last executing test programs: 1m39.153241472s ago: executing program 3 (id=823): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x80000, 0xa0680) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000001c0)=""/227) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0, 0x4010}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) 1m39.111507033s ago: executing program 3 (id=824): r0 = getpgrp(0xffffffffffffffff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r0, 0x12) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x400040, 0x10, 0x21}, 0x18) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x1418a2, 0x1a0) r3 = epoll_create(0xb7cc) setns(r2, 0x10000000) lstat(&(0x7f0000002400)='./file0\x00', &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() read$FUSE(r3, &(0x7f0000002540)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000004580)='./file0/file0\x00', &(0x7f00000045c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000004740)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000004840)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000004880)='./file0\x00', &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) newfstatat(0xffffffffffffff9c, &(0x7f0000004940)='./file0\x00', &(0x7f0000004980)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r13 = getegid() lstat(&(0x7f0000004a00)='./file0\x00', &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000004ac0)='./file0\x00', &(0x7f0000004b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000004b80)='./file0\x00', &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000004c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000004cc0)='./file0\x00', &(0x7f0000004d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000004d80)='./file0\x00', &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r2, &(0x7f0000005180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000072c0)={0x0, 0x0}, &(0x7f0000007300)=0xc) syz_fuse_handle_req(r2, &(0x7f0000000100)="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", 0x2000, &(0x7f0000007480)={&(0x7f0000002100)={0x50, 0x0, 0x7, {0x7, 0x2b, 0x2, 0x100, 0x8001, 0x4, 0x3, 0x400, 0x0, 0x0, 0x10, 0x40}}, &(0x7f0000002180)={0x18, 0xfffffffffffffff5, 0x7fffffffffffffff, {0x2a7c}}, &(0x7f00000021c0)={0x18, 0x0, 0x7, {0x7}}, &(0x7f0000002200)={0x18, 0xffffffffffffffda, 0x3, {0x2}}, &(0x7f0000002240)={0x18, 0x0, 0x3ff00000, {0xb}}, &(0x7f0000002280)={0x28, 0x0, 0x0, {{0x8, 0x8, 0x1, r0}}}, &(0x7f00000022c0)={0x60, 0xfffffffffffffffe, 0x2c60, {{0xe9a, 0x2, 0xd7, 0xfffffffffffffff8, 0x5, 0x7204, 0x1000, 0x800}}}, &(0x7f0000002340)={0x18, 0x0, 0xffffffffffffff81, {0xd1}}, &(0x7f0000002380)={0x12, 0xfffffffffffffff5, 0x2, {'%\x00'}}, &(0x7f00000023c0)={0x20, 0xfffffffffffffffe, 0x1}, &(0x7f00000024c0)={0x78, 0x0, 0x9, {0x31, 0x0, 0x0, {0x3, 0x7fffffffffffffff, 0x1, 0xffffffffffffff81, 0x8, 0xf, 0x2, 0x4c9, 0x6, 0x8000, 0xffffff01, r4, r5, 0x7ff, 0x4}}}, &(0x7f0000004640)={0x90, 0x0, 0x8000000000000000, {0x5, 0x1, 0x2, 0x2, 0x7, 0xffffffe4, {0x5, 0x10000, 0x100000000, 0x7, 0x7, 0x2, 0x7, 0x80000000, 0x3ff, 0x1000, 0x9, r6, r9, 0xdb, 0x9ff}}}, &(0x7f0000004700)={0x38, 0x0, 0xcf4, [{0x3, 0x0, 0x9, 0x7, '$[&&**G]^'}]}, &(0x7f0000004e40)={0x320, 0x0, 0x8000000000000000, [{{0x1, 0x3, 0xfffffffffffffff6, 0x40, 0x1000, 0x9, {0x5, 0x7, 0x7, 0x8, 0x9, 0xc28, 0x3, 0xfffffffa, 0x7, 0xc000, 0x2, r10, r11, 0x2, 0x4}}, {0x4, 0x5, 0x0, 0x8}}, {{0x5, 0x0, 0x1, 0x9, 0x29, 0x8, {0x0, 0x8, 0x800, 0xa98a, 0x100000000, 0x0, 0xb8c4, 0xe, 0xfffffffe, 0xc000, 0x30, r12, r13, 0x81, 0xffff}}, {0x0, 0x400000}}, {{0x4, 0x0, 0x8e2a, 0xfffffffffffffff7, 0x8, 0x3d, {0x3, 0xcb, 0x9fa, 0x4, 0x2, 0x8, 0x1ff, 0x5, 0x7ff, 0xa000, 0x5, r14, r16, 0x4, 0x8}}, {0x0, 0xf40, 0x2, 0x9, 'U\''}}, {{0x1, 0x1, 0x8, 0x8, 0x1, 0xc, {0x2, 0x37a, 0x1, 0x0, 0x0, 0x9, 0x10001, 0x9, 0x8000, 0x5000, 0xc4b6, r17, r18, 0x7, 0x8}}, {0x1, 0x3, 0x0, 0x4}}, {{0x4, 0x0, 0x9, 0x7, 0x2, 0x5, {0x2, 0x2, 0x42, 0x5, 0x2, 0xa73, 0x8, 0x6, 0x5, 0xc000, 0x4, r19, r21, 0x5, 0x7}}, {0x4, 0x6, 0x9, 0x7cbd, '\xa7}[]\\(@{&'}}]}, &(0x7f00000071c0)={0xa0, 0x0, 0x57, {{0x3, 0x0, 0x8, 0xfffffffffffffff8, 0x1, 0x2, {0x1, 0x0, 0x7, 0x80000000, 0x5, 0x400, 0x2, 0x3, 0x5, 0xc000, 0x0, 0xffffffffffffffff, r23, 0x1, 0x8}}, {0x0, 0xa}}}, &(0x7f0000007280)={0x20, 0x0, 0x3, {0xfffffffe, 0x0, 0xfffffff9, 0xb}}, &(0x7f0000007340)={0x130, 0x0, 0xfffffffffffffff8, {0xffffffff, 0xffffffff, 0x0, '\x00', {0x80, 0xdd, 0x9, 0x4, r24, 0xee01, 0x2000, '\x00', 0x0, 0x2, 0x10000, 0x80, {0x401, 0x8e}, {0x8, 0xd}, {0x80000001, 0x1}, {0x4, 0x1}, 0xffff, 0x5, 0xfffffffa, 0x400}}}}) syz_clone(0x2888100, &(0x7f0000007540)="307dd7f53dba1066f924e360dfdb0b62ca7f10ccbdfd2fb8c10852e452a2fcdf84a9a473c581b835734b7f503686d6ada4cb8ff610c09457d330c5c7760205d678281716f3006a86d675aa2e89ce8f0253779c2268d28a565a4ccac65387d18da13903785ecf888827d95da2119b1986c4809a43d0cbe1420124f75ccc98ace7b9cdb3", 0x83, &(0x7f0000007600), &(0x7f0000007640), &(0x7f0000007680)="cd862669d6c3e725c511a5b61e6d7acc7049e3c22b28b098ca6e966148708ba3bc8331934daa2c35c91c62133f13e8612fa32979d2248d98686fc284b385ad0a149ce6161e9ac92df1dfa4b11133087c7982f7639beec5a43e8d34696eb7e4d5a09ff1c8afd0d5e2cce793583e8945ac8375ab1d2ea77e02ff50f2c04949cf1881d07c1206ae0d563ad856198be579859c404190f2796b017dea853c1c5a4c954143ab") r25 = getuid() stat(&(0x7f0000009c80)='./file0/file0\x00', &(0x7f0000009cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r2, &(0x7f0000009d40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r28 = getgid() syz_fuse_handle_req(r2, &(0x7f0000007740)="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", 0x2000, &(0x7f000000c440)={&(0x7f0000009740)={0x50, 0x0, 0x7, {0x7, 0x2b, 0x400, 0x40000, 0x2, 0x8, 0x6, 0xf, 0x0, 0x0, 0x100, 0xbd1}}, &(0x7f00000097c0)={0x18, 0x0, 0x28a, {0xffff}}, &(0x7f0000009800)={0x18, 0x0, 0x80, {0x7}}, &(0x7f0000009840)={0x18, 0x0, 0x10000, {0x3}}, &(0x7f0000009880)={0x18, 0x0, 0x6, {0x8}}, &(0x7f00000098c0)={0x28, 0x0, 0x7, {{0x2, 0x7, 0x2, r0}}}, &(0x7f0000009900)={0x60, 0x2f, 0x7, {{0x4, 0x6, 0x4, 0xfff, 0xfffffffffffffffb, 0x3ff, 0xb751, 0x3}}}, &(0x7f0000009980)={0x18, 0x0, 0xfffffffffffffb5c, {0x8}}, &(0x7f00000099c0)={0x12, 0x0, 0x25ef, {'/\x00'}}, &(0x7f0000009a00)={0x20, 0x0, 0x0, {0x0, 0xe}}, &(0x7f0000009a40)={0x78, 0x0, 0x7, {0x3, 0xb74, 0x0, {0x6, 0x669, 0xfff, 0x1ff, 0x2, 0x3, 0x8001, 0x9, 0x7, 0x4000, 0x37, r24, r23, 0xfffffffb, 0x87}}}, &(0x7f0000009ac0)={0x90, 0x0, 0xdd, {0x6, 0x0, 0x0, 0x8001, 0xfffffffd, 0x10001, {0x1, 0x0, 0x0, 0x9, 0x9, 0x5, 0xffffffff, 0x200, 0xd, 0x8000, 0x7, r15, r23, 0x4800000, 0x80000000}}}, &(0x7f0000009b80)={0xd8, 0x0, 0x7, [{0x6, 0x3b, 0x3, 0xfffffff8, '-$('}, {0x1, 0x100000001, 0x9, 0x1, '$[&&**G]^'}, {0x3, 0xdc, 0x2, 0x7, '%\x00'}, {0x4, 0x5, 0x8, 0x0, '-\xb6=\\@#/\x10'}, {0x3, 0x3, 0x7, 0xffffff81, '((,@&[('}, {0x0, 0x36010d99, 0x2, 0xc, '%\x00'}]}, &(0x7f000000bd80)={0x458, 0x0, 0x8000000000000001, [{{0x5, 0x1, 0x2, 0x3ff, 0x8001, 0x3, {0x6, 0x4, 0x7f, 0x47db, 0x81, 0x9, 0x3, 0x1ff, 0x0, 0x4000, 0x2, r24, r11, 0x7, 0x8}}, {0x5, 0x2, 0x0, 0x9}}, {{0x2, 0x2, 0x6ff7, 0x200, 0x9, 0x40, {0x4, 0x71f0, 0x1, 0x2, 0x100, 0x3, 0x4, 0x7, 0x9, 0x2000, 0x5, r15, r11, 0x1, 0x9}}, {0x4, 0x200, 0x3, 0x2, '\xc7\\!'}}, {{0x6, 0x2, 0xdd, 0x1f13c62f, 0x6, 0x3, {0x6, 0x1, 0x7fffffffffffffff, 0x4, 0x9, 0x9, 0x8da, 0x584, 0xab74, 0x2000, 0x7, r22, r5, 0x4, 0x62c}}, {0x6, 0x3, 0x1, 0x5, '\x00'}}, {{0x5, 0x1, 0x7, 0x7fffffffffffffff, 0x3, 0x400, {0x1, 0x1, 0x0, 0xfffffffffffffffe, 0xc, 0x101, 0x7, 0x5, 0x4, 0x4000, 0x8, r25, r18, 0x2, 0x534}}, {0x6, 0x5, 0x0, 0x81}}, {{0x4, 0x3, 0x4, 0x7fffffff, 0x22, 0xa, {0x2, 0xffffffffffffffff, 0x80, 0x8, 0x4, 0x40, 0xb24, 0x9e29, 0xe, 0x6000, 0xa, r22, r26, 0x930, 0x10000}}, {0x0, 0xfffffffffffffff7, 0x1, 0x0, '*'}}, {{0x6, 0x0, 0x5, 0x745, 0x7ff, 0xb, {0x0, 0x1, 0x5e8b86d9, 0x0, 0x352d4fab, 0x3ff, 0x8, 0x7, 0x4, 0x2000, 0x9, 0xffffffffffffffff, r9, 0x1, 0x767e9884}}, {0x2, 0x5, 0x2, 0x5, '!('}}, {{0x3, 0x2, 0xc, 0x403, 0x9, 0x1000, {0x3, 0x1, 0x9, 0x2, 0x0, 0x1, 0x360, 0x2, 0x100000, 0xa000, 0x2, r27, r28, 0x4, 0x81}}, {0x3, 0x5811, 0x0, 0x9}}]}, &(0x7f000000c200)={0xa0, 0x0, 0x0, {{0x5, 0x3, 0x77, 0xfffffffffffffffc, 0x6, 0x0, {0x5, 0xa00000000000, 0x7ff, 0x8a, 0x0, 0x219, 0x80000000, 0x5, 0xffffffff, 0x2000, 0x5, r22, r20, 0x200, 0x7702}}, {0x0, 0x11}}}, &(0x7f000000c2c0)={0x20, 0xfffffffffffffff5, 0xffffffffffffffff, {0xfff, 0x4, 0xfffff976, 0xfc000000}}, &(0x7f000000c300)={0x130, 0x0, 0x9, {0x2, 0xa63d, 0x0, '\x00', {0x40, 0xffffffff, 0xffffffffffffff81, 0x335e, r8, r7, 0x6000, '\x00', 0x6, 0x2, 0x7, 0x4, {0x7}, {0x8, 0x5}, {0x4, 0x76e6}, {0x2, 0x9}, 0x2, 0x7, 0x4, 0xf}}}}) ioctl$FITRIM(r2, 0xc0185879, &(0x7f000000c500)={0x9d, 0x0, 0x3ff}) 1m39.093210783s ago: executing program 3 (id=825): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) mknod$loop(0x0, 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x7) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x6) 1m39.029648734s ago: executing program 3 (id=826): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) fchmod(r0, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) open(0x0, 0x0, 0xc6) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) ioctl$FS_IOC_SETFLAGS(r2, 0xc0189436, &(0x7f0000000140)) recvfrom(r1, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x2c020400) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x8, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x5, r5, &(0x7f0000000000), 0x8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) 1m38.228074557s ago: executing program 3 (id=842): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x40, 0x0, 0x60) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000038c0)=ANY=[@ANYBLOB="200000001e00010a0000793e2489000007000000f4837e629eda4a7ea9000000"], 0x20}}, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace(0x8, r3) capset(&(0x7f0000000100)={0x20080522, r3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r4 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) read(r4, 0x0, 0x0) (async) mount(&(0x7f00000003c0)=@rnullb, &(0x7f0000000380)='./file0\x00', &(0x7f0000000600)='erofs\x00', 0x1000400, 0x0) 1m38.113287108s ago: executing program 3 (id=843): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0xf, &(0x7f0000000000)={0x0, 0xfffffffbffffffff}) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)=ANY=[@ANYBLOB='0'], 0x30}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f0000001f40)=@in6, 0x80, 0x0, 0x0, &(0x7f0000002040)=""/58, 0x3a}, 0x81}], 0x3, 0x40000000, 0x0) shutdown(r6, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000002140)={0x834, r11, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r12}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x7c0, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5a83a92ef97c97672d24befe9616f678aad23da6827e036aef7ace43a3e05c71"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffe}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @private1, 0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "13f3dd850a9d9c020a8148f46399de9415538d9a2785818baa2ecb6bfe889c9b"}]}, {0x2d0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7ff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8fd2a9577b9df6b4c069baa79438179d7f43da6917e0d206b0f4125d252b40fb"}, @WGPEER_A_ALLOWEDIPS={0x180, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "14ecb0e5a86f3559c9489f4ddb141b58639e98d254c401d35c809bd59fd80f3d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cb81ea24848e3189d7e87bf963081db4f36200096d85202ead7fc7f526791b5b"}]}, {0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "240518a7784a6b9427c2ef4a1e5b3a102e0189e9c6e9aad2acaa663ee5474f7b"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x118, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x100, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}]}, {0x4}, {0x220, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1321c000}}, @WGPEER_A_ALLOWEDIPS={0x1fc, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x7}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}]}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @empty, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x834}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r13, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r14, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x4000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000380)=[@increfs_done, @register_looper, @release], 0x0, 0x0, 0x0}) 1m38.111459728s ago: executing program 32 (id=843): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0xf, &(0x7f0000000000)={0x0, 0xfffffffbffffffff}) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)=ANY=[@ANYBLOB='0'], 0x30}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f0000001f40)=@in6, 0x80, 0x0, 0x0, &(0x7f0000002040)=""/58, 0x3a}, 0x81}], 0x3, 0x40000000, 0x0) shutdown(r6, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000002140)={0x834, r11, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r12}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x7c0, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5a83a92ef97c97672d24befe9616f678aad23da6827e036aef7ace43a3e05c71"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffe}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @private1, 0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "13f3dd850a9d9c020a8148f46399de9415538d9a2785818baa2ecb6bfe889c9b"}]}, {0x2d0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7ff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8fd2a9577b9df6b4c069baa79438179d7f43da6917e0d206b0f4125d252b40fb"}, @WGPEER_A_ALLOWEDIPS={0x180, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "14ecb0e5a86f3559c9489f4ddb141b58639e98d254c401d35c809bd59fd80f3d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cb81ea24848e3189d7e87bf963081db4f36200096d85202ead7fc7f526791b5b"}]}, {0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "240518a7784a6b9427c2ef4a1e5b3a102e0189e9c6e9aad2acaa663ee5474f7b"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x118, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x100, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}]}, {0x4}, {0x220, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1321c000}}, @WGPEER_A_ALLOWEDIPS={0x1fc, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x7}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}]}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @empty, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x834}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r13, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r14, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x4000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000380)=[@increfs_done, @register_looper, @release], 0x0, 0x0, 0x0}) 1m20.445942753s ago: executing program 1 (id=1149): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x5e1e, 0x2, @mcast1, 0xfffffffd}, 0x1c) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x10001) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x4000045) connect$tipc(r3, &(0x7f0000000280)=@name={0x1e, 0x2, 0x0, {{0x2, 0x3}, 0x1}}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f0000003080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x0, 0x0, 0x27}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}, 0x40}], 0x0, 0x0, 0x0}) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='bfs\x00', 0x801, &(0x7f0000000300)=',[$,\x00') 1m19.549620776s ago: executing program 1 (id=1167): ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x10, r0, 0x45809000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)=0x6) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='exfat\x00', 0x0, &(0x7f00000001c0)='discard') r2 = openat$cgroup_ro(r1, &(0x7f00000003c0)='cgroup.stat\x00', 0x275a, 0x0) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lchown(&(0x7f0000000200)='./bus\x00', r5, r6) read$FUSE(r2, &(0x7f0000004840)={0x2020}, 0xfffffffffffffc4c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r7, 0xb266f000) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfebc) sendto$inet6(r8, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) syz_clone3(&(0x7f0000000080)={0x4000011, 0x0, 0x0, 0x0, {0x8000011}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendto$inet6(r8, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f0000000540)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) sendmsg$inet6(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="2f6c62fdf406a1a0175bd356c35c10e4d1be87033978d275293527325d1cd47e250c", 0x22}], 0x1}, 0x0) setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f00000000c0), 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m19.548258626s ago: executing program 1 (id=1168): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bind$packet(r2, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) lseek(r1, 0x0, 0x4) openat$cgroup_ro(r1, &(0x7f0000000200)='memory.swap.events\x00', 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x204040, &(0x7f0000000300)=ANY=[@ANYBLOB="7af48a0d472f20c9", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB=',allow_other,measure,fsmagic=0x0000000000000007,fsname=/dev/rnullb0\x00,obj_type=/dev/rnullb0\x00,\x00']) 1m19.548012966s ago: executing program 1 (id=1169): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) setns(r2, 0x4000000) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) rt_tgsigqueueinfo(0x0, 0x0, 0xa, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x200, 0x5, 0x8}, 0x10) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f0000000040)=0xfffffff7) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x50, 0x0, &(0x7f0000000140)=[@register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x4, 0x0, &(0x7f00000001c0)="5e0f626a"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000d00)="f249c144"}) 1m19.433418198s ago: executing program 1 (id=1170): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="6b1f9e", 0x3}], 0x1) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0), 0x181882, 0x0) read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000080)=""/55) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@flat=@handle={0x73682a85, 0x1101, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 1m19.431776548s ago: executing program 1 (id=1171): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x18814, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x1002, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r5, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r5, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r7, &(0x7f0000000340), 0x2000011a) sendmsg$TIPC_NL_NODE_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[], 0x5dc}, 0x1, 0x0, 0x0, 0x48004}, 0x4004008) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r7) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x7}, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) 1m4.460193823s ago: executing program 33 (id=1171): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x18814, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x1002, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r5, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r5, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r7, &(0x7f0000000340), 0x2000011a) sendmsg$TIPC_NL_NODE_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[], 0x5dc}, 0x1, 0x0, 0x0, 0x48004}, 0x4004008) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r7) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x7}, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) 2.00160516s ago: executing program 5 (id=2275): syz_usb_connect$hid(0x300, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x325, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) 793.794618ms ago: executing program 5 (id=2283): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, 0xff, 0x0, 0xf, 0xa, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x1, 0x6, 0xb, 0xc41, 0x6, 0x7, 'team0\x00', 'pimreg\x00', {0xff}, {0xff}, 0x0, 0x34d}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @empty, @dev={0xac, 0x14, 0x14, 0x20}, @multicast2, 0x3, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x59}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x44, r5, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x24a}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffe}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x41) close_range(r0, 0xffffffffffffffff, 0x0) 724.88497ms ago: executing program 5 (id=2285): r0 = socket$inet6(0xa, 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0xffffffffffffffff}}, "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", "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"}) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000400)=0x40) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) 633.212561ms ago: executing program 5 (id=2288): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x8, 0x0) mkdirat(r0, &(0x7f0000000180)='./file2\x00', 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) getcwd(0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x430200, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000001180)={'filter\x00', 0x0, 0x4, 0x1002, [0xf2, 0xfff, 0x61, 0xb3, 0x1, 0x7], 0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], &(0x7f0000001200)=""/4098}, &(0x7f00000000c0)=0x78) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r3, 0x99b30000) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000140)={0x3, 0x0, 0x8, 0x9, 0x3, "d92b79b02b87fd46a3375944a16c525512f625", 0x553c, 0x8}) io_setup(0x4, &(0x7f0000000100)) 545.578332ms ago: executing program 5 (id=2289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) waitid$P_PIDFD(0x3, r1, 0x0, 0x2, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r3, 0xfffff000) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='loginuid\x00') pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000300)=0x7fff, 0x4) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x2c011, r2, 0xd0eb4000) 545.254592ms ago: executing program 5 (id=2290): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x804) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x280001, 0x0) socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x2a, 0xc002) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @empty, @empty}}}}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x9, 0x80800) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x400008001, 0x0, 0x1, r5, 0x1}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x1, r5, 0x4}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0xd8ec0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2300, 0x22) socket$inet_udp(0x2, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setuid(0xee00) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x3a}, 0xb, 0x2, 0x100, 0x4, 0x9, 0xfff9}, 0x20) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0x300, r9, 0x20}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x80, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r10, 0x40087703, 0x10000003) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r10, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r10, 0x0) 365.544985ms ago: executing program 2 (id=2299): move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="f20ff0830800f6b7d800baf80c66b8c5775e8366efbafc0cec88f166b96e02000066b85700000066ba000000000f300f01ca7f82ba210066ed0f01df0f01cf", 0x3f}], 0x1, 0x51, 0x0, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r5, 0xfffffffffffffffb, 0x0) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x7405e000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) r7 = epoll_create1(0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r11, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r11, 0xc008aec1, &(0x7f0000000180)=ANY=[]) r12 = getpgid(0xffffffffffffffff) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x28, 0x4a, 0x1, 0x1, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0xc, 0x41, 0x0, 0x1, [@typed={0x8, 0xb2, 0x0, 0x0, @pid=r12}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40088a01, &(0x7f0000000040)=0x4200c2cc) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x8) 352.343805ms ago: executing program 4 (id=2300): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145480, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x40, 0x4) read(r0, &(0x7f0000000040)=""/123, 0x7b) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000380)={0x1, 0x1, 0x0, 0x0, 0x0, 0x8000000}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/107, 0x6b}, {&(0x7f0000000180)=""/249, 0xf9}], 0x2) ioctl$BLKRRPART(r0, 0x125f, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145480, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x40, 0x4) (async) read(r0, &(0x7f0000000040)=""/123, 0x7b) (async) accept$packet(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000380)={0x1, 0x1, 0x0, 0x0, 0x0, 0x8000000}) (async) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/107, 0x6b}, {&(0x7f0000000180)=""/249, 0xf9}], 0x2) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) 294.321576ms ago: executing program 0 (id=2301): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x311800, 0x0) ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f0000000040)) r1 = syz_pidfd_open(0x0, 0x0) write(r1, &(0x7f0000000080)="1b1b95c6548c519402ed13aff2ea0a3b3a1307b8f82d26d6d7764a406f23428c2c94a21f20a67d5810f30a53b79c3f1f155ffb1e0817192a9a7addc339b1bc2d69a8c54a7bb244bd3a84f943f9a21bc50fb610c98ba223fb1af26bd4f30a078240e190ed5c3d01d5df0dd643bd7e6a1aa9a912d1035378e9089edbcd7931169e19dddbc66a94e6d4d5d03ca444af651fb75284b0d5918e01ea7cfe182dff09a58657d8cd", 0xa4) r2 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0xc02, 0x0) r5 = creat(&(0x7f0000000200)='./file0\x00', 0x28) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000400)=@acquire={0x3a0, 0x17, 0x800, 0x70bd2c, 0x25dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0x16}, 0x4d2, 0xff}, @in=@local, {@in6=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x2, 0x4e24, 0xa, 0xa, 0x20, 0x10, 0x3a, r3, r6}, {{@in6=@local, @in6=@remote, 0x4e22, 0x100, 0x4e22, 0x101, 0x0, 0xa0, 0x0, 0x2b, 0x0, 0xffffffffffffffff}, {0x7cb6, 0x4, 0x3, 0x7, 0x7, 0x0, 0x3}, {0x8, 0x9, 0x6, 0x100}, 0x846d, 0x6e6bb5, 0x0, 0x1, 0x1, 0x3}, 0x5, 0x1, 0x3e5, 0x70bd2c}, [@migrate={0xe8, 0x11, [{@in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, @in=@private=0xa010102, 0x33, 0x2, 0x0, 0x3502, 0x2, 0x2}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, @in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@rand_addr=0x64010101, 0x32, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x3e}, @in=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x2b, 0x4, 0x0, 0x0, 0x2, 0xa}]}, @algo_comp={0xd8, 0x3, {{'deflate\x00'}, 0x480, "dc0efbcd637024f92e9cc93da6807046cf0c174d13acae72260ddc4902e6119382bcf1d583bf46aeb3b6a74bd30adbb7d243872f8496576516799e77da33c6149796f332f4c6c5bb408b1ccffad677ec4f387a92c4c2bd320ab9d7a8ff3737a9b5fa032c204c796ca287a85bff4dfd9fdf33f3e2f3ec60c2e69eb7d8754a94b3896a66684c003d12439520b4a06237dd"}}, @policy={0xac, 0x7, {{@in6=@loopback, @in6=@remote, 0x4e23, 0x5, 0x4e20, 0x3, 0xa, 0xa0, 0x20, 0x87, 0x0, r8}, {0x100000001, 0xea, 0x200, 0xe7, 0x6, 0x6, 0x7558, 0x5}, {0x80, 0x2, 0x6, 0x2}, 0x1000, 0x6e6bb4, 0x0, 0x1, 0x5, 0x3}}, @policy_type={0xa}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x28000004}, 0x1) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0xd46}, 0x16, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r5, 0x4018aee3, &(0x7f0000000900)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000008c0)={0x1ff, 0x9}}) prctl$PR_GET_KEEPCAPS(0x7) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x8, 0x3) r9 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r9, &(0x7f00000009c0)={'#! ', './file0', [{0x20, '\xbc/!{'}, {0x20, '#'}, {0x20, 'trusted.overlay.nlink\x00'}], 0xa, "fe03993e393429c78b0148a282"}, 0x36) sendmsg$nl_xfrm(r5, &(0x7f0000000c80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a40)=@acquire={0x1ec, 0x17, 0x400, 0x70bd29, 0x25dfdbff, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x33}, @in=@private=0xa010102, {@in=@remote, @in=@multicast1, 0x4e21, 0x7, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x32, r3, r7}, {{@in=@multicast1, @in=@empty, 0x4e20, 0x400, 0x4e23, 0x1, 0xa, 0x80, 0x40, 0x3c, r3, r6}, {0x4, 0xc, 0x5, 0x0, 0x9, 0x400, 0x7f, 0xfffffffffffffffa}, {0x6, 0x8, 0x9, 0xfffffffffffffffc}, 0x0, 0x6e6bb7, 0x0, 0x0, 0x1, 0x3}, 0x4, 0x2, 0x42, 0x70bd27}, [@proto={0x5, 0x19, 0x32}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd29, 0x9}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd28, 0x6}}, @address_filter={0x28, 0x1a, {@in=@private=0xa010101, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x2, 0x7, 0x2}}, @replay_esn_val={0x44, 0x17, {0xa, 0x70bd26, 0x70bd2a, 0x70bd2a, 0x70bd2b, 0xb3, [0x2, 0x8001, 0x101, 0xf2fd, 0x3, 0xb, 0x45f, 0x7, 0x7, 0xfca]}}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd28, 0x70bd2b, 0x70bd26, 0x70bd28, 0xddc6, [0x8, 0xf, 0x3, 0x2, 0x4]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x8004}, 0x6004c0d0) ioctl$PPPIOCSNPMODE(r5, 0x4008744b, &(0x7f0000000cc0)={0xc023, 0x2}) chroot(&(0x7f0000000d00)='.\x00') sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000e40)={&(0x7f0000000d40), 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x68, 0x3, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x6000490) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000e80)) mount$cgroup2(0x0, &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00), 0x10042, &(0x7f0000000f40)={[{@pids_localevents}, {@memory_recursiveprot}], [{@seclabel}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '/dev/ttynull\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', r8}}]}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4018004}, 0x40000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r5, 0x4068aea3, &(0x7f0000001140)) fsetxattr$security_ima(r5, &(0x7f00000011c0), &(0x7f0000001200)=@sha1={0x1, "56cc2bcc2c91db58b26e99c56840c1c6297fc1ac"}, 0x15, 0x7) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r5) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0x9c, r10, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x43}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x8, 0x6, 0x1, 0x80, 0x6, 0x8, 0xce, 0x9, 0x9]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1000}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0x7, 0x4, 0x9, 0x0]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x3}, {0x5}, {0x9, 0x1}, {0x1, 0x1}, {0x9, 0x1}, {0x60, 0x1}, {0x9, 0x1}, {0x9, 0x1}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x2e, 0xbe, "62aa007ebf5117aac2407430cb7ff68410e1838b4b8d2bb8ec453fca55b63242cf8ea3b25e2396484921"}, @NL80211_ATTR_MAC={0xa}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10000010}, 0x4000000) read$FUSE(r5, &(0x7f0000001400)={0x2020}, 0x2020) 229.661586ms ago: executing program 2 (id=2302): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x208100, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x9cc6d000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xb8H\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&`<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6#M\"\x87\x05W\f0b(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\xfe\x8c\x87\x0f\x99\xc3E\xcfc\x8cX\xa3\xf5&}\a\xbf\xf8N\"C!\x1f\x96\xd7\xe9\xa5tw\'\x8f,_\xa0\xea\x90\"\x19i\f\xd5\x02\xe2+\xc1\x8e\xfb@\xc56\xb5\xe4\x91\xbc\xbf\xf7\xea\x01]\xd8\xf8.\x99\x82\x89\x9a\x97\x8b\xdd\xcf\xe6\xb4\xad\xda\x7f\xc8\xd0(Q\x8dP\xd9\xd8(){\xca\x84\xd3(\xb6\xd5\xd4\x94\xdf\xde\x05B\"\xa3L\xc9t\xd4]\x95.\x02\x97\xb5\xc5E\xc7H\x84d\xe6I\xd8\\&\xc6\x81t\xa38u\xc0\xa3\x9b\b,4-\x8a\x9fo:\x86J?\xac\xd1\xa8\x02\xb6\xc5m\x85,\x97\xbe\xba\x0eWnW\xdd,\x1eT\x9c\xde\x9e{;\xb2X\x89\xdc\xcfO6\xba\xcbK\xb5\xfbD\xc9\xc4D\x04BT\xe1\xe9]s\x18$F\x9b\xe9<\xdb\x03\b\xfc\xe9\x19E\x8b\x83\xa6\x84Y\xab\x85\xea\x1f^K\xd6I\x10G<@n\x9e\x81\xc6\x1d\xbc\x1a\xc1G') ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 229.360617ms ago: executing program 4 (id=2303): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x7, 0x1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 211.864177ms ago: executing program 0 (id=2304): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000001500)=0x8, 0x4) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x3) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086203, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000040)=0x9, 0x4) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x12, r0, 0x7abeb000) 204.081847ms ago: executing program 4 (id=2305): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 141.610788ms ago: executing program 0 (id=2306): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x572, 0x0, 0x1}]}) (async) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) (async) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0xfffffffffffffe6d, {0xdddd0000, 0x100000}}, "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", "1acd2077949cf1f27e1e764566e4cffaa168dcad09bfe7c84a06d9db78a4e8f0504116608cffa736ae4427d04f27d39e5de80f8935f281bc483252d1c4e0dff576831d8505d3cf34ddc4f4760b53ec5182b54b352dea1b5975eea9b6bffd5b66524559c7c3e9981d7a0ff5ffe6814c923871db66426d98286aec1debc56864a4b29ee5cb46989af08546d6d1a5d9da45db7d8abea1d392d0c668cc040da5d129ddbbe6a95a7d9e51a13328ea3fbd9ac81f03914ed9d1d2b72c234093a351f7294556996ca5459d796cb4127a9aed8e0cca398d1b5af6eae257d02db91a61d49a5677ee9c8caf1855edd2c25b9b3a9a5174d2193108e5e87d781780d9506a890687c80c429f3a46028ed71364c4b8d3b2380b38d2cf7e447dee058f556dcae2627e49dfd316d169d382f2b6775233157f57c7be54b105e2493e140ad97ecf9c12df8f0db9a973d0ef9197ebbdebc5e822ee06852a408560c7f19c65ab8527edc9ec1d6378f2c748f7e84d1d6e98de8abab3e0e42a866e1ec5d00822b124a98d77e9c8dbb3ac6648afe409b21e1cf2f5458a0588cd11af6887f552f6c16a801abf2594eb9a80e704b8053573f661dd29706e71060b630272037144b33d684f66128950510d4138785418f726eb7c7f84c7dda646b3647d673122f95ef89c863c3d4adec4477664cfe911683f19862cc918451f70a6a359dbc66b3599c0af91858ebe13c253a6e9a96758955fdfd1be103777812339e3786484a25b18994ba69b4275f26a64afb9be5219061d94d7c472236f1a20a9217d70abab15182c5f04c6080d535e34045d6497c1c8a2ea53fc022eb159d0d1be59a21f277ce441f3c5cb03ef0e7e1ac63177dfe567e2cb9055228f32c9ca6d38d99093fdc129951380cedafcca40712a2da5cc0af8d872d8f848ea5ff95210a52d2390e236da76fffce86cc8a78a8ea0e1e4464ceac9021556d29d7470ca19849b417aa6aee032f3bd437cb5c839c9f5fb20ec1367449abfb5e19f8365b7947bda60e34136e2eb53e0243766c2718d4bfe6eec77f8ca04d177cc17bad59d651a08349651de6d4dbf5856a6d42cc8cb2441ab7dfa9420d87d4a5aa5914f619b2478a0d68a98280231c8e7558d11eec87e80f2d039b5d6b287d9b3667b020dc45b999b162247bf38f5ac5fc99b5eb6ac5939d35d7d6e71b366f9553ada2784671aecdbdcaf42a2f254dc0289f7be9c6f0c045b30f63ae1a8fac778030f27e04e980bae66e474bc4f9572b8a0d8119ce13ea2ad1285b3397bc929ff26a2ba1ef2760c77e3e114d15742740b27796cb2fc84761db427cdf3c63be71fd6734ed2cb1300a8d5e2b1964f2a0320bfbad8e9bce0cd9329c8c41d79107d77f65c99f3c03813c1f0f5351869434c2ccb685f1863fac38a44ecf354ffde4926ae3cee90833db386633e6dba3585ec36f1aca6701d4d1fc13ac1c5d4cf2ae8c8c418da372bce96451dc2add28828e45ce3f6e35da3d49dcdb8ceb084a581b68fc5fcd4c45246e6b215ca98ae7239c317fe45404984292a83ac7e62614665bec4a5e80b055a0635003e93172e2045ec88144d9d7a2b50c45333720e2273b165147a0b1af77fe87089fe8c0fd32c4e950aedf6798c9007575dc86c02089414089527baf9bbbe5eaf4d58289de0987f8f310d7900ef2350daa438ac83ff255344a2bc814a3e7055269544310b0fe78b07eb0ee5f16899fc8bdf8e3cc47d27a44c93528885452195706091eaf15930f9df5874c19d0a1deedde0cbe9cda7f0618c378bc4ba6fbe911d546c7bc76954fcc6b5ef56c77d306421f9d24e0770cf8b578aaa6276bff4b98e9968e9a1f8c78c6d647d8c52a42d27ee8359840747913e0983e049ad77d87e35800eeeb19cd786a5edf6886e610f51b4d2290d959c7fe906dad2d3e2a5648c5ec0d48becaf209fbb6599d1b0d6299cb2b2fad3b3efac6ba0911a63ae399fa3f19adecc9b10533c99bba28bf9e37600db41c2b463c25b0602fb86ef043ee72aa26e7f102c3afe4073d1318671a514f8320dcbc699514792d5c90c34fe6809102cb6537a4e76530256cd997a1dba4a75b1578c7f12b409af040afa35c54001a4abf1c402f91413995ced6b64256684c34283e644246d235af905fa2edf8f802a65c1c1e0ba24ea656cb3b1f876b6f335aed27c3a6e8da53b1b9c283d299390310df6dc84e5569ad3ac1744824b329fc24cb8612c061b09440464c1168012dc40e8df788f9c708bde6bd4eb3f6111729b08796d0243b07a21ac542ae418f19ec3d7171197c8ca216b20f786784400f2834d98819a5fbbd909677f7d7309dca5c0e2cf74a8a53c1791c78488fec0520d3c71a9698e5040920acc5eb7764f4c295cb2f00b5a62d5fc1e1d0040c639886712ad4fece171739fbc0519b93c8bccac49f871a0e2f5ba97331be916aaae29b8cd646028629cc227b916d1d8b4729da3baffb0e39b533e039eb9f10073c156485902745ec60b8d281b2f84a8651fe4c533119bab8424bcecb28c067ffb1e03e05bcf9d6d44dfe0782e072934fc36e70b1acbf30387495618ac2729811aa6c2901b109b33a0010cfbe666fe9fcac86cc81023dda253863714e89c78265e219d00ba20b3c846368dd21816f699a6af20a290f075f4346b98ad40d69caaf2614856c0bdaa661907975679f5cb5afd3738ba811db58123922647476de50ccf17360393433b547bf0377b2115a7cd357699d043bd80981a2a28c638f7c2e725d85f9edd2fdcfea1f7e2bf02f9f0d4236c9d14c6d382dad99192125b219eea6a13b5685efcf34454d2a12537c5354dc5e34ecda968422cc472f0fec174b95cd298e89e7efbc164465dae45059a40e104b1a980ebc781848b0109ce9cec600b190a34dcf741dd6145d56c4ec27c983a7d6328130c122217bbbb33e2cffba1a352b6805dbd715772153b53051db7215f475ba8673b0dd59e2db414a658d3d262c5304d300b930921c7c0a9910eed96a705eea2c8657be193836a20f23fcbc8ef105ca25551626caf63c511d3c9dcffd9d485f27a63b6992e4b6fa26b02903a4da52fd7fa06397fe2883f9b6a4cac2ffb8ce1f476ec72bccaf0ec7b16e6f601e72f46e835d9bc2a82dccaa449728d22a7ff17772276f54073c66b184de0fa7f681823dcb7603a20aa94b76a9b7adb9f11f447b8764b2d719bea91ea32edbb4d340d18f18b3f53d1d07d0405facb202c30ac1ec145516e071cc71c59cc6205db061a8c19bb2d3ab463f6fea1c6d3b5a69d96e5b67ed569e1c04cff6c9f69ab9343e9a71bf6776d3b84b47de2ecf9a0d45515ef5a3b5c6d55f2c6543ef2bf0eb795219da3026ab06c9ba9bbdc30d5dc7c3782a9f58141a63f8d4683ad5c1d156c92c508cefd9702e9267263e34ff96800c425f768bd204466f4f9badabdfaf35e1a8096150e8afeea3a30586b89d1002f041612f8e81de4dcd268bf538307c4d28d1d2ae1af979f3b02017ebe942cdc8fa7964fe978254eb15fed7478e4200e381409486d37e0205c597b5ec19243ab547da051dee03f18e079af60dcb2095fe86f292a4b4bba8682ed8b220c0b48958882aaa7e93448bfecebfba6ca3ef28e0752080cbc9f752d6da814a9dc5bc552d9fe73b8a1df8eb0158df58810fce8719f11b04c4e157ac8ae3692f825a4569ff859273775c45eb999fff7a47ca461b2fda6edfe8ed8371ed29c4f7499448cfff0bc47ca1d8fc9eb35f79db389781c36e89541b686edc21f088463b2d26fd9b650eaf5ed1cda0f00040000000000009b0c527ba655252f77b77c2f4cc0f7741c52a57629fe511c5f9c17ee44fec35da363f5356343037b2705a393115062719e6bd87bbff2472a7833be6d2270fe5ff4cc9f0439a53adb91fe1520ff4841c120e80c99fcc2d0ee794fa8c91dc9c4227ef9f9ac784ce41abefa69b84acb285e385b74501ea137be765172d90738f201497cb7c992dcc2f17341c9b6a0ef3dcb14350669802e3295b5a133142df7bc5645bbf222d2da033ee4cc4f225f248ad88782945869c29943eb6498c87c2b125fb2d4067118c2b417308a1703fd9f48c48ee2a9c5af44df473e3b99b8a941fc4967060b4960864bc97e4f2bf53e7a5c2ec3d47e7bf8345b56a4df5f84d0523c1b6cf9399110e393474b3ece22c4923f531ff12242d5e2b293846a7ed06e3e7f062cb173431a2b680188fb46d2cb74d4a0d9dae59e2be485aabbb54c26406e6e77de3031e049bd8a49139fa62151716a665fb9f1966cf6c57f4185f7cffbbc43341f3b69a3ae0a4dcfd9b37f0035a69ac552830f0ca56069c8f69162280bced2ec30c6789f32cd38d7f97953f0989b65cf90f01206b20b0111a3d22f3d2f85104b03283f4fd7b80e53f20f1c91d5bf3b67aac25c4300b3191c1f5d7bb0fe112deac0f6acbea3b57c20c5d8f0bad48873a7e7347ead5a4d0b73041c86bdcd3b91d6cbe0ebb5824fb90cb4e74f439505074f236679c4ea4015fbdf0c44b4063b62cdced485cbca0eae2404da7158a974b7dc14c5207107d5424de14a35739f68f3f151c6de20d0ad19d06521baf26ab2cb7ff7e8f83d60a9f554367f99fa5c44910b886e1c9c2418a7a4b33f19fff9af4724c7c8251ffc24cc4464b8804b6704bc0572b23498ec92263d37bdb54490f3316087c5b192a20027ad6cf1a2c3fef8043e2847b8734fa8dc91ce992474796e3f71580841379279f8b10ab8e6766196fb5a9b2ff44cabece6930fb9f32e867047313410c13b11a8a788a29ad93a5b9ae1b960a46fd48fe5cdd7168815c67b267065453547cb60db74f37238b2f7f3c78abc249ffe118a1d3e7eb5cdd326ad0a07a50bd24a6be4b5e56fade7fb7c3b515b4d0b16884c9eee7ef9c82f2ea4d89113e950622cee8e63519a899da3ee83bcd369b01b373934bbed73d8f94e3312e72d82d3fb8b8e65b0f5580cffda633467fc3285023159c3ac7273a46275d874b87254df07ea15d0806f4b8312c4e95235cab31e015a3603906c188233db45dea658dcf694f5097a9e26aba8b58e248210fa5e12fa08cbbe0a01afa9b2c36d38d298dd180ee6e358d45397471bc064e2e8e51da189e98bf41cc30b50b0d937e8cbfc5b138dc66143716b27190689efebcaa5676c9eb370465f77803b219b0ee1f65f343d70b01435f9adc46979b121944e13a02cbdd47a9898b26d6cc5294a9358971bad37a6b01d8b2ee251e50b02acbd560bcd4a212124f308d87eca79d13c77b90510675989ffb70a9d5643df2db6067bd4e0fd21d0a40b84177279587777f763bb9e2fc99186402ff1905eb61b6ea3bef862beb10ede1fbca93f5b426f683bb72099ffc61c99d8a7527fe9167b13d786402864d2b4237fa47426f46b6d5e0911de793f73610b46de4e62b8a67aaed298a9a2d5b5c5b7936f8bcc62a8f9d64d8ff1470a386974b35f382f42ad1fb2c9de214b35aa0afcff7806d7601ab9142a0dade5c7a9e6b0c16027c4d0fc413ba5d16f0d4826b3f469afa6e5ce4a19e21d2a2c2c1e3055706d0ce371dee59a06e534887cf5e300bd118b7c5e8eee2a8fd4bf6ca96df566f49049bd25533c8ae08eb2334ba183529c041f3d9b45139173f3ee8b1b8f8633c9cb7caa735805d56b1e3119a97f3ce86ecd8f21256c0a5a54266cc00927c881ac18fef64f25704b3f01b4885a9c4053aec5bfe5be638563267548cacbad2a95c3c48e6a913bd87ec0c489c236214b650a17d27081ae8def0d27c0d6a25553601875192d11c9e3ef2a3273c1f9b079"}) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000440)={{0x0, 0x0, 0x80}}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x2}, @dead_binder_done, @release], 0x548, 0x0, &(0x7f0000000580)="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"}) 123.290789ms ago: executing program 2 (id=2307): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x8, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000040), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6, 0x0, 0x4, 0xfffffffd}]}, 0x10) r2 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='\'{( (.]&%\')\xa1@$+', 0x0, r0) 111.833579ms ago: executing program 2 (id=2308): io_setup(0x80000000, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x400448dc, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x6, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x2162, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) getpid() mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x1240808, 0x0) 96.572129ms ago: executing program 2 (id=2309): r0 = socket(0x1e, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080), 0x2000011a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000001e40)=[{r3, 0x7183}, {r3, 0x1008}], 0x2, 0xfffffffc) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000340)={0x0, 0x5, 0x9, 0xb6, 0x0, 0x3, 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r6, &(0x7f0000000940)=[{{&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x4}}, 0x80, 0x0}}], 0x1, 0x4) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x35, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, &(0x7f0000000200)=ANY=[@ANYBLOB="7968fb3d", @ANYRESHEX=0x0, @ANYBLOB=',huge=always,mode=00000000000000000000005,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) 1.58753ms ago: executing program 4 (id=2310): r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x7, 0x48000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x3, 0x0, 0xeb}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x3, 0x0, 0xeb}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10000003) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) (async) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x0) 1.36698ms ago: executing program 0 (id=2311): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x802, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) dup(r3) (async) r4 = dup(r3) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) creat(&(0x7f0000000100)='./file0\x00', 0x59661f78ef414718) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r2, r1, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x200100, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000580)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) 479.45µs ago: executing program 4 (id=2312): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0x300, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x14}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) r5 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000000c0)={0x3, 0x0, 0x0, r6}, 0xc) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r7 = socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={[{@name={'name', 0x3d, '-,#'}}]}) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x4, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r10) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e22, 0x2, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0xfffffffd, @mcast2, 0x2}, 0x1c) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r12 = dup(r0) ioctl$TIOCVHANGUP(r12, 0x5437, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 0s ago: executing program 2 (id=2313): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x30) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000100), 0x4) prctl$PR_SET_SECUREBITS(0x8, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) prctl$PR_SET_SECUREBITS(0x1c, 0x1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@private2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x80000, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, r4}}, {@noextend}, {@loose}, {@cache_loose}, {@mmap}, {@version_L}, {@version_9p2000}, {@ignoreqv}, {@access_uid={'access', 0x3d, r5}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000a80)={0x0, 0x0, @pic={0x0, 0x3, 0xe, 0x1f, 0xf8, 0xfe, 0x42, 0x1, 0x0, 0x8, 0x6, 0x11, 0x0, 0x0, 0xfe, 0x3}}) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x7f, 0x30, 0x5, 0x0, 0x7d, 0x5, 0x48, 0xc, 0xff, 0x8, 0xa0, 0x1, 0x40, 0x4, 0x8, 0x7}}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): frame+0x76/0x7e [ 137.346441][ T5368] RIP: 0033:0x7f1dc598e929 [ 137.346465][ T5368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.346480][ T5368] RSP: 002b:00007f1dc6849038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 137.346501][ T5368] RAX: ffffffffffffffda RBX: 00007f1dc5bb5fa0 RCX: 00007f1dc598e929 [ 137.346516][ T5368] RDX: 0000000000000004 RSI: 0000200000000300 RDI: 0000000000000004 [ 137.346531][ T5368] RBP: 00007f1dc6849090 R08: 0000000000000002 R09: 0000000000000000 [ 137.346544][ T5368] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 137.346558][ T5368] R13: 0000000000000000 R14: 00007f1dc5bb5fa0 R15: 00007fff72955338 [ 137.346576][ T5368] [ 137.454467][ T754] usb usb6-port1: unable to enumerate USB device [ 137.591893][ T36] audit: type=1400 audit(2000000000.990:502): avc: denied { read write } for pid=5369 comm="syz.0.1773" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 137.613834][ T5372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=5372 comm=syz.0.1774 [ 137.628256][ T36] audit: type=1400 audit(2000000000.990:503): avc: denied { open } for pid=5369 comm="syz.0.1773" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 137.628916][ T5372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=5372 comm=syz.0.1774 [ 137.665454][ T36] audit: type=1400 audit(2000000000.990:504): avc: denied { map } for pid=5369 comm="syz.0.1773" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 137.667786][ T5372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=5372 comm=syz.0.1774 [ 138.163447][ T5388] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 138.207015][ T5390] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 138.210037][ T5388] rust_binder: Write failure EINVAL in pid:183 [ 138.218525][ T5390] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1781'. [ 138.322485][ T5406] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.406126][ T5411] can: request_module (can-proto-0) failed. [ 138.502889][ T5417] FAULT_INJECTION: forcing a failure. [ 138.502889][ T5417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.516385][ T5417] CPU: 1 UID: 0 PID: 5417 Comm: syz.2.1792 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 138.516423][ T5417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.516437][ T5417] Call Trace: [ 138.516444][ T5417] [ 138.516452][ T5417] __dump_stack+0x21/0x30 [ 138.516482][ T5417] dump_stack_lvl+0x10c/0x190 [ 138.516507][ T5417] ? __cfi_dump_stack_lvl+0x10/0x10 [ 138.516533][ T5417] dump_stack+0x19/0x20 [ 138.516556][ T5417] should_fail_ex+0x3d9/0x530 [ 138.516582][ T5417] should_fail+0xf/0x20 [ 138.516604][ T5417] should_fail_usercopy+0x1e/0x30 [ 138.516631][ T5417] _copy_to_user+0x24/0xa0 [ 138.516659][ T5417] simple_read_from_buffer+0xed/0x160 [ 138.516682][ T5417] proc_fail_nth_read+0x19e/0x210 [ 138.516704][ T5417] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 138.516724][ T5417] ? __kasan_slab_free+0x6a/0x80 [ 138.516753][ T5417] ? bpf_lsm_file_permission+0xd/0x20 [ 138.516777][ T5417] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 138.516799][ T5417] vfs_read+0x27b/0xb60 [ 138.516823][ T5417] ? putname+0x113/0x150 [ 138.516850][ T5417] ? __cfi_vfs_read+0x10/0x10 [ 138.516874][ T5417] ? __kasan_check_write+0x18/0x20 [ 138.516897][ T5417] ? mutex_lock+0x92/0x1c0 [ 138.516920][ T5417] ? __cfi_mutex_lock+0x10/0x10 [ 138.516943][ T5417] ? __fget_files+0x2c5/0x340 [ 138.516973][ T5417] ksys_read+0x141/0x250 [ 138.516999][ T5417] ? __cfi_ksys_read+0x10/0x10 [ 138.517023][ T5417] ? __kasan_check_write+0x18/0x20 [ 138.517048][ T5417] ? __kasan_check_read+0x15/0x20 [ 138.517072][ T5417] __x64_sys_read+0x7f/0x90 [ 138.517098][ T5417] x64_sys_call+0x2638/0x2ee0 [ 138.517126][ T5417] do_syscall_64+0x58/0xf0 [ 138.517155][ T5417] ? clear_bhb_loop+0x50/0xa0 [ 138.517178][ T5417] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 138.517198][ T5417] RIP: 0033:0x7f6d3178d33c [ 138.517215][ T5417] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 138.517235][ T5417] RSP: 002b:00007f6d32664030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.517260][ T5417] RAX: ffffffffffffffda RBX: 00007f6d319b5fa0 RCX: 00007f6d3178d33c [ 138.517276][ T5417] RDX: 000000000000000f RSI: 00007f6d326640a0 RDI: 0000000000000005 [ 138.517290][ T5417] RBP: 00007f6d32664090 R08: 0000000000000000 R09: 0000000000000000 [ 138.517305][ T5417] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 138.517320][ T5417] R13: 0000000000000000 R14: 00007f6d319b5fa0 R15: 00007ffdedcc7398 [ 138.517340][ T5417] [ 138.984574][ T5453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.993886][ T36] audit: type=1400 audit(2000000002.390:505): avc: denied { ioctl } for pid=5440 comm="syz.0.1800" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 139.077342][ T5459] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.107738][ T5470] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 139.225871][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.234115][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.240591][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.247469][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.253993][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.260544][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.267202][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.273787][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.280338][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.286990][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.293529][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.293693][ T5475] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 139.300078][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.306949][ T5475] rust_binder: Error while translating object. [ 139.315509][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.321916][ T333] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 139.328223][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.335541][ T5475] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 139.342386][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.348678][ T5475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:206 [ 139.358022][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.373493][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.373925][ T4547] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 139.380362][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.394089][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.400529][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.407077][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.413533][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.420208][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.426688][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.433130][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.439609][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.446143][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.452586][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.459068][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.465552][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.471988][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.478550][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.485098][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.491655][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.498197][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.503911][ T333] usb 5-1: Using ep0 maxpacket: 32 [ 139.504987][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.512552][ T333] usb 5-1: unable to get BOS descriptor or descriptor too short [ 139.516449][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.523641][ T333] usb 5-1: config 0 has no interfaces? [ 139.532211][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.538991][ T333] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.542568][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.549256][ T333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.558159][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.564868][ T333] usb 5-1: Product: syz [ 139.572801][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.579273][ T333] usb 5-1: Manufacturer: syz [ 139.583407][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.589881][ T333] usb 5-1: SerialNumber: syz [ 139.594509][ T4547] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.601639][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.606001][ T4547] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 139.615591][ T333] usb 5-1: config 0 descriptor?? [ 139.621716][ T4547] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.634169][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.638101][ T4547] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 139.649540][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.664677][ T4547] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.664708][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.671165][ T4547] usb 3-1: Product: syz [ 139.679648][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.686019][ T4547] usb 3-1: Manufacturer: syz [ 139.690201][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.696361][ T4547] usb 3-1: SerialNumber: syz [ 139.701230][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.709641][ T4547] hub 3-1:1.0: bad descriptor, ignoring hub [ 139.712047][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.720597][ T4547] hub 3-1:1.0: probe with driver hub failed with error -5 [ 139.724588][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.737994][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.744528][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.751001][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.757507][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.763994][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.770455][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.776959][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.783439][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.786496][ T5479] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:24 [ 139.789954][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.805585][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.812056][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.818608][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.825946][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.838249][ T5483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1815'. [ 139.866183][ T5461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.878802][ T5461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.887413][ T333] usb 5-1: USB disconnect, device number 22 [ 139.910421][ T4547] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 140.028620][ T36] audit: type=1400 audit(2000000003.430:506): avc: denied { mount } for pid=5498 comm="syz.5.1820" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 140.158152][ T5511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:228 [ 140.197645][ T36] audit: type=1400 audit(2000000003.600:507): avc: denied { ioctl } for pid=5516 comm="syz.5.1827" path="socket:[35978]" dev="sockfs" ino=35978 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 140.232044][ T36] audit: type=1400 audit(2000000003.600:508): avc: denied { accept } for pid=5516 comm="syz.5.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 140.353808][ T333] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 140.443847][ T754] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 140.507056][ T333] usb 5-1: config index 0 descriptor too short (expected 227, got 149) [ 140.515396][ T333] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 140.523660][ T333] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 140.534144][ T333] usb 5-1: config 220 has no interface number 2 [ 140.540441][ T333] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 140.553635][ T333] usb 5-1: config 220 interface 0 has no altsetting 0 [ 140.560490][ T333] usb 5-1: config 220 interface 76 has no altsetting 0 [ 140.567482][ T333] usb 5-1: config 220 interface 1 has no altsetting 0 [ 140.576186][ T333] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 140.585311][ T333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.593333][ T333] usb 5-1: Product: syz [ 140.597590][ T333] usb 5-1: Manufacturer: syz [ 140.602218][ T333] usb 5-1: SerialNumber: syz [ 140.614848][ T754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.626025][ T754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.636217][ T754] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.650199][ T754] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.659588][ T754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.671982][ T754] usb 6-1: config 0 descriptor?? [ 140.817001][ T333] usb 5-1: selecting invalid altsetting 0 [ 140.822899][ T333] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 140.830031][ T333] usb 5-1: No valid video chain found. [ 140.843444][ T333] usb 5-1: USB disconnect, device number 23 [ 141.079281][ T754] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 141.086817][ T754] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 141.094352][ T754] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 141.101787][ T754] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 141.109254][ T754] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 141.116708][ T754] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 141.125492][ T754] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 141.132980][ T754] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 141.141427][ T754] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 141.149035][ T754] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 141.169654][ T754] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 141.177372][ T754] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 141.184936][ T754] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 141.192383][ T754] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 141.199941][ T754] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 141.204480][ T5542] FAULT_INJECTION: forcing a failure. [ 141.204480][ T5542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.207984][ T754] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 141.221327][ T5542] CPU: 1 UID: 0 PID: 5542 Comm: syz.0.1836 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 141.221363][ T5542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.221380][ T5542] Call Trace: [ 141.221386][ T5542] [ 141.221395][ T5542] __dump_stack+0x21/0x30 [ 141.221431][ T5542] dump_stack_lvl+0x10c/0x190 [ 141.221460][ T5542] ? __cfi_dump_stack_lvl+0x10/0x10 [ 141.221488][ T5542] ? vfs_write+0x8ba/0xe80 [ 141.221519][ T5542] dump_stack+0x19/0x20 [ 141.221546][ T5542] should_fail_ex+0x3d9/0x530 [ 141.221575][ T5542] should_fail+0xf/0x20 [ 141.221601][ T5542] should_fail_usercopy+0x1e/0x30 [ 141.221633][ T5542] _copy_from_user+0x22/0xb0 [ 141.221665][ T5542] get_timespec64+0x8f/0x1a0 [ 141.221701][ T5542] ? __cfi_get_timespec64+0x10/0x10 [ 141.221742][ T5542] ? __kasan_check_read+0x15/0x20 [ 141.221771][ T5542] __x64_sys_utimensat+0x11d/0x230 [ 141.221799][ T5542] ? __cfi___x64_sys_utimensat+0x10/0x10 [ 141.221827][ T5542] ? __kasan_check_read+0x15/0x20 [ 141.221855][ T5542] x64_sys_call+0x24df/0x2ee0 [ 141.221888][ T5542] do_syscall_64+0x58/0xf0 [ 141.221929][ T5542] ? clear_bhb_loop+0x50/0xa0 [ 141.221956][ T5542] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 141.221981][ T5542] RIP: 0033:0x7f1dc598e929 [ 141.222003][ T5542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.222023][ T5542] RSP: 002b:00007f1dc6849038 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 141.222051][ T5542] RAX: ffffffffffffffda RBX: 00007f1dc5bb5fa0 RCX: 00007f1dc598e929 [ 141.222070][ T5542] RDX: 0000200000000300 RSI: 0000000000000000 RDI: 0000000000000003 [ 141.222086][ T5542] RBP: 00007f1dc6849090 R08: 0000000000000000 R09: 0000000000000000 [ 141.222103][ T5542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.222119][ T5542] R13: 0000000000000000 R14: 00007f1dc5bb5fa0 R15: 00007fff72955338 [ 141.222140][ T5542] [ 141.260862][ T5544] tmpfs: Unknown parameter '' [ 141.265894][ T754] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 141.438116][ T5553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.462134][ T5553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.490921][ T5553] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1828'. [ 142.205823][ T5573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.226614][ T5575] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 142.242290][ T5575] 9pnet_fd: Insufficient options for proto=fd [ 142.293816][ T754] usb 3-1: USB disconnect, device number 38 [ 142.300774][ T754] usblp0: removed [ 142.376577][ T333] usb 6-1: USB disconnect, device number 21 [ 142.413708][ T31] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 142.529774][ T36] audit: type=1400 audit(2000000005.930:509): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 142.539512][ T5591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.575235][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.591862][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.601537][ T31] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 142.602517][ T5592] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 142.610705][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 142.626678][ T31] usb 5-1: SerialNumber: syz [ 142.644021][ T5582] kvm: Disabled LAPIC found during irq injection [ 142.703695][ T305] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 142.837042][ T31] usb 5-1: 0:2 : does not exist [ 142.843951][ T31] usb 5-1: USB disconnect, device number 24 [ 142.852867][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 142.979885][ T5596] rust_binder: Error while translating object. [ 142.979923][ T5596] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 142.986275][ T5596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:240 [ 143.357099][ T5610] Restarting kernel threads ... done. [ 143.387209][ T5610] rust_binder: Error while translating object. [ 143.387259][ T5610] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 143.393483][ T5610] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 143.521849][ T5631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1865'. [ 143.542080][ T5632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1865'. [ 143.551204][ T5634] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.551840][ T5634] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 143.551907][ T5629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:94 [ 143.754519][ T5651] rust_binder: inc_ref_done called when no active inc_refs [ 143.829308][ T5660] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.899527][ T5663] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 144.209002][ T36] audit: type=1400 audit(2000000007.610:510): avc: denied { create } for pid=5667 comm="syz.4.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 144.913558][ T305] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 144.933596][ T45] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 145.063544][ T305] usb 1-1: Using ep0 maxpacket: 32 [ 145.069962][ T305] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 145.078520][ T305] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 145.087235][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 145.092412][ T305] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 145.101501][ T305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 145.111228][ T305] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 145.121009][ T305] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 145.134044][ T305] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 145.143202][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.151566][ T45] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.164746][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 145.171619][ T305] usb 1-1: config 0 descriptor?? [ 145.176717][ T45] usb 3-1: New USB device found, idVendor=056a, idProduct=00f6, bcdDevice= 0.00 [ 145.185843][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.195563][ T45] usb 3-1: config 0 descriptor?? [ 145.278198][ T5705] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 145.288576][ T754] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 145.303607][ T754] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.395551][ T305] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 145.428380][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.428417][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.434710][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.441108][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.447402][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.453683][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.459956][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.466208][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.472430][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.478681][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.478793][ T5711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:554 [ 145.484968][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.500276][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.506538][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.512742][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.518969][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.525184][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.531374][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.537609][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.543862][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.550044][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.556284][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.562484][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.568813][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.575050][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.581234][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.587451][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.593676][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.597694][ T754] usb 1-1: USB disconnect, device number 4 [ 145.599874][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.612480][ T754] usblp0: removed [ 145.614650][ T45] wacom 0003:056A:00F6.000E: unknown main item tag 0x0 [ 145.620526][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.626342][ T45] wacom 0003:056A:00F6.000E: unknown main item tag 0x0 [ 145.630850][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.638100][ T45] wacom 0003:056A:00F6.000E: unknown main item tag 0x0 [ 145.643954][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.652389][ T45] wacom 0003:056A:00F6.000E: unknown main item tag 0x0 [ 145.656033][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.662478][ T45] wacom 0003:056A:00F6.000E: unknown main item tag 0x0 [ 145.669088][ T5712] rust_binder: Write failure EINVAL in pid:554 [ 145.681981][ T45] wacom 0003:056A:00F6.000E: hidraw0: USB HID v4.03 Device [HID 056a:00f6] on usb-dummy_hcd.2-1/input0 [ 145.822930][ T5696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.823262][ T5696] rust_binder: Failed to allocate buffer. len:88, is_oneway:false [ 145.830487][ T4547] usb 3-1: USB disconnect, device number 39 [ 146.488653][ T5747] kvm: pic: non byte read [ 146.493475][ T5747] kvm: pic: level sensitive irq not supported [ 146.493595][ T5747] kvm: pic: non byte read [ 146.504526][ T5747] kvm: pic: level sensitive irq not supported [ 146.504589][ T5747] kvm: pic: non byte read [ 146.515836][ T5747] kvm: pic: level sensitive irq not supported [ 146.515902][ T5747] kvm: pic: non byte read [ 146.527391][ T5747] kvm: pic: level sensitive irq not supported [ 146.527455][ T5747] kvm: pic: non byte read [ 146.538521][ T5747] kvm: pic: level sensitive irq not supported [ 146.538583][ T5747] kvm: pic: non byte read [ 146.550031][ T5747] kvm: pic: level sensitive irq not supported [ 146.550094][ T5747] kvm: pic: non byte read [ 146.561077][ T5747] kvm: pic: level sensitive irq not supported [ 146.561140][ T5747] kvm: pic: non byte read [ 146.572192][ T5747] kvm: pic: level sensitive irq not supported [ 146.572253][ T5747] kvm: pic: non byte read [ 146.631046][ T5751] fuse: Bad value for 'rootmode' [ 146.715923][ T5758] rust_binder: Write failure EINVAL in pid:571 [ 146.729238][ T36] audit: type=1400 audit(2000000010.130:511): avc: denied { create } for pid=5759 comm="syz.4.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 146.774057][ T36] audit: type=1400 audit(2000000010.180:512): avc: denied { create } for pid=5768 comm="syz.4.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 146.803332][ T5773] binder: Unknown parameter '' [ 146.874560][ T5787] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1917'. [ 146.904651][ T5791] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1919'. [ 146.915078][ T5791] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 146.922452][ T5791] rust_binder: Write failure EINVAL in pid:141 [ 147.014241][ T5799] rust_binder: Got transaction with invalid offset. [ 147.020470][ T5799] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 147.027179][ T5799] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145 [ 147.143425][ T4547] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 147.256323][ T5801] rust_binder: Write failure EINVAL in pid:269 [ 147.256423][ T5801] rust_binder: Read failure Err(EAGAIN) in pid:269 [ 147.305849][ T4547] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 147.322843][ T4547] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.331342][ T4547] usb 5-1: Product: syz [ 147.336190][ T4547] usb 5-1: Manufacturer: syz [ 147.341028][ T4547] usb 5-1: SerialNumber: syz [ 147.773399][ T45] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 147.923425][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 147.929693][ T45] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 147.938469][ T45] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 147.948593][ T45] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.958923][ T45] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.968029][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.976042][ T45] usb 6-1: Product: syz [ 147.980221][ T45] usb 6-1: Manufacturer: syz [ 147.984861][ T45] usb 6-1: SerialNumber: syz [ 148.123361][ T305] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 148.191862][ T36] audit: type=1400 audit(2000000011.590:513): avc: denied { append } for pid=5817 comm="syz.5.1929" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 148.281892][ T45] usb 6-1: 0:2 : does not exist [ 148.288615][ T45] usb 6-1: USB disconnect, device number 22 [ 148.298635][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 148.304658][ T305] usb 1-1: config 0 has no interfaces? [ 148.319929][ T305] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 148.329039][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.337861][ T305] usb 1-1: config 0 descriptor?? [ 148.545783][ T45] usb 1-1: USB disconnect, device number 5 [ 149.126025][ T36] audit: type=1400 audit(2000000012.530:514): avc: denied { append } for pid=5839 comm="syz.0.1938" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 149.423383][ T4547] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 149.574484][ T4547] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 149.585397][ T754] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 149.592910][ T4547] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.603926][ T4547] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.614054][ T4547] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 149.627148][ T4547] usb 6-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 149.636220][ T4547] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.644976][ T4547] usb 6-1: config 0 descriptor?? [ 149.763417][ T754] usb 1-1: Using ep0 maxpacket: 32 [ 149.771785][ T754] usb 1-1: unable to get BOS descriptor or descriptor too short [ 149.779932][ T754] usb 1-1: no configurations [ 149.784868][ T754] usb 1-1: can't read configurations, error -22 [ 149.913443][ T305] usb 5-1: USB disconnect, device number 25 [ 149.933038][ T5851] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.054740][ T4547] usbhid 6-1:0.0: can't add hid device: -71 [ 150.067280][ T4547] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 150.078106][ T4547] usb 6-1: USB disconnect, device number 23 [ 150.263316][ T305] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 150.313370][ T5853] /dev/rnullb0: Can't open blockdev [ 150.371569][ T5864] netlink: 'syz.0.1948': attribute type 4 has an invalid length. [ 150.380863][ T5864] fuse: Bad value for 'fd' [ 150.386925][ T5864] overlay: ./file0 is not a directory [ 150.414544][ T305] usb 5-1: not running at top speed; connect to a high speed hub [ 150.422953][ T305] usb 5-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 150.434043][ T305] usb 5-1: config 1 interface 0 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 150.447090][ T305] usb 5-1: config 1 interface 0 has no altsetting 0 [ 150.454221][ T305] usb 5-1: string descriptor 0 read error: -22 [ 150.460515][ T305] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.469630][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.478895][ T5851] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 150.493087][ T305] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 150.593241][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 150.725171][ T9] usb 3-1: device descriptor read/64, error -71 [ 150.963262][ T9] usb 3-1: device descriptor read/64, error -71 [ 151.044270][ T5876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1942'. [ 151.054974][ T5876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1942'. [ 151.064450][ T5876] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 151.064474][ T5876] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 151.073640][ T5876] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:588 [ 151.155404][ T5878] serio: Serial port ttynull [ 151.203220][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 151.211663][ T5880] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 151.308131][ T36] audit: type=1326 audit(2000000014.710:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5881 comm="syz.0.1954" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dc598e929 code=0x0 [ 151.339451][ T9] usb 3-1: device descriptor read/64, error -71 [ 151.379950][ T5888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1957'. [ 151.390628][ T36] audit: type=1400 audit(2000000014.790:516): avc: denied { execute } for pid=5881 comm="syz.0.1954" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 151.531827][ T5896] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 151.531858][ T5896] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:322 [ 151.583169][ T9] usb 3-1: device descriptor read/64, error -71 [ 151.703359][ T9] usb usb3-port1: attempt power cycle [ 151.920434][ T36] audit: type=1326 audit(2000000015.320:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.5.1967" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9abef8e929 code=0x0 [ 152.022038][ T5921] rust_binder: Read failure Err(EAGAIN) in pid:346 [ 152.043236][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 152.074230][ T9] usb 3-1: device descriptor read/8, error -71 [ 152.204242][ T9] usb 3-1: device descriptor read/8, error -71 [ 152.443123][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 152.464228][ T9] usb 3-1: device descriptor read/8, error -71 [ 152.594369][ T9] usb 3-1: device descriptor read/8, error -71 [ 152.703223][ T9] usb usb3-port1: unable to enumerate USB device [ 152.944566][ T45] usb 5-1: USB disconnect, device number 26 [ 153.185326][ T5974] rust_binder: Error in use_page_slow: ESRCH [ 153.185346][ T5974] rust_binder: use_range failure ESRCH [ 153.201587][ T5974] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 153.212607][ T5974] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 153.220645][ T5974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:184 [ 153.421493][ T5943] rust_binder: Write failure EFAULT in pid:591 [ 153.422583][ T5983] netlink: 'syz.2.1984': attribute type 11 has an invalid length. [ 153.443253][ T5983] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1984'. [ 153.443257][ T5984] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.452844][ T5985] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.535068][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 153.715308][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 153.726282][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.737271][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.747082][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 153.760323][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 153.769444][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.778375][ T9] usb 1-1: config 0 descriptor?? [ 153.978696][ T36] audit: type=1400 audit(2000000017.380:518): avc: denied { create } for pid=6034 comm="syz.5.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 154.007685][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 154.013875][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 154.022645][ T9] usb 1-1: USB disconnect, device number 8 [ 154.142493][ T6029] rust_binder: Read failure Err(EFAULT) in pid:614 [ 154.173988][ T36] audit: type=1400 audit(2000000017.580:519): avc: denied { execute } for pid=6047 comm="syz.4.2005" path="/cpu.stat" dev="ramfs" ino=39269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 154.216810][ T6050] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2006'. [ 154.243746][ T36] audit: type=1400 audit(2000000017.640:520): avc: denied { view } for pid=6053 comm="syz.4.2007" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 154.271913][ T6056] input: syz1 as /devices/virtual/input/input30 [ 154.280881][ T6056] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:626 [ 154.281165][ T6056] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 154.319844][ T6059] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2009'. [ 154.339278][ T6059] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.339666][ T6059] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 154.375902][ T6061] rust_binder: Error while translating object. [ 154.384713][ T6061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 154.390946][ T6061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:629 [ 154.443716][ T6046] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 154.452919][ T6046] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:420 [ 154.758481][ T6086] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 154.767733][ T6086] rust_binder: Error in use_page_slow: EBUSY [ 154.778229][ T6086] rust_binder: use_range failure EBUSY [ 154.784346][ T6086] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 154.789903][ T6086] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 154.797646][ T6086] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 154.807010][ T6086] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:646 [ 154.834218][ T6089] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 154.842416][ T6089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:649 [ 154.851874][ T333] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 154.852335][ T6089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:649 [ 155.003047][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 155.004224][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.030749][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.040570][ T333] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 155.049737][ T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.063313][ T333] usb 3-1: config 0 descriptor?? [ 155.068968][ T754] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 155.083146][ T754] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 155.152955][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 155.161893][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 155.172189][ T9] usb 1-1: no configurations [ 155.176974][ T9] usb 1-1: can't read configurations, error -22 [ 155.259261][ T6098] rust_binder: Got transaction with invalid offset. [ 155.259299][ T6098] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 155.266080][ T6098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:428 [ 155.479565][ T333] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 155.517701][ T333] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 155.552939][ T754] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 155.679107][ T333] cp2112 0003:10C4:EA90.0010: Part Number: 0x82 Device Version: 0xFE [ 155.733982][ T754] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 155.752928][ T754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.772916][ T754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.782771][ T754] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 155.802956][ T754] usb 6-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 155.812917][ T754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.831947][ T754] usb 6-1: config 0 descriptor?? [ 156.012935][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 156.040848][ T754] usbhid 6-1:0.0: can't add hid device: -71 [ 156.052949][ T754] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 156.063178][ T754] usb 6-1: USB disconnect, device number 24 [ 156.182908][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 156.193597][ T9] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 156.203182][ T9] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 156.211834][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 156.241879][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 156.279358][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 156.301039][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 156.323799][ T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 156.342887][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.362021][ T9] usb 1-1: config 0 descriptor?? [ 156.364163][ T6131] netlink: 'syz.4.2034': attribute type 4 has an invalid length. [ 156.413305][ T6131] netlink: 'syz.4.2034': attribute type 17 has an invalid length. [ 156.565482][ T333] cp2112 0003:10C4:EA90.0010: error setting SMBus config [ 156.584544][ T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 156.586061][ T333] cp2112 0003:10C4:EA90.0010: probe with driver cp2112 failed with error -71 [ 156.622522][ T333] usb 3-1: USB disconnect, device number 44 [ 156.628998][ T6133] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 156.629035][ T6133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:673 [ 156.739979][ T6143] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 156.775333][ T6149] batadv_slave_1: entered promiscuous mode [ 156.789757][ T6148] batadv_slave_1: left promiscuous mode [ 156.819924][ T6151] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=6151 comm=syz.5.2041 [ 156.845381][ T9] usb 1-1: USB disconnect, device number 10 [ 156.853289][ T9] usblp0: removed [ 156.947586][ T6160] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 156.948211][ T6159] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:454 [ 156.958338][ T36] audit: type=1400 audit(2000000020.361:521): avc: denied { getattr } for pid=6157 comm="syz.5.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 157.037436][ T6166] tmpfs: Unknown parameter 'yh' [ 157.061144][ T6162] rust_binder: Got transaction with invalid offset. [ 157.061183][ T6162] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 157.067938][ T6162] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:682 [ 157.165785][ T36] audit: type=1400 audit(2000000020.571:522): avc: denied { append } for pid=6177 comm="syz.4.2052" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.212409][ T6178] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.212660][ T6179] rust_binder: Error while translating object. [ 157.224258][ T6179] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 157.230750][ T6179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:693 [ 157.325351][ T6190] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.431505][ T6201] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.449417][ T6204] tipc: Started in network mode [ 157.465177][ T6204] tipc: Node identity 4, cluster identity 4711 [ 157.471586][ T6204] tipc: Node number set to 4 [ 157.476131][ T36] audit: type=1400 audit(2000000020.871:523): avc: denied { mount } for pid=6205 comm="syz.4.2062" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 157.488912][ T333] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 157.509565][ T6204] tmpfs: Unknown parameter 'yh' [ 157.532396][ T6199] rust_binder: Got transaction with invalid offset. [ 157.532435][ T6199] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 157.539349][ T6199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:195 [ 157.551313][ T6208] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 157.560525][ T6208] rust_binder: Read failure Err(EFAULT) in pid:705 [ 157.596209][ T6213] binder: Unknown parameter 'st' [ 157.632850][ T333] usb 6-1: device descriptor read/64, error -71 [ 157.852839][ T754] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 157.872837][ T333] usb 6-1: device descriptor read/64, error -71 [ 158.003926][ T754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.014918][ T754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.024725][ T754] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 158.033833][ T754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.042890][ T754] usb 1-1: config 0 descriptor?? [ 158.112841][ T333] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 158.242972][ T333] usb 6-1: device descriptor read/64, error -71 [ 158.257949][ T6215] rust_binder: Write failure EFAULT in pid:1382 [ 158.304241][ T36] audit: type=1400 audit(2000000021.701:524): avc: denied { unmount } for pid=2761 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 158.451226][ T754] kone 0003:1E7D:2CED.0011: report_id 0 is invalid [ 158.457875][ T754] kone 0003:1E7D:2CED.0011: item 0 2 1 8 parsing failed [ 158.465104][ T754] kone 0003:1E7D:2CED.0011: parse failed [ 158.470771][ T754] kone 0003:1E7D:2CED.0011: probe with driver kone failed with error -22 [ 158.482881][ T333] usb 6-1: device descriptor read/64, error -71 [ 158.492950][ T45] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 158.592886][ T333] usb usb6-port1: attempt power cycle [ 158.642768][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 158.648948][ T45] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 158.658207][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.666592][ T4547] usb 1-1: USB disconnect, device number 11 [ 158.667534][ T45] usb 3-1: config 0 descriptor?? [ 158.822803][ T754] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 158.932752][ T333] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 158.953749][ T333] usb 6-1: device descriptor read/8, error -71 [ 158.972770][ T754] usb 5-1: Using ep0 maxpacket: 32 [ 158.980022][ T754] usb 5-1: unable to get BOS descriptor or descriptor too short [ 158.987821][ T754] usb 5-1: no configurations [ 158.992520][ T754] usb 5-1: can't read configurations, error -22 [ 159.083780][ T333] usb 6-1: device descriptor read/8, error -71 [ 159.289682][ T6235] fuse: Bad value for 'fd' [ 159.309675][ T6238] input: syz1 as /devices/virtual/input/input31 [ 159.317330][ T6238] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 159.322805][ T333] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 159.355339][ T333] usb 6-1: device descriptor read/8, error -71 [ 159.413685][ T6242] SELinux: Context o is not valid (left unmapped). [ 159.421040][ T36] audit: type=1400 audit(2000000022.811:525): avc: denied { create } for pid=6241 comm="syz.0.2076" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=C0B26F04FD [ 159.421568][ T6242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:221 [ 159.443622][ T6242] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.444245][ T36] audit: type=1400 audit(2000000022.811:526): avc: denied { associate } for pid=6241 comm="syz.0.2076" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=C0B26F04FD [ 159.454456][ T6243] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:221 [ 159.459854][ T36] audit: type=1400 audit(2000000022.811:527): avc: denied { write open } for pid=6241 comm="syz.0.2076" path="/80/file0" dev="tmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=C0B26F04FD [ 159.482829][ T6242] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.517478][ T333] usb 6-1: device descriptor read/8, error -71 [ 159.526849][ T36] audit: type=1400 audit(2000000022.921:528): avc: denied { unlink } for pid=5351 comm="syz-executor" name="file0" dev="tmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=C0B26F04FD [ 159.632857][ T333] usb usb6-port1: unable to enumerate USB device [ 159.640184][ T6258] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 159.647498][ T6258] rust_binder: Write failure EINVAL in pid:229 [ 159.722801][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 159.737689][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 159.737740][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 159.752612][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 159.752713][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 159.768191][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 159.768243][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 159.783082][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 159.783125][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 159.798187][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 159.798232][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 159.813160][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 159.813230][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 159.828105][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 159.828153][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 159.843486][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 159.843536][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 159.858677][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 159.858725][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 159.873609][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 159.873669][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 159.888631][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 159.888767][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 159.903669][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 159.903721][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 159.918730][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 159.918779][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 159.933742][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 159.933799][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 159.948681][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 159.948743][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 159.963638][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 159.963681][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 159.978499][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 159.978544][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 159.993451][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 159.993493][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.008325][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.008377][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.023191][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.023242][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.038034][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.038078][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.052890][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.052940][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.067761][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.067813][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.082612][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.082882][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.097706][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.097761][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.112595][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.112684][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.127484][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.127534][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.142329][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.142370][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.157169][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.157207][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.172135][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.172184][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.187161][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.188040][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.202994][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.203048][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.218209][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.218258][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.243943][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.243992][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.262514][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.262569][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.277538][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.277587][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.292396][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.292448][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.314777][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.314832][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.329988][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.330035][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.345575][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.345627][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.360797][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.360848][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.375704][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.375755][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.390680][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.390731][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.405579][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.405628][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.420440][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.420487][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.435323][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.435377][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.450205][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.450253][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.465101][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.465150][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.472680][ T305] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 160.479989][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.488561][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.503429][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.503482][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.518275][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.518321][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.533133][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.533170][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.547993][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.548037][ T6264] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 160.563163][ T6264] rust_binder: Write failure EINVAL in pid:234 [ 160.574170][ T6274] FAULT_INJECTION: forcing a failure. [ 160.574170][ T6274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.593447][ T6274] CPU: 0 UID: 0 PID: 6274 Comm: syz.0.2089 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 160.593480][ T6274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.593491][ T6274] Call Trace: [ 160.593498][ T6274] [ 160.593505][ T6274] __dump_stack+0x21/0x30 [ 160.593529][ T6274] dump_stack_lvl+0x10c/0x190 [ 160.593547][ T6274] ? __cfi_dump_stack_lvl+0x10/0x10 [ 160.593566][ T6274] ? lock_sock_nested+0x1f5/0x290 [ 160.593586][ T6274] dump_stack+0x19/0x20 [ 160.593604][ T6274] should_fail_ex+0x3d9/0x530 [ 160.593622][ T6274] should_fail+0xf/0x20 [ 160.593639][ T6274] should_fail_usercopy+0x1e/0x30 [ 160.593658][ T6274] _copy_from_user+0x22/0xb0 [ 160.593686][ T6274] l2cap_sock_setsockopt+0x697/0x1c10 [ 160.593705][ T6274] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 160.593726][ T6274] ? __cfi_l2cap_sock_setsockopt+0x10/0x10 [ 160.593743][ T6274] ? do_fchownat+0xc0/0x270 [ 160.593758][ T6274] ? __kasan_check_write+0x18/0x20 [ 160.593777][ T6274] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 160.593794][ T6274] ? security_socket_setsockopt+0x33/0xd0 [ 160.593815][ T6274] ? __cfi_l2cap_sock_setsockopt+0x10/0x10 [ 160.593832][ T6274] do_sock_setsockopt+0x26a/0x400 [ 160.593848][ T6274] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 160.593866][ T6274] __x64_sys_setsockopt+0x1b8/0x250 [ 160.593882][ T6274] x64_sys_call+0x2adc/0x2ee0 [ 160.593903][ T6274] do_syscall_64+0x58/0xf0 [ 160.593926][ T6274] ? clear_bhb_loop+0x50/0xa0 [ 160.593944][ T6274] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 160.593960][ T6274] RIP: 0033:0x7f1dc598e929 [ 160.593973][ T6274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.593988][ T6274] RSP: 002b:00007f1dc6849038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 160.594005][ T6274] RAX: ffffffffffffffda RBX: 00007f1dc5bb5fa0 RCX: 00007f1dc598e929 [ 160.594018][ T6274] RDX: 0000000000000003 RSI: 0000000000000006 RDI: 0000000000000004 [ 160.594029][ T6274] RBP: 00007f1dc6849090 R08: 0000000000000004 R09: 0000000000000000 [ 160.594039][ T6274] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.594050][ T6274] R13: 0000000000000000 R14: 00007f1dc5bb5fa0 R15: 00007fff72955338 [ 160.594064][ T6274] [ 160.742827][ T305] usb 5-1: Using ep0 maxpacket: 32 [ 161.042878][ T45] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 161.053021][ T45] asix 3-1:0.0: probe with driver asix failed with error -71 [ 161.061480][ T45] usb 3-1: USB disconnect, device number 45 [ 161.069132][ T305] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 161.072666][ T6285] /dev/nbd0: Can't lookup blockdev [ 161.077852][ T305] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 161.085290][ T6285] /dev/nbd0: Can't lookup blockdev [ 161.091295][ T305] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 161.105500][ T305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.115340][ T305] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 161.125094][ T305] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 161.174569][ T305] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 161.183711][ T305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.193401][ T305] usb 5-1: config 0 descriptor?? [ 161.202532][ T6290] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2095'. [ 161.213264][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2095'. [ 161.222376][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2096'. [ 161.232697][ T6292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6292 comm=syz.0.2096 [ 161.401073][ T305] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 161.427152][ T305] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 161.442722][ T305] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 161.493793][ T754] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 161.615097][ T6267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.623896][ T6267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.633610][ T4547] usb 5-1: USB disconnect, device number 29 [ 161.641345][ T4547] usblp0: removed [ 161.646363][ T754] usb 6-1: Using ep0 maxpacket: 8 [ 161.654017][ T754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.665015][ T754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.674854][ T754] usb 6-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 161.683958][ T754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.694409][ T754] usb 6-1: config 0 descriptor?? [ 161.812599][ T305] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 161.901226][ T6324] FAULT_INJECTION: forcing a failure. [ 161.901226][ T6324] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 161.914841][ T6324] CPU: 1 UID: 0 PID: 6324 Comm: syz.0.2108 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 161.914880][ T6324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.914894][ T6324] Call Trace: [ 161.914901][ T6324] [ 161.914910][ T6324] __dump_stack+0x21/0x30 [ 161.914941][ T6324] dump_stack_lvl+0x10c/0x190 [ 161.914967][ T6324] ? __cfi_dump_stack_lvl+0x10/0x10 [ 161.914994][ T6324] dump_stack+0x19/0x20 [ 161.915017][ T6324] should_fail_ex+0x3d9/0x530 [ 161.915041][ T6324] should_fail_alloc_page+0xeb/0x110 [ 161.915066][ T6324] __alloc_pages_noprof+0x19d/0x6c0 [ 161.915087][ T6324] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 161.915110][ T6324] ? kernel_text_address+0xa9/0xe0 [ 161.915133][ T6324] ? __kernel_text_address+0x11/0x40 [ 161.915154][ T6324] ? unwind_get_return_address+0x51/0x90 [ 161.915177][ T6324] ? _parse_integer_limit+0x195/0x1e0 [ 161.915196][ T6324] __folio_alloc_noprof+0x14/0x80 [ 161.915212][ T6324] folio_prealloc+0x46/0x240 [ 161.915238][ T6324] do_pte_missing+0x1603/0x3e50 [ 161.915260][ T6324] ? kstrtouint+0x78/0xf0 [ 161.915282][ T6324] ? kstrtouint_from_user+0xfb/0x150 [ 161.915304][ T6324] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 161.915326][ T6324] ? selinux_file_permission+0x309/0xb30 [ 161.915351][ T6324] ? pte_marker_clear+0x1b0/0x1b0 [ 161.915365][ T6324] ? __pte_offset_map+0x1b0/0x230 [ 161.915384][ T6324] ? pte_offset_map_rw_nolock+0xba/0x110 [ 161.915411][ T6324] handle_mm_fault+0x1166/0x1b90 [ 161.915443][ T6324] ? __cfi_handle_mm_fault+0x10/0x10 [ 161.915469][ T6324] ? lock_vma_under_rcu+0x49d/0x530 [ 161.915494][ T6324] ? __kasan_check_write+0x18/0x20 [ 161.915514][ T6324] do_user_addr_fault+0x96c/0x1200 [ 161.915537][ T6324] ? __cfi_ksys_write+0x10/0x10 [ 161.915583][ T6324] exc_page_fault+0x59/0xc0 [ 161.915607][ T6324] asm_exc_page_fault+0x2b/0x30 [ 161.915623][ T6324] RIP: 0033:0x7f1dc585ffb6 [ 161.915638][ T6324] Code: 00 00 00 00 41 57 31 c0 41 56 49 89 d6 41 55 49 89 f5 48 89 d6 41 54 49 89 fc 48 8d 3d 8e 1f 1b 00 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 5c e0 fe ff 4d 85 f6 0f 84 46 0a 00 [ 161.915651][ T6324] RSP: 002b:00007f1dc6846f70 EFLAGS: 00010202 [ 161.915667][ T6324] RAX: 0000000000000000 RBX: 00007f1dc5bb5fa0 RCX: 0000000000000000 [ 161.915683][ T6324] RDX: 0000200000000100 RSI: 0000200000000100 RDI: 00007f1dc5a11f3b [ 161.915699][ T6324] RBP: 00007f1dc6849090 R08: 00007f1dc584e3a0 R09: 0000000000000000 [ 161.915714][ T6324] R10: 0000000000000000 R11: 0000200000000100 R12: 0000000000000000 [ 161.915727][ T6324] R13: 0000000000000036 R14: 0000200000000100 R15: 00007fff72955338 [ 161.915745][ T6324] [ 161.915800][ T6324] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 162.128060][ T754] wacom 0003:056A:0000.0013: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 162.143767][ T305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.147343][ T754] wacom 0003:056A:0000.0013: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.5-1/input0 [ 162.153968][ T305] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 162.166980][ T754] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0000.0013/input/input32 [ 162.180156][ T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.244880][ T305] usb 3-1: config 0 descriptor?? [ 162.329303][ T333] usb 6-1: USB disconnect, device number 29 [ 162.362624][ T5168] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 162.513719][ T5168] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 162.524762][ T5168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.535710][ T5168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.545515][ T5168] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 162.552551][ T754] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 162.558691][ T5168] usb 1-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 162.575405][ T5168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.584228][ T5168] usb 1-1: config 0 descriptor?? [ 162.654365][ T305] playstation 0003:054C:0BA0.0014: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0 [ 162.692571][ T754] usb 5-1: device descriptor read/64, error -71 [ 162.791322][ T5168] usbhid 1-1:0.0: can't add hid device: -71 [ 162.797403][ T5168] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 162.806521][ T5168] usb 1-1: USB disconnect, device number 12 [ 162.856354][ T305] playstation 0003:054C:0BA0.0014: Failed to retrieve feature with reportID 18: -71 [ 162.867424][ T305] playstation 0003:054C:0BA0.0014: Failed to retrieve DualShock4 pairing info: -71 [ 162.876927][ T305] playstation 0003:054C:0BA0.0014: Failed to get MAC address from DualShock4 [ 162.886999][ T305] playstation 0003:054C:0BA0.0014: Failed to create dualshock4. [ 162.897037][ T305] playstation 0003:054C:0BA0.0014: probe with driver playstation failed with error -71 [ 162.910104][ T305] usb 3-1: USB disconnect, device number 46 [ 162.942597][ T754] usb 5-1: device descriptor read/64, error -71 [ 163.027869][ T36] audit: type=1400 audit(2000000026.421:529): avc: denied { create } for pid=6336 comm="syz.5.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 163.182547][ T754] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 163.312551][ T754] usb 5-1: device descriptor read/64, error -71 [ 163.394305][ T6351] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.394718][ T6351] rust_binder: Failed to allocate buffer. len:4264, is_oneway:false [ 163.457803][ T6357] /dev/rnullb0: Can't open blockdev [ 163.485046][ T6361] FAULT_INJECTION: forcing a failure. [ 163.485046][ T6361] name failslab, interval 1, probability 0, space 0, times 0 [ 163.498069][ T6361] CPU: 0 UID: 0 PID: 6361 Comm: syz.2.2122 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 163.498108][ T6361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.498122][ T6361] Call Trace: [ 163.498130][ T6361] [ 163.498139][ T6361] __dump_stack+0x21/0x30 [ 163.498170][ T6361] dump_stack_lvl+0x10c/0x190 [ 163.498195][ T6361] ? __cfi_dump_stack_lvl+0x10/0x10 [ 163.498222][ T6361] dump_stack+0x19/0x20 [ 163.498247][ T6361] should_fail_ex+0x3d9/0x530 [ 163.498272][ T6361] should_failslab+0xac/0x100 [ 163.498302][ T6361] kmem_cache_alloc_noprof+0x42/0x3a0 [ 163.498328][ T6361] ? getname_flags+0xc6/0x710 [ 163.498357][ T6361] getname_flags+0xc6/0x710 [ 163.498384][ T6361] ? build_open_flags+0x487/0x600 [ 163.498407][ T6361] getname+0x1b/0x30 [ 163.498433][ T6361] do_sys_openat2+0xcb/0x1c0 [ 163.498456][ T6361] ? do_sys_open+0x100/0x100 [ 163.498477][ T6361] ? __kasan_check_write+0x18/0x20 [ 163.498502][ T6361] ? do_user_addr_fault+0xbc4/0x1200 [ 163.498528][ T6361] ? __cfi_ksys_write+0x10/0x10 [ 163.498556][ T6361] __x64_sys_openat+0x13a/0x170 [ 163.498579][ T6361] x64_sys_call+0xe69/0x2ee0 [ 163.498606][ T6361] do_syscall_64+0x58/0xf0 [ 163.498636][ T6361] ? clear_bhb_loop+0x50/0xa0 [ 163.498659][ T6361] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 163.498681][ T6361] RIP: 0033:0x7f6d3178d290 [ 163.498699][ T6361] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 163.498718][ T6361] RSP: 002b:00007f6d32661ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 163.498751][ T6361] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6d3178d290 [ 163.498768][ T6361] RDX: 0000000000000002 RSI: 00007f6d31810814 RDI: 00000000ffffff9c [ 163.498783][ T6361] RBP: 00007f6d31810814 R08: 0000000000000000 R09: 0000000000000000 [ 163.498798][ T6361] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 163.498812][ T6361] R13: 0000000000000036 R14: 0000200000000100 R15: 00007ffdedcc7398 [ 163.498830][ T6361] [ 163.707612][ T754] usb 5-1: device descriptor read/64, error -71 [ 163.734084][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 163.734126][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 163.734263][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 163.740398][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 163.746862][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 163.753221][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 163.759521][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 163.765925][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 163.772187][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 163.778571][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 163.784895][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 163.791268][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 163.797590][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 163.803977][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 163.810297][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 163.816664][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 163.822878][ T754] usb usb5-port1: attempt power cycle [ 163.829920][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 163.835840][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 163.841218][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 163.847050][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 163.853974][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 163.859720][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 163.859746][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 163.879335][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 163.888437][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 163.888908][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 163.895032][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 163.908034][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 163.914823][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 163.921613][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 163.923208][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 163.930222][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 163.935525][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 163.941808][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 163.948188][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 163.954117][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 163.960997][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 163.966837][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 163.973906][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 163.979763][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 163.986646][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 163.992506][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 163.999184][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.005176][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.018042][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.024680][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.031413][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.033083][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.038230][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.045878][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.051315][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.058008][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.063946][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.070409][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.076672][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.083184][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.089205][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.095855][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.101901][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.108655][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.115020][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.121571][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.127487][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.134076][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.140253][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.147786][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.152808][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.166132][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.169174][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.173347][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.182467][ T754] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 164.186016][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.213487][ T754] usb 5-1: device descriptor read/8, error -71 [ 164.220301][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.226420][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.233234][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.239928][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.240579][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.246983][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.254320][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.260839][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.268594][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.272848][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.294228][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.295934][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.302786][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.307532][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.320199][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.321858][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.327049][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.334198][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.339691][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.345953][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.352450][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.360406][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.369440][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.377539][ T754] usb 5-1: device descriptor read/8, error -71 [ 164.378389][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.388251][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.396953][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.409669][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.418250][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.418800][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.428726][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.432936][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.438205][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.444663][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.450661][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.457091][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.463368][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.469799][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.476001][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.482594][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.488904][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.495263][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.501978][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.508081][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.514458][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.521220][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.527224][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 164.533645][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.546375][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.553062][ T6364] rust_binder: Write failure EINVAL in pid:291 [ 164.611469][ T6386] rust_binder: Error while translating object. [ 164.617721][ T6386] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 164.623938][ T6386] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:295 [ 164.632464][ T754] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 164.642732][ T305] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 164.662469][ T62] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 164.671121][ T754] usb 5-1: device descriptor read/8, error -71 [ 164.803776][ T305] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 164.814249][ T305] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 164.814433][ T62] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 164.823432][ T305] usb 6-1: config 220 interface 0 has no altsetting 0 [ 164.842416][ T754] usb 5-1: device descriptor read/8, error -71 [ 164.848797][ T62] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.854697][ T305] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 164.860221][ T62] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.872248][ T305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.880956][ T62] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 164.886813][ T305] usb 6-1: Product: syz [ 164.901734][ T62] usb 3-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 164.907513][ T305] usb 6-1: Manufacturer: syz [ 164.915366][ T62] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.925466][ T305] usb 6-1: SerialNumber: syz [ 164.933319][ T62] usb 3-1: config 0 descriptor?? [ 164.944745][ T36] audit: type=1326 audit(2000000028.341:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6410 comm="syz.0.2142" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dc598e929 code=0x0 [ 164.967935][ T754] usb usb5-port1: unable to enumerate USB device [ 164.995996][ T36] audit: type=1326 audit(2000000028.391:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6410 comm="syz.0.2142" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dc598e929 code=0x0 [ 165.129758][ T36] audit: type=1400 audit(2000000028.521:532): avc: denied { listen } for pid=6381 comm="syz.5.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 165.138005][ T305] usb 6-1: USB disconnect, device number 30 [ 165.157032][ T62] usbhid 3-1:0.0: can't add hid device: -71 [ 165.163157][ T62] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 165.183494][ T62] usb 3-1: USB disconnect, device number 47 [ 165.678459][ T36] audit: type=1400 audit(2000000029.071:533): avc: denied { create } for pid=6420 comm="syz.2.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 165.678950][ T6421] tmpfs: Invalid uid '0x00000000ffffffff' [ 165.699263][ T36] audit: type=1400 audit(2000000029.071:534): avc: denied { getopt } for pid=6420 comm="syz.2.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 165.790009][ T6431] /dev/rnullb0: Can't open blockdev [ 166.022384][ T305] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 166.072387][ T754] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 166.114244][ T6449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.114620][ T6449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 166.121089][ T6449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:732 [ 166.130622][ T6449] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 166.139806][ T6449] rust_binder: Read failure Err(EFAULT) in pid:732 [ 166.172384][ T305] usb 1-1: Using ep0 maxpacket: 8 [ 166.180115][ T305] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.185827][ T6453] rust_binder: Error while translating object. [ 166.196854][ T305] usb 1-1: config 0 interface 0 has no altsetting 0 [ 166.196896][ T305] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 166.203688][ T6453] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 166.209712][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.219621][ T6453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:736 [ 166.232478][ T305] usb 1-1: config 0 descriptor?? [ 166.238582][ T754] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 166.261334][ T754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.272598][ T62] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 166.282895][ T754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.292741][ T754] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 166.305907][ T754] usb 6-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 166.315416][ T754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.331372][ T754] usb 6-1: config 0 descriptor?? [ 166.432326][ T62] usb 3-1: Using ep0 maxpacket: 32 [ 166.439595][ T62] usb 3-1: unable to get BOS descriptor or descriptor too short [ 166.447724][ T62] usb 3-1: no configurations [ 166.452426][ T62] usb 3-1: can't read configurations, error -22 [ 166.542294][ T754] usbhid 6-1:0.0: can't add hid device: -71 [ 166.548430][ T754] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 166.557632][ T754] usb 6-1: USB disconnect, device number 31 [ 166.648561][ T305] uclogic 0003:5543:0042.0015: unbalanced delimiter at end of report description [ 166.657920][ T305] uclogic 0003:5543:0042.0015: parse failed [ 166.663949][ T305] uclogic 0003:5543:0042.0015: probe with driver uclogic failed with error -22 [ 166.792156][ T6472] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.792982][ T6472] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 166.799442][ T6472] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:755 [ 166.855777][ T6429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.873711][ T6429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.899954][ T6429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.908554][ T6429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.973479][ T754] usb 1-1: USB disconnect, device number 13 [ 167.020216][ T6479] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.020938][ T6479] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 167.062377][ T36] audit: type=1400 audit(2000000030.451:535): avc: denied { mount } for pid=6482 comm="syz.5.2166" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 167.072330][ T333] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 167.092545][ T36] audit: type=1400 audit(2000000030.461:536): avc: denied { unmount } for pid=4255 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 167.213432][ T6490] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 167.220782][ T6490] rust_binder: Write failure EINVAL in pid:516 [ 167.222487][ T333] usb 5-1: device descriptor read/64, error -71 [ 167.241208][ T36] audit: type=1400 audit(2000000030.641:537): avc: denied { write } for pid=6492 comm="syz.2.2170" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 167.241766][ T6493] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.265397][ T36] audit: type=1400 audit(2000000030.661:538): avc: denied { setattr } for pid=6492 comm="syz.2.2170" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 167.265827][ T6493] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 167.293549][ T6493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1422 [ 167.472286][ T333] usb 5-1: device descriptor read/64, error -71 [ 167.732277][ T333] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 167.872260][ T333] usb 5-1: device descriptor read/64, error -71 [ 167.992249][ T62] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 168.112256][ T333] usb 5-1: device descriptor read/64, error -71 [ 168.142233][ T62] usb 1-1: Using ep0 maxpacket: 32 [ 168.158849][ T62] usb 1-1: unable to get BOS descriptor or descriptor too short [ 168.172273][ T62] usb 1-1: no configurations [ 168.176927][ T62] usb 1-1: can't read configurations, error -22 [ 168.232314][ T333] usb usb5-port1: attempt power cycle [ 168.328641][ T6509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.329485][ T6509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.336937][ T6509] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2175'. [ 168.354555][ T6509] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6509 comm=syz.2.2175 [ 168.367389][ T6509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1427 [ 168.378707][ T6511] FAULT_INJECTION: forcing a failure. [ 168.378707][ T6511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.401041][ T6511] CPU: 1 UID: 0 PID: 6511 Comm: syz.2.2177 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 168.401070][ T6511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.401081][ T6511] Call Trace: [ 168.401087][ T6511] [ 168.401096][ T6511] __dump_stack+0x21/0x30 [ 168.401121][ T6511] dump_stack_lvl+0x10c/0x190 [ 168.401140][ T6511] ? __cfi_dump_stack_lvl+0x10/0x10 [ 168.401161][ T6511] dump_stack+0x19/0x20 [ 168.401179][ T6511] should_fail_ex+0x3d9/0x530 [ 168.401199][ T6511] should_fail+0xf/0x20 [ 168.401216][ T6511] should_fail_usercopy+0x1e/0x30 [ 168.401236][ T6511] _copy_to_user+0x24/0xa0 [ 168.401260][ T6511] simple_read_from_buffer+0xed/0x160 [ 168.401277][ T6511] proc_fail_nth_read+0x19e/0x210 [ 168.401294][ T6511] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 168.401310][ T6511] ? l2cap_sock_setsockopt+0x136e/0x1c10 [ 168.401328][ T6511] ? bpf_lsm_file_permission+0xd/0x20 [ 168.401357][ T6511] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 168.401373][ T6511] vfs_read+0x27b/0xb60 [ 168.401392][ T6511] ? __cfi_l2cap_sock_setsockopt+0x10/0x10 [ 168.401410][ T6511] ? __cfi_vfs_read+0x10/0x10 [ 168.401428][ T6511] ? __kasan_check_write+0x18/0x20 [ 168.401447][ T6511] ? mutex_lock+0x92/0x1c0 [ 168.401464][ T6511] ? __cfi_mutex_lock+0x10/0x10 [ 168.401481][ T6511] ? __fget_files+0x2c5/0x340 [ 168.401505][ T6511] ksys_read+0x141/0x250 [ 168.401524][ T6511] ? __cfi_ksys_read+0x10/0x10 [ 168.401544][ T6511] ? __kasan_check_write+0x18/0x20 [ 168.401562][ T6511] ? __kasan_check_read+0x15/0x20 [ 168.401581][ T6511] __x64_sys_read+0x7f/0x90 [ 168.401601][ T6511] x64_sys_call+0x2638/0x2ee0 [ 168.401622][ T6511] do_syscall_64+0x58/0xf0 [ 168.401645][ T6511] ? clear_bhb_loop+0x50/0xa0 [ 168.401662][ T6511] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 168.401678][ T6511] RIP: 0033:0x7f6d3178d33c [ 168.401692][ T6511] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 168.401707][ T6511] RSP: 002b:00007f6d32664030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 168.401725][ T6511] RAX: ffffffffffffffda RBX: 00007f6d319b5fa0 RCX: 00007f6d3178d33c [ 168.401737][ T6511] RDX: 000000000000000f RSI: 00007f6d326640a0 RDI: 0000000000000003 [ 168.401749][ T6511] RBP: 00007f6d32664090 R08: 0000000000000000 R09: 0000000000000000 [ 168.401759][ T6511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.401770][ T6511] R13: 0000000000000000 R14: 00007f6d319b5fa0 R15: 00007ffdedcc7398 [ 168.401784][ T6511] [ 168.712243][ T333] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 168.733167][ T333] usb 5-1: device descriptor read/8, error -71 [ 168.785087][ T6527] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.791886][ T6527] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 168.854172][ T6530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.865079][ T333] usb 5-1: device descriptor read/8, error -71 [ 168.886317][ T6534] netlink: 'syz.0.2187': attribute type 6 has an invalid length. [ 168.900689][ T6536] netlink: 'syz.0.2187': attribute type 6 has an invalid length. [ 169.034151][ T6552] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.034984][ T36] audit: type=1400 audit(2000000032.431:539): avc: denied { execute } for pid=6551 comm="syz.0.2193" path="/dev/binderfs/binder0" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 169.040720][ T6552] rust_binder: Error while translating object. [ 169.041532][ T6553] rust_binder: Failed to allocate buffer. len:4224, is_oneway:true [ 169.072603][ T6553] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 169.073137][ T6552] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 169.080562][ T6553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:340 [ 169.091875][ T6552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:340 [ 169.132179][ T333] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 169.163220][ T333] usb 5-1: device descriptor read/8, error -71 [ 169.172241][ T309] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 169.293309][ T333] usb 5-1: device descriptor read/8, error -71 [ 169.322214][ T309] usb 3-1: Using ep0 maxpacket: 32 [ 169.328527][ T309] usb 3-1: config 3 has an invalid interface number: 185 but max is 0 [ 169.336855][ T309] usb 3-1: config 3 has no interface number 0 [ 169.343103][ T309] usb 3-1: config 3 interface 185 has no altsetting 0 [ 169.351519][ T309] usb 3-1: New USB device found, idVendor=1c04, idProduct=0015, bcdDevice=7b.bb [ 169.360748][ T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.368843][ T309] usb 3-1: Product: syz [ 169.373059][ T309] usb 3-1: Manufacturer: syz [ 169.377663][ T309] usb 3-1: SerialNumber: syz [ 169.402301][ T333] usb usb5-port1: unable to enumerate USB device [ 169.625295][ T309] usb 3-1: USB disconnect, device number 50 [ 170.072662][ T333] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 170.110780][ T6574] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 170.206399][ T6578] rust_binder: Error while translating object. [ 170.206451][ T6578] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 170.222119][ T6578] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:549 [ 170.232677][ T333] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 170.258143][ T333] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 170.282337][ T333] usb 1-1: config 1 interface 0 has no altsetting 0 [ 170.290439][ T333] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.40 [ 170.299831][ T333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.312104][ T333] usb 1-1: SerialNumber: 횎㒳₞党䠾ꭿ鵛庬纬ꍉ㉾䇪黜争鬫ᗬꃈ⽢災譓膾삛搠뮊̴谮쓦㐲盫㿨曗⪂夞 [ 170.344706][ T6563] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 170.412818][ T6583] tipc: Started in network mode [ 170.421161][ T6583] tipc: Node identity 4, cluster identity 4711 [ 170.436016][ T6583] tipc: Node number set to 4 [ 170.563162][ T36] audit: type=1400 audit(2000000033.961:540): avc: denied { map } for pid=6562 comm="syz.0.2198" path="socket:[44186]" dev="sockfs" ino=44186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 170.594911][ T333] usbhid 1-1:1.0: can't add hid device: -71 [ 170.601041][ T333] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 170.621302][ T333] usb 1-1: USB disconnect, device number 16 [ 170.661023][ T6593] overlayfs: missing 'lowerdir' [ 170.816163][ T6599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.904073][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 170.919752][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 170.927594][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 170.935398][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 170.943177][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 170.950932][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 170.958716][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 170.966520][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 170.974294][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 170.982079][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 170.989835][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 170.997614][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.002089][ T309] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 171.005402][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.020683][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.028466][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.036247][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.044041][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.051783][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.059620][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.067398][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.075163][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.082932][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.090698][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.098501][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.106415][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.107726][ T6613] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=26 [ 171.114222][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.114657][ T6613] rust_binder: Error while translating object. [ 171.122975][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.131116][ T6613] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 171.136950][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.144982][ T309] usb 6-1: device descriptor read/64, error -71 [ 171.154310][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.162778][ T6613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:349 [ 171.168767][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.192958][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.200740][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.210390][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.218227][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.226123][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.233931][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.237047][ T6618] binder: Bad value for 'max' [ 171.241706][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.254278][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.262098][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.269868][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.277680][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.285483][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.293297][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.301070][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.308886][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.316722][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.324570][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.332806][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.340584][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.348423][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.356331][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.364146][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.371916][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.379744][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.387548][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.395344][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.403150][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.410892][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.418663][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.422078][ T309] usb 6-1: device descriptor read/64, error -71 [ 171.426471][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.440457][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.448255][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.456032][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.463845][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.471587][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.479363][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.487155][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.494913][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.502682][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.510435][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.518235][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.526015][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.533784][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.541532][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.549314][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.557093][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.564869][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.572665][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.580523][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.588353][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.596158][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.603966][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.611730][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.619542][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.627434][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.635260][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.643071][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.650849][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.658635][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.666422][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.674227][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.682035][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.682244][ T309] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 171.689801][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.689833][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.712954][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.720687][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.728454][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.736228][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.743996][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.751744][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.759512][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.767578][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.775371][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.783148][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.790879][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.798671][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.806460][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.814235][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.822025][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.822054][ T309] usb 6-1: device descriptor read/64, error -71 [ 171.829775][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.829807][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.851805][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.859588][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.867380][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.875176][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.882945][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.890672][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.898434][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.906206][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.913979][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.921727][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.929538][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.937330][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.945193][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.952973][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.960729][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.968531][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.976307][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.984095][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.991848][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 171.999620][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 172.007393][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 172.015171][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 172.022937][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 172.030681][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 172.038589][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 172.046369][ T333] hid-generic 0008:0000:FFFFFBFF.0016: unknown main item tag 0x0 [ 172.054145][ T333] hid-generic 0008:0000:FFFFFBFF.0016: item fetching failed at offset 146/169 [ 172.063178][ T333] hid-generic 0008:0000:FFFFFBFF.0016: probe with driver hid-generic failed with error -22 [ 172.082046][ T309] usb 6-1: device descriptor read/64, error -71 [ 172.151341][ T6629] tmpfs: Unknown parameter 'yh' [ 172.156593][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.179302][ T6637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.186991][ T6637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8209 sclass=netlink_route_socket pid=6637 comm=syz.0.2230 [ 172.206445][ T309] usb usb6-port1: attempt power cycle [ 172.245743][ T6642] rust_binder: Write failure EFAULT in pid:371 [ 172.434859][ T6658] tmpfs: Unknown parameter 'yh' [ 172.462135][ T36] audit: type=1400 audit(2000000035.861:541): avc: denied { create } for pid=6659 comm="syz.0.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 172.552111][ T309] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 172.573066][ T309] usb 6-1: device descriptor read/8, error -71 [ 172.593148][ T6666] netlink: 'syz.0.2242': attribute type 3 has an invalid length. [ 172.703062][ T309] usb 6-1: device descriptor read/8, error -71 [ 172.868624][ T6685] tmpfs: Unknown parameter 'yh' [ 172.873951][ T6685] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.941971][ T309] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 172.971806][ T6696] FAULT_INJECTION: forcing a failure. [ 172.971806][ T6696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.985044][ T6696] CPU: 1 UID: 0 PID: 6696 Comm: syz.2.2251 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 172.985087][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.985102][ T6696] Call Trace: [ 172.985109][ T6696] [ 172.985118][ T6696] __dump_stack+0x21/0x30 [ 172.985150][ T6696] dump_stack_lvl+0x10c/0x190 [ 172.985175][ T6696] ? __cfi_dump_stack_lvl+0x10/0x10 [ 172.985202][ T6696] dump_stack+0x19/0x20 [ 172.985226][ T6696] should_fail_ex+0x3d9/0x530 [ 172.985252][ T6696] should_fail+0xf/0x20 [ 172.985277][ T6696] should_fail_usercopy+0x1e/0x30 [ 172.985303][ T6696] _copy_to_user+0x24/0xa0 [ 172.985325][ T6696] simple_read_from_buffer+0xed/0x160 [ 172.985343][ T6696] proc_fail_nth_read+0x19e/0x210 [ 172.985360][ T6696] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 172.985377][ T6696] ? bpf_lsm_file_permission+0xd/0x20 [ 172.985395][ T6696] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 172.985411][ T6696] vfs_read+0x27b/0xb60 [ 172.985432][ T6696] ? __cfi_vfs_read+0x10/0x10 [ 172.985450][ T6696] ? __kasan_check_write+0x18/0x20 [ 172.985470][ T6696] ? mutex_lock+0x92/0x1c0 [ 172.985487][ T6696] ? __cfi_mutex_lock+0x10/0x10 [ 172.985504][ T6696] ? __fget_files+0x2c5/0x340 [ 172.985528][ T6696] ksys_read+0x141/0x250 [ 172.985548][ T6696] ? __cfi_ksys_read+0x10/0x10 [ 172.985568][ T6696] ? __kasan_check_read+0x15/0x20 [ 172.985587][ T6696] __x64_sys_read+0x7f/0x90 [ 172.985607][ T6696] x64_sys_call+0x2638/0x2ee0 [ 172.985628][ T6696] do_syscall_64+0x58/0xf0 [ 172.985651][ T6696] ? clear_bhb_loop+0x50/0xa0 [ 172.985668][ T6696] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 172.985684][ T6696] RIP: 0033:0x7f6d3178d33c [ 172.985698][ T6696] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 172.985713][ T6696] RSP: 002b:00007f6d32664030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.985730][ T6696] RAX: ffffffffffffffda RBX: 00007f6d319b5fa0 RCX: 00007f6d3178d33c [ 172.985743][ T6696] RDX: 000000000000000f RSI: 00007f6d326640a0 RDI: 0000000000000004 [ 172.985754][ T6696] RBP: 00007f6d32664090 R08: 0000000000000000 R09: 0000000000000000 [ 172.985764][ T6696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.985775][ T6696] R13: 0000000000000000 R14: 00007f6d319b5fa0 R15: 00007ffdedcc7398 [ 172.985789][ T6696] [ 173.073034][ T309] usb 6-1: device descriptor read/8, error -71 [ 173.142230][ T6711] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2257'. [ 173.273736][ T309] usb 6-1: device descriptor read/8, error -71 [ 173.382068][ T309] usb usb6-port1: unable to enumerate USB device [ 173.413174][ T6719] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.413605][ T6721] rust_binder: Error in use_page_slow: ESRCH [ 173.420091][ T6721] rust_binder: use_range failure ESRCH [ 173.426210][ T6721] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 173.431717][ T6721] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 173.439974][ T6721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:769 [ 173.464338][ T6723] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.474251][ T6723] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.481303][ T6723] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 173.487851][ T6723] rust_binder: Read failure Err(EFAULT) in pid:773 [ 173.558158][ T6725] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.645585][ T6743] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.654362][ T6743] rust_binder: Error while translating object. [ 173.660886][ T6743] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 173.667314][ T6743] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:790 [ 173.677390][ T6744] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.725114][ T6748] kvm: kvm [6747]: vcpu0, guest rIP: 0xeeee8000 Unhandled WRMSR(0x4000002a) = 0x0 [ 173.808277][ T6753] fuse: Bad value for 'user_id' [ 173.813315][ T6753] fuse: Bad value for 'user_id' [ 173.820682][ T6753] rust_binder: 6751 RLIMIT_NICE not set [ 174.031936][ T333] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 174.183341][ T333] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 174.191923][ T62] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 174.200158][ T333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.213920][ T333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.224031][ T333] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 174.231113][ T6770] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.237230][ T333] usb 5-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 174.237850][ T6771] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 174.243743][ T333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.247389][ T333] usb 5-1: config 0 descriptor?? [ 174.363316][ T62] usb 1-1: unable to get BOS descriptor or descriptor too short [ 174.371434][ T62] usb 1-1: not running at top speed; connect to a high speed hub [ 174.380052][ T62] usb 1-1: config 1 has an invalid interface number: 138 but max is 0 [ 174.388344][ T62] usb 1-1: config 1 has no interface number 0 [ 174.394537][ T62] usb 1-1: config 1 interface 138 has no altsetting 0 [ 174.404040][ T62] usb 1-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 174.413175][ T62] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.421186][ T62] usb 1-1: Product: syz [ 174.425428][ T62] usb 1-1: Manufacturer: syz [ 174.430044][ T62] usb 1-1: SerialNumber: syz [ 174.561904][ T309] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 174.591854][ T754] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 174.668469][ T62] usb 1-1: USB disconnect, device number 17 [ 174.712997][ T309] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 174.724044][ T309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.735073][ T309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.744869][ T309] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 174.757933][ T309] usb 6-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 174.767048][ T309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.775851][ T754] usb 3-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 174.786522][ T309] usb 6-1: config 0 descriptor?? [ 174.791588][ T754] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.802073][ T754] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 174.811200][ T754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 174.819450][ T754] usb 3-1: SerialNumber: syz [ 175.004367][ T309] usbhid 6-1:0.0: can't add hid device: -71 [ 175.010429][ T309] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 175.021642][ T309] usb 6-1: USB disconnect, device number 36 [ 175.023402][ T333] usbhid 5-1:0.0: can't add hid device: -71 [ 175.034990][ T333] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 175.044266][ T333] usb 5-1: USB disconnect, device number 38 [ 175.080426][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2277'. [ 175.092522][ T754] usb 3-1: 0:2 : does not exist [ 175.099068][ T754] usb 3-1: USB disconnect, device number 51 [ 175.108216][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 175.233450][ T6783] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 175.233489][ T6783] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:414 [ 175.332473][ T391] tipc: Subscription rejected, illegal request [ 175.434162][ T6791] rust_binder: Error while translating object. [ 175.434193][ T6791] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 175.440434][ T6791] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:422 [ 175.450277][ T6792] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.522808][ T6802] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2283'. [ 175.601688][ T6806] SELinux: security_context_str_to_sid (sytem_uGй :8a,nB2³ԓn [ 175.601688][ T6806] yKd:Bgvy [ 175.601688][ T6806] - t! FiS醇S) failed with errno=-22 [ 175.640109][ T6809] random: crng reseeded on system resumption [ 175.689319][ T6815] overlayfs: failed to resolve './file1': -2 [ 175.696107][ T36] audit: type=1400 audit(2000000039.102:542): avc: denied { link } for pid=6814 comm="syz.5.2288" name="file1" dev="tmpfs" ino=1109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 175.749549][ T6822] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 175.841237][ T6839] rust_binder: Error in use_page_slow: ESRCH [ 175.841263][ T6839] rust_binder: use_range failure ESRCH [ 175.849326][ T6839] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 175.856282][ T6839] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 175.871628][ T6839] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1519 [ 175.956247][ T36] audit: type=1400 audit(2000000039.352:543): avc: denied { setattr } for pid=6844 comm="syz.2.2299" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 176.044211][ T6850] cgroup2: Unknown parameter 'dont_appraise' [ 176.144220][ T6863] rust_binder: Write failure EFAULT in pid:452 [ 176.277437][ T6873] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.292465][ T6879] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.311134][ T6880] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 176.311134][ T6880] null pointer dereference occurred [ 176.314840][ T6885] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.319852][ T6883] vcan0: entered allmulticast mode [ 176.335317][ T6879] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 176.335317][ T6879] null pointer dereference occurred [ 176.336752][ T6880] ------------[ cut here ]------------ [ 176.341892][ T6879] ------------[ cut here ]------------ [ 176.353807][ T6880] kernel BUG at rust/helpers/bug.c:7! [ 176.355782][ T6883] vcan0: left allmulticast mode [ 176.359282][ T6879] kernel BUG at rust/helpers/bug.c:7! [ 176.365315][ T6880] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 176.387308][ T6880] CPU: 1 UID: 0 PID: 6880 Comm: syz.0.2311 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 176.400767][ T6880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.410820][ T6880] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 176.416107][ T6880] Code: ce 82 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 95 76 47 65 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 df b2 0e e9 90 90 90 90 90 90 90 90 90 [ 176.435713][ T6880] RSP: 0018:ffffc9000d6771b0 EFLAGS: 00010246 [ 176.441777][ T6880] RAX: 000000000000005a RBX: 1ffff92001acee38 RCX: 9548ace989cf2f00 [ 176.449743][ T6880] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 176.457709][ T6880] RBP: ffffc9000d6771b0 R08: 0000000000000003 R09: 0000000000000004 [ 176.465676][ T6880] R10: dffffc0000000000 R11: fffff52001aced9c R12: 0000000000000000 [ 176.473640][ T6880] R13: dffffc0000000000 R14: ffffc9000d6771e0 R15: ffffc9000d677210 [ 176.481615][ T6880] FS: 00007f1dc68286c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 176.490539][ T6880] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.497138][ T6880] CR2: 000000110c2e797f CR3: 0000000119c66000 CR4: 00000000003526b0 [ 176.505111][ T6880] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 176.513082][ T6880] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 176.521056][ T6880] Call Trace: [ 176.524333][ T6880] [ 176.527261][ T6880] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 176.534729][ T6880] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 176.542713][ T6880] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 176.556259][ T6880] ? p9pdu_vwritef+0x2720/0x2720 [ 176.561297][ T6880] ? radix_tree_node_alloc+0x1af/0x400 [ 176.566782][ T6880] ? _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xa2/0xf0 [ 176.575028][ T6880] ? __asan_memcpy+0x5a/0x80 [ 176.579615][ T6880] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 176.587682][ T6880] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 176.596449][ T6880] ? p9pdu_writef+0xdb/0x130 [ 176.601046][ T6880] ? p9pdu_vwritef+0x2720/0x2720 [ 176.605990][ T6880] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 176.615102][ T6880] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 176.624040][ T6880] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 176.631874][ T6880] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 176.639517][ T6880] ? p9_client_prepare_req+0x732/0xa10 [ 176.644979][ T6880] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 176.653221][ T6880] ? __kasan_check_write+0x18/0x20 [ 176.658334][ T6880] ? _raw_spin_lock+0x8c/0x120 [ 176.663110][ T6880] ? tun_chr_poll+0x127/0x770 [ 176.667784][ T6880] ? _raw_spin_lock+0x8c/0x120 [ 176.672549][ T6880] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 176.680796][ T6880] p9_fd_request+0x443/0x500 [ 176.685392][ T6880] p9_client_rpc+0x2f9/0xb40 [ 176.689984][ T6880] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 176.698237][ T6880] ? p9_fid_create+0x3d0/0x3d0 [ 176.703009][ T6880] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 176.711252][ T6880] ? p9_conn_create+0x4c9/0x570 [ 176.716109][ T6880] ? p9_fd_create+0x2f3/0x4c0 [ 176.720782][ T6880] p9_client_create+0x96a/0x1190 [ 176.725750][ T6880] ? __cfi_p9_client_create+0x10/0x10 [ 176.731127][ T6880] ? kasan_save_alloc_info+0x40/0x50 [ 176.736419][ T6880] ? __kasan_kmalloc+0x96/0xb0 [ 176.741188][ T6880] ? kstrdup+0x7b/0x140 [ 176.745345][ T6880] ? __kasan_check_write+0x18/0x20 [ 176.750455][ T6880] v9fs_session_init+0x1e1/0x1820 [ 176.755483][ T6880] ? __cfi_v9fs_session_init+0x10/0x10 [ 176.760939][ T6880] ? kasan_save_alloc_info+0x40/0x50 [ 176.766223][ T6880] ? __kasan_kmalloc+0x96/0xb0 [ 176.770987][ T6880] ? v9fs_mount+0xbd/0xa00 [ 176.775403][ T6880] v9fs_mount+0xd7/0xa00 [ 176.779645][ T6880] ? __cfi_v9fs_mount+0x10/0x10 [ 176.784502][ T6880] ? selinux_capable+0x38/0x50 [ 176.789268][ T6880] legacy_get_tree+0x103/0x1b0 [ 176.794029][ T6880] ? __cfi_v9fs_mount+0x10/0x10 [ 176.798880][ T6880] vfs_get_tree+0xa1/0x290 [ 176.803296][ T6880] do_new_mount+0x251/0xb40 [ 176.807801][ T6880] ? security_capable+0xcf/0xf0 [ 176.812651][ T6880] path_mount+0x688/0x1050 [ 176.817066][ T6880] ? putname+0x113/0x150 [ 176.821313][ T6880] __se_sys_mount+0x2bd/0x480 [ 176.825990][ T6880] ? __x64_sys_mount+0xf0/0xf0 [ 176.830777][ T6880] ? __kasan_check_write+0x18/0x20 [ 176.835890][ T6880] ? fpregs_restore_userregs+0x11d/0x260 [ 176.841521][ T6880] __x64_sys_mount+0xc3/0xf0 [ 176.846207][ T6880] x64_sys_call+0x2021/0x2ee0 [ 176.850887][ T6880] do_syscall_64+0x58/0xf0 [ 176.855315][ T6880] ? clear_bhb_loop+0x50/0xa0 [ 176.859988][ T6880] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 176.865876][ T6880] RIP: 0033:0x7f1dc598e929 [ 176.870286][ T6880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.889888][ T6880] RSP: 002b:00007f1dc6828038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 176.898299][ T6880] RAX: ffffffffffffffda RBX: 00007f1dc5bb6080 RCX: 00007f1dc598e929 [ 176.906268][ T6880] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 176.914236][ T6880] RBP: 00007f1dc5a10b39 R08: 0000200000000240 R09: 0000000000000000 [ 176.922202][ T6880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.930169][ T6880] R13: 0000000000000000 R14: 00007f1dc5bb6080 R15: 00007fff72955338 [ 176.938139][ T6880] [ 176.941152][ T6880] Modules linked in: [ 176.945092][ T6879] Oops: invalid opcode: 0000 [#2] PREEMPT SMP KASAN PTI [ 176.945150][ T6880] ---[ end trace 0000000000000000 ]--- [ 176.952055][ T6879] CPU: 0 UID: 0 PID: 6879 Comm: syz.0.2311 Tainted: G D 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 176.959748][ T36] audit: type=1400 audit(2000000039.772:544): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 176.972613][ T6879] Tainted: [D]=DIE [ 176.972624][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.972640][ T6879] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 176.994456][ T6880] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 176.998050][ T6879] Code: ce 82 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 95 76 47 65 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 df b2 0e e9 90 90 90 90 90 90 90 90 90 [ 177.008314][ T36] audit: type=1400 audit(2000000039.772:545): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.013533][ T6879] RSP: 0018:ffffc9000114f1b0 EFLAGS: 00010246 [ 177.013556][ T6879] RAX: 000000000000005a RBX: 1ffff92000229e38 RCX: 6d494feef1ed0100 [ 177.013574][ T6879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 177.013587][ T6879] RBP: ffffc9000114f1b0 R08: 0000000000000003 R09: 0000000000000004 [ 177.013602][ T6879] R10: dffffc0000000000 R11: fffff52000229d9c R12: 0000000000000000 [ 177.013617][ T6879] R13: dffffc0000000000 R14: ffffc9000114f1e0 R15: ffffc9000114f210 [ 177.013634][ T6879] FS: 00007f1dc68496c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 177.013653][ T6879] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.013669][ T6879] CR2: 000000110c2da52f CR3: 0000000119c66000 CR4: 00000000003526b0 [ 177.013689][ T6879] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.013702][ T6879] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.020087][ T6883] cgroup: Unknown subsys name '#' [ 177.038680][ T6879] Call Trace: [ 177.038698][ T6879] [ 177.038708][ T6879] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 177.070076][ T36] audit: type=1400 audit(2000000039.772:546): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.074028][ T6879] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 177.086659][ T36] audit: type=1400 audit(2000000039.772:547): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.090000][ T6879] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 177.098022][ T36] audit: type=1400 audit(2000000039.772:548): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 177.105943][ T6879] ? p9pdu_vwritef+0x2720/0x2720 [ 177.115512][ T6880] Code: ce 82 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 95 76 47 65 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 df b2 0e e9 90 90 90 90 90 90 90 90 90 [ 177.121481][ T6879] ? radix_tree_node_alloc+0x1af/0x400 [ 177.129544][ T6880] RSP: 0018:ffffc9000d6771b0 EFLAGS: 00010246 [ 177.137440][ T6879] ? _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xa2/0xf0 [ 177.137482][ T6879] ? __asan_memcpy+0x5a/0x80 [ 177.145629][ T36] audit: type=1400 audit(2000000039.772:549): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 177.150568][ T6879] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 177.157131][ T36] audit: type=1400 audit(2000000039.772:550): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 177.164259][ T6879] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 177.186941][ T6883] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 177.193566][ T6879] ? p9pdu_writef+0xdb/0x130 [ 177.193610][ T6879] ? p9pdu_vwritef+0x2720/0x2720 [ 177.193649][ T6879] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 177.193695][ T6879] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 177.222710][ T6880] [ 177.227738][ T6879] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 177.248686][ T6886] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 177.253087][ T6879] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 177.253134][ T6879] ? p9_client_prepare_req+0x732/0xa10 [ 177.273216][ T6880] RAX: 000000000000005a RBX: 1ffff92001acee38 RCX: 9548ace989cf2f00 [ 177.278215][ T6879] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 177.284515][ T6883] rust_binder: Error while translating object. [ 177.292521][ T6879] ? __kasan_check_write+0x18/0x20 [ 177.292558][ T6879] ? _raw_spin_lock+0x8c/0x120 [ 177.297518][ T6880] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 177.320055][ T6879] ? tun_chr_poll+0x127/0x770 [ 177.320088][ T6879] ? _raw_spin_lock+0x8c/0x120 [ 177.328315][ T6883] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 177.350651][ T6879] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 177.350705][ T6879] p9_fd_request+0x443/0x500 [ 177.350739][ T6879] p9_client_rpc+0x2f9/0xb40 [ 177.350766][ T6879] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 177.361071][ T6883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:822 [ 177.370021][ T6879] ? p9_fid_create+0x3d0/0x3d0 [ 177.370058][ T6879] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 177.375037][ T6880] RBP: ffffc9000d6771b0 R08: 0000000000000003 R09: 0000000000000004 [ 177.379621][ T6879] ? p9_conn_create+0x4c9/0x570 [ 177.389080][ T6880] R10: dffffc0000000000 R11: fffff52001aced9c R12: 0000000000000000 [ 177.398031][ T6879] ? p9_fd_create+0x2f3/0x4c0 [ 177.398066][ T6879] p9_client_create+0x96a/0x1190 [ 177.398094][ T6879] ? __cfi_p9_client_create+0x10/0x10 [ 177.398121][ T6879] ? kasan_save_alloc_info+0x40/0x50 [ 177.408180][ T6880] R13: dffffc0000000000 R14: ffffc9000d6771e0 R15: ffffc9000d677210 [ 177.408801][ T6879] ? __kasan_kmalloc+0x96/0xb0 [ 177.415593][ T6880] FS: 00007f1dc68286c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 177.422871][ T6879] ? kstrdup+0x7b/0x140 [ 177.422907][ T6879] ? __kasan_check_write+0x18/0x20 [ 177.428902][ T6880] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.436372][ T6879] v9fs_session_init+0x1e1/0x1820 [ 177.436409][ T6879] ? __cfi_v9fs_session_init+0x10/0x10 [ 177.445391][ T6880] CR2: 00007fbb28e05f98 CR3: 0000000119c66000 CR4: 00000000003526b0 [ 177.451160][ T6879] ? kasan_save_alloc_info+0x40/0x50 [ 177.456565][ T6880] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.461031][ T6879] ? __kasan_kmalloc+0x96/0xb0 [ 177.469402][ T6880] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.473703][ T6879] ? v9fs_mount+0xbd/0xa00 [ 177.478665][ T6880] Kernel panic - not syncing: Fatal exception [ 177.670027][ T6880] Kernel Offset: disabled [ 177.674349][ T6880] Rebooting in 86400 seconds..