180.185471][ T336] raw-gadget.0 gadget.2: failed to queue suspend event [ 180.201890][ T6577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:173 [ 180.214737][ T336] usb usb3-port1: attempt power cycle [ 180.230756][ T6579] batadv_slave_0: entered promiscuous mode [ 180.236691][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 180.243326][ T6579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.252350][ T336] raw-gadget.0 gadget.2: failed to queue disconnect event [ 180.259835][ T6579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.267842][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.278913][ T336] raw-gadget.0 gadget.2: failed to queue reset event [ 180.286324][ T6578] batadv_slave_0: left promiscuous mode [ 180.292002][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.302091][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 180.311197][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.320892][ T31] usb 5-1: config 0 descriptor?? [ 180.327973][ T31] hub 5-1:0.0: USB hub found [ 180.365454][ T336] raw-gadget.0 gadget.2: failed to queue resume event [ 180.373156][ T336] raw-gadget.0 gadget.2: failed to queue reset event [ 180.435489][ T381] usb 2-1: Using ep0 maxpacket: 32 [ 180.446793][ T381] usb 2-1: unable to get BOS descriptor or descriptor too short [ 180.466252][ T381] usb 2-1: config 1 interface 0 altsetting 25 bulk endpoint 0x82 has invalid maxpacket 32 [ 180.485578][ T381] usb 2-1: config 1 interface 0 has no altsetting 0 [ 180.493736][ T381] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.513056][ T381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.521195][ T381] usb 2-1: Product: syz [ 180.525673][ T381] usb 2-1: Manufacturer: syz [ 180.530440][ T381] usb 2-1: SerialNumber: syz [ 180.535479][ T31] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 180.544681][ T6562] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 180.555272][ T31] usbhid 5-1:0.0: can't add hid device: -32 [ 180.563989][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 180.585502][ T336] raw-gadget.0 gadget.2: failed to queue resume event [ 180.645459][ T336] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 180.665602][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 180.672886][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 180.681001][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 180.688522][ T336] usb 3-1: device descriptor read/8, error -32 [ 180.815732][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 180.823108][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 180.830481][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 180.837626][ T336] usb 3-1: device descriptor read/8, error -32 [ 180.858280][ T6587] SELinux: security_context_str_to_sid (sytem_uݲҹ :) failed with errno=-22 [ 180.875573][ T10] usb 5-1: USB disconnect, device number 34 [ 180.927003][ T6589] SELinux: security_context_str_to_sid () failed with errno=-22 [ 180.946095][ T336] raw-gadget.0 gadget.2: failed to queue suspend event [ 180.954822][ T336] raw-gadget.0 gadget.2: failed to queue reset event [ 181.045475][ T336] raw-gadget.0 gadget.2: failed to queue resume event [ 181.115462][ T336] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 181.136199][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 181.147573][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 181.154861][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 181.162021][ T336] usb 3-1: device descriptor read/8, error -32 [ 181.164089][ T6562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.186768][ T6562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.216612][ T6562] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 181.275947][ T6597] fuse: Unknown parameter 'fd-P TmHQCz8Ҷbϋ5⮭-*wե!:bwTe7Rjcw6SW*' [ 181.305612][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 181.312949][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 181.320241][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 181.327442][ T336] usb 3-1: device descriptor read/8, error -32 [ 181.428798][ T381] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 181.448503][ T336] raw-gadget.0 gadget.2: failed to queue suspend event [ 181.450024][ T381] usb 2-1: USB disconnect, device number 60 [ 181.455987][ T336] usb usb3-port1: unable to enumerate USB device [ 181.784624][ T6627] rust_binder: Write failure EFAULT in pid:181 [ 181.857593][ T6642] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 181.863840][ T6642] rust_binder: Error while translating object. [ 181.874456][ T6642] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 181.880701][ T6642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 182.030999][ T6668] __vm_enough_memory: pid: 6668, comm: syz.2.2142, bytes: 70373039144960 not enough memory for the allocation [ 182.080542][ T6674] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 182.092136][ T6674] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 182.115796][ T6676] rust_binder: Write failure EINVAL in pid:197 [ 182.156000][ T6687] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.400458][ T6748] overlayfs: failed to resolve './file1': -2 [ 182.675472][ T31] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 182.826607][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.837650][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.847470][ T31] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 182.856621][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.865372][ T31] usb 5-1: config 0 descriptor?? [ 183.359738][ T6768] rust_binder: Write failure EINVAL in pid:223 [ 183.474787][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 183.487847][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 183.496911][ T31] usb 5-1: USB disconnect, device number 35 [ 184.225592][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 184.385453][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 184.396164][ T10] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 184.404357][ T10] usb 5-1: config 0 has no interface number 0 [ 184.425449][ T10] usb 5-1: config 0 interface 132 has no altsetting 0 [ 184.433775][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 184.443163][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.451444][ T10] usb 5-1: Product: syz [ 184.455811][ T10] usb 5-1: Manufacturer: syz [ 184.460468][ T10] usb 5-1: SerialNumber: syz [ 184.466602][ T10] usb 5-1: config 0 descriptor?? [ 184.474534][ T10] cdc_subset 5-1:0.132: probe with driver cdc_subset failed with error -22 [ 184.677226][ T6801] binder: Bad value for 'max' [ 184.682496][ T10] usb 5-1: USB disconnect, device number 36 [ 184.978128][ T36] kauditd_printk_skb: 25545 callbacks suppressed [ 184.978149][ T36] audit: type=1326 audit(1750879460.096:29520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.0.2190" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ab8b8e929 code=0x0 [ 185.184370][ T6833] rust_binder: Error while translating object. [ 185.184418][ T6833] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 185.195558][ T6833] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:236 [ 185.305773][ T6842] rust_binder: Write failure EINVAL in pid:244 [ 185.476053][ T336] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 185.563047][ T6851] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 185.595470][ T2320] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 185.646628][ T336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 185.657673][ T336] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 185.670987][ T336] usb 5-1: New USB device found, idVendor=1477, idProduct=1024, bcdDevice= 0.00 [ 185.683270][ T336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.698595][ T336] usb 5-1: config 0 descriptor?? [ 185.704883][ T6840] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 185.780807][ T2320] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 185.790059][ T2320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.811768][ T2320] usb 2-1: config 0 descriptor?? [ 185.848693][ T6862] rust_binder: Error while translating object. [ 185.848726][ T6862] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 185.855099][ T6862] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:256 [ 185.926833][ T584] hid-generic C98F:0003:0000.0024: unknown main item tag 0x0 [ 185.949639][ T584] hid-generic C98F:0003:0000.0024: unknown main item tag 0x0 [ 185.960668][ T584] hid-generic C98F:0003:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz1 [ 185.980826][ T36] audit: type=1326 audit(1750879461.096:29521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6880 comm="syz.0.2208" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ab8b8e929 code=0x0 [ 186.017675][ T6879] fido_id[6879]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 186.033910][ T6884] binder: Unknown parameter 'depconte' [ 186.055817][ T6886] rust_binder: Fixups oob 154 158 203 174 [ 186.055844][ T6886] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 186.061737][ T6886] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 186.070232][ T6886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:269 [ 186.115241][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.133643][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.141225][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.148761][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.156393][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.163907][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.171376][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.178903][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.186386][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.193876][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.201375][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x2 [ 186.208935][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.216446][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.224703][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.233129][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.241400][ T2320] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 186.253761][ T2320] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 186.269402][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.277207][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.284931][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.293748][ T2320] asix 2-1:0.0: probe with driver asix failed with error -71 [ 186.302324][ T2320] usb 2-1: USB disconnect, device number 61 [ 186.308409][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.316514][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.325479][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.332915][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.345453][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.357342][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.364783][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.372835][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.381480][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.388998][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.398392][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.413952][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.424056][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.431534][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.439036][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.446593][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.454123][ T336] hid-generic 0003:1477:1024.0025: unknown main item tag 0x0 [ 186.458933][ T6893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.474348][ T336] hid-generic 0003:1477:1024.0025: hidraw0: USB HID v0.00 Device [HID 1477:1024] on usb-dummy_hcd.4-1/input0 [ 186.481611][ T6893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.489868][ T336] usb 5-1: USB disconnect, device number 37 [ 186.510707][ T6896] fido_id[6896]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 186.852643][ T6906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:692 [ 186.886318][ T36] audit: type=1400 audit(1750879462.006:29522): avc: denied { shutdown } for pid=6909 comm="syz.0.2218" lport=254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.921411][ T6916] rust_binder: Write failure EINVAL in pid:692 [ 186.998019][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2222'. [ 187.055644][ T6933] binder: Unknown parameter '@5%:LRu' [ 187.075435][ T36] audit: type=1326 audit(1750879462.186:29523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6934 comm="syz.0.2225" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ab8b8e929 code=0x0 [ 187.108991][ T36] audit: type=1326 audit(1750879462.226:29524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.1.2226" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd6d058e929 code=0x0 [ 187.160263][ T6939] FAULT_INJECTION: forcing a failure. [ 187.160263][ T6939] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 187.175475][ T6939] CPU: 1 UID: 0 PID: 6939 Comm: syz.1.2226 Not tainted 6.12.30-syzkaller-g030e00a2d78c #0 57efd5a98e1182d97bd5f975427dc401009108c9 [ 187.175521][ T6939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.175542][ T6939] Call Trace: [ 187.175550][ T6939] [ 187.175561][ T6939] __dump_stack+0x21/0x30 [ 187.175593][ T6939] dump_stack_lvl+0x10c/0x190 [ 187.175625][ T6939] ? __cfi_dump_stack_lvl+0x10/0x10 [ 187.175655][ T6939] dump_stack+0x19/0x20 [ 187.175681][ T6939] should_fail_ex+0x3d9/0x530 [ 187.175707][ T6939] should_fail+0xf/0x20 [ 187.175732][ T6939] should_fail_usercopy+0x1e/0x30 [ 187.175761][ T6939] _copy_to_user+0x24/0xa0 [ 187.175794][ T6939] simple_read_from_buffer+0xed/0x160 [ 187.175818][ T6939] proc_fail_nth_read+0x19e/0x210 [ 187.175842][ T6939] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 187.175865][ T6939] ? rwsem_read_trylock+0x2b1/0x660 [ 187.175891][ T6939] ? make_vfsgid+0x4d/0xa0 [ 187.175917][ T6939] ? bpf_lsm_file_permission+0xd/0x20 [ 187.175944][ T6939] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 187.175968][ T6939] vfs_read+0x278/0xb60 [ 187.175995][ T6939] ? __cfi_atime_needs_update+0x10/0x10 [ 187.176022][ T6939] ? __cfi_vfs_read+0x10/0x10 [ 187.176049][ T6939] ? __kasan_check_write+0x18/0x20 [ 187.176088][ T6939] ? mutex_lock+0x92/0x1c0 [ 187.176114][ T6939] ? __cfi_mutex_lock+0x10/0x10 [ 187.176139][ T6939] ? __fget_files+0x2c5/0x340 [ 187.176172][ T6939] ksys_read+0x141/0x250 [ 187.176197][ T6939] ? __cfi_filldir64+0x10/0x10 [ 187.176217][ T6939] ? __cfi_ksys_read+0x10/0x10 [ 187.176246][ T6939] ? __kasan_check_read+0x15/0x20 [ 187.176272][ T6939] __x64_sys_read+0x7f/0x90 [ 187.176300][ T6939] x64_sys_call+0x2638/0x2ee0 [ 187.176329][ T6939] do_syscall_64+0x58/0xf0 [ 187.176348][ T6939] ? clear_bhb_loop+0x50/0xa0 [ 187.176373][ T6939] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 187.176396][ T6939] RIP: 0033:0x7fd6d058d33c [ 187.176421][ T6939] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 187.176441][ T6939] RSP: 002b:00007fd6d13b9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 187.176473][ T6939] RAX: ffffffffffffffda RBX: 00007fd6d07b6080 RCX: 00007fd6d058d33c [ 187.176491][ T6939] RDX: 000000000000000f RSI: 00007fd6d13b90a0 RDI: 0000000000000005 [ 187.176512][ T6939] RBP: 00007fd6d13b9090 R08: 0000000000000000 R09: 0000000000000000 [ 187.176527][ T6939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.176541][ T6939] R13: 0000000000000000 R14: 00007fd6d07b6080 R15: 00007ffcf641dc28 [ 187.176559][ T6939] [ 187.195493][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 187.476870][ T36] audit: type=1326 audit(1750879462.596:29525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.2.2228" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbbf98e929 code=0x0 [ 187.550524][ T6951] SELinux: security_context_str_to_sid () failed with errno=-22 [ 187.576397][ T10] usb 5-1: device descriptor read/64, error -71 [ 187.835483][ T10] usb 5-1: device descriptor read/64, error -71 [ 187.924803][ T6957] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.932323][ T6957] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.940121][ T6957] bridge_slave_0: entered allmulticast mode [ 187.946686][ T6957] bridge_slave_0: entered promiscuous mode [ 187.953460][ T6957] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.960714][ T6957] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.967919][ T6957] bridge_slave_1: entered allmulticast mode [ 187.974431][ T6957] bridge_slave_1: entered promiscuous mode [ 188.042485][ T6980] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2241'. [ 188.048904][ T6957] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.058606][ T6957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.065922][ T6957] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.070882][ T36] audit: type=1326 audit(1750879463.186:29526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.0.2242" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ab8b8e929 code=0x0 [ 188.072964][ T6957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.096545][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 188.122040][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.129618][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.139345][ T6744] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.146449][ T6744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.157601][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.164749][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.192145][ T6957] veth0_vlan: entered promiscuous mode [ 188.204563][ T6957] veth1_macvtap: entered promiscuous mode [ 188.235681][ T10] usb 5-1: device descriptor read/64, error -71 [ 188.271205][ T36] audit: type=1400 audit(1750879463.386:29527): avc: denied { lock } for pid=6984 comm="syz.5.2233" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 188.296000][ T6985] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 188.296038][ T6985] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:2 [ 188.320935][ T6987] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 188.330663][ T6988] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 188.339459][ T6990] can0: slcan on ttyS3. [ 188.339817][ T6988] rust_binder: Error while translating object. [ 188.353903][ T6987] rust_binder: Error while translating object. [ 188.361720][ T6987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 188.368945][ T6988] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 188.379110][ T6987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:283 [ 188.390103][ T6988] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:283 [ 188.446473][ T7008] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 188.463588][ T7008] rust_binder: Write failure EINVAL in pid:286 [ 188.485744][ T10] usb 5-1: device descriptor read/64, error -71 [ 188.530757][ T7018] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.530786][ T7018] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.547776][ T36] audit: type=1326 audit(1750879463.666:29528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.2.2251" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbbf98e929 code=0x0 [ 188.565517][ T7018] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.577439][ T7018] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.625557][ T10] usb usb5-port1: attempt power cycle [ 188.935333][ T7036] binder: Bad value for 'stats' [ 188.985481][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 189.019716][ T10] usb 5-1: device descriptor read/8, error -71 [ 189.071685][ T7063] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 189.157565][ T10] usb 5-1: device descriptor read/8, error -71 [ 189.163832][ T36] audit: type=1326 audit(1750879464.276:29529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7084 comm="syz.0.2270" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ab8b8e929 code=0x0 [ 189.425672][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 189.446597][ T10] usb 5-1: device descriptor read/8, error -71 [ 189.576778][ T10] usb 5-1: device descriptor read/8, error -71 [ 189.685906][ T10] usb usb5-port1: unable to enumerate USB device [ 189.765954][ T7099] exFAT-fs (rnullb0): invalid boot record signature [ 189.772575][ T7099] exFAT-fs (rnullb0): failed to read boot sector [ 189.778949][ T7099] exFAT-fs (rnullb0): failed to recognize exfat type [ 189.945017][ T7104] netlink: 'syz.2.2275': attribute type 4 has an invalid length. [ 189.961116][ T7104] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2275'. [ 190.071176][ T7108] binder: Bad value for 'defcontext' [ 190.093694][ T7113] rust_binder: Error while translating object. [ 190.093733][ T7113] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 190.100168][ T7113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:311 [ 190.114321][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 190.114343][ T36] audit: type=1326 audit(1750879465.216:29543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7114 comm="syz.4.2279" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb76b58e929 code=0x0 [ 190.256365][ T7125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.265086][ T7125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.588838][ T7138] FAT-fs (rnullb0): bogus number of reserved sectors [ 190.595611][ T7138] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 190.619338][ T7140] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 190.917822][ T7146] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=26 [ 190.925788][ T7146] rust_binder: Error while translating object. [ 190.934533][ T7146] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 190.940804][ T7146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:336 [ 191.282912][ T7167] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:345 [ 191.651139][ T7194] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2302'. [ 191.672769][ T7194] netlink: 'syz.2.2302': attribute type 11 has an invalid length. [ 191.776767][ T7208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2307'. [ 192.255477][ T584] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 192.327884][ T36] audit: type=1400 audit(1750879467.446:29544): avc: denied { getopt } for pid=7242 comm="syz.2.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.405499][ T584] usb 6-1: Using ep0 maxpacket: 16 [ 192.412334][ T584] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 192.422267][ T584] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 192.432701][ T584] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.441839][ T584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 192.449881][ T584] usb 6-1: SerialNumber: syz [ 192.455825][ T7221] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 192.463018][ T7221] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 192.672059][ T7221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.680759][ T7221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.694243][ T584] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 192.703166][ T584] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 192.715559][ T584] usb 6-1: USB disconnect, device number 2 [ 192.918768][ T7280] incfs: Error accessing: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 192.919039][ T7280] incfs: mount failed -36 [ 193.056517][ T36] audit: type=1326 audit(1750879468.176:29545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.0.2337" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ab8b8e929 code=0x7ffe0000 [ 193.485454][ T381] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 193.514368][ T7306] /dev/rnullb0: Can't lookup blockdev [ 193.646700][ T381] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 193.655863][ T381] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.664420][ T381] usb 6-1: config 0 descriptor?? [ 193.820526][ T36] audit: type=1326 audit(1750879468.936:29546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.0.2347" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ab8b8e929 code=0x0 [ 194.072165][ T381] usb 6-1: Cannot read MAC address [ 194.077400][ T381] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 194.274974][ T381] usb 6-1: USB disconnect, device number 3 [ 194.797469][ T7343] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.811438][ T6744] tipc: Subscription rejected, illegal request [ 194.892283][ T7349] Invalid ELF header type: 2 != 1 [ 194.898395][ T7349] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 194.898422][ T7349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:719 [ 194.908245][ T7349] Invalid ELF header type: 2 != 1 [ 195.085473][ T381] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 195.165452][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 195.198526][ T36] audit: type=1326 audit(1750879470.316:29547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.0.2362" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ab8b8e929 code=0x0 [ 195.236550][ T381] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.246762][ T381] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 195.256561][ T381] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 195.265881][ T381] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 195.273899][ T381] usb 6-1: SerialNumber: syz [ 195.289169][ T36] audit: type=1326 audit(1750879470.406:29548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.2.2363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7fdbbf98e929 code=0x0 [ 195.326470][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.337539][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.347409][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.360431][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.369856][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.378966][ T9] usb 5-1: config 0 descriptor?? [ 195.480816][ T7347] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.486703][ T381] usb 6-1: 0:2 : does not exist [ 195.498311][ T381] usb 6-1: unit 255 not found! [ 195.506780][ T381] usb 6-1: USB disconnect, device number 4 [ 195.518860][ T3145] udevd[3145]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 195.568877][ T7382] overlayfs: failed to clone lowerpath [ 195.577205][ T7382] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2370'. [ 195.595028][ T9] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 195.614241][ T9] plantronics 0003:047F:FFFF.0026: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 195.617032][ T7386] SELinux: Context system_u:object_r:autofs_device_t:s0 is not valid (left unmapped). [ 195.629302][ T9] usb 5-1: USB disconnect, device number 42 [ 195.645708][ T36] audit: type=1400 audit(1750879470.756:29549): avc: denied { relabelto } for pid=7385 comm="syz.4.2371" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:autofs_device_t:s0" [ 195.660769][ T7387] fido_id[7387]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 195.674373][ T36] audit: type=1400 audit(1750879470.756:29550): avc: denied { associate } for pid=7385 comm="syz.4.2371" name="rnullb0" dev="devtmpfs" ino=31 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:autofs_device_t:s0" [ 195.715986][ T36] audit: type=1400 audit(1750879470.756:29551): avc: denied { create } for pid=7385 comm="syz.4.2371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 195.746335][ T7393] tmpfs: Bad value for 'nr_inodes' [ 195.751968][ T7393] FAT-fs (rnullb0): bogus number of reserved sectors [ 195.758742][ T7393] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 195.876328][ T7396] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 196.075268][ T7404] overlay: Unknown parameter 'fowner' [ 196.085246][ T36] audit: type=1400 audit(1750879471.196:29552): avc: denied { setattr } for pid=7403 comm="syz.5.2376" name="PINGv6" dev="sockfs" ino=38440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 196.235982][ T36] audit: type=1326 audit(1750879471.356:29553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7425 comm="syz.5.2384" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08af78e929 code=0x0 [ 196.609472][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.609502][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.616149][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.622679][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.629221][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.635747][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.642277][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.648987][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.655633][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.662080][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.668594][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.675100][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.681716][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.688411][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.695068][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.701585][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.708110][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.714765][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.722112][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.722315][ T7451] tmpfs: Bad value for 'uid' [ 196.728630][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.728652][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.735757][ T7451] tmpfs: Bad value for 'uid' [ 196.740017][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.762194][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.768709][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.775330][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.781821][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.790824][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.797321][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.803776][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.810626][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.819742][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.826312][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.827324][ T7457] tmpfs: Unknown parameter '0xffffffffffffffff' [ 196.832769][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.832789][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.854033][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.862131][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.868656][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.875217][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.881928][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.888594][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.896888][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.909386][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.922531][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.932815][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.942707][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.949642][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.956422][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.963054][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.969758][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.982063][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.988949][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.995713][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.002386][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.008886][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.015342][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.021853][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.028388][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.034844][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.041340][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.048031][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.052883][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2406'. [ 197.054686][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.062658][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2406'. [ 197.075769][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.085326][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.092044][ T7446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.152158][ T7498] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2410'. [ 197.171986][ T7500] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2411'. [ 197.238219][ T7506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.238727][ T7506] rust_binder: Got transaction with invalid offset. [ 197.245206][ T7506] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 197.253008][ T7506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53 [ 197.272222][ T7511] rust_binder: inc_ref_done called when no active inc_refs [ 197.333815][ T36] audit: type=1326 audit(1750879472.446:29554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7521 comm="syz.0.2418" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ab8b8e929 code=0x0 [ 197.454474][ T7526] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.456735][ T36] audit: type=1400 audit(1750879472.576:29555): avc: denied { write } for pid=7525 comm="syz.5.2419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 197.975470][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 198.105489][ T9] usb 5-1: device descriptor read/64, error -71 [ 198.299747][ T7544] tipc: Enabling of bearer rejected, failed to enable media [ 198.331333][ T7547] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.345531][ T9] usb 5-1: device descriptor read/64, error -71 [ 198.419724][ T7551] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.434239][ T7553] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.441026][ T7553] rust_binder: Error while translating object. [ 198.447545][ T7553] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 198.453847][ T7553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:73 [ 198.481138][ T7555] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.506195][ T7557] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.513007][ T7557] rust_binder: Write failure EINVAL in pid:77 [ 198.605488][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 198.686742][ T36] audit: type=1326 audit(1750879473.806:29556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.0.2433" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ab8b8e929 code=0x0 [ 198.745464][ T9] usb 5-1: device descriptor read/64, error -71 [ 198.985448][ T9] usb 5-1: device descriptor read/64, error -71 [ 199.095607][ T9] usb usb5-port1: attempt power cycle [ 199.435453][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 199.456485][ T9] usb 5-1: device descriptor read/8, error -71 [ 199.586552][ T9] usb 5-1: device descriptor read/8, error -71 [ 199.803431][ T7602] netlink: 388 bytes leftover after parsing attributes in process `syz.5.2445'. [ 199.825611][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 199.846601][ T9] usb 5-1: device descriptor read/8, error -71 [ 199.976560][ T9] usb 5-1: device descriptor read/8, error -71 [ 200.035498][ T381] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 200.085591][ T9] usb usb5-port1: unable to enumerate USB device [ 200.165457][ T381] usb 6-1: device descriptor read/64, error -71 [ 200.405458][ T381] usb 6-1: device descriptor read/64, error -71 [ 200.645586][ T381] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 200.716995][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 200.717015][ T36] audit: type=1400 audit(1750879475.836:29563): avc: denied { lock } for pid=7620 comm="syz.0.2452" path="socket:[38792]" dev="sockfs" ino=38792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 200.775447][ T381] usb 6-1: device descriptor read/64, error -71 [ 200.829028][ T36] audit: type=1400 audit(1750879475.946:29564): avc: denied { sys_module } for pid=7625 comm="syz.4.2454" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 200.896720][ T7631] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2456'. [ 200.940158][ T7636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:772 [ 200.940496][ T7637] rust_binder: Write failure EINVAL in pid:772 [ 200.974537][ T7639] rust_binder: Error while translating object. [ 200.984126][ T7639] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 200.996404][ T7639] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:776 [ 201.035462][ T381] usb 6-1: device descriptor read/64, error -71 [ 201.055786][ T7643] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:778 [ 201.058731][ T7643] rust_binder: Error while translating object. [ 201.075656][ T7643] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 201.083402][ T7643] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:778 [ 201.155555][ T381] usb usb6-port1: attempt power cycle [ 201.201086][ T7667] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 201.220234][ T36] audit: type=1326 audit(1750879476.336:29565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7672 comm="syz.2.2468" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbbf98e929 code=0x0 [ 201.222848][ T7667] rust_binder: Write failure EINVAL in pid:783 [ 201.245491][ T7675] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.267574][ T7682] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 201.291671][ T7688] exFAT-fs (rnullb0): invalid boot record signature [ 201.306617][ T7688] exFAT-fs (rnullb0): failed to read boot sector [ 201.313212][ T7688] exFAT-fs (rnullb0): failed to recognize exfat type [ 201.505452][ T381] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 201.526590][ T381] usb 6-1: device descriptor read/8, error -71 [ 201.656528][ T381] usb 6-1: device descriptor read/8, error -71 [ 201.895477][ T381] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 201.916496][ T381] usb 6-1: device descriptor read/8, error -71 [ 202.046563][ T381] usb 6-1: device descriptor read/8, error -71 [ 202.155539][ T381] usb usb6-port1: unable to enumerate USB device [ 202.415130][ T7707] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 202.415151][ T7707] rust_binder: Error while translating object. [ 202.423927][ T7707] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 202.430361][ T7707] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:800 [ 202.485443][ T381] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 202.625481][ T381] usb 6-1: device descriptor read/64, error -71 [ 202.816806][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2477'. [ 202.827489][ T36] audit: type=1400 audit(1750879477.946:29566): avc: denied { execute } for pid=7708 comm="syz.5.2477" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 202.865469][ T381] usb 6-1: device descriptor read/64, error -71 [ 202.899601][ T7715] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.899968][ T7715] rust_binder: inc_ref_done called when no active inc_refs [ 202.906583][ T7715] rust_binder: Write failure EINVAL in pid:117 [ 202.980800][ T7720] input: syz0 as /devices/virtual/input/input26 [ 202.999339][ T7720] binder: Unknown parameter 'nscontext' [ 203.753076][ T7733] netlink: 'syz.4.2486': attribute type 4 has an invalid length. [ 203.761317][ T7733] netlink: 'syz.4.2486': attribute type 4 has an invalid length. [ 203.824845][ T7741] /dev/md0: Can't lookup blockdev [ 203.922605][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2492'. [ 203.935542][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2492'. [ 204.175520][ T2320] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 204.200127][ T7763] tipc: Enabling of bearer rejected, failed to enable media [ 204.307577][ T7783] 9pnet_fd: Insufficient options for proto=fd [ 204.325667][ T2320] usb 6-1: Using ep0 maxpacket: 32 [ 204.331901][ T2320] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 204.346393][ T2320] usb 6-1: config 1 has no interface number 1 [ 204.352487][ T2320] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 204.375711][ T2320] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 204.388528][ T2320] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 204.395720][ T7783] SELinux: security_context_str_to_sid (unconf) failed with errno=-22 [ 204.397687][ T2320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.413963][ T2320] usb 6-1: Product: syz [ 204.418327][ T2320] usb 6-1: Manufacturer: syz [ 204.422924][ T2320] usb 6-1: SerialNumber: syz [ 204.576343][ T7788] rust_binder: Error while translating object. [ 204.576371][ T7788] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 204.582640][ T7788] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:814 [ 204.632705][ T36] audit: type=1326 audit(1750879479.746:29567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7789 comm="syz.4.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76b58e929 code=0x7ffc0000 [ 204.633094][ T2320] usb 6-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 204.652275][ T36] audit: type=1326 audit(1750879479.756:29568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7789 comm="syz.4.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb76b58e929 code=0x7ffc0000 [ 204.666990][ T2320] usb 6-1: found format II with max.bitrate = 0, frame size=7 [ 204.678328][ T36] audit: type=1326 audit(1750879479.756:29569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7789 comm="syz.4.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76b58e929 code=0x7ffc0000 [ 204.698968][ T2320] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 204.706240][ T36] audit: type=1326 audit(1750879479.756:29570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7789 comm="syz.4.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb76b590847 code=0x7ffc0000 [ 204.759323][ T36] audit: type=1326 audit(1750879479.756:29571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7789 comm="syz.4.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb76b5907bc code=0x7ffc0000 [ 204.768867][ T2320] usb 6-1: USB disconnect, device number 11 [ 204.785788][ T36] audit: type=1326 audit(1750879479.756:29572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7789 comm="syz.4.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb76b5906f4 code=0x7ffc0000 [ 204.820748][ T3145] udevd[3145]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 204.843914][ T7795] rust_binder: Write failure EFAULT in pid:818 [ 204.938446][ T7805] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:826 [ 204.954706][ T7807] exFAT-fs (rnullb0): invalid boot record signature [ 204.970670][ T7807] exFAT-fs (rnullb0): failed to read boot sector [ 204.977895][ T7807] exFAT-fs (rnullb0): failed to recognize exfat type [ 204.997475][ T7809] netlink: 'syz.4.2514': attribute type 11 has an invalid length. [ 205.005344][ T7809] netlink: 'syz.4.2514': attribute type 1 has an invalid length. [ 205.013136][ T7809] netlink: 3593 bytes leftover after parsing attributes in process `syz.4.2514'. [ 205.023074][ T7809] rust_binder: Error in use_page_slow: ESRCH [ 205.023097][ T7809] rust_binder: use_range failure ESRCH [ 205.029190][ T7809] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 205.034664][ T7809] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 205.043071][ T7809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:830 [ 205.298587][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 205.408505][ T7829] overlayfs: failed to resolve './file1': -2 [ 205.466465][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.477591][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.487595][ T9] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 205.505339][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.514856][ T9] usb 5-1: config 0 descriptor?? [ 205.599888][ T7847] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.600353][ T7847] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 205.607030][ T7847] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:141 [ 205.637594][ T7850] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.651155][ T7850] rust_binder: inc_ref_done called when no active inc_refs [ 205.777460][ T7860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.808652][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 205.808674][ T36] audit: type=1400 audit(1750879480.926:29603): avc: denied { ioctl } for pid=7862 comm="syz.5.2534" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x7211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 205.898147][ T36] audit: type=1400 audit(1750879481.016:29604): avc: granted { setsecparam } for pid=7862 comm="syz.5.2534" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 206.041963][ T36] audit: type=1400 audit(1750879481.156:29605): avc: denied { accept } for pid=7876 comm="syz.0.2539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 206.126199][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 206.137280][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 206.156339][ T9] usb 5-1: USB disconnect, device number 47 [ 206.578219][ T36] audit: type=1326 audit(1750879481.696:29606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.0.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab8b8e929 code=0x7ffc0000 [ 206.601902][ T36] audit: type=1326 audit(1750879481.696:29607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.0.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7ab8b8e929 code=0x7ffc0000 [ 206.628939][ T36] audit: type=1326 audit(1750879481.696:29608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.0.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab8b8e929 code=0x7ffc0000 [ 206.667490][ T36] audit: type=1326 audit(1750879481.696:29609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.0.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab8b8e929 code=0x7ffc0000 [ 206.692635][ T36] audit: type=1326 audit(1750879481.696:29610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.0.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab8b8e929 code=0x7ffc0000 [ 206.720526][ T7894] binder: Binderfs stats mode cannot be changed during a remount [ 206.730115][ T36] audit: type=1326 audit(1750879481.696:29611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.0.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ab8b8e929 code=0x7ffc0000 [ 206.753966][ T36] audit: type=1326 audit(1750879481.696:29612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.0.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab8b8e929 code=0x7ffc0000 [ 206.821541][ T7904] rust_binder: Write failure EFAULT in pid:837 [ 206.914827][ T7918] overlayfs: failed to clone lowerpath [ 207.105505][ T2320] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 207.265674][ T2320] usb 6-1: Using ep0 maxpacket: 8 [ 207.272261][ T2320] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 207.281624][ T2320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.291027][ T2320] usb 6-1: config 0 descriptor?? [ 207.345478][ T584] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 207.515454][ T584] usb 5-1: Using ep0 maxpacket: 32 [ 207.526039][ T584] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 207.534125][ T584] usb 5-1: config 0 has no interface number 0 [ 207.548773][ T584] usb 5-1: config 0 interface 2 has no altsetting 0 [ 207.559036][ T584] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 207.568984][ T584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.577424][ T584] usb 5-1: Product: syz [ 207.582274][ T584] usb 5-1: Manufacturer: syz [ 207.588094][ T584] usb 5-1: SerialNumber: syz [ 207.600910][ T584] usb 5-1: config 0 descriptor?? [ 207.820284][ T584] usb 5-1: invalid MIDI out EP 0 [ 207.834756][ T584] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 207.851239][ T584] usb 5-1: USB disconnect, device number 48 [ 207.866920][ T3146] udevd[3146]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 207.902577][ T2320] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 207.915634][ T2320] asix 6-1:0.0: probe with driver asix failed with error -61 [ 208.560024][ T7962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:851 [ 208.806320][ T7963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.826138][ T7963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.982858][ T7975] fuseblk: Bad value for 'user_id' [ 208.988277][ T7975] fuseblk: Bad value for 'user_id' [ 209.028793][ T7984] /dev/rnullb0: Can't lookup blockdev [ 209.382413][ T8001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 209.383464][ T8000] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 209.383476][ T8001] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 209.873294][ T2320] usb 6-1: USB disconnect, device number 12 [ 209.902922][ T8042] tmpfs: Unknown parameter 'grpquota_inode_hardlimit' [ 209.924700][ T8044] input: syz0 as /devices/virtual/input/input27 [ 209.987478][ T8048] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 210.086103][ T8065] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2599'. [ 210.273764][ T8103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=8103 comm=syz.2.2612 [ 211.019656][ T8130] /dev/loop0: Can't lookup blockdev [ 211.205574][ T8132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.225594][ T8132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.275459][ T584] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 211.525453][ T332] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 211.675482][ T332] usb 5-1: Using ep0 maxpacket: 32 [ 211.681898][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.692845][ T332] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 211.701932][ T332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.711020][ T332] usb 5-1: config 0 descriptor?? [ 211.972854][ T8208] netlink: 'syz.5.2650': attribute type 1 has an invalid length. [ 212.338354][ T332] usbhid 5-1:0.0: can't add hid device: -71 [ 212.344346][ T332] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 212.353593][ T332] usb 5-1: USB disconnect, device number 49 [ 212.455435][ T584] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 212.606150][ T584] usb 6-1: not running at top speed; connect to a high speed hub [ 212.614713][ T584] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 975, setting to 64 [ 212.625531][ T584] usb 6-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.638473][ T584] usb 6-1: config 1 interface 0 has no altsetting 0 [ 212.646490][ T584] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 212.655613][ T584] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.663615][ T584] usb 6-1: Product: 櫤愜☹锐꽫似꺆鰋ꦞᩢ冼諬䒇⩓㶩㱺蒭酦♹囯틢ჱ辏딅텗᳕ᨿ썭ഌ孄⩼⌟臏㡅ܷ袛⭾랎㭾킫袛哏⫆㞟쫦썼㋷玦捔狈쾯ꗂ覧믏頗༡͐뗺텊誜ਐᩣ牁☍䃎鬪獗槶娛㩥왂Ꮜƺሏⱌ [ 212.689453][ T584] usb 6-1: Manufacturer: ᣿促쭗䯁ິﱒ黔粒퀲ᦄᵷ௢㵻쥹㳅｝錎煣篛麦괦漎̣㕗棪㯾꺎ୌ鿴鶚䤌磷펭 [ 212.703138][ T584] usb 6-1: SerialNumber: 皱ʪ祎㑾蘌ꨧޠ띩ࢇ [ 212.711442][ T8208] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 212.968452][ T8222] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=26 [ 212.968475][ T8222] rust_binder: Error while translating object. [ 212.977569][ T8222] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 212.983784][ T8222] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:881 [ 213.039335][ T8232] serio: Serial port ttynull [ 213.124855][ T584] usb 6-1: USB disconnect, device number 14 [ 213.176544][ T8237] binder: Unknown parameter 'sya7' [ 213.214578][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 213.214595][ T36] audit: type=1326 audit(1750879488.326:29650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz.4.2664" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb76b58e929 code=0x0 [ 213.915447][ T336] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 214.066545][ T336] usb 6-1: Invalid ep0 maxpacket: 64 [ 214.195468][ T336] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 214.345474][ T336] usb 6-1: Invalid ep0 maxpacket: 64 [ 214.351531][ T336] usb usb6-port1: attempt power cycle [ 214.387435][ T8305] binder: Unknown parameter 'fscontext?}' [ 214.543350][ T8323] binder: Bad value for 'stats' [ 214.545536][ T8324] binder: Bad value for 'stats' [ 214.695451][ T336] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 214.715960][ T336] usb 6-1: Invalid ep0 maxpacket: 64 [ 214.845498][ T336] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 214.865959][ T336] usb 6-1: Invalid ep0 maxpacket: 64 [ 214.874941][ T336] usb usb6-port1: unable to enumerate USB device [ 215.614593][ T8357] /dev/rnullb0: Can't lookup blockdev [ 215.690627][ T8368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2716'. [ 216.150811][ T8375] tmpfs: Unknown parameter '18446744073709551615' [ 216.250468][ T8380] SELinux: security_context_str_to_sid (selinux/checkreqprot) failed with errno=-22 [ 216.804300][ T36] audit: type=1400 audit(1750879491.916:29651): avc: denied { lock } for pid=8416 comm="syz.2.2728" path="socket:[43507]" dev="sockfs" ino=43507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 216.868173][ T8421] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 216.880713][ T8421] rust_binder: Error in use_page_slow: ESRCH [ 216.880741][ T8421] rust_binder: use_range failure ESRCH [ 216.899546][ T8421] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 216.899577][ T8421] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 216.929781][ T8421] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:225 [ 217.178909][ T8447] rust_binder: Error while translating object. [ 217.188496][ T8447] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 217.194772][ T8447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:934 [ 217.204195][ T8447] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 217.213358][ T8447] rust_binder: Read failure Err(EFAULT) in pid:934 [ 217.297553][ T36] audit: type=1326 audit(1750879492.416:29652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.4.2740" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb76b58e929 code=0x0 [ 217.531882][ T8461] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2743'. [ 218.175879][ T8477] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2747'. [ 218.245436][ T36] audit: type=1326 audit(1750879493.356:29653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.2.2754" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbbf98e929 code=0x0 [ 218.500374][ T8500] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2755'. [ 218.555825][ T8515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 218.557359][ T8515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:228 [ 218.985064][ T36] audit: type=1400 audit(1750879494.096:29654): avc: denied { mounton } for pid=8536 comm="syz.4.2767" path=2F3333302FE91F7189591E9233614B dev="tmpfs" ino=1769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 219.270133][ T36] audit: type=1326 audit(1750879494.386:29655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.5.2776" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08af78e929 code=0x0 [ 219.333632][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2781'. [ 219.480258][ T8594] netlink: 'syz.0.2789': attribute type 27 has an invalid length. [ 219.524064][ T8596] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2790'. [ 219.534719][ T8594] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.541947][ T8594] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.790987][ T8615] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2794'. [ 219.905546][ T31] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 220.040887][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2803'. [ 220.076779][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.086996][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.097399][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 220.106514][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.114592][ T31] usb 5-1: Product: syz [ 220.118872][ T31] usb 5-1: Manufacturer: syz [ 220.123498][ T31] usb 5-1: SerialNumber: syz [ 220.337951][ T8611] vcan0: entered allmulticast mode [ 220.343437][ T8611] vcan0: left allmulticast mode [ 220.351423][ T31] usb 5-1: 0:2 : does not exist [ 220.358240][ T31] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 220.369855][ T31] usb 5-1: USB disconnect, device number 50 [ 220.380015][ T3145] udevd[3145]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 220.519981][ T8691] tmpfs: Bad value for 'uid' [ 220.524666][ T8691] tmpfs: Bad value for 'uid' [ 220.540159][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2821'. [ 220.650286][ T8704] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.955451][ T31] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 221.091928][ T8719] overlayfs: failed to clone upperpath [ 221.097970][ T336] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 221.107424][ T8719] overlayfs: failed to clone upperpath [ 221.125128][ T36] audit: type=1326 audit(1750879496.236:29656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8725 comm="syz.2.2832" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbbf98e929 code=0x0 [ 221.149443][ T31] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 221.158836][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.174645][ T31] usb 6-1: config 0 descriptor?? [ 221.256926][ T336] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.268546][ T336] usb 5-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.281954][ T336] usb 5-1: config 1 interface 0 has no altsetting 0 [ 221.290918][ T336] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 221.300141][ T336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.308217][ T336] usb 5-1: Product: syz [ 221.312668][ T336] usb 5-1: Manufacturer: syz [ 221.317386][ T336] usb 5-1: SerialNumber: syz [ 221.334457][ T8747] fuse: Bad value for 'fd' [ 221.527664][ T336] usb 5-1: USB disconnect, device number 51 [ 222.387490][ T8709] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 222.387527][ T8709] rust_binder: Error while translating object. [ 222.399785][ T8709] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 222.406106][ T8709] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:241 [ 222.421390][ T8791] netlink: 'syz.0.2855': attribute type 4 has an invalid length. [ 222.444057][ T8791] netlink: 'syz.0.2855': attribute type 7 has an invalid length. [ 222.451901][ T8791] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2855'. [ 222.457844][ T8794] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 222.461202][ T8794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:993 [ 222.506201][ T31] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 222.526264][ T31] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 222.537028][ T31] asix 6-1:0.0: probe with driver asix failed with error -71 [ 222.546068][ T31] usb 6-1: USB disconnect, device number 19 [ 222.577220][ T36] audit: type=1400 audit(1750879497.696:29657): avc: denied { setattr } for pid=8801 comm="syz.4.2859" name="" dev="pipefs" ino=44803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 223.085470][ T8619] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 223.130168][ T8813] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 223.130772][ T36] audit: type=1400 audit(1750879498.246:29658): avc: denied { remount } for pid=8812 comm="syz.5.2863" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 223.157480][ T8813] rust_binder: inc_ref_done called when no active inc_refs [ 223.225441][ T8619] usb 5-1: device descriptor read/64, error -71 [ 223.439310][ T8839] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2873'. [ 223.475491][ T8619] usb 5-1: device descriptor read/64, error -71 [ 223.568253][ T8860] overlayfs: failed to clone upperpath [ 223.601916][ T8864] 9pnet_fd: Insufficient options for proto=fd [ 223.715509][ T8619] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 223.845493][ T8619] usb 5-1: device descriptor read/64, error -71 [ 224.085534][ T8619] usb 5-1: device descriptor read/64, error -71 [ 224.195567][ T8619] usb usb5-port1: attempt power cycle [ 224.254420][ T8869] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 224.262623][ T36] audit: type=1326 audit(1750879755.374:29659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.0.2884" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ab8b8e929 code=0x0 [ 224.448989][ T12] bridge_slave_1: left allmulticast mode [ 224.455177][ T12] bridge_slave_1: left promiscuous mode [ 224.461030][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.468663][ T12] bridge_slave_0: left allmulticast mode [ 224.474331][ T12] bridge_slave_0: left promiscuous mode [ 224.480135][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.575451][ T8619] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 224.596423][ T8619] usb 5-1: device descriptor read/8, error -71 [ 224.685471][ T2320] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 224.694079][ T12] veth1_macvtap: left promiscuous mode [ 224.699705][ T12] >: left promiscuous mode [ 224.744486][ T8619] usb 5-1: device descriptor read/8, error -71 [ 224.846554][ T2320] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.856769][ T2320] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.866644][ T2320] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 224.875815][ T2320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 224.883815][ T2320] usb 6-1: SerialNumber: syz [ 224.987752][ T8619] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 224.998488][ T8887] batadv_slave_0: entered promiscuous mode [ 225.016613][ T8619] usb 5-1: device descriptor read/8, error -71 [ 225.035970][ T8886] batadv_slave_0: left promiscuous mode [ 225.090283][ T8879] binder: Unknown parameter 'fscontext?}' [ 225.098910][ T2320] usb 6-1: 0:2 : does not exist [ 225.103799][ T2320] usb 6-1: unit 5: unexpected type 0x0a [ 225.120437][ T2320] usb 6-1: USB disconnect, device number 20 [ 225.137704][ T3145] udevd[3145]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 225.158120][ T8619] usb 5-1: device descriptor read/8, error -71 [ 225.275551][ T8619] usb usb5-port1: unable to enumerate USB device [ 225.311153][ T8908] fuse: Bad value for 'user_id' [ 225.316155][ T8908] fuse: Bad value for 'user_id' [ 225.876430][ T8914] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 225.907918][ T8919] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 225.979970][ T8927] rust_binder: Error in use_page_slow: ESRCH [ 225.986618][ T8927] rust_binder: use_range failure ESRCH [ 225.992714][ T8927] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 225.998348][ T8927] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 226.006434][ T8927] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:259 [ 226.245459][ T8619] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 226.406515][ T8619] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.416753][ T8619] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 226.425741][ T8619] usb 5-1: config 1 has no interface number 1 [ 226.432009][ T8619] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 226.444966][ T8619] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.457288][ T8619] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.466397][ T8619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.474487][ T8619] usb 5-1: Product: syz [ 226.478722][ T8619] usb 5-1: Manufacturer: syz [ 226.483334][ T8619] usb 5-1: SerialNumber: syz [ 226.489356][ T8925] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 226.699448][ T8925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.708679][ T8925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.718898][ T8925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.727418][ T8925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.757271][ T8619] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 226.765141][ T8619] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 226.782874][ T8619] usb 5-1: USB disconnect, device number 56 [ 227.078682][ T8942] binder: Unknown parameter 'seclabgl' [ 227.085749][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2908'. [ 227.111648][ T8945] netlink: 'syz.5.2909': attribute type 6 has an invalid length. [ 227.120222][ T36] audit: type=1326 audit(1750879758.234:29660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.5.2909" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08af78e929 code=0x0 [ 227.273466][ T8948] 9pnet_fd: Insufficient options for proto=fd [ 227.293918][ T8950] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1020 [ 227.294675][ T8950] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1020 [ 227.371376][ T8960] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 227.380743][ T8960] rust_binder: Error while translating object. [ 227.391404][ T8960] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 227.397667][ T8960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1022 [ 227.408810][ T8960] vcan0: entered allmulticast mode [ 227.569612][ T8976] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 227.600802][ T36] audit: type=1400 audit(1750879758.714:29661): avc: denied { remount } for pid=8977 comm="syz.4.2921" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 227.628925][ T8978] tipc: Enabling of bearer rejected, failed to enable media [ 227.915434][ T2320] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 228.075433][ T2320] usb 5-1: Using ep0 maxpacket: 32 [ 228.081879][ T2320] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 228.093025][ T2320] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74 [ 228.099897][ T9000] rust_binder: Write failure EINVAL in pid:288 [ 228.107032][ T2320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.123843][ T2320] usb 5-1: Product: syz [ 228.128106][ T2320] usb 5-1: Manufacturer: syz [ 228.132807][ T2320] usb 5-1: SerialNumber: syz [ 228.138789][ T2320] usb 5-1: config 0 descriptor?? [ 228.145001][ T2320] rndis_host 5-1:0.0: skipping garbage [ 228.150556][ T2320] rndis_host 5-1:0.0: skipping garbage [ 228.156127][ T2320] usb 5-1: bad CDC descriptors [ 228.161090][ T2320] cdc_acm 5-1:0.0: skipping garbage [ 228.166334][ T2320] cdc_acm 5-1:0.0: skipping garbage [ 228.346005][ T8619] usb 5-1: USB disconnect, device number 57 [ 228.521434][ T36] audit: type=1400 audit(1750879759.634:29662): avc: denied { accept } for pid=9035 comm="syz.0.2939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 228.910596][ T9067] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 228.910637][ T9067] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1045 [ 228.936246][ T36] audit: type=1400 audit(1750879760.054:29663): avc: denied { read } for pid=9069 comm="syz.2.2951" name="file0" dev="tmpfs" ino=1718 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 228.976464][ T36] audit: type=1400 audit(1750879760.054:29664): avc: denied { open } for pid=9069 comm="syz.2.2951" path="/313/file0" dev="tmpfs" ino=1718 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 229.405548][ T2320] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 229.565429][ T2320] usb 6-1: Using ep0 maxpacket: 16 [ 229.572060][ T2320] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.582517][ T2320] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 229.593020][ T2320] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 229.602411][ T2320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.611685][ T2320] usb 6-1: config 0 descriptor?? [ 230.057441][ T2320] usb 6-1: string descriptor 0 read error: -71 [ 230.065086][ T2320] usb 6-1: USB disconnect, device number 21 [ 230.446689][ T336] hid-generic C98F:0003:0000.0027: unknown main item tag 0x0 [ 230.454300][ T336] hid-generic C98F:0003:0000.0027: unknown main item tag 0x0 [ 230.464362][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2958'. [ 230.473918][ T336] hid-generic C98F:0003:0000.0027: hidraw0: HID v0.00 Device [syz0] on syz1 [ 230.496321][ T9096] fido_id[9096]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 230.646468][ T9103] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 230.696063][ T9106] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 230.696092][ T9106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1071 [ 230.836260][ T9117] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.846129][ T9117] rust_binder: Error while translating object. [ 230.852562][ T9117] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 230.858825][ T9117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:313 [ 230.869025][ T9117] binder: Unknown parameter 'fscontext?}' [ 230.927211][ T9126] tmpfs: Unknown parameter 'quota' [ 231.123861][ T9146] tipc: Enabling of bearer rejected, failed to enable media [ 231.142495][ T9146] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.143070][ T9146] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 1144, size: 4096) [ 231.155425][ T9146] rust_binder: Error while translating object. [ 231.166922][ T9146] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 231.173263][ T9146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:328 [ 231.455420][ T336] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 231.666457][ T336] usb 6-1: Using ep0 maxpacket: 16 [ 231.677554][ T336] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.695404][ T336] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.724536][ T336] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 231.756942][ T336] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 231.767240][ T336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.778794][ T336] usb 6-1: Product: 鴂㑿✩脈ྸ鎣᛹酁渵糿뚼잾੆ꈐ쨖蛹擪ⅺఢ倃췄♚㎑맬⋺篐搨疥ẅɧ綛瀱쾠毦냦孭㳆쉐鱯᥅ㄡᄼਫ਼括ᨔ袲鏂좿ꊟ턐蓺휴䕧ỵ孼硹䌺셅鮹ﾤ积햨䱬繃࣌嗥짱訰줶ᰏ滢鋠ㆋ㻅桜㠣⃎ꈭ嵿Ꭲ⯦䒾⢄콝㥟棘Ṹ⧟ᄢ垊䶫ᠩ憋ῶ畁㷥︟㡥 [ 231.821762][ T336] usb 6-1: Manufacturer: 횪宲颁暶塗챧硘ꨕ즰붎樼짶ኾ탵☆좿늞胵僟䭽晼兲駼尾窟︂岺Ⴇ몏쁤䒚封ൣ鬾䮬ꞽ๖ [ 231.857756][ T336] usb 6-1: SerialNumber: щ [ 231.876398][ T9146] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 231.942788][ T9168] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2983'. [ 231.959246][ T9168] overlayfs: failed to clone upperpath [ 232.083782][ T9185] batadv_slave_1: entered promiscuous mode [ 232.097395][ T9185] batadv_slave_1: left promiscuous mode [ 232.295896][ T9146] rust_binder: Error in use_page_slow: ESRCH [ 232.295932][ T9146] rust_binder: use_range failure ESRCH [ 232.302006][ T9146] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 232.307709][ T9146] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 232.316726][ T9146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:328 [ 232.328676][ T336] usb 6-1: 0:2 : does not exist [ 232.344642][ T336] usb 6-1: USB disconnect, device number 22 [ 232.355355][ T3145] udevd[3145]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 232.846794][ T9196] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 232.920518][ T36] audit: type=1400 audit(1750879764.034:29665): avc: denied { append } for pid=9197 comm="syz.5.2997" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 233.063757][ T9205] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 233.215003][ T9237] /dev/nullb0: Can't lookup blockdev [ 233.255993][ T9243] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1105 [ 233.368657][ T9258] netlink: 'syz.0.3020': attribute type 4 has an invalid length. [ 233.385813][ T9258] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3020'. [ 233.396242][ T9259] netlink: 'syz.0.3020': attribute type 4 has an invalid length. [ 233.405981][ T9259] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3020'. [ 233.481465][ T9273] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.481784][ T9271] rust_binder: Write failure EINVAL in pid:1116 [ 233.488553][ T9273] rust_kernel: panicked at drivers/android/binder/node.rs:877:13: [ 233.488553][ T9273] attempt to subtract with overflow [ 233.508339][ T9273] ------------[ cut here ]------------ [ 233.514124][ T9273] kernel BUG at rust/helpers/bug.c:7! [ 233.525823][ T9273] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 233.532844][ T9273] CPU: 0 UID: 0 PID: 9273 Comm: syz.5.3025 Not tainted 6.12.30-syzkaller-g030e00a2d78c #0 57efd5a98e1182d97bd5f975427dc401009108c9 [ 233.546333][ T9273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.556405][ T9273] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 233.561703][ T9273] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 ba 41 ff b1 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 f0 85 b6 3d 90 90 90 90 90 90 90 90 90 [ 233.575853][ T36] audit: type=1400 audit(1750879764.684:29666): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 233.581330][ T9273] RSP: 0018:ffffc9000f3cda90 EFLAGS: 00010246 [ 233.581358][ T9273] RAX: 0000000000000061 RBX: 1ffff92001e79b54 RCX: 130aeba7a83b1e00 [ 233.617295][ T9273] RDX: ffffc90001fb1000 RSI: 00000000000038e1 RDI: 00000000000038e2 [ 233.624192][ T36] audit: type=1400 audit(1750879764.684:29667): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.625292][ T9273] RBP: ffffc9000f3cda90 R08: ffff8881f6f294d3 R09: 1ffff1103ede529a [ 233.654735][ T9273] R10: dffffc0000000000 R11: ffffed103ede529b R12: 0000000000000000 [ 233.662740][ T9273] R13: dffffc0000000000 R14: ffffc9000f3cdac0 R15: ffffc9000f3cdaf0 [ 233.670765][ T9273] FS: 00007f08b05b06c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 233.679728][ T9273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.679823][ T36] audit: type=1400 audit(1750879764.684:29668): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.686334][ T9273] CR2: 0000200000333000 CR3: 000000011c8b0000 CR4: 00000000003526b0 [ 233.686359][ T9273] Call Trace: [ 233.686368][ T9273] [ 233.686379][ T9273] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 233.686419][ T9273] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 233.686454][ T9273] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x401/0x810 [ 233.686489][ T9273] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 233.686538][ T9273] ? __cfi__RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 233.686573][ T9273] ? __kasan_check_write+0x18/0x20 [ 233.686602][ T9273] ? _raw_spin_lock+0x8c/0x120 [ 233.686639][ T9273] ? __cfi__raw_spin_lock+0x10/0x10 [ 233.686675][ T9273] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 233.686714][ T9273] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 233.686754][ T9273] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 233.686788][ T9273] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 233.686823][ T9273] ? __asan_memcpy+0x5a/0x80 [ 233.686851][ T9273] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 233.686890][ T9273] ? __kasan_check_write+0x18/0x20 [ 233.686919][ T9273] ? _raw_spin_lock+0x8c/0x120 [ 233.686956][ T9273] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 233.686994][ T9273] ? _raw_spin_unlock+0x45/0x60 [ 233.687031][ T9273] ? rust_helper_spin_unlock+0x19/0x30 [ 233.687058][ T9273] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process12inc_ref_done+0x665/0xc40 [ 233.687097][ T9273] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process12inc_ref_done+0x10/0x10 [ 233.687138][ T9273] ? __kasan_check_write+0x18/0x20 [ 233.687173][ T9273] ? _raw_spin_lock+0x8c/0x120 [ 233.687209][ T9273] ? __cfi__raw_spin_lock+0x10/0x10 [ 233.687246][ T9273] ? __kasan_check_write+0x18/0x20 [ 233.687276][ T9273] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 233.687334][ T9273] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 233.687405][ T9273] ? __kasan_check_read+0x15/0x20 [ 233.687433][ T9273] ? resched_curr+0xaa/0x430 [ 233.687464][ T9273] ? cgroup_rstat_updated+0x132/0x7f0 [ 233.687492][ T9273] ? __cfi_resched_curr+0x10/0x10 [ 233.687522][ T9273] ? read_tsc+0xd/0x20 [ 233.687547][ T9273] ? ktime_get+0x1df/0x210 [ 233.687570][ T9273] ? start_dl_timer+0x1b9/0x380 [ 233.742308][ T36] audit: type=1400 audit(1750879764.684:29669): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.748789][ T9273] ? update_curr_dl_se+0x65a/0xb20 [ 233.748830][ T9273] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 233.748855][ T9273] ? update_curr+0x60d/0xc60 [ 233.748887][ T9273] ? xfd_validate_state+0x68/0x150 [ 233.748916][ T9273] ? save_fpregs_to_fpstate+0x196/0x230 [ 233.748951][ T9273] ? __kasan_check_write+0x18/0x20 [ 233.748980][ T9273] ? __switch_to+0xc7b/0x1310 [ 233.749009][ T9273] ? __cfi___switch_to+0x10/0x10 [ 233.749037][ T9273] ? pick_next_task_fair+0x870/0x900 [ 233.749063][ T9273] ? _raw_spin_lock+0x109/0x120 [ 233.749098][ T9273] ? _raw_spin_unlock+0x45/0x60 [ 233.749133][ T9273] ? finish_task_switch+0x13a/0x780 [ 233.749162][ T9273] ? __switch_to_asm+0x3d/0x70 [ 233.749194][ T9273] ? __schedule+0x1463/0x1f10 [ 233.749224][ T9273] ? is_bpf_text_address+0x17b/0x1a0 [ 233.749259][ T9273] ? kernel_text_address+0xa9/0xe0 [ 233.749285][ T9273] ? unwind_get_return_address+0x51/0x90 [ 233.749309][ T9273] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 233.749339][ T9273] ? arch_stack_walk+0x10b/0x170 [ 233.749373][ T9273] ? stack_depot_save_flags+0x38/0x800 [ 233.749404][ T9273] ? kasan_save_alloc_info+0x40/0x50 [ 233.749431][ T9273] ? kasan_save_track+0x4f/0x80 [ 233.749462][ T9273] ? kasan_save_track+0x3e/0x80 [ 233.749492][ T9273] ? kasan_save_alloc_info+0x40/0x50 [ 233.749517][ T9273] ? __kasan_kmalloc+0x96/0xb0 [ 233.749550][ T9273] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 233.749581][ T9273] ? krealloc_noprof+0x8d/0x130 [ 233.749610][ T9273] ? rust_helper_krealloc+0x33/0xd0 [ 233.749636][ T9273] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xb1/0x100 [ 233.749672][ T9273] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 233.749710][ T9273] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20 [ 233.749746][ T9273] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 233.749786][ T9273] ? __se_sys_ioctl+0x132/0x1b0 [ 233.749820][ T9273] ? __kasan_check_write+0x18/0x20 [ 233.749848][ T9273] ? resched_curr+0x113/0x430 [ 233.749877][ T9273] ? cgroup_rstat_updated+0x132/0x7f0 [ 233.788236][ T36] audit: type=1400 audit(1750879764.684:29670): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 233.789050][ T9273] ? __cfi_resched_curr+0x10/0x10 [ 233.806344][ T36] audit: type=1400 audit(1750879764.684:29671): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 233.814010][ T9273] ? read_tsc+0xd/0x20 [ 233.843384][ T36] audit: type=1400 audit(1750879764.684:29672): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 233.843999][ T9273] ? ktime_get+0x1df/0x210 [ 233.893706][ T36] audit: type=1326 audit(1750879764.984:29673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.4.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76b58e929 code=0x7ffc0000 [ 233.894344][ T9273] ? start_dl_timer+0x1b9/0x380 [ 233.904627][ T36] audit: type=1326 audit(1750879764.984:29674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.4.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb76b58e929 code=0x7ffc0000 [ 233.909404][ T9273] ? update_curr_dl_se+0x65a/0xb20 [ 234.322251][ T9273] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 234.328341][ T9273] ? update_curr+0x60d/0xc60 [ 234.332943][ T9273] ? __kasan_check_write+0x18/0x20 [ 234.338061][ T9273] ? _raw_spin_lock+0x8c/0x120 [ 234.342852][ T9273] ? __cfi__raw_spin_lock+0x10/0x10 [ 234.348072][ T9273] ? _raw_spin_unlock+0x45/0x60 [ 234.352955][ T9273] ? rust_helper_spin_unlock+0x19/0x30 [ 234.358423][ T9273] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 234.368940][ T9273] ? tg_unthrottle_up+0x980/0x980 [ 234.373978][ T9273] ? update_cfs_group+0x260/0x260 [ 234.379014][ T9273] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 234.389805][ T9273] ? kvm_sched_clock_read+0x15/0x30 [ 234.395017][ T9273] ? sched_clock_noinstr+0xd/0x30 [ 234.400062][ T9273] ? sched_clock+0x44/0x60 [ 234.404483][ T9273] ? sched_clock_cpu+0x75/0x400 [ 234.409341][ T9273] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 234.415427][ T9273] ? xfd_validate_state+0x68/0x150 [ 234.420542][ T9273] ? save_fpregs_to_fpstate+0x196/0x230 [ 234.426105][ T9273] ? __cfi___switch_to+0x10/0x10 [ 234.431076][ T9273] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 234.440286][ T9273] ? finish_task_switch+0x13a/0x780 [ 234.445491][ T9273] ? __switch_to_asm+0x3d/0x70 [ 234.450269][ T9273] ? avc_has_extended_perms+0x7c7/0xdd0 [ 234.455825][ T9273] ? __asan_memcpy+0x5a/0x80 [ 234.460430][ T9273] ? avc_has_extended_perms+0x921/0xdd0 [ 234.465980][ T9273] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 234.475532][ T9273] ? do_vfs_ioctl+0xeda/0x1e30 [ 234.480310][ T9273] ? __futex_queue+0x19a/0x340 [ 234.485082][ T9273] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 234.490723][ T9273] ? __cfi___futex_queue+0x10/0x10 [ 234.495841][ T9273] ? futex_wait_setup+0x1bc/0x260 [ 234.500871][ T9273] ? __futex_wait+0x218/0x2a0 [ 234.505556][ T9273] ? ioctl_has_perm+0x384/0x4d0 [ 234.510422][ T9273] ? has_cap_mac_admin+0xd0/0xd0 [ 234.515385][ T9273] ? futex_wake+0x63a/0x900 [ 234.519895][ T9273] ? futex_setup_timer+0xb4/0xd0 [ 234.524847][ T9273] ? futex_wait+0x288/0x540 [ 234.529381][ T9273] ? __cfi_futex_wait+0x10/0x10 [ 234.534239][ T9273] ? selinux_file_ioctl+0x6e0/0x1360 [ 234.539535][ T9273] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 234.545096][ T9273] ? do_futex+0x309/0x500 [ 234.549441][ T9273] ? __cfi_do_futex+0x10/0x10 [ 234.554134][ T9273] ? __fget_files+0x2c5/0x340 [ 234.558830][ T9273] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 234.567359][ T9273] ? __se_sys_ioctl+0x114/0x1b0 [ 234.572229][ T9273] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 234.581356][ T9273] __se_sys_ioctl+0x132/0x1b0 [ 234.586047][ T9273] __x64_sys_ioctl+0x7f/0xa0 [ 234.590652][ T9273] x64_sys_call+0x1878/0x2ee0 [ 234.595343][ T9273] do_syscall_64+0x58/0xf0 [ 234.599769][ T9273] ? clear_bhb_loop+0x50/0xa0 [ 234.604454][ T9273] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 234.610351][ T9273] RIP: 0033:0x7f08af78e929 [ 234.614774][ T9273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.634385][ T9273] RSP: 002b:00007f08b05b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.642808][ T9273] RAX: ffffffffffffffda RBX: 00007f08af9b5fa0 RCX: 00007f08af78e929 [ 234.650787][ T9273] RDX: 0000200000000640 RSI: 00000000c0306201 RDI: 0000000000000004 [ 234.658767][ T9273] RBP: 00007f08af810b39 R08: 0000000000000000 R09: 0000000000000000 [ 234.666748][ T9273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.674722][ T9273] R13: 0000000000000000 R14: 00007f08af9b5fa0 R15: 00007fff2e564338 [ 234.682704][ T9273] [ 234.685730][ T9273] Modules linked in: [ 234.690302][ T9273] ---[ end trace 0000000000000000 ]--- [ 234.705504][ T9273] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 234.710935][ T9273] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 ba 41 ff b1 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 f0 85 b6 3d 90 90 90 90 90 90 90 90 90 [ 234.730692][ T9273] RSP: 0018:ffffc9000f3cda90 EFLAGS: 00010246 [ 234.736963][ T9273] RAX: 0000000000000061 RBX: 1ffff92001e79b54 RCX: 130aeba7a83b1e00 [ 234.745071][ T9273] RDX: ffffc90001fb1000 RSI: 00000000000038e1 RDI: 00000000000038e2 [ 234.753436][ T9273] RBP: ffffc9000f3cda90 R08: ffff8881f6f294d3 R09: 1ffff1103ede529a [ 234.761551][ T9273] R10: dffffc0000000000 R11: ffffed103ede529b R12: 0000000000000000 [ 234.769762][ T9273] R13: dffffc0000000000 R14: ffffc9000f3cdac0 R15: ffffc9000f3cdaf0 [ 234.777825][ T9273] FS: 00007f08b05b06c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 234.788097][ T9273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.794762][ T9273] CR2: 00007fb76936ef98 CR3: 000000011c8b0000 CR4: 00000000003526b0 [ 234.802907][ T9273] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 234.815464][ T9273] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 234.825462][ T9273] Kernel panic - not syncing: Fatal exception [ 234.831896][ T9273] Kernel Offset: disabled [ 234.836220][ T9273] Rebooting in 86400 seconds..