last executing test programs: 53.68713557s ago: executing program 0 (id=132): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1381, 0x3}) 53.604989021s ago: executing program 0 (id=133): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee46000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {0x7, 0x1}, 0x3, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x5, 0x0}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='schedstat\x00') pread64(r1, &(0x7f0000000480)=""/14, 0xd, 0x8000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) close(r7) close(r5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) splice(r3, 0x0, r5, 0x0, 0x1100000000f336, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) 53.435075545s ago: executing program 0 (id=136): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x50000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="20b70000", @ANYRES16=0x0, @ANYBLOB="030f0000000000000000070000000c0002800800020000000000"], 0x20}}, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = userfaultfd(0x80801) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000340)={{&(0x7f00003a0000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) sendfile(r5, r6, 0x0, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000960000/0x2000)=nil, 0x2000, 0x2000007, 0x13, r6, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000507000/0x2000)=nil, 0x2000}}) preadv(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/14, 0xe}, {&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/41, 0x29}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x4, 0xfffffffe, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="240000001e00210000000000000000000a000000050000000000000008000b"], 0x24}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap(&(0x7f0000406000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0xa0080000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x1000, 0x980}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1, 0x14}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 53.295810507s ago: executing program 0 (id=139): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x20) fsetxattr$system_posix_acl(r0, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000010000000000000000800060000000000100007000000000020"], 0x24, 0x0) (async) fsetxattr$system_posix_acl(r0, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000010000000000000000800060000000000100007000000000020"], 0x24, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x94, r2, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xba}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x4080081) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) 53.268736338s ago: executing program 0 (id=141): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0xd3f57e99a1fc4cc2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(r2, 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) prlimit64(0x0, 0x9, &(0x7f0000000340)={0xffffdffffffffffb, 0xfffffffffffffffd}, 0x0) pipe(&(0x7f0000000000)) (async) brk(0x689d80000000) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) (async) ioprio_set$uid(0x3, 0x0, 0x6000) (async) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000080)=0x1a000, 0x4) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r7, &(0x7f0000000240)="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", 0xfb, 0x0, &(0x7f0000000040)={0xa, 0x4e22, 0x400, @private0, 0x9}, 0x1c) (async) close_range(r0, 0xffffffffffffffff, 0x0) 53.190428719s ago: executing program 0 (id=142): ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0x2, 0x5}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee46000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000004c0)=@urb_type_iso={0x0, {0x7}, 0x8, 0x6, &(0x7f0000001180)="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", 0x1000, 0x8e2a, 0x8, 0x42, 0x1, 0x6, &(0x7f0000000100)="054a51ca24cd9b3b5a7ba680450d10dcd23337d4c3272b58538380ee00a505a3dfb7d020da3b42502f6035ef029cb3c563fbf59b45274f30e5e51152bdf66f380dd9f395b2c8d87d4f6ddeba83f5a38e6c6a22d10790847dce2e1d5dcb7c62d4a67202", [{0x9, 0x9, 0x39}, {0x7f, 0x7f, 0x1}, {0x8, 0x6, 0x3}, {0x1, 0x7, 0xffff}, {0x8, 0x100, 0x10001}, {0xd3, 0x9, 0x3}, {0xd90a, 0x9, 0xc}, {0x7, 0x3, 0x4}, {0x6, 0x2, 0x1}, {0x4, 0x6, 0x6}, {0xfffffffc, 0x3, 0xf613}, {0x7, 0x80000000, 0xfffffff7}, {0x5d0, 0x2000000, 0x774}, {0x3, 0xfff, 0x2}, {0x2, 0x7, 0x401}, {0xbccf, 0x1, 0xffffff49}, {0x3, 0xd, 0xff}, {0x0, 0x3, 0x400}, {0x1, 0x800, 0xe}, {0x5, 0x3, 0xcf}, {0x9, 0x6, 0x37}, {0xd2, 0x7, 0xfffffff9}, {0x9, 0x10001, 0x7}, {0x101, 0x6, 0x4}, {0x1a86, 0x6, 0x3}, {0xef, 0x3, 0xe34}, {0x6b2, 0x9, 0x9}, {0x8, 0xfffffc01, 0x3}, {0x9, 0x6, 0x1}, {0x96d, 0x1000, 0x5}, {0x75, 0x5, 0x5}, {0x8000, 0x341, 0x9}, {0x3, 0x6, 0x9ce}, {0x9, 0x1, 0x3}, {0x7ff, 0x4, 0x7ff}, {0x6, 0x3, 0x6}, {0x10, 0x1, 0x401}, {0x5, 0x1, 0x7}, {0x830, 0x3, 0xffffff5a}, {0x4, 0x1, 0x9}, {0x1d306e70, 0x0, 0x2}, {0xffffff81, 0xa, 0x401}, {0x4, 0x6, 0xfffffffe}, {0xd, 0x44f, 0x65d05225}, {0xb65, 0x7, 0xffffff58}, {0x1, 0x40, 0x8}, {0x2, 0x6, 0x9}, {0x1, 0x5, 0x3}, {0x0, 0x6, 0x1}, {0x10001, 0x4, 0x7}, {0x4, 0x1, 0xabf5}, {0x6de118c1, 0x6b}, {0x8, 0xd0, 0x1000}, {0x3, 0x9, 0x4}, {0x401, 0x6, 0x8}, {0x8001, 0x0, 0x4}, {0x1, 0x2, 0x2}, {0xd40, 0xd, 0xfff}, {0x8, 0x4, 0x4}, {0x68, 0xe0, 0xbc14123}, {0x9, 0x4, 0x5}, {0xb07, 0x2, 0x4}, {0x4, 0x1, 0x6}, {0x1, 0x0, 0x200}, {0x8, 0x80000000, 0x3d3}, {0x81, 0x4, 0x1e5d8903}]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000400)='.\x00', 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x58, &(0x7f0000000400)=ANY=[@ANYBLOB="1201100308b794202104d401319a0102030109024600010307001609042b09000202ffe90524060001052400faff0d240f01040000000900f3ff0706241a020018052406000005246d80000d240f010e00000008000900081ba9a8951adaf3ffffffa7f474b93b0fda83313b5d25ff01d120412804f090d634d786f062dacfeed05e389d6aae187b9c3bdb621a855c"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 53.15238902s ago: executing program 32 (id=142): ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0x2, 0x5}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee46000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000004c0)=@urb_type_iso={0x0, {0x7}, 0x8, 0x6, &(0x7f0000001180)="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", 0x1000, 0x8e2a, 0x8, 0x42, 0x1, 0x6, &(0x7f0000000100)="054a51ca24cd9b3b5a7ba680450d10dcd23337d4c3272b58538380ee00a505a3dfb7d020da3b42502f6035ef029cb3c563fbf59b45274f30e5e51152bdf66f380dd9f395b2c8d87d4f6ddeba83f5a38e6c6a22d10790847dce2e1d5dcb7c62d4a67202", [{0x9, 0x9, 0x39}, {0x7f, 0x7f, 0x1}, {0x8, 0x6, 0x3}, {0x1, 0x7, 0xffff}, {0x8, 0x100, 0x10001}, {0xd3, 0x9, 0x3}, {0xd90a, 0x9, 0xc}, {0x7, 0x3, 0x4}, {0x6, 0x2, 0x1}, {0x4, 0x6, 0x6}, {0xfffffffc, 0x3, 0xf613}, {0x7, 0x80000000, 0xfffffff7}, {0x5d0, 0x2000000, 0x774}, {0x3, 0xfff, 0x2}, {0x2, 0x7, 0x401}, {0xbccf, 0x1, 0xffffff49}, {0x3, 0xd, 0xff}, {0x0, 0x3, 0x400}, {0x1, 0x800, 0xe}, {0x5, 0x3, 0xcf}, {0x9, 0x6, 0x37}, {0xd2, 0x7, 0xfffffff9}, {0x9, 0x10001, 0x7}, {0x101, 0x6, 0x4}, {0x1a86, 0x6, 0x3}, {0xef, 0x3, 0xe34}, {0x6b2, 0x9, 0x9}, {0x8, 0xfffffc01, 0x3}, {0x9, 0x6, 0x1}, {0x96d, 0x1000, 0x5}, {0x75, 0x5, 0x5}, {0x8000, 0x341, 0x9}, {0x3, 0x6, 0x9ce}, {0x9, 0x1, 0x3}, {0x7ff, 0x4, 0x7ff}, {0x6, 0x3, 0x6}, {0x10, 0x1, 0x401}, {0x5, 0x1, 0x7}, {0x830, 0x3, 0xffffff5a}, {0x4, 0x1, 0x9}, {0x1d306e70, 0x0, 0x2}, {0xffffff81, 0xa, 0x401}, {0x4, 0x6, 0xfffffffe}, {0xd, 0x44f, 0x65d05225}, {0xb65, 0x7, 0xffffff58}, {0x1, 0x40, 0x8}, {0x2, 0x6, 0x9}, {0x1, 0x5, 0x3}, {0x0, 0x6, 0x1}, {0x10001, 0x4, 0x7}, {0x4, 0x1, 0xabf5}, {0x6de118c1, 0x6b}, {0x8, 0xd0, 0x1000}, {0x3, 0x9, 0x4}, {0x401, 0x6, 0x8}, {0x8001, 0x0, 0x4}, {0x1, 0x2, 0x2}, {0xd40, 0xd, 0xfff}, {0x8, 0x4, 0x4}, {0x68, 0xe0, 0xbc14123}, {0x9, 0x4, 0x5}, {0xb07, 0x2, 0x4}, {0x4, 0x1, 0x6}, {0x1, 0x0, 0x200}, {0x8, 0x80000000, 0x3d3}, {0x81, 0x4, 0x1e5d8903}]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000400)='.\x00', 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x58, &(0x7f0000000400)=ANY=[@ANYBLOB="1201100308b794202104d401319a0102030109024600010307001609042b09000202ffe90524060001052400faff0d240f01040000000900f3ff0706241a020018052406000005246d80000d240f010e00000008000900081ba9a8951adaf3ffffffa7f474b93b0fda83313b5d25ff01d120412804f090d634d786f062dacfeed05e389d6aae187b9c3bdb621a855c"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 23.112915134s ago: executing program 4 (id=461): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8}}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$nl_audit(0x10, 0x3, 0x9) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r2], 0x7a) unshare(0x62040200) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r5 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r6 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="a0002883781ecc0e", 0x8}, {&(0x7f0000000500)="681fee8f9381627e037c78029f055dd2351146f2bce92ae67df584308757a9305a9e17f0cde45d8fbff7b7d0b0dbff5383afc3249c132568ab3f1658208fab78b5ad5595dd8a9e3bd5b02725ba875105c68e38a6757260735f9cc9ddea9fc52edc20fddebf7ec0309f36544a8d78323746961d828552fd715c0ac4f974d7210d191919c5af914162e5c9bd10f412a76de67240ad0ac54b9fe69e8bf7df73ea3572f211e2d49bb52dff7e06d97aa72a164c08760337a26e14e0a74175f2786e1c5c834e1ab10aa646c7bde494af327a0df616", 0xd2}, {&(0x7f0000000600)="1e15c41f433381a3e44ff496a0cbaecaff5377906cd3d2586f6cb507339ead51d9f19e7a6775ffe82fd9c672937bc0bfa8a255f41297bca333f3ebf0cced3c2885c95f7de2edaa6926f42defcab032493bd16831c27febb05df4986e8beb7b089819a0863822e185ae9ff0b4157ea562e87649253f1a634683eab25fa164e243b9dcbc61e69d5a197ec5daa60feba27ad25e6c20d1a38d5b2293214d308283b213061c0e6abae9d314e231b23c6584b32024adaa3992b43e7afa9997ed2c14561271dbbc78f25c4561efbe84d114e32b6d4c7d8966bbac067d7d66def13a5391b375622629bb2917e1f9f52f723e0c7d10", 0xf1}], 0x3}}], 0x1, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0x12) r8 = userfaultfd(0x801) read(r8, 0x0, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r9, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/151, 0x97}], 0x1, 0x9, 0xfffffc01) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, 0x0, 0x40083, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x88000, 0x4) 22.22606564s ago: executing program 4 (id=467): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80982, 0x0) syz_clone3(&(0x7f0000000240)={0x41004c00, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x39}, &(0x7f00000000c0)=""/48, 0x30, &(0x7f0000000100)=""/212, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58) r2 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xc) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x2) shutdown(r3, 0x0) accept(r3, 0x0, 0x0) fcntl$addseals(r1, 0x409, 0x6) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x6c9c29cc51bfd534) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, 0x0) write$vga_arbiter(r0, 0x0, 0xff35) r4 = socket$inet6(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 22.2104528s ago: executing program 4 (id=469): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fsetxattr$trusted_overlay_upper(r0, 0x0, &(0x7f0000000080)={0x0, 0xfb, 0x114, 0x6, 0xd, "6e1994616a5da7db7d35cec7ccf564d3", "7653c6c2b697ec0090587eab27413ed0918a4ef04e078f6043b3bce41f85111b83cb73d22c15504cd5a878e2fead9bfb8ee7a1828eaf17078fde7c306d6e2c168a065aa976983028dd127a0cd98c33dbebaca1798042f1d0fe5a67bc0e89589c7287b7061612fbbb2ff5b89f45d20571d7f36857e65854e95f7e68c4af04f91f1fc6d37e272da8de7cea44510b187b4d9a34fbdd3071988af9b1809fbb0cba194542ea32d27cdca50216dc169ecf6d34788efd"}, 0xc8, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r0, 0xffffc000) 22.132561692s ago: executing program 4 (id=470): recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0, 0x0) (async) timer_create(0x5, 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0xa, 0x3, 0xff) (async) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x221) (async) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @remote, 0x3}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="2460cf4782a734649801d319bafbc635259b1466e91c886d832b19a016199327058bee4bee12e0a8", 0x28}], 0x1}}], 0x1, 0x24) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000151000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x3c, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x80a0000}}, "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", "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"}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000280)={0x10000, 0x7, 0xd000, 0x1000, &(0x7f0000175000/0x1000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000015b000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000380)=[@cpuid={0x14, 0x18, {0x1, 0x400}}, @wr_crn={0x46, 0x20, {0x3, 0x4}}, @wrmsr={0x1e, 0x20, {0x937, 0x2}}, @wrmsr={0x1e, 0x20, {0x26b, 0x3c50}}, @uexit={0x0, 0x18}, @code={0xa, 0x71, {"b9800000c00f3235000800000f30260f2025b987020000b8261b0000ba000000000f3066baf80cb83834a989ef66bafc0ced440f01c48fa978d3463f66ba4100b856e80000eff3470f0766baf80cb8843d4187ef66bafc0c66ed660f38807a0b"}}, @uexit={0x0, 0x18, 0x6}, @rdmsr={0x32, 0x18, {0x249}}, @uexit={0x0, 0x18, 0x5}, @cpuid={0x14, 0x18, {0x2}}, @code={0xa, 0x58, {"420f0766baf80cb8e2958780ef66bafc0cb01eee66baf80cb868e18d83ef66bafc0cb8c7190000ef66b817008ee0450f0645dddd66b81b018ee80f22a1450f0118c462fd236208"}}, @code={0xa, 0x97, {"0f20e035040000000f22e0c744240057b90000c7442402dc000000c7442406000000000f011424c402bd8c266426400f78bd6ff79ce03ef30fc733c744240000000000c744240200000000c7442406000000000f011c24c442fd25a609000000f3420f01e8f0470fb11ac7442400faffffffc744240220bb0000c7442406000000000f011424"}}, @rdmsr={0x32, 0x18, {0xb75}}, @cpuid={0x14, 0x18, {0x9}}, @wr_crn={0x46, 0x20, {0x4, 0x4}}, @code={0xa, 0x7c, {"450f785900c4e27913c4b9800000c00f3235004000000f300f21c166b841008ed8c744240003000000c7442402103d0000ff2c2448b85bc30000000000000f23c00f21f835030005000f23f8410f009dee6c0000c4e17852717d66baf80cb80396d48fef66bafc0cb000ee"}}, @uexit={0x0, 0x18, 0x40}, @cpuid={0x14, 0x18, {0x7f, 0x1}}, @code={0xa, 0x64, {"dff043818cdb05000000f35f0000420f92110f3548b87c000000000000000f23d80f21f835400000c00f23f866b828008ed0f2ad660fc7b4befe000000c7442400c8000000c744240200080000ff1c24410f07"}}, @cpuid={0x14, 0x18, {0x0, 0x5}}, @wr_crn={0x46, 0x20, {0x8, 0x800}}, @rdmsr={0x32, 0x18, {0x488}}, @rdmsr={0x32, 0x18, {0xb27}}, @code={0xa, 0x69, {"b9c60200000f3266baf80cb88c631381ef66bafc0ced0f001587f30000b8010000000f01d966baa100b000eec481ffe6ad00100000f0430fb1b44d16000000430f01c566baf80cb826c36c83ef66bafc0c66ed36f3450f09"}}, @cpuid={0x14, 0x18, {0x1ff, 0x1}}, @wrmsr={0x1e, 0x20, {0x3a, 0xf}}], 0x4b9}) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000040)=0x1) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20040000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000880)=[@uexit={0x0, 0x18, 0x81}, @rdmsr={0x32, 0x18, {0xb3a}}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x4}, @code={0xa, 0x6c, {"f20f2ba6ffffffff360f0014e52c7b00000f08b805000000b96e9900000f01c166baf80cb89ea13187ef66bafc0cec6436660ff97a006436450fc7590b66ba2100b800000000ef67670fae2426b9800000c00f3235008000000f30"}}, @rdmsr={0x32, 0x18, {0x19d}}, @cpuid={0x14, 0x18, {0xf, 0x2}}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0xfff}, @cpuid={0x14, 0x18, {0x9, 0x4000000}}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x7}, @rdmsr={0x32, 0x18, {0x3b4}}, @cpuid={0x14, 0x18, {0xfffffffa, 0xc0}}, @wrmsr={0x1e, 0x20, {0xbaa, 0x10000}}, @wrmsr={0x1e, 0x20, {0x8cd, 0x7}}, @uexit={0x0, 0x18, 0xe}], 0x1fc}) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000161000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="0fc728dc950900000048b87b8494ead57a66320f23c00f21f83501000d000f23f8410f21150f20d835080000000f22d80f236166ba4200ec0f32660fc7b331ac0000f0f71e", 0x45}], 0x1, 0x2, &(0x7f00000001c0)=[@flags={0x3, 0x20002}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 22.059733783s ago: executing program 4 (id=472): socket(0x1e, 0x3, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f000000bf40), 0x10000, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x21, 0x800, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) fcntl$setstatus(r0, 0x4, 0x48400) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x3ffff) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) sendmsg$sock(0xffffffffffffffff, 0x0, 0x20048080) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000002c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) eventfd2(0x6, 0x80800) dup(0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x7}, 0x10) 22.028244944s ago: executing program 4 (id=473): unshare(0x62040200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, r3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, 0x0) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$ASHMEM_SET_NAME(r6, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') 21.938772795s ago: executing program 33 (id=473): unshare(0x62040200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, r3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, 0x0) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$ASHMEM_SET_NAME(r6, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') 4.384513359s ago: executing program 2 (id=751): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x588680, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r1, 0x22e7c000) 4.371069279s ago: executing program 2 (id=752): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x504, 0x0, {0x77359400}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "8d416dfa6fc2313e"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x400c041) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) 4.303858s ago: executing program 2 (id=753): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3ff) (async) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) pwritev2(r0, &(0x7f00000014c0)=[{&(0x7f00000002c0)='=', 0x1}], 0x1, 0xff, 0x1, 0x24) (async) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000340)={{0x6, 0x5}, 0x100, './file0\x00'}) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) (async) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x1, 0x0, 0x325, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wake_unlock', 0x42002, 0x1e3) sendfile(r4, r4, 0x0, 0x1200000000000) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 4.261348031s ago: executing program 2 (id=755): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b"], 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "e1c0e54b41438e159ce60bf61fe9b7d65ccabba2ffb9e2a572fb97bc090b37a0bb4fc3bd0bb6aac0b4779cdf51e2e2ad9b33055bd46b7d84c1a3500100000000000000724bdf93d68b29af475fdd8f813ae1532a770cca665095a272576f5e380544bdf013347440a54896432009e74b70c380d41fce00cc17fae1353c0f48ec62543e16af1b02cbf72e3891122c67c3d7e4f47158da1a634dfe7723e92baf94b3215536b25034ddd31a7a9ee679d7efceac"}, 0xbd) sendfile(r3, r1, 0x0, 0x10000a007) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_setup(0xe4, &(0x7f0000000000)) io_setup(0x7, &(0x7f0000000140)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000000)={0x1}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) fcntl$addseals(r7, 0x409, 0x8) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r6, 0xc008aec1, &(0x7f0000000040)={0x1, 0x0, [{0xe137ba4f583519a5, 0xfffffffd, 0x0, 0x0, 0x9b, 0x1, 0xa1}]}) 3.000488685s ago: executing program 2 (id=781): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x26}, @flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @fda={0x66646185, 0x2, 0x2, 0x6}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) 2.915391476s ago: executing program 2 (id=782): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendmmsg$inet6(r1, &(0x7f00000042c0)=[{{&(0x7f00000017c0)={0xa, 0x4e24, 0x20000006, @empty, 0xfffffffe}, 0x1c, &(0x7f0000001700)=[{&(0x7f00000001c0)}, {&(0x7f0000000300)="838d4718cde9eaf09977102e36ef7dc2f3badb654240e043e88373a1f755068167b89cd38256fd324bdb04fccb5698408c546afd036acb758b2e46d548900ed9e80bc1e15328051aca7408181a3bded85099ab40f1d683e5aff7076fc71c23c6057dfa4845e8bee7b31b13394ab1a5c8676b4c3bc43cb58a619622293d238d99a1fa3f4d58baeb8466028d13c0408e56e03c510da4b866", 0x97}, {&(0x7f00000003c0)="d637fd03cea7acde49e2e1fc80f5fe78813c3bd2b27337f8787bde3e965f3083f69fae1b6af2d0190aa7be918463295b28cdd2759facdeb677dae859cc63486b455b5e291f091e3402e461b30831e21d0054444fa98bc0be942b6f9525ea5df90913d848a31ba9c91cb95e7887794d3c274ad86b0c0b98b6f334fef7c2b9ee69f52471d2c0300ab78105e477f0bb474b00b6daa815ff60fc6582e2caa639e69991dda4f1fc7ab37129e8456de0a4d1299a66fc3f8dd6b5450fc9b1877af04572c8791bb439dd2fafadc99ff49e2f37bc484d1449341e2180219c3fd3de970f5e719369dd2dc1982e44a2", 0xea}, {&(0x7f0000001940)="0026be9b16b6f5da06ba4a39cc243b8bec2bc27dc1e6d5e1ef2338361c1e0e7698424581591a58c6cb8fed62610d8ff3f9484c73ef61e4316f11f297d493151d31b33ddcf741795164b05b434033c2fe9b0d1521690e648f5211f16de54d31bf199d06c5f6ceead8a5866a79df4791db9a4b376fd000097aecace8b963136374560ebf5f2f52817d1780c6234d3b4439a1f282f63f3bd96e6c1d9ff0e088ac1042f2ffdb0000000000004694449014bf3bc9c1f1d92fa05a1306f954ed2212ce8c0eb0370025b308adafbaccd4820201f9141f6693644be31a740cf4d5ae909bc5b64fbaf1571fda207c42f66e3b08d3f5dc7ee591e44886798213b3a033c96ad02fe4", 0x103}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="1d93d6649f5e78fc9166d897c871afe99232b19c88461d45d174c1e06752ea8247a0cbeff94828b3fce2d07c72fa592e8bd96fe762efef41944ccdff858222a8e164eb3c9148c3b850110d1f803d0093820d050fe4d0daf2579c3878fc5102555fa75762242d7db89d3478c5421a6d7c1f3b67681553d9788e0b8fad29a4597970b5fc3b225cceff972e2042b2e6e4feaf01621a0c421400", 0x98}, {&(0x7f0000001640)="76cd068376d1af7216b7ec909a296fb2", 0x10}, {&(0x7f0000001680)="6238241d1c8a3a798f07514950e82740fd47e9840b93d69430cef1119d48a2589547dab220314aaebfb20c1fa189f5d5139b599d1d967cd961b4df414406731e5c69033f8a14", 0x46}], 0x8}}], 0x1, 0x4c801) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, 0x0, 0x4004040) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x300}, 0x8040) socketpair$unix(0x1, 0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) readv(r4, &(0x7f0000000140), 0x1000000000000127) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x801, 0x2, 0x0, 0x5, 0x1, 0x3}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000001800)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r6, @ANYRESDEC=0x0, @ANYBLOB="9c9d51f5fc5a28a0f8d67ac7fbd25b0859c2d53312bd6e97b4a62de9689ed8cc54038ebc46d4885f8beba1c919606bd9b0ec18301a6d268e8b1baa73fca80bbe0dc40d68f099eac9d7a238ef88519d349fe54c4195b33e98f69f0a3973f99e4737c35d903c1acf19b319e719803deae1b0ad16255ee1adf44969b9cf81fdd2aec3811219a64ade010e6af67176e95ffd3599aa55d922b3e81916deb63c55b36cf825dde58a05d9e5f839dd"], 0x0) listen(r5, 0x6) accept4(r2, &(0x7f0000000240)=@x25, 0x0, 0x80800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) sendto$inet6(r7, &(0x7f00000002c0)="66480cfc8f3e9ff204540d4113fd1f15f5", 0x11, 0xc084, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r9 = syz_clone(0x408e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace(0x11, r9) lseek(r8, 0x1, 0x1) 1.483257422s ago: executing program 3 (id=800): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd700000ffffff81"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x4040, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a"], 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) write$bt_hci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) write(r0, &(0x7f0000000180)="7ed76b7b9f98dcc0d7a3960366b1b86cd11ade16691f5bca36e37acb0d1dbfbbd2877687fae3390019c300dcf2a3533e8ac37accbfd2644188eb0b60b166f797f5fc0c47f8959632c87d8314f341ff5e1c83ed46ed50fe2d376a212847fa2e7e40d4e5fa0231", 0x66) 898.440473ms ago: executing program 3 (id=807): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async) setuid(0xee01) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000ffd000/0x3000)=nil}) (async) openat$ptp0(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) inotify_init1(0x800) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) (async) preadv2(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x6, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x12, &(0x7f0000000140)=0x8001, 0x4) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x104) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="ff010000e901000006800000000000000100000002000b9b88051743"]) (async) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0xffffffffffffffd7) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) (async) unshare(0x22020600) (async) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) (async) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f00000001c0)={0x1bb7, 0x0, 0x1}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_hsr\x00'}) read$FUSE(r6, &(0x7f00000005c0)={0x2020}, 0x2020) 897.657813ms ago: executing program 3 (id=808): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000175000/0x2000)=nil, 0x2000}, 0x4, 0x2}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) 897.414883ms ago: executing program 3 (id=809): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005e000101000000000000000008f0"], 0x1c}], 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3d) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 891.540393ms ago: executing program 3 (id=810): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_raw(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x40047705, 0x4) 843.859314ms ago: executing program 3 (id=811): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000380)=ANY=[@ANYBLOB="1201500202000040"], 0x0) ioctl$EVIOCRMFF(r2, 0x83c0550b, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="5d8095954d00d01aa9d1c32ddf60cb5e46ebc4847109dc7e3f503a39b856a4e426bab18cfa8a34263dcba43d5ae4264c323ab6bac30a9d96e2262636856e33e3e18bc5df81", 0x45}], 0x1}}], 0x1, 0xc8000) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(r3, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000022, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001100)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000021c0)={0x14, 0x3, 0x1, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20004008}, 0x8004) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x3}], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x2a40}) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x2, 0x7fffffff, 0x1000}}, 0x30) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0x3, &(0x7f0000000080)=0x7f, 0x4) 701.099697ms ago: executing program 5 (id=812): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000180)=""/190, 0xbe}, {&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000003580)=""/4094, 0xffe}], 0x5, 0x0, 0x63}, 0xffffdffe}], 0x400000000000343, 0x2, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) (async) futex_waitv(&(0x7f0000004580)=[{0x43b9, &(0x7f00000000c0)=0x8, 0x82}, {0x4, &(0x7f0000000240)=0x1000, 0x2}, {0x0, &(0x7f0000000280)=0x2, 0x82}, {0x3, &(0x7f0000000300)=0x329d, 0x82}, {0x9, &(0x7f0000000340)=0x6, 0x2}, {0x9, &(0x7f0000000380)=0xe42d, 0x2}, {0x4, &(0x7f00000003c0)=0x800, 0x2}, {0x8001, &(0x7f0000000400)=0x5, 0x80}, {0x7, &(0x7f0000000440)=0x1, 0x2}, {0x2, &(0x7f0000000480)=0x8b2d, 0x2}, {0xec52, &(0x7f00000004c0), 0x2}, {0xfffffffffffffffe, &(0x7f0000000500)=0x3ff, 0x2}, {0x5, &(0x7f0000000540)=0x7fffffffffffffff, 0x2}, {0x4, &(0x7f0000000580)=0x6, 0x83}, {0x4, &(0x7f00000005c0)=0xfffffffffffffff2, 0x82}, {0x4, &(0x7f0000000680), 0x82}, {0x5, &(0x7f00000006c0)=0xd, 0x2}, {0x3, &(0x7f0000000700), 0x82}, {0x2, &(0x7f0000000780)=0x10001, 0x82}, {0xa, &(0x7f00000007c0)=0xb, 0x82}, {0x4, &(0x7f0000000800)=0x3d, 0x2}, {0x2, &(0x7f0000000840), 0x82}, {0x4, &(0x7f0000000880)=0x9, 0x82}, {0x7, &(0x7f00000008c0)=0x3ac, 0x2}, {0x7fffffffffffffff, &(0x7f0000000900)=0x5, 0x2}, {0x401, &(0x7f0000000940)=0x9, 0x82}, {0x6, &(0x7f0000000980)=0x7, 0x2}, {0x80000000, &(0x7f00000009c0)=0x7, 0x82}, {0x6, &(0x7f0000000a00)=0x4, 0x2}, {0x4, &(0x7f0000000a40)=0x9, 0x2}, {0x8, &(0x7f0000000a80), 0x2}, {0x7, &(0x7f0000000ac0)=0x8, 0x82}, {0x96, &(0x7f0000000b00)=0x7, 0x82}, {0x7, &(0x7f0000000b40)=0x8, 0x2}, {0x7f, &(0x7f0000000b80)=0x7ff, 0x2}, {0x3, &(0x7f0000000bc0)=0x1, 0x2}, {0x58e2e16, &(0x7f0000000c00), 0x82}, {0x8, &(0x7f0000000c40)=0x666b679c, 0x82}, {0x7f, &(0x7f0000000c80)=0x2}, {0x2, &(0x7f0000000cc0)=0xbe06, 0x2}, {0xffffffffffffffff, &(0x7f0000000d00)=0x9, 0x2}, {0xf, &(0x7f0000000d40)=0x3, 0x82}, {0x3, &(0x7f0000000d80)=0xe0, 0x2}, {0x810a, &(0x7f0000000dc0)=0x2, 0x82}, {0x0, &(0x7f0000000e00)=0xd5a4, 0x2}, {0x1, &(0x7f0000000e40)=0xf7b, 0x82}, {0x6, &(0x7f0000000e80)=0x10000, 0x2}, {0x8000000000000000, &(0x7f0000000ec0)=0xb, 0x2}, {0x96, &(0x7f0000000f00)=0x7, 0x82}, {0xbf, &(0x7f0000000f40)=0x7, 0x82}, {0x2, &(0x7f0000000f80), 0x2}, {0x1, &(0x7f0000000fc0)=0x2, 0x80}, {0xc, &(0x7f0000001000)=0x3, 0x82}, {0x7fffffffffffffff, &(0x7f0000001040)=0xfff, 0x2}, {0x8000000000000001, &(0x7f0000001080)=0xe, 0x2}, {0xfff, &(0x7f00000010c0)=0x9, 0x82}, {0x6, &(0x7f0000001100)=0xf4e, 0x2}, {0x8, &(0x7f0000001140)=0x82fa, 0x2}, {0x7ff, &(0x7f0000001180)=0x6, 0x2}, {0x1, &(0x7f00000011c0)=0x8, 0x242cb9fba76470ff}, {0x1, &(0x7f0000001200)=0x86da, 0x82}, {0xa, &(0x7f0000001240)=0x4, 0x2}, {0x0, &(0x7f0000001280)=0x8, 0x2}, {0x3, &(0x7f00000012c0)=0x8, 0x2}, {0x1f, &(0x7f0000001300)=0x7, 0x4}, {0x2, &(0x7f0000001340)=0xfffffffffffffffb, 0x82}, {0x852, &(0x7f0000001380)=0x28ab258, 0x1e8ade5a66255302}, {0x7a, &(0x7f00000013c0)=0x7fffffff, 0x2}, {0x100000001, &(0x7f0000002580)=0x89d, 0x2}, {0x6, &(0x7f00000025c0)=0x1, 0x82}, {0x8000000000000000, &(0x7f0000002600)=0x5, 0x82}, {0x7, &(0x7f0000002640)=0x59, 0x82}, {0x5, &(0x7f0000002680)=0x7f, 0x2}, {0x3, &(0x7f00000026c0)=0x8001, 0x80}, {0xffffffff7fffffff, &(0x7f0000002700)=0x5, 0x2}, {0x7fffffff, &(0x7f0000002740)=0x4, 0x2}, {0x2, &(0x7f0000002780)=0x4, 0x2}, {0x2, &(0x7f00000027c0)=0x8000000000000001, 0x82}, {0x52, &(0x7f0000002800)=0x7, 0x2}, {0x7, &(0x7f0000002840)=0x7ff, 0x2}, {0x8ac, &(0x7f0000002880)=0x9, 0x2}, {0x2, &(0x7f00000028c0)=0x6, 0x82}, {0x2, &(0x7f0000002900)=0xc, 0x2}, {0x9, &(0x7f0000002940)=0x3, 0x2}, {0x4, &(0x7f0000002980)=0x8000, 0x82}, {0x9c5, &(0x7f00000029c0)=0x8, 0x2}, {0x3, &(0x7f0000002a00)=0x100000000, 0x2}, {0x8, &(0x7f0000002a40)=0x4, 0x82}, {0x0, &(0x7f0000002a80)=0x400, 0x2}, {0x2, &(0x7f0000002ac0)=0x1ff, 0x2}, {0x7ff, &(0x7f0000002b00)=0x2800000000, 0x2}, {0x2, &(0x7f0000002b40)=0x10000, 0x2}, {0x8, &(0x7f0000002b80)=0x7f, 0x82}, {0x7, &(0x7f0000002bc0)=0x7, 0x2}, {0x7, &(0x7f0000002c00)=0x81, 0x82}, {0x5, &(0x7f0000002c40)=0xffffffffffffff80, 0x82}, {0xc, &(0x7f0000002c80), 0x82}, {0x3, &(0x7f0000002cc0)=0x6, 0x2}, {0x200, &(0x7f0000002d00)=0xe36b, 0x82}, {0x100000000, &(0x7f0000002d40)=0x8, 0x82}, {0x1, &(0x7f0000002d80)=0x800, 0x82}, {0x9, &(0x7f0000002dc0)=0x7, 0x82}, {0x5, &(0x7f0000002e00)=0x8001, 0x82}, {0x2, &(0x7f0000002e40)=0x7ff, 0x2}, {0x0, &(0x7f0000002e80)=0x6}, {0x6, &(0x7f0000002ec0)=0x5, 0x82}, {0x100, &(0x7f0000002f00)=0x7fff, 0x80}, {0x2, &(0x7f0000002f40)=0xff, 0x2}, {0xbd00000000000000, &(0x7f0000002f80)=0x7e85, 0x2}, {0x17, &(0x7f0000002fc0)=0xd6bb, 0x2}, {0xc, &(0x7f0000003000)=0x8000000000000000, 0x2}, {0x10dd, &(0x7f0000003040)=0x81, 0x2}, {0x6, &(0x7f0000003080)=0x13, 0x82}, {0xffffffffffffffff, &(0x7f00000030c0)=0x1, 0x82}, {0x0, &(0x7f0000003100)=0x7, 0x82}, {0x4, &(0x7f0000003140)=0x7ff, 0x82}, {0x8000, &(0x7f0000003180)=0x7, 0x2}, {0xa, &(0x7f00000031c0)=0xb18d, 0x2}, {0x4, &(0x7f0000003200)=0x4, 0x82}, {0xeb3, &(0x7f0000003240)=0xfffffffffffffffb, 0x82}, {0xfffffffffffffff8, &(0x7f0000003280), 0x2}, {0x1, &(0x7f00000032c0), 0x82}, {0x100, &(0x7f0000003300)=0x3, 0x82}, {0x0, &(0x7f0000003340)=0x800, 0x82}, {0x0, &(0x7f0000003380)=0x8, 0x82}, {0xff, &(0x7f00000033c0)=0x2, 0x82}, {0x9, &(0x7f0000003400)=0xd21, 0x2}], 0x7f, 0x0, &(0x7f0000003440)={0x77359400}, 0x1) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd700000ffffff81"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x46, 0xfffa}, 0x3a, [0xc001, 0x3, 0xf, 0xb1eb, 0x80, 0x7, 0x3, 0x2, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e660, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0x10, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10000005, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x7f6fdd94, 0x0, 0x8, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x2, 0x401, 0x6, 0x1, 0xff, 0x5, 0x7cb, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x200, 0x9, 0x4, 0xd, 0xe1, 0x44, 0x8000, 0x1, 0xfe000000, 0xfffd, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x5, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x7, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x10800003, 0x200, 0xaf8, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xaca, 0xbe, 0x4002, 0x23, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb2f, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x2010000, 0xc, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c18, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) (async) sendto$inet(r2, &(0x7f0000000040)="f1767695600fea0dbdc52bf1cfa412db6f55c0dd4f5912de8bafef7a117af644212fed1064774fee096c2ca605c7c01c161152f28f1e2c", 0x37, 0x40, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10) 684.564157ms ago: executing program 5 (id=813): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000002140)='./file1\x00', 0x42, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) (async) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002140)={0x1c, 0x56, 0x1, 0x0, 0x800000, "", [@typed={0x7, 0x3ffd, 0x0, 0x0, @str='\x00\x00\x00'}, @nested={0x4, 0x141}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) listen(0xffffffffffffffff, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000001400)=[@decrefs={0x40046307, 0x3}, @acquire={0x40046305, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @exit_looper], 0x0, 0x0, 0x0}) 627.925028ms ago: executing program 5 (id=814): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000019480)) (async) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) vmsplice(r3, &(0x7f0000000000)=[{0x0}], 0x1, 0x5) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x2, 0x0, 0x4b}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/228, 0xe4, 0x2, 0x34}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 614.709328ms ago: executing program 5 (id=815): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x406000, 0x8) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080)=0x8000, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000001140)=[{{&(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x2, 0x4044014) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000001400)={0x0, 0x0, 0xfc000000}) mount$binderfs(&(0x7f0000000000), &(0x7f00000000c0)='./binderfs\x00', 0x0, 0x1002000, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f00000007c0)={'syz0\x00', {0x65, 0xa1a, 0x8, 0x1}, 0xe, [0x2, 0x10000, 0x4, 0x94, 0x7, 0x8, 0x1000, 0x4, 0x6, 0x3, 0x101, 0x23a4a208, 0x3, 0x2, 0x7fff800, 0x8, 0x2, 0x0, 0x1, 0x9b35, 0xa68, 0x9, 0x921, 0x0, 0x6, 0x1000, 0xffff, 0x8, 0xf, 0x10, 0x3, 0x100000, 0xffff, 0xfffffffa, 0x40000010, 0x4, 0x5, 0x6, 0x7fff, 0xffffffff, 0x861, 0x1, 0xa8, 0x8, 0xf, 0xa, 0xffffffff, 0x46, 0x5efa, 0x7, 0x7, 0x0, 0xb521, 0x80000000, 0x7, 0x80000001, 0x33, 0x0, 0x7, 0x3, 0x10001, 0x401, 0x5, 0xfffffff4], [0x10000, 0x1, 0x8000000, 0x400000, 0xaf0b, 0x1, 0x101, 0xe5, 0x67, 0x10001, 0xa4, 0x100, 0xfffffff7, 0x9, 0x5, 0x0, 0x7fff, 0x334, 0x6, 0xc3, 0x8000, 0xfffffff8, 0x80000000, 0xff, 0x2, 0x7fffffff, 0x7, 0x8, 0x8, 0x0, 0x8, 0x9, 0x6, 0x800, 0x4, 0x2, 0xa, 0x77, 0x2, 0x5eac, 0x0, 0x7fffffff, 0x7, 0x3edf6244, 0x0, 0x4, 0x5, 0x5, 0x40, 0x1, 0x1, 0x41, 0xc332, 0x1, 0xfff, 0xfffffdf1, 0x5, 0x4, 0x10, 0x4, 0x6, 0x6, 0xfffffffb, 0x5], [0x5, 0x2, 0x4, 0xae71, 0xe20, 0x8, 0xfffff1ab, 0xa, 0x2, 0x400, 0x5, 0x8, 0x1, 0x4, 0x9, 0x3, 0x5, 0x7, 0x80000000, 0x8, 0xb, 0x0, 0xffff, 0x5, 0x2, 0x8, 0x1, 0xfffff01b, 0x9, 0x7, 0x6, 0x5, 0xbb, 0x4, 0x3, 0x6, 0x9114, 0x1, 0xffffffff, 0x5, 0xd7, 0x8, 0x6, 0xd7d, 0x651e, 0x100, 0x9, 0x5, 0x401, 0x844, 0x3, 0x4, 0xa, 0xdcb, 0x3, 0x9, 0x5, 0x1, 0x9, 0x401, 0x6, 0x9, 0x1, 0x9], [0xb9c, 0x8, 0x8, 0xfffffff0, 0x5f16, 0x8, 0x477, 0x6, 0x8, 0x4, 0x8, 0x1, 0x3a, 0xd, 0x2, 0x7fffffff, 0x2, 0x1, 0x40, 0x6, 0x2f63d0fc, 0x4, 0x6, 0x800, 0x22db43a8, 0x400, 0xfffffff9, 0x86b, 0x3, 0x2, 0xbb0, 0x9, 0x4, 0xff, 0x7, 0x6ba, 0x0, 0x8, 0x6, 0x3, 0xe9, 0x3, 0x6, 0x1000000, 0xffffff00, 0x2, 0x716, 0x100, 0x0, 0x5, 0x6, 0x4, 0x401, 0x0, 0x7, 0x400, 0x3, 0x3, 0x0, 0x99fb, 0x7, 0x3, 0x7176, 0x3ff]}, 0x45c) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs}) socket$netlink(0x10, 0x3, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22, 0x8000000}, 0x1c) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2006, 0x10001e3, 0x0, 0x0, 0x9}) connect$inet6(r6, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r5, r3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) setsockopt$inet6_group_source_req(r9, 0x29, 0x2b, 0x0, 0x5f8322cb6ec77672) 530.83578ms ago: executing program 5 (id=816): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0xf0, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x0, 0x2a}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x1000}, @dead_binder_done, @increfs={0x40046304, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000300)=""/213, 0xd5, 0x1, 0xc}, @flat=@weak_handle={0x77682a85, 0xa, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/219, 0xdb, 0x1}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}, @reply_sg={0x40486312, {0x8, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100a, 0x2}, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x95, 0x0, &(0x7f0000000a00)="d353ef3b76decf202e886b9d512f5c8ce603ce11e4df3a7457566f9a16330850de20f9c4ccdba83a127eeaecf8654aca6cce0cc30240eeff304b1c04133af70d39c9f0b2c63861f3b357a7e6206a7f3085de848587e9a949a17b73b72090e646153a3322f5329dcd8586fe5468ad521b324832214f178914560fec9f6fba0aa034813fc11ca8417423e3101dcf6026952498e3f98a"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x81) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x58, 0x0, &(0x7f0000000980)=[@decrefs={0x40046307, 0x1}, @dead_binder_done, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x0, &(0x7f00000006c0)={@fda={0x66646185, 0x4, 0x2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/229, 0xe5, 0x0, 0x14}, @fda={0x66646185, 0x2, 0x2, 0xb}}, 0x0}}], 0x50, 0x0, &(0x7f0000000ac0)="1f2776936936fa5e7e71621d79366ec2be42bf47a2dece7dd37ec1093fe28daf62a8f07cae954e42f522e0fcf63c92ab70f48cd2fe35701cfa50c0b1195ca5e9f3eff8eb4797d7522ca35cd769228f98"}) 463.851521ms ago: executing program 5 (id=817): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4044000}, 0x40000e0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x5, 0x7fc, 0x0, 0x5, 0x0, 0xa7, 0xbd, 0x1, 0xa9, 0x4, 0x40, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x5, 0x6, 0xff, 0x0, 0x2, 0x200006}, {0x3fe, 0x9, 0x0, 0xfc, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000100)=0x6, 0x4, 0x4, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r3, 0x29, 0x50, 0x0, &(0x7f00000034c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000240)=ANY=[@ANYBLOB="8c210000020000402505a1a44000010203010902630002010000000904000001020d0000052406000105240000000d240f01000000000000feff0006241a000008072414060004000905810340000000000904010000020d00000904010102020d0000090582021000000000090503020002000000a70ead6ae00259ad4f150c1e5c94c5a6bc360462fe10ef3b47d5a954aef5957cd694095dbdc4e0990c9f64f9b12ec96fb6fc9ec964cde41410bd054c4c5c0427c4aa9b511a0c4c4ec2ac867483013b20ff27e5664497d7a721044d01b34431"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r4, 0x82, 0x14, &(0x7f0000000440)="68656d54f2d82db24ae659358fb7b0b1d06c6c6f") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, 0xffffffffffffffff, 0x8ee46000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001040), 0x2002, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c81, 0xffffffffffffffb6) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {0x7, 0x1}, 0x3, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x5, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 170.231997ms ago: executing program 1 (id=822): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000780)=""/227, 0xe3}], 0x1}, 0xe}], 0x1, 0x40000100, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000000c0)={0x0, 0x7, [0x1, 0x5880000000000000, 0x9, 0x7fffffffffffffff, 0x7, 0x7]}) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000000000000000000000000000000000000000000300000000020000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008401050000000000000000000000000000000000000000003200000000000000ac14140c000000000000000000000000000000000000ff00000000000000000001000000fc020000000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000000000000000000000000000000000000000000001030000000000000000000000000000ff010000000000000000000000000001000000003c00000002000000fe800000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000002b"], 0x23c}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ptrace$getregset(0x4205, r5, 0x1, &(0x7f0000000080)={0x0}) ioctl$BLKRRPART(r2, 0x125f, 0x0) 103.941378ms ago: executing program 1 (id=823): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1003}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) 103.120798ms ago: executing program 1 (id=824): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xc}, @flat=@handle={0x73682a85, 0x101}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 90.597368ms ago: executing program 1 (id=825): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x804, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) 67.649838ms ago: executing program 1 (id=826): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0), 0x5a) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "d2487b822050386f", "4946115b8e1acab11dda0ee7d5239a0ff818a4b776b238dccb81bfd9652cb934", "f728d519", "0cb42238c52f3b48"}, 0x38) sendfile(r1, r2, &(0x7f0000000100)=0x10, 0x8000) (async) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 0s ago: executing program 1 (id=827): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x8, 0x0, &(0x7f0000000040)=[@decrefs], 0x0, 0x0, 0x0}) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x5) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010055, 0x0, 0x200000000000e}]}) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x2, 0x0, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x40, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}]}]}, 0xfc}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, 0x0) bind$can_raw(r10, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@remote, 0x0, 0x0, 0x20, 0x0, [{@initdev}, {@empty}]}}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) kernel console output (not intermixed with test programs): to one day in the future [ 27.420372][ T63] rtc rtc0: __rtc_set_alarm: err=-22 [ 27.446916][ T407] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 27.477243][ T407] rust_binder: Write failure EINVAL in pid:21 [ 27.588713][ T10] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 27.616616][ T10] usb 2-1: config 0 has no interface number 0 [ 27.633523][ T10] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 27.658526][ T10] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 27.670880][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.688473][ T10] usb 2-1: Product: syz [ 27.704082][ T10] usb 2-1: Manufacturer: syz [ 27.712777][ T10] usb 2-1: SerialNumber: syz [ 27.730556][ T10] usb 2-1: config 0 descriptor?? [ 27.742491][ T395] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 27.764799][ T10] usb-storage 2-1:0.20: USB Mass Storage device detected [ 27.784678][ T10] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 27.876269][ T426] tap0: tun_chr_ioctl cmd 1074025675 [ 27.894043][ T426] tap0: persist enabled [ 27.915300][ T426] tap0: tun_chr_ioctl cmd 1074025675 [ 27.945893][ T426] tap0: persist disabled [ 27.985894][ T427] tap0: tun_chr_ioctl cmd 1074025675 [ 27.991261][ T427] tap0: persist disabled [ 28.003928][ T10] scsi host1: usb-storage 2-1:0.20 [ 28.015979][ T426] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 28.041441][ T10] usb 2-1: USB disconnect, device number 2 [ 28.055824][ T426] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 28.074394][ T426] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 28.085949][ T426] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 28.560153][ T446] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 28.560198][ T446] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:37 [ 28.601537][ T449] veth1_macvtap: left promiscuous mode [ 28.968000][ T475] rust_binder: 48: no such ref 1 [ 28.973033][ T475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:48 [ 29.155828][ T341] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.265842][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.336928][ T341] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 29.355804][ T341] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 29.377268][ T341] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 29.395806][ T341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.406034][ T341] usb 2-1: Product: syz [ 29.410255][ T341] usb 2-1: Manufacturer: syz [ 29.425277][ T341] usb 2-1: SerialNumber: syz [ 29.436462][ T341] usb 2-1: config 0 descriptor?? [ 29.445630][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.465785][ T31] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 29.475054][ T470] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 29.482341][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.493691][ T470] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 29.502072][ T31] usb 3-1: config 0 descriptor?? [ 29.718009][ T470] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 29.736072][ T470] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 29.790961][ T480] rust_binder: Error while translating object. [ 29.791018][ T480] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.806176][ T480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 29.866130][ T36] kauditd_printk_skb: 104 callbacks suppressed [ 29.866151][ T36] audit: type=1400 audit(1756957944.870:178): avc: denied { read write } for pid=481 comm="syz.3.46" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 29.945833][ T36] audit: type=1400 audit(1756957944.900:179): avc: denied { open } for pid=481 comm="syz.3.46" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 29.970018][ T487] rust_binder: Error while translating object. [ 29.970076][ T487] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 29.973076][ T31] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 29.987553][ T487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:32 [ 29.997008][ T341] Error reading MAC address [ 30.131419][ T36] audit: type=1400 audit(1756957945.130:180): avc: denied { mounton } for pid=476 comm="syz.2.44" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.154375][ T477] binder: Bad value for 'max' [ 30.167197][ T31] lenovo 0003:17EF:6047.0001: Failed to switch F7/9/11 mode: -71 [ 30.180190][ T31] lenovo 0003:17EF:6047.0001: Failed to switch middle button: -71 [ 30.192747][ T31] lenovo 0003:17EF:6047.0001: Fn-lock setting failed: -71 [ 30.208812][ T31] lenovo 0003:17EF:6047.0001: Sensitivity setting failed: -71 [ 30.224332][ T36] audit: type=1400 audit(1756957945.220:181): avc: denied { create } for pid=493 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.246563][ T31] usb 3-1: USB disconnect, device number 2 [ 30.265914][ T36] audit: type=1400 audit(1756957945.220:182): avc: denied { setopt } for pid=493 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.319465][ T501] FAULT_INJECTION: forcing a failure. [ 30.319465][ T501] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 30.333376][ T501] CPU: 0 UID: 0 PID: 501 Comm: syz.3.52 Not tainted syzkaller #0 ecd017b10525a6fce0a0b730885af6e9bd831db9 [ 30.333411][ T501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 30.333432][ T501] Call Trace: [ 30.333440][ T501] [ 30.333449][ T501] __dump_stack+0x21/0x30 [ 30.333492][ T501] dump_stack_lvl+0x10c/0x190 [ 30.333521][ T501] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.333550][ T501] ? check_stack_object+0x107/0x140 [ 30.333571][ T501] dump_stack+0x19/0x20 [ 30.333598][ T501] should_fail_ex+0x3d9/0x530 [ 30.333629][ T501] should_fail+0xf/0x20 [ 30.333658][ T501] should_fail_usercopy+0x1e/0x30 [ 30.333678][ T501] _copy_from_user+0x22/0xb0 [ 30.333702][ T501] copy_clone_args_from_user+0x1ec/0x6a0 [ 30.333733][ T501] ? __delayed_free_task+0x40/0x40 [ 30.333759][ T501] ? proc_fail_nth_write+0x17e/0x210 [ 30.333790][ T501] ? bpf_lsm_file_permission+0xd/0x20 [ 30.333821][ T501] __se_sys_clone3+0xf2/0x2d0 [ 30.333847][ T501] ? __x64_sys_clone3+0x80/0x80 [ 30.333876][ T501] ? __kasan_check_write+0x18/0x20 [ 30.333905][ T501] ? fput+0x1a5/0x240 [ 30.333943][ T501] ? __kasan_check_read+0x15/0x20 [ 30.333996][ T501] __x64_sys_clone3+0x5f/0x80 [ 30.334027][ T501] x64_sys_call+0x28fc/0x2ee0 [ 30.334059][ T501] do_syscall_64+0x58/0xf0 [ 30.334090][ T501] ? clear_bhb_loop+0x50/0xa0 [ 30.334115][ T501] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.334139][ T501] RIP: 0033:0x7ffa7198ebe9 [ 30.334162][ T501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.334179][ T501] RSP: 002b:00007ffa727a1f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 30.334207][ T501] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007ffa7198ebe9 [ 30.334222][ T501] RDX: 00007ffa727a1f20 RSI: 0000000000000058 RDI: 00007ffa727a1f20 [ 30.334237][ T501] RBP: 00007ffa727a2090 R08: 0000000000000000 R09: 0000000000000058 [ 30.334251][ T501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.334265][ T501] R13: 00007ffa71bc6038 R14: 00007ffa71bc5fa0 R15: 00007ffcd6f07598 [ 30.334284][ T501] [ 30.605952][ T36] audit: type=1400 audit(1756957945.600:183): avc: denied { bind } for pid=505 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.642640][ T36] audit: type=1400 audit(1756957945.640:184): avc: denied { setopt } for pid=507 comm="syz.3.55" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.699056][ T31] usb 2-1: USB disconnect, device number 3 [ 30.797572][ T514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46 [ 30.912039][ T519] rust_binder: Write failure EFAULT in pid:48 [ 30.981606][ T525] FAULT_INJECTION: forcing a failure. [ 30.981606][ T525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 31.016136][ T525] CPU: 1 UID: 0 PID: 525 Comm: syz.2.61 Not tainted syzkaller #0 ecd017b10525a6fce0a0b730885af6e9bd831db9 [ 31.016171][ T525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 31.016184][ T525] Call Trace: [ 31.016190][ T525] [ 31.016199][ T525] __dump_stack+0x21/0x30 [ 31.016235][ T525] dump_stack_lvl+0x10c/0x190 [ 31.016263][ T525] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.016293][ T525] ? check_stack_object+0x12c/0x140 [ 31.016315][ T525] dump_stack+0x19/0x20 [ 31.016341][ T525] should_fail_ex+0x3d9/0x530 [ 31.016374][ T525] should_fail+0xf/0x20 [ 31.016404][ T525] should_fail_usercopy+0x1e/0x30 [ 31.016424][ T525] _copy_from_user+0x22/0xb0 [ 31.016449][ T525] copy_clone_args_from_user+0x58e/0x6a0 [ 31.016480][ T525] ? __delayed_free_task+0x40/0x40 [ 31.016506][ T525] ? proc_fail_nth_write+0x17e/0x210 [ 31.016536][ T525] ? bpf_lsm_file_permission+0xd/0x20 [ 31.016567][ T525] __se_sys_clone3+0xf2/0x2d0 [ 31.016594][ T525] ? __x64_sys_clone3+0x80/0x80 [ 31.016623][ T525] ? __kasan_check_write+0x18/0x20 [ 31.016651][ T525] ? fput+0x1a5/0x240 [ 31.016678][ T525] ? __kasan_check_read+0x15/0x20 [ 31.016708][ T525] __x64_sys_clone3+0x5f/0x80 [ 31.016733][ T525] x64_sys_call+0x28fc/0x2ee0 [ 31.016763][ T525] do_syscall_64+0x58/0xf0 [ 31.016791][ T525] ? clear_bhb_loop+0x50/0xa0 [ 31.016816][ T525] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.016851][ T525] RIP: 0033:0x7fe14eb8ebe9 [ 31.016869][ T525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.016891][ T525] RSP: 002b:00007fe14f9d0f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 31.016914][ T525] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe14eb8ebe9 [ 31.016929][ T525] RDX: 00007fe14f9d0f20 RSI: 0000000000000058 RDI: 00007fe14f9d0f20 [ 31.016943][ T525] RBP: 00007fe14f9d1090 R08: 0000000000000000 R09: 0000000000000058 [ 31.016956][ T525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.016968][ T525] R13: 00007fe14edc6038 R14: 00007fe14edc5fa0 R15: 00007ffcf0d07098 [ 31.016991][ T525] [ 31.247618][ T36] audit: type=1400 audit(1756957946.240:185): avc: denied { execute } for pid=526 comm="syz.2.63" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.275569][ T532] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:54 [ 31.277598][ T36] audit: type=1400 audit(1756957946.280:186): avc: denied { create } for pid=531 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.306413][ T36] audit: type=1400 audit(1756957946.310:187): avc: denied { setopt } for pid=531 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.308762][ T535] netlink: 64 bytes leftover after parsing attributes in process `syz.2.64'. [ 31.336869][ T532] tipc: Started in network mode [ 31.341782][ T532] tipc: Node identity fffffffa, cluster identity 4711 [ 31.352567][ T532] tipc: Node number set to 4294967290 [ 31.415239][ T537] capability: warning: `syz.3.65' uses deprecated v2 capabilities in a way that may be insecure [ 31.717234][ T553] overlayfs: missing 'lowerdir' [ 31.729423][ T555] rust_binder: Write failure EFAULT in pid:36 [ 31.739981][ T553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 31.754932][ T402] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.781017][ T553] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 31.791025][ T553] SELinux: failed to load policy [ 31.806061][ T553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=553 comm=syz.1.71 [ 31.862829][ T566] 9pnet_fd: Insufficient options for proto=fd [ 31.913053][ T478] rust_binder: 563: removing orphan mapping 0:8 [ 31.928268][ T402] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 31.945833][ T402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.954017][ T402] usb 4-1: Product: syz [ 31.958467][ T402] usb 4-1: Manufacturer: syz [ 31.963413][ T402] usb 4-1: SerialNumber: syz [ 32.234810][ T590] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 32.251350][ T590] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 32.260201][ T590] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 32.268369][ T590] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 32.278594][ T402] usb 4-1: Found UVC 0.00 device syz (093a:2476) [ 32.285106][ T402] usb 4-1: No valid video chain found. [ 32.291865][ T402] usb 4-1: USB disconnect, device number 2 [ 32.371772][ T596] tipc: Enabling of bearer rejected, failed to enable media [ 32.380657][ T596] process 'syz.2.85' launched './file0' with NULL argv: empty string added [ 32.706346][ T620] rust_binder: 105: no such ref 0 [ 32.765914][ T621] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 32.928755][ T623] rtc_cmos 00:00: Alarms can be up to one day in the future [ 32.969850][ T633] binder: Bad value for 'max' [ 33.295817][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.450498][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 33.461706][ T10] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 33.469903][ T10] usb 1-1: config 0 has no interface number 0 [ 33.476477][ T10] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 33.486369][ T10] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 33.496334][ T10] usb 1-1: config 0 interface 41 has no altsetting 0 [ 33.504612][ T10] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 33.513754][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.521949][ T10] usb 1-1: Product: syz [ 33.526194][ T10] usb 1-1: Manufacturer: syz [ 33.530811][ T10] usb 1-1: SerialNumber: syz [ 33.536594][ T10] usb 1-1: config 0 descriptor?? [ 33.541905][ T643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 33.549296][ T643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 33.559006][ T645] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.559031][ T645] rust_binder: Read failure Err(EFAULT) in pid:70 [ 33.726494][ T664] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.763478][ T643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 33.771188][ T643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 34.338813][ T684] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 34.346458][ T684] rust_binder: Write failure EINVAL in pid:80 [ 34.386307][ T10] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 34.487941][ T700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.118'. [ 34.586755][ T703] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 34.595801][ T703] overlayfs: missing 'lowerdir' [ 34.874778][ T726] 9pnet_fd: Insufficient options for proto=fd [ 35.025849][ T402] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.065837][ T478] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 35.176925][ T402] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 35.188545][ T402] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 35.199462][ T402] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 35.209247][ T402] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 35.222156][ T402] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 35.231285][ T402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.237061][ T478] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 35.240368][ T402] usb 3-1: config 0 descriptor?? [ 35.253264][ T478] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 35.264404][ T478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.273449][ T478] usb 2-1: config 0 descriptor?? [ 35.278805][ T727] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 35.636090][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 35.636125][ T36] audit: type=1400 audit(1756957950.640:228): avc: denied { remount } for pid=729 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.656378][ T10] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 35.662184][ T36] audit: type=1400 audit(1756957950.640:229): avc: denied { bind } for pid=729 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.673684][ T10] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 35.692648][ T36] audit: type=1400 audit(1756957950.640:230): avc: denied { setattr } for pid=729 comm="syz.3.128" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 35.705322][ T402] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 35.732860][ T478] hid-generic 0003:04F3:0755.0003: unknown main item tag 0x0 [ 35.733487][ T10] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 35.741063][ T478] hid-generic 0003:04F3:0755.0003: unknown main item tag 0x0 [ 35.753583][ T402] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 35.756986][ T478] hid-generic 0003:04F3:0755.0003: unknown main item tag 0x0 [ 35.777827][ T478] hid-generic 0003:04F3:0755.0003: unknown main item tag 0x0 [ 35.778699][ T10] usb 1-1: USB disconnect, device number 2 [ 35.785263][ T478] hid-generic 0003:04F3:0755.0003: unknown main item tag 0x0 [ 35.817129][ T478] hid-generic 0003:04F3:0755.0003: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 35.932128][ T36] audit: type=1400 audit(1756957950.930:231): avc: denied { append } for pid=722 comm="syz.1.127" name="hidraw0" dev="devtmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 35.983237][ T734] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.995601][ T727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.004147][ T727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.170679][ T10] usb 2-1: USB disconnect, device number 5 [ 36.304547][ T36] audit: type=1400 audit(1756957951.300:232): avc: denied { remount } for pid=745 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.337288][ T402] usb 3-1: USB disconnect, device number 3 [ 36.482783][ T36] audit: type=1400 audit(1756957951.480:233): avc: denied { mount } for pid=754 comm="syz.3.134" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 36.483666][ T755] fuse: Bad value for 'user_id' [ 36.509976][ T755] fuse: Bad value for 'user_id' [ 36.520455][ T36] audit: type=1400 audit(1756957951.520:234): avc: denied { sqpoll } for pid=754 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 36.540018][ T36] audit: type=1400 audit(1756957951.520:235): avc: denied { map } for pid=754 comm="syz.3.134" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5644 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.584395][ T36] audit: type=1400 audit(1756957951.520:236): avc: denied { read write } for pid=754 comm="syz.3.134" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5644 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.641012][ T36] audit: type=1400 audit(1756957951.640:237): avc: denied { map } for pid=760 comm="syz.0.136" path="pipe:[6331]" dev="pipefs" ino=6331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 36.679267][ T768] binder: Unknown parameter '' [ 36.794214][ T776] netlink: 140 bytes leftover after parsing attributes in process `syz.3.140'. [ 36.976657][ T778] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.983767][ T778] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.990956][ T778] bridge_slave_0: entered allmulticast mode [ 36.997604][ T778] bridge_slave_0: entered promiscuous mode [ 37.004513][ T778] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.011655][ T778] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.018871][ T778] bridge_slave_1: entered allmulticast mode [ 37.025278][ T778] bridge_slave_1: entered promiscuous mode [ 37.031519][ T13] bridge_slave_1: left allmulticast mode [ 37.037390][ T13] bridge_slave_1: left promiscuous mode [ 37.043181][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.051222][ T13] bridge_slave_0: left allmulticast mode [ 37.059225][ T13] bridge_slave_0: left promiscuous mode [ 37.065430][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.179483][ T13] veth1_macvtap: left promiscuous mode [ 37.185154][ T13] veth0_vlan: left promiscuous mode [ 37.373690][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.380978][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.392093][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.399323][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.429590][ T778] veth0_vlan: entered promiscuous mode [ 37.442738][ T778] veth1_macvtap: entered promiscuous mode [ 37.487999][ T802] rust_binder: Write failure EFAULT in pid:2 [ 37.488065][ T802] rust_binder: Write failure EFAULT in pid:2 [ 37.753678][ T807] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 37.767969][ T807] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 37.776684][ T807] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 37.784711][ T807] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 37.851940][ T814] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 38.214030][ T834] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 38.310139][ T846] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.346400][ T855] FAULT_INJECTION: forcing a failure. [ 38.346400][ T855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.379445][ T855] CPU: 1 UID: 0 PID: 855 Comm: syz.2.164 Not tainted syzkaller #0 ecd017b10525a6fce0a0b730885af6e9bd831db9 [ 38.379487][ T855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 38.379500][ T855] Call Trace: [ 38.379507][ T855] [ 38.379515][ T855] __dump_stack+0x21/0x30 [ 38.379547][ T855] dump_stack_lvl+0x10c/0x190 [ 38.379574][ T855] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.379602][ T855] ? check_stack_object+0x12c/0x140 [ 38.379622][ T855] dump_stack+0x19/0x20 [ 38.379647][ T855] should_fail_ex+0x3d9/0x530 [ 38.379680][ T855] should_fail+0xf/0x20 [ 38.379708][ T855] should_fail_usercopy+0x1e/0x30 [ 38.379728][ T855] _copy_to_user+0x24/0xa0 [ 38.379752][ T855] simple_read_from_buffer+0xed/0x160 [ 38.379780][ T855] proc_fail_nth_read+0x19e/0x210 [ 38.379809][ T855] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 38.379837][ T855] ? bpf_lsm_file_permission+0xd/0x20 [ 38.379865][ T855] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 38.379892][ T855] vfs_read+0x27b/0xb60 [ 38.379910][ T855] ? security_capable+0x7e/0xf0 [ 38.379939][ T855] ? __cfi_vfs_read+0x10/0x10 [ 38.379956][ T855] ? __kasan_check_write+0x18/0x20 [ 38.379986][ T855] ? mutex_lock+0x92/0x1c0 [ 38.380006][ T855] ? __cfi_mutex_lock+0x10/0x10 [ 38.380028][ T855] ? __fget_files+0x2c5/0x340 [ 38.380054][ T855] ksys_read+0x141/0x250 [ 38.380074][ T855] ? __cfi_ksys_read+0x10/0x10 [ 38.380093][ T855] ? __kasan_check_read+0x15/0x20 [ 38.380122][ T855] __x64_sys_read+0x7f/0x90 [ 38.380143][ T855] x64_sys_call+0x2638/0x2ee0 [ 38.380172][ T855] do_syscall_64+0x58/0xf0 [ 38.380201][ T855] ? clear_bhb_loop+0x50/0xa0 [ 38.380226][ T855] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.380248][ T855] RIP: 0033:0x7fe14eb8d5fc [ 38.380265][ T855] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 38.380282][ T855] RSP: 002b:00007fe14f9d1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 38.380305][ T855] RAX: ffffffffffffffda RBX: 00007fe14edc5fa0 RCX: 00007fe14eb8d5fc [ 38.380321][ T855] RDX: 000000000000000f RSI: 00007fe14f9d10a0 RDI: 0000000000000004 [ 38.380335][ T855] RBP: 00007fe14f9d1090 R08: 0000000000000000 R09: 0000000000000000 [ 38.380348][ T855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.380386][ T855] R13: 00007fe14edc6038 R14: 00007fe14edc5fa0 R15: 00007ffcf0d07098 [ 38.380404][ T855] [ 38.461078][ T864] binder: Bad value for 'stats' [ 38.655875][ T869] netlink: 'syz.4.170': attribute type 4 has an invalid length. [ 38.695145][ T873] loop7: detected capacity change from 0 to 7 [ 38.718644][ T875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:169 [ 38.718817][ T871] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.736887][ T478] rust_binder: 0: removing orphan mapping 0:24 [ 38.783119][ T880] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.783157][ T880] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 38.809072][ T880] rust_binder: 18: no such ref 2 [ 38.823495][ T880] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:18 [ 38.833544][ T885] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.956927][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 3 [ 38.973445][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 39.501210][ T902] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 39.501231][ T902] rust_binder: Error while translating object. [ 39.510024][ T902] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.516291][ T902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:176 [ 39.571145][ T908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.183'. [ 39.589794][ T908] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 39.597496][ T908] rust_binder: Write failure EINVAL in pid:180 [ 39.650488][ T913] netlink: 'syz.2.185': attribute type 27 has an invalid length. [ 39.665294][ T913] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 39.673928][ T913] rust_binder: Write failure EINVAL in pid:182 [ 39.761520][ T923] syz.2.189 uses obsolete (PF_INET,SOCK_PACKET) [ 39.783299][ T925] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 39.786894][ T478] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 39.821295][ T478] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 39.921813][ T937] rust_binder: 37: no such ref 1 [ 39.929004][ T937] rust_binder: Write failure EFAULT in pid:37 [ 40.080617][ T942] rust_binder: Error in use_page_slow: ESRCH [ 40.087698][ T942] rust_binder: use_range failure ESRCH [ 40.093850][ T942] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 40.099890][ T942] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 40.108326][ T942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:193 [ 40.118694][ T948] /dev/rnullb0: Can't open blockdev [ 40.186521][ T950] 9p: Unknown uid 00000000004294967295 [ 40.313297][ T950] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:195 [ 40.360518][ T958] netlink: 'syz.2.198': attribute type 4 has an invalid length. [ 40.442961][ T962] rust_binder: 961 RLIMIT_NICE not set [ 40.448350][ T402] rust_binder: 960: removing orphan mapping 0:4248 [ 40.529084][ T967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.201'. [ 40.713098][ T975] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 40.715711][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 40.715730][ T36] audit: type=1400 audit(1756957955.710:272): avc: denied { name_bind } for pid=972 comm="syz.2.204" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 40.769174][ T36] audit: type=1400 audit(1756957955.770:273): avc: denied { read write } for pid=978 comm="syz.4.206" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.792379][ T36] audit: type=1400 audit(1756957955.770:274): avc: denied { open } for pid=978 comm="syz.4.206" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.816001][ T36] audit: type=1400 audit(1756957955.770:275): avc: denied { ioctl } for pid=978 comm="syz.4.206" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.902003][ T36] audit: type=1400 audit(1756957955.900:276): avc: denied { unmount } for pid=778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 40.916964][ T983] mmap: syz.4.208 (983) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.930138][ T36] audit: type=1400 audit(1756957955.920:277): avc: denied { listen } for pid=982 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.953802][ T36] audit: type=1400 audit(1756957955.920:278): avc: denied { bind } for pid=980 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.076549][ T36] audit: type=1400 audit(1756957956.080:279): avc: denied { read } for pid=987 comm="syz.4.210" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.155888][ T402] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 41.307192][ T402] usb 2-1: config 6 has an invalid interface number: 226 but max is 1 [ 41.315735][ T402] usb 2-1: config 6 has an invalid interface number: 12 but max is 1 [ 41.323947][ T402] usb 2-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 41.333870][ T402] usb 2-1: config 6 has no interface number 0 [ 41.340044][ T402] usb 2-1: config 6 has no interface number 1 [ 41.347379][ T402] usb 2-1: config 6 interface 226 altsetting 233 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 41.358678][ T402] usb 2-1: config 6 interface 226 altsetting 233 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 41.385806][ T402] usb 2-1: config 6 interface 226 altsetting 233 bulk endpoint 0xD has invalid maxpacket 64 [ 41.396087][ T402] usb 2-1: config 6 interface 226 altsetting 233 endpoint 0xA has an invalid bInterval 220, changing to 11 [ 41.407753][ T402] usb 2-1: config 6 interface 226 altsetting 233 endpoint 0xA has invalid wMaxPacketSize 0 [ 41.417859][ T402] usb 2-1: config 6 interface 12 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 41.429074][ T402] usb 2-1: config 6 interface 12 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 41.440942][ T402] usb 2-1: config 6 interface 12 altsetting 9 bulk endpoint 0xC has invalid maxpacket 16 [ 41.451074][ T402] usb 2-1: config 6 interface 12 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 41.461875][ T402] usb 2-1: config 6 interface 12 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 41.472891][ T402] usb 2-1: config 6 interface 12 altsetting 9 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 41.483837][ T402] usb 2-1: config 6 interface 12 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 41.495551][ T402] usb 2-1: config 6 interface 12 altsetting 9 endpoint 0x5 has invalid wMaxPacketSize 0 [ 41.505528][ T402] usb 2-1: config 6 interface 12 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 41.516459][ T402] usb 2-1: config 6 interface 226 has no altsetting 0 [ 41.524880][ T402] usb 2-1: config 6 interface 12 has no altsetting 0 [ 41.533263][ T402] usb 2-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=43.66 [ 41.542422][ T402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.550948][ T402] usb 2-1: Product: syz [ 41.555262][ T402] usb 2-1: Manufacturer: ꛔ챨慅듳玥㬱ܴ瀣㨍 [ 41.562137][ T402] usb 2-1: SerialNumber: syz [ 41.568019][ T984] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 41.738857][ T1012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:238 [ 41.776204][ T981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:152 [ 41.791604][ T402] usb 2-1: USB disconnect, device number 6 [ 41.821714][ T1020] rust_binder: 1019 RLIMIT_NICE not set [ 41.874357][ T1026] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.880512][ T1026] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.886702][ T1026] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.893465][ T1026] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.899863][ T1026] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.143094][ T1039] rust_binder: Error in use_page_slow: ESRCH [ 42.155842][ T1039] rust_binder: use_range failure ESRCH [ 42.163051][ T1039] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 42.171957][ T1039] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 42.180173][ T1039] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:128 [ 42.221767][ T36] audit: type=1400 audit(1756957957.220:280): avc: denied { setcheckreqprot } for pid=1040 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 42.251449][ T1041] SELinux: syz.3.228 (1041) set checkreqprot to 1. This is no longer supported. [ 42.260657][ T1042] SELinux: syz.3.228 (1042) set checkreqprot to 1. This is no longer supported. [ 42.270758][ T1041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.228'. [ 42.288633][ T1042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.228'. [ 42.508082][ T1049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 42.527272][ T1049] erspan0: default FDB implementation only supports local addresses [ 43.194957][ T1058] rust_binder: Write failure EFAULT in pid:157 [ 43.196233][ T1058] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 43.210899][ T1058] rust_binder: 157: no such ref 0 [ 43.330749][ T1073] Zero length message leads to an empty skb [ 43.504688][ T36] audit: type=1400 audit(1756957958.500:281): avc: denied { map } for pid=1081 comm="syz.1.242" path="socket:[7981]" dev="sockfs" ino=7981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.545824][ T402] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 43.697069][ T402] usb 4-1: config index 0 descriptor too short (expected 7768, got 18) [ 43.705442][ T402] usb 4-1: config 0 has an invalid interface number: 90 but max is 0 [ 43.713873][ T402] usb 4-1: config 0 has no interface number 0 [ 43.720084][ T402] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 43.729481][ T402] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.738669][ T402] usb 4-1: config 0 descriptor?? [ 43.745265][ T402] ftdi_sio 4-1:0.90: FTDI USB Serial Device converter detected [ 43.755602][ T402] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 43.805821][ T63] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 43.945846][ T63] usb 2-1: device descriptor read/64, error -71 [ 44.205862][ T63] usb 2-1: device descriptor read/64, error -71 [ 44.445848][ T63] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 44.492198][ T1115] rust_binder: 92: no such ref 5 [ 44.497345][ T1115] rust_binder: Write failure EINVAL in pid:92 [ 44.571423][ T1119] tipc: Started in network mode [ 44.582930][ T1119] tipc: Node identity 96f5d6c63b02, cluster identity 4711 [ 44.590487][ T1119] tipc: Enabled bearer , priority 0 [ 44.597404][ T63] usb 2-1: device descriptor read/64, error -71 [ 44.598181][ T1119] syzkaller0: entered promiscuous mode [ 44.609971][ T1119] syzkaller0: entered allmulticast mode [ 44.616881][ T1120] tipc: Resetting bearer [ 44.624675][ T1120] tipc: Disabling bearer [ 44.789495][ T1129] can0: slcan on ttyS3. [ 44.799472][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.806106][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.845899][ T63] usb 2-1: device descriptor read/64, error -71 [ 44.955956][ T63] usb usb2-port1: attempt power cycle [ 45.035883][ T478] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 45.185844][ T478] usb 5-1: Using ep0 maxpacket: 8 [ 45.192461][ T478] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 45.201713][ T478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.210807][ T478] usb 5-1: config 0 descriptor?? [ 45.295966][ T63] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 45.317301][ T63] usb 2-1: device descriptor read/8, error -71 [ 45.447323][ T63] usb 2-1: device descriptor read/8, error -71 [ 45.618913][ T478] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 45.629718][ T478] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 45.640186][ T478] asix 5-1:0.0: probe with driver asix failed with error -32 [ 45.648660][ T478] usb 5-1: USB disconnect, device number 3 [ 45.685958][ T63] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 45.707010][ T63] usb 2-1: device descriptor read/8, error -71 [ 45.837107][ T63] usb 2-1: device descriptor read/8, error -71 [ 45.866618][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 45.866637][ T36] audit: type=1400 audit(1756957960.870:300): avc: denied { append } for pid=1149 comm="syz.2.265" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.867361][ T1150] incfs: Options parsing error. -22 [ 45.902101][ T1150] incfs: mount failed -22 [ 45.945907][ T63] usb usb2-port1: unable to enumerate USB device [ 46.262962][ T63] usb 4-1: USB disconnect, device number 3 [ 46.269545][ T63] ftdi_sio 4-1:0.90: device disconnected [ 46.359467][ T1159] rust_binder: 144: no such ref 2 [ 46.364789][ T1159] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 46.371932][ T1159] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:144 [ 46.845872][ T1131] Bluetooth: hci0: command 0x1003 tx timeout [ 46.855911][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.157860][ T1157] can0 (unregistered): slcan off ttyS3. [ 47.209273][ T63] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 47.365863][ T63] usb 2-1: Using ep0 maxpacket: 32 [ 47.372735][ T63] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 47.381493][ T63] usb 2-1: config 0 has no interface number 0 [ 47.387910][ T63] usb 2-1: config 0 interface 184 has no altsetting 0 [ 47.397035][ T63] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 47.406348][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.414509][ T63] usb 2-1: Product: syz [ 47.419063][ T63] usb 2-1: Manufacturer: syz [ 47.425562][ T63] usb 2-1: SerialNumber: syz [ 47.431659][ T63] usb 2-1: config 0 descriptor?? [ 47.438619][ T63] smsc75xx v1.0.0 [ 47.483141][ T36] audit: type=1400 audit(1756957962.480:301): avc: denied { map } for pid=1203 comm="syz.4.274" path="socket:[9394]" dev="sockfs" ino=9394 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 47.830156][ T1209] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 47.830188][ T1209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:151 [ 47.865641][ T36] audit: type=1400 audit(1756957962.860:302): avc: denied { create } for pid=1210 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 47.866114][ T1211] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 48.353351][ T1219] sit0: entered promiscuous mode [ 48.360151][ T1219] netlink: 'syz.4.279': attribute type 1 has an invalid length. [ 48.368517][ T1219] netlink: 1 bytes leftover after parsing attributes in process `syz.4.279'. [ 48.486836][ T1223] tipc: Enabling of bearer rejected, failed to enable media [ 48.568758][ T1225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.281'. [ 48.578176][ T1225] rust_binder: Error while translating object. [ 48.578218][ T1225] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.584609][ T1225] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:122 [ 48.765539][ T36] audit: type=1400 audit(1756957963.760:303): avc: denied { setopt } for pid=1233 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.795563][ T36] audit: type=1400 audit(1756957963.760:304): avc: denied { write } for pid=1233 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.820856][ T36] audit: type=1400 audit(1756957963.820:305): avc: denied { ioctl } for pid=1239 comm="syz.3.287" path="socket:[9646]" dev="sockfs" ino=9646 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.821300][ T1240] __vm_enough_memory: pid: 1240, comm: syz.3.287, bytes: 18014402804453376 not enough memory for the allocation [ 48.848097][ T1172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.869005][ T1172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.891426][ T63] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 48.906991][ T63] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 48.919791][ T63] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 48.931170][ T63] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 48.941652][ T63] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 48.952418][ T63] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 48.963863][ T63] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 48.976532][ T63] usb 2-1: USB disconnect, device number 11 [ 48.993817][ T36] audit: type=1400 audit(1756957963.990:306): avc: denied { read } for pid=1251 comm="syz.3.289" dev="sockfs" ino=9792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.018771][ T36] audit: type=1400 audit(1756957963.990:307): avc: denied { getattr } for pid=1251 comm="syz.3.289" name="KEY" dev="sockfs" ino=9792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.035832][ T649] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 49.041931][ T36] audit: type=1400 audit(1756957964.010:308): avc: denied { ioctl } for pid=1251 comm="syz.3.289" path="socket:[9792]" dev="sockfs" ino=9792 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.195882][ T649] usb 5-1: Using ep0 maxpacket: 8 [ 49.202624][ T649] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 49.212808][ T649] usb 5-1: config 179 has no interface number 0 [ 49.219806][ T649] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 49.230910][ T649] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 49.242376][ T649] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 49.253677][ T649] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 49.265295][ T649] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 49.278651][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 49.286500][ T649] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 49.296017][ T649] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.305524][ T1238] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 49.457101][ T10] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 49.465642][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.475939][ T10] usb 3-1: config 0 has no interface number 0 [ 49.484372][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 49.493904][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.502285][ T10] usb 3-1: Product: syz [ 49.506629][ T10] usb 3-1: Manufacturer: syz [ 49.511315][ T10] usb 3-1: SerialNumber: syz [ 49.518950][ T10] usb 3-1: config 0 descriptor?? [ 49.540876][ T1268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 49.541393][ T1269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.550244][ T1269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.557580][ T1269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.564310][ T1269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.571026][ T1269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.577780][ T1269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.584519][ T1269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.591418][ T1269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.708289][ T36] audit: type=1400 audit(1756957964.710:309): avc: denied { lock } for pid=1280 comm="syz.1.297" path="socket:[9862]" dev="sockfs" ino=9862 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 49.753842][ T10] usb 3-1: USB disconnect, device number 4 [ 50.055412][ T1289] rust_binder: Write failure EFAULT in pid:183 [ 50.098512][ T1290] rust_binder: Write failure EFAULT in pid:133 [ 50.535957][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 50.696860][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 50.716902][ T31] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 50.727401][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.736726][ T31] usb 3-1: Product: syz [ 50.741118][ T31] usb 3-1: Manufacturer: syz [ 50.746688][ T31] usb 3-1: SerialNumber: syz [ 50.752501][ T31] usb 3-1: config 0 descriptor?? [ 50.961425][ T31] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 51.027051][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.148810][ T1311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=1311 comm=syz.3.307 [ 51.161949][ T1311] netlink: 'syz.3.307': attribute type 4 has an invalid length. [ 51.193169][ T31] usb 3-1: USB disconnect, device number 5 [ 51.381286][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 51.381305][ T36] audit: type=1400 audit(1756957966.380:312): avc: denied { block_suspend } for pid=1317 comm="syz.1.309" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.796639][ T45] usb 5-1: USB disconnect, device number 4 [ 51.796745][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 51.815770][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 52.002501][ T1332] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 52.017817][ T1332] rust_binder: 140: no such ref 1 [ 52.064902][ T1333] rust_binder: 140: no such ref 2 [ 52.079763][ T1333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:140 [ 52.237074][ T1335] binder: Unknown parameter '0xffffffffffffffff' [ 52.289963][ T1339] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 52.331630][ T1344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 52.355831][ T1344] netlink: 'syz.2.317': attribute type 10 has an invalid length. [ 52.377338][ T36] audit: type=1400 audit(1756957967.380:313): avc: denied { getopt } for pid=1346 comm="syz.3.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.455712][ T1349] 9pnet_fd: Insufficient options for proto=fd [ 52.535796][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 52.625819][ T649] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 52.687156][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.697631][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.709078][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 52.718623][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 52.727023][ T10] usb 2-1: SerialNumber: syz [ 52.795791][ T649] usb 3-1: Using ep0 maxpacket: 32 [ 52.802048][ T649] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.813857][ T649] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 52.823211][ T649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.832692][ T1352] netlink: 37 bytes leftover after parsing attributes in process `syz.4.319'. [ 52.836165][ T649] usb 3-1: Product: syz [ 52.846586][ T649] usb 3-1: Manufacturer: syz [ 52.851274][ T649] usb 3-1: SerialNumber: syz [ 52.857219][ T649] usb 3-1: config 0 descriptor?? [ 52.863172][ T649] usb 3-1: bad CDC descriptors [ 52.868279][ T649] usb 3-1: unsupported MDLM descriptors [ 52.932864][ T1355] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 52.932894][ T1355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:149 [ 52.944046][ T10] usb 2-1: 0:2 : does not exist [ 52.960073][ T10] usb 2-1: USB disconnect, device number 12 [ 52.968619][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.064600][ T649] usb 3-1: USB disconnect, device number 6 [ 53.288597][ T36] audit: type=1400 audit(1756957968.290:314): avc: denied { listen } for pid=1359 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.308225][ T36] audit: type=1400 audit(1756957968.290:315): avc: denied { accept } for pid=1359 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.576535][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 53.736906][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.750888][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.761205][ T45] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 53.771221][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 53.779342][ T45] usb 4-1: SerialNumber: syz [ 53.823716][ T1373] veth1: entered allmulticast mode [ 53.832924][ T1373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.327'. [ 53.849597][ T1373] veth1: left allmulticast mode [ 53.884554][ T1377] rust_binder: 154: no such ref 1 [ 53.889833][ T1377] rust_binder: Write failure EFAULT in pid:154 [ 53.988687][ T36] audit: type=1400 audit(1756957968.990:316): avc: denied { associate } for pid=1378 comm="syz.4.329" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 53.989878][ T1382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.329'. [ 54.001676][ T36] audit: type=1400 audit(1756957968.990:317): avc: denied { write } for pid=1378 comm="syz.4.329" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.080919][ T1301] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 54.161712][ T1385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.200108][ T1385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.267179][ T1301] usb 3-1: not running at top speed; connect to a high speed hub [ 54.286356][ T1301] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 54.295167][ T1301] usb 3-1: config 95 has no interface number 0 [ 54.318020][ T1301] usb 3-1: config 95 interface 1 has no altsetting 0 [ 54.337033][ T1301] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 54.346535][ T1301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.354595][ T1301] usb 3-1: Product: syz [ 54.363230][ T1301] usb 3-1: Manufacturer: syz [ 54.374286][ T1301] usb 3-1: SerialNumber: syz [ 54.633332][ T1375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:275 [ 54.651878][ T1301] usb 3-1: USB disconnect, device number 7 [ 54.683879][ T429] udevd[429]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:95.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.340993][ T1403] rust_binder: Write failure EFAULT in pid:277 [ 56.159037][ T36] audit: type=1400 audit(1756957971.160:318): avc: denied { mount } for pid=1409 comm="syz.2.337" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 56.176859][ T1412] binder: Unknown parameter 'memory.numa_stat' [ 56.223584][ T36] audit: type=1400 audit(1756957971.220:319): avc: denied { create } for pid=1416 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 56.354981][ T45] usb 4-1: 0:2 : does not exist [ 56.370546][ T45] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 56.395638][ T45] usb 4-1: USB disconnect, device number 4 [ 56.555817][ T1301] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 56.578976][ T36] audit: type=1400 audit(1756957971.580:320): avc: denied { shutdown } for pid=1429 comm="syz.3.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.683647][ T36] audit: type=1400 audit(1756957971.680:321): avc: denied { getopt } for pid=1429 comm="syz.3.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.741925][ T1301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 56.763759][ T1301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 56.785241][ T1301] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 56.805809][ T1301] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 56.825189][ T1301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.843876][ T1301] usb 3-1: config 0 descriptor?? [ 57.044232][ T1443] cgroup: Name too long [ 57.107896][ T1446] /dev/rnullb0: Can't open blockdev [ 57.198802][ T36] audit: type=1400 audit(1756957972.200:322): avc: denied { setattr } for pid=1449 comm="syz.3.350" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.206445][ T1450] binder: Bad value for 'max' [ 57.235807][ T36] audit: type=1400 audit(1756957972.200:323): avc: denied { write } for pid=1449 comm="syz.3.350" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.269939][ T1301] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 57.275835][ T36] audit: type=1400 audit(1756957972.200:324): avc: denied { open } for pid=1449 comm="syz.3.350" path="/80/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.301757][ T1301] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 57.354421][ T36] audit: type=1400 audit(1756957972.350:325): avc: denied { remount } for pid=1455 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.407598][ T1461] rust_binder: Write failure EFAULT in pid:257 [ 57.519240][ T1469] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:171 [ 57.527778][ T31] usb 3-1: USB disconnect, device number 8 [ 57.555334][ T1301] rust_binder: 0: removing orphan mapping 0:24 [ 57.597191][ T1475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'. [ 57.715875][ T649] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 57.867337][ T649] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 57.878424][ T649] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.888872][ T649] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 57.889471][ T1486] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 57.898105][ T649] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.899154][ T649] usb 4-1: config 0 descriptor?? [ 57.980989][ T36] audit: type=1400 audit(1756957972.980:326): avc: denied { mount } for pid=1487 comm="syz.1.364" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.003118][ T36] audit: type=1400 audit(1756957972.990:327): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.064339][ T36] audit: type=1400 audit(1756957973.060:328): avc: denied { bind } for pid=1496 comm="syz.1.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.123361][ T649] konepure 0003:1E7D:2DBE.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.3-1/input0 [ 58.335830][ T1301] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 58.395819][ T649] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 58.432306][ T36] audit: type=1400 audit(1756957973.430:329): avc: denied { append } for pid=1513 comm="syz.4.372" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.458097][ T1512] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.485798][ T1301] usb 3-1: Using ep0 maxpacket: 32 [ 58.493600][ T1301] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 58.502254][ T1301] usb 3-1: config 0 has no interface number 0 [ 58.509270][ T1301] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 58.519860][ T1301] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 58.531691][ T1301] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 58.540859][ T1301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.548922][ T1301] usb 3-1: Product: syz [ 58.553731][ T1301] usb 3-1: Manufacturer: syz [ 58.558455][ T1301] usb 3-1: SerialNumber: syz [ 58.563954][ T1301] usb 3-1: config 0 descriptor?? [ 58.565831][ T649] usb 2-1: Using ep0 maxpacket: 8 [ 58.570105][ T1495] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 58.575358][ T649] usb 2-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 58.581492][ T1495] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 58.591860][ T649] usb 2-1: New USB device found, idVendor=0403, idProduct=7150, bcdDevice=eb.e0 [ 58.603469][ T1301] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 76:5b:3f:0b:da:49 [ 58.616288][ T649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.632130][ T649] ftdi_sio 2-1:254.0: Ignoring interface reserved for JTAG [ 58.641889][ T1521] rust_binder: Error while translating object. [ 58.641933][ T1521] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.653193][ T1521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:274 [ 58.725848][ T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 58.756703][ T1539] tipc: Enabled bearer , priority 0 [ 58.805700][ T31] usb 3-1: USB disconnect, device number 9 [ 58.812112][ T31] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 58.849884][ T1545] tipc: Disabling bearer [ 58.895840][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 58.902307][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.912927][ T45] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.927887][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.937367][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 58.945412][ T45] usb 5-1: SerialNumber: syz [ 58.955964][ T45] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 58.967105][ T45] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 58.973586][ T45] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 59.188211][ T649] usb 5-1: USB disconnect, device number 5 [ 60.252399][ T1589] mmap: syz.2.384 (1589): VmData 16494592 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 60.425893][ T1606] Invalid ELF header len 1 [ 60.666163][ T1614] 9pnet_fd: Insufficient options for proto=fd [ 60.695808][ T649] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 60.709597][ T1618] rust_binder: Error while translating object. [ 60.709637][ T1618] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 60.715903][ T1618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:205 [ 60.725710][ T1619] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.857045][ T649] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 60.871701][ T649] usb 3-1: config 0 has no interface number 0 [ 60.879512][ T649] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice= 6.17 [ 60.888638][ T649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.896673][ T649] usb 3-1: Product: syz [ 60.900934][ T649] usb 3-1: Manufacturer: syz [ 60.905932][ T649] usb 3-1: SerialNumber: syz [ 60.911322][ T649] usb 3-1: config 0 descriptor?? [ 60.917528][ T649] usb_ehset_test 3-1:0.88: probe with driver usb_ehset_test failed with error -32 [ 60.985813][ T45] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 61.118551][ T1608] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 61.125922][ T1608] rust_binder: 335: no such ref 0 [ 61.131417][ T649] usb 3-1: USB disconnect, device number 10 [ 61.137200][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.147923][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.158788][ T45] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 61.166538][ T1255] usb 2-1: USB disconnect, device number 13 [ 61.174322][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 61.187917][ T45] usb 5-1: SerialNumber: syz [ 61.240960][ T1634] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 61.449127][ T45] usb 5-1: 0:2 : does not exist [ 61.463072][ T45] usb 5-1: unit 4 not found! [ 61.470304][ T45] usb 5-1: USB disconnect, device number 6 [ 61.491160][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 61.534223][ T1647] __vm_enough_memory: pid: 1647, comm: syz.3.406, bytes: 18014402804453376 not enough memory for the allocation [ 61.563672][ T1649] rust_binder: Failed copying into alloc: EFAULT [ 61.563703][ T1649] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 61.570498][ T1649] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 61.580076][ T1649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:296 [ 61.585880][ T1255] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 61.660224][ T1657] veth1: entered allmulticast mode [ 61.665598][ T1657] veth1: left allmulticast mode [ 61.691199][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 61.691221][ T36] audit: type=1400 audit(1756958076.694:342): avc: denied { setcheckreqprot } for pid=1661 comm="syz.2.410" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 61.730219][ T1666] netlink: 256 bytes leftover after parsing attributes in process `syz.2.412'. [ 61.755806][ T1255] usb 2-1: Invalid ep0 maxpacket: 16 [ 61.783037][ T36] audit: type=1400 audit(1756958076.784:343): avc: denied { ioctl } for pid=1667 comm="syz.3.414" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 61.840599][ T1678] binder: Bad value for 'max' [ 61.845510][ T1678] binder: Bad value for 'max' [ 61.850953][ T1678] binder: Bad value for 'max' [ 61.855980][ T1678] binder: Bad value for 'max' [ 61.860866][ T1678] binder: Bad value for 'max' [ 61.865896][ T1678] binder: Bad value for 'max' [ 61.871183][ T1678] binder: Bad value for 'max' [ 61.876640][ T1678] binder: Bad value for 'max' [ 61.881709][ T1678] binder: Bad value for 'max' [ 61.887203][ T1255] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 61.887625][ T1678] binder: Bad value for 'max' [ 61.899696][ T1678] binder: Bad value for 'max' [ 61.904548][ T1678] binder: Bad value for 'max' [ 61.909574][ T1678] binder: Bad value for 'max' [ 61.914364][ T1678] binder: Bad value for 'max' [ 61.919347][ T1678] binder: Bad value for 'max' [ 61.924118][ T1678] binder: Bad value for 'max' [ 61.928951][ T1678] binder: Bad value for 'max' [ 61.933739][ T1678] binder: Bad value for 'max' [ 61.938568][ T1678] binder: Bad value for 'max' [ 61.943720][ T1678] binder: Bad value for 'max' [ 61.948586][ T1678] binder: Bad value for 'max' [ 61.953485][ T1678] binder: Bad value for 'max' [ 61.958390][ T1678] binder: Bad value for 'max' [ 61.963208][ T1678] binder: Bad value for 'max' [ 61.968074][ T1678] binder: Bad value for 'max' [ 61.972872][ T1678] binder: Bad value for 'max' [ 61.978084][ T1678] binder: Bad value for 'max' [ 61.983034][ T1678] binder: Bad value for 'max' [ 61.987862][ T1678] binder: Bad value for 'max' [ 61.992753][ T1678] binder: Bad value for 'max' [ 61.998377][ T1678] binder: Bad value for 'max' [ 62.003711][ T1678] binder: Bad value for 'max' [ 62.008638][ T1678] binder: Bad value for 'max' [ 62.035995][ T1255] usb 2-1: Invalid ep0 maxpacket: 16 [ 62.049304][ T1255] usb usb2-port1: attempt power cycle [ 62.056208][ T1685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.420'. [ 62.228952][ T1701] fuse: Unknown parameter 'r0000000000040000' [ 62.233465][ T1702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.244635][ T36] audit: type=1326 audit(1756958077.244:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1699 comm="syz.4.424" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4f198ebe9 code=0x0 [ 62.250190][ T1702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.289616][ T1703] input: syz1 as /devices/virtual/input/input11 [ 62.297515][ T36] audit: type=1400 audit(1756958077.304:345): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=512 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.303725][ T1703] fuse: Unknown parameter 'ro ' [ 62.320298][ T36] audit: type=1400 audit(1756958077.304:346): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=512 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.349273][ T36] audit: type=1400 audit(1756958077.304:347): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=512 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.393636][ T36] audit: type=1400 audit(1756958077.394:348): avc: denied { remount } for pid=1704 comm="syz.2.426" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.405849][ T1255] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 62.436292][ T1255] usb 2-1: Invalid ep0 maxpacket: 16 [ 62.471654][ T36] audit: type=1400 audit(1756958077.474:349): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.491611][ T36] audit: type=1326 audit(1756958077.484:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1707 comm="syz.2.427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe14eb8ebe9 code=0x0 [ 62.575867][ T1255] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 62.596145][ T1255] usb 2-1: Invalid ep0 maxpacket: 16 [ 62.601639][ T1255] usb usb2-port1: unable to enumerate USB device [ 62.755860][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 62.905814][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 62.912412][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 62.923692][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.936817][ T45] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 62.946926][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.955656][ T45] usb 3-1: config 0 descriptor?? [ 63.363676][ T45] playstation 0003:054C:0DF2.0007: item fetching failed at offset 4/5 [ 63.372323][ T45] playstation 0003:054C:0DF2.0007: Parse failed [ 63.378775][ T45] playstation 0003:054C:0DF2.0007: probe with driver playstation failed with error -22 [ 63.467995][ T1726] binder: Unknown parameter 'fscontext?}' [ 63.549357][ T1734] exFAT-fs (rnullb0): invalid boot record signature [ 63.556158][ T1734] exFAT-fs (rnullb0): failed to read boot sector [ 63.562678][ T1734] exFAT-fs (rnullb0): failed to recognize exfat type [ 63.566499][ T1714] veth1: entered allmulticast mode [ 63.569658][ T36] audit: type=1400 audit(1756958078.574:351): avc: denied { setattr } for pid=1712 comm="syz.2.428" name="/" dev="9p" ino=18230837186159307689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 63.585973][ T1714] veth1: left allmulticast mode [ 63.605228][ T1301] usb 3-1: USB disconnect, device number 11 [ 64.154896][ T1739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.155502][ T1739] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 64.169517][ T1301] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 64.172535][ T1739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.190281][ T1744] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.198050][ T1744] rust_binder: Error in use_page_slow: ESRCH [ 64.204548][ T1744] rust_binder: use_range failure ESRCH [ 64.210956][ T1744] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 64.216621][ T1744] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 64.224616][ T1744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:360 [ 64.263183][ T1751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:367 [ 64.325783][ T1301] usb 5-1: Using ep0 maxpacket: 32 [ 64.341470][ T1301] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 64.350117][ T1301] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 64.359464][ T1301] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 64.369345][ T1301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 64.379256][ T1301] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 64.395443][ T1301] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 64.409033][ T1757] syz.3.442: attempt to access beyond end of device [ 64.409033][ T1757] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 64.422007][ T1301] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 64.424770][ T1757] FAT-fs (loop3): unable to read boot sector [ 64.431521][ T1301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.451041][ T1301] usb 5-1: config 0 descriptor?? [ 64.529536][ T1765] rust_binder: Error while translating object. [ 64.529579][ T1765] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.535882][ T1765] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:357 [ 64.659358][ T1301] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 64.680837][ T1301] usb 5-1: USB disconnect, device number 7 [ 64.689747][ T1301] usblp0: removed [ 64.775531][ T1255] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 64.887712][ T1774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.896397][ T1774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.985900][ T1255] usb 2-1: device descriptor read/64, error -71 [ 65.155877][ T1301] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 65.235897][ T1255] usb 2-1: device descriptor read/64, error -71 [ 65.305852][ T1301] usb 5-1: Using ep0 maxpacket: 32 [ 65.312248][ T1301] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 65.320824][ T1301] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 65.329480][ T1301] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 65.338547][ T1301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 65.348257][ T1301] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 65.357966][ T1301] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 65.371152][ T1301] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 65.380293][ T1301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.389830][ T1301] usb 5-1: config 0 descriptor?? [ 65.475821][ T1255] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 65.605871][ T1255] usb 2-1: device descriptor read/64, error -71 [ 65.797587][ T1301] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 65.806718][ T1786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.809951][ T1301] usb 5-1: USB disconnect, device number 8 [ 65.823807][ T1786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.831819][ T1301] usblp0: removed [ 65.845793][ T1255] usb 2-1: device descriptor read/64, error -71 [ 65.956009][ T1255] usb usb2-port1: attempt power cycle [ 66.152351][ T1792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'. [ 66.295824][ T1255] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 66.316908][ T1255] usb 2-1: device descriptor read/8, error -71 [ 66.446808][ T1255] usb 2-1: device descriptor read/8, error -71 [ 66.685851][ T1255] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 66.707060][ T1255] usb 2-1: device descriptor read/8, error -71 [ 66.836859][ T1255] usb 2-1: device descriptor read/8, error -71 [ 66.871451][ T1815] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=240 sclass=netlink_xfrm_socket pid=1815 comm=syz.4.459 [ 66.934085][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 66.934103][ T36] audit: type=1326 audit(1756958081.934:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1821 comm="syz.4.461" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4f198ebe9 code=0x0 [ 66.946368][ T1255] usb usb2-port1: unable to enumerate USB device [ 67.177617][ T1825] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 67.184847][ T1825] rust_binder: Write failure EINVAL in pid:390 [ 67.445841][ T1255] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 67.605830][ T1255] usb 3-1: Using ep0 maxpacket: 8 [ 67.612525][ T1255] usb 3-1: config 0 has an invalid interface number: 198 but max is 0 [ 67.620827][ T1255] usb 3-1: config 0 has no interface number 0 [ 67.627028][ T1255] usb 3-1: config 0 interface 198 has no altsetting 0 [ 67.634262][ T1255] usb 3-1: New USB device found, idVendor=1208, idProduct=0010, bcdDevice=c2.4d [ 67.643417][ T1255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.652443][ T1255] usb 3-1: config 0 descriptor?? [ 67.658300][ T1255] hub 3-1:0.198: bad descriptor, ignoring hub [ 67.664459][ T1255] hub 3-1:0.198: probe with driver hub failed with error -5 [ 67.678038][ T36] audit: type=1400 audit(1756958082.684:358): avc: denied { rename } for pid=1830 comm="syz.1.465" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 67.772462][ T36] audit: type=1400 audit(1756958082.774:359): avc: denied { mount } for pid=1838 comm="syz.3.468" name="/" dev="configfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 67.795245][ T36] audit: type=1400 audit(1756958082.774:360): avc: denied { search } for pid=1838 comm="syz.3.468" name="/" dev="configfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.818320][ T36] audit: type=1400 audit(1756958082.774:361): avc: denied { read } for pid=1838 comm="syz.3.468" name="/" dev="configfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.840473][ T36] audit: type=1400 audit(1756958082.774:362): avc: denied { open } for pid=1838 comm="syz.3.468" path="/" dev="configfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.864111][ T1840] Invalid logical block size (4) [ 67.947969][ T1849] kvm: kvm [1846]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 67.957052][ T1849] kvm: kvm [1846]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 67.965941][ T649] usb 3-1: USB disconnect, device number 12 [ 68.005803][ T1255] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 68.016742][ T46] bridge_slave_1: left allmulticast mode [ 68.022438][ T46] bridge_slave_1: left promiscuous mode [ 68.028148][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.046250][ T46] bridge_slave_0: left allmulticast mode [ 68.052042][ T46] bridge_slave_0: left promiscuous mode [ 68.065857][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.166944][ T1255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 68.178172][ T1255] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 68.187548][ T1255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.196601][ T1861] rust_binder: Error while translating object. [ 68.196647][ T1861] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 68.202949][ T1861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:377 [ 68.217189][ T46] tipc: Left network mode [ 68.219497][ T1255] usb 2-1: config 0 descriptor?? [ 68.236382][ T1837] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 68.248909][ T46] veth1_macvtap: left promiscuous mode [ 68.254471][ T46] veth0_vlan: left promiscuous mode [ 68.305998][ T1860] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.313124][ T1860] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.320934][ T1860] bridge_slave_0: entered allmulticast mode [ 68.327364][ T1860] bridge_slave_0: entered promiscuous mode [ 68.333915][ T1860] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.341052][ T1860] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.348562][ T1860] bridge_slave_1: entered allmulticast mode [ 68.354870][ T1860] bridge_slave_1: entered promiscuous mode [ 68.401608][ T1866] netlink: 'syz.2.477': attribute type 4 has an invalid length. [ 68.424655][ T1868] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.427841][ T1869] rust_binder: Error in use_page_slow: ESRCH [ 68.434350][ T1869] rust_binder: use_range failure ESRCH [ 68.440441][ T1869] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 68.446037][ T1869] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 68.453932][ T1869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:398 [ 68.455064][ T1860] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.479438][ T1860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.486753][ T1860] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.493881][ T1860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.518395][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.525851][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.535517][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.542631][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.552824][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.559972][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.589466][ T1860] veth0_vlan: entered promiscuous mode [ 68.603264][ T1860] veth1_macvtap: entered promiscuous mode [ 68.626098][ T36] audit: type=1400 audit(1756958083.624:363): avc: denied { mounton } for pid=1860 comm="syz-executor" path="/root/syzkaller.bKRb0L/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.656875][ T1255] hid-generic 0003:04F3:0755.0008: unknown main item tag 0x0 [ 68.673316][ T1255] hid-generic 0003:04F3:0755.0008: unknown main item tag 0x0 [ 68.682807][ T1255] hid-generic 0003:04F3:0755.0008: unknown main item tag 0x0 [ 68.692081][ T1255] hid-generic 0003:04F3:0755.0008: unknown main item tag 0x0 [ 68.699762][ T1255] hid-generic 0003:04F3:0755.0008: unknown main item tag 0x0 [ 68.708268][ T1255] hid-generic 0003:04F3:0755.0008: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 68.736928][ T1255] usb 2-1: USB disconnect, device number 22 [ 68.745349][ T1881] fido_id[1881]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 68.813067][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 68.822931][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 68.972749][ T1891] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 68.972780][ T1891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:380 [ 68.993480][ T36] audit: type=1400 audit(1756958083.994:364): avc: denied { write } for pid=1892 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 69.075857][ T1255] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 69.225784][ T1255] usb 2-1: Using ep0 maxpacket: 32 [ 69.232134][ T1255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.243273][ T1255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.253571][ T1255] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 69.262815][ T1255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.271650][ T1255] usb 2-1: config 0 descriptor?? [ 69.284486][ T1913] /dev/sg0: Can't lookup blockdev [ 69.286482][ T1255] hub 2-1:0.0: USB hub found [ 69.386448][ T1921] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 69.386476][ T1921] rust_binder: Error while translating object. [ 69.395346][ T1921] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 69.401667][ T1921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:407 [ 69.479476][ T1926] rust_binder: 409: no such ref 1 [ 69.531309][ T1927] rust_binder: 1926 RLIMIT_NICE not set [ 69.690202][ T36] audit: type=1400 audit(1756958084.694:365): avc: denied { map } for pid=1882 comm="syz.1.479" path="socket:[14544]" dev="sockfs" ino=14544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.719493][ T1255] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 69.772365][ T1934] rust_binder: 14: no such ref 3 [ 69.780285][ T1934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:14 [ 69.812109][ T1939] rust_binder: Error while translating object. [ 69.813241][ T1940] rust_binder: Error while translating object. [ 69.821333][ T1939] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 69.827646][ T1940] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 69.835183][ T1939] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:18 [ 69.843513][ T1940] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:18 [ 69.892105][ T1944] rust_binder: Write failure EFAULT in pid:23 [ 69.946382][ T1946] Invalid logical block size (4) [ 70.265720][ T1301] rust_binder: 1922: removing orphan mapping 0:4248 [ 70.326322][ T1977] Invalid logical block size (4) [ 70.342396][ T1983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.357219][ T1983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.368737][ T1987] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.370019][ T1987] rust_binder: Error in use_page_slow: ESRCH [ 70.376845][ T1987] rust_binder: use_range failure ESRCH [ 70.383033][ T1987] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 70.389199][ T1987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 70.397936][ T1987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:415 [ 70.436503][ T1990] rust_binder: Write failure EFAULT in pid:428 [ 70.585870][ T2006] netlink: 'syz.3.518': attribute type 4 has an invalid length. [ 70.599999][ T2004] netlink: 'syz.3.518': attribute type 4 has an invalid length. [ 70.705819][ T1301] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 70.865804][ T1301] usb 3-1: Using ep0 maxpacket: 32 [ 70.872174][ T1301] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 70.880653][ T1301] usb 3-1: config 0 has no interface number 0 [ 70.886925][ T1301] usb 3-1: config 0 interface 184 has no altsetting 0 [ 70.895150][ T1301] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 70.904316][ T1301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.912369][ T1301] usb 3-1: Product: syz [ 70.916618][ T1301] usb 3-1: Manufacturer: syz [ 70.921330][ T1301] usb 3-1: SerialNumber: syz [ 70.932753][ T1301] usb 3-1: config 0 descriptor?? [ 70.942834][ T1301] smsc75xx v1.0.0 [ 70.997980][ T2016] Invalid logical block size (4) [ 71.339298][ T1301] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 71.350773][ T1301] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 71.360482][ T1301] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 71.370935][ T1301] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 71.385813][ T63] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 71.485830][ T2028] 9pnet: Could not find request transport: uni; [ 71.486671][ T36] audit: type=1400 audit(1756958086.484:366): avc: denied { mounton } for pid=2027 comm="syz.3.526" path="/143/file0" dev="tmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 71.538351][ T63] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 71.549335][ T63] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.557453][ T63] usb 6-1: Product: syz [ 71.561703][ T63] usb 6-1: Manufacturer: syz [ 71.567185][ T63] usb 6-1: SerialNumber: syz [ 71.636815][ T2039] Invalid logical block size (4) [ 71.711158][ T2048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.533'. [ 71.721157][ T2048] fuse: Bad value for 'fd' [ 71.756007][ T1255] usbhid 2-1:0.0: can't add hid device: -71 [ 71.766668][ T1255] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 71.796503][ T1255] usb 2-1: USB disconnect, device number 23 [ 71.907552][ T2065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:301 [ 71.921961][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 71.978283][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 71.978301][ T36] audit: type=1400 audit(1756958086.984:411): avc: denied { read write } for pid=2066 comm="syz.1.540" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.008139][ T36] audit: type=1400 audit(1756958086.984:412): avc: denied { open } for pid=2066 comm="syz.1.540" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.184281][ T63] rtl8150 6-1:1.0: eth1: rtl8150 is detected [ 72.199024][ T36] audit: type=1400 audit(1756958087.204:413): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 72.220107][ T36] audit: type=1400 audit(1756958087.214:414): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.241363][ T36] audit: type=1400 audit(1756958087.214:415): avc: denied { read } for pid=148 comm="dhcpcd" name="n17" dev="tmpfs" ino=2860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.263413][ T36] audit: type=1400 audit(1756958087.214:416): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=2860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.275815][ T1255] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 72.293513][ T36] audit: type=1400 audit(1756958087.214:417): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=2860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.321965][ T36] audit: type=1400 audit(1756958087.244:418): avc: denied { read } for pid=2071 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.358341][ T36] audit: type=1400 audit(1756958087.244:419): avc: denied { open } for pid=2071 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.383384][ T36] audit: type=1400 audit(1756958087.244:420): avc: denied { getattr } for pid=2071 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.437610][ T341] usb 6-1: USB disconnect, device number 2 [ 72.457216][ T1255] usb 2-1: not running at top speed; connect to a high speed hub [ 72.465875][ T1255] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 72.477175][ T1255] usb 2-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 72.490364][ T1255] usb 2-1: config 1 interface 0 has no altsetting 0 [ 72.501770][ T1255] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.512807][ T1255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.524150][ T1255] usb 2-1: Product: 퓲쉀䯳ᣔ榞㩣눂娖썗┏䧈ⴸ똎嫒蚹㺅듑輸ጌ√訌㔪ૺ껼ד搠ﯩ쒼ꡪ⤻婮坰঵饆潊褨ᑹ東栳宴뙼︊蒊씧㿈㷻辮꺹⾩䆥호꾿宱┛࿋ᕗ閍빪ꬓ㴦巂염ꗵ툖˺ᶜᅈꠎᒬ씠럴쀤丨곸퉂ᰝ䓲澹쯼䯺帑镌抗ギ߱웂偶㊔塵꣼込俸淪⳦闃盲阡秌 [ 72.556231][ T1255] usb 2-1: Manufacturer:   [ 72.565372][ T2068] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 72.978961][ T2118] rust_binder: Error while translating object. [ 72.979011][ T2118] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.985300][ T2118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56 [ 73.323067][ T2126] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.332477][ T2126] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:417 [ 73.516878][ T2133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.552'. [ 73.875150][ T2154] 9pnet_fd: Insufficient options for proto=fd [ 73.965809][ T1131] Bluetooth: hci0: command 0x1003 tx timeout [ 73.966219][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.992332][ T1255] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 74.003558][ T1255] usb 2-1: USB disconnect, device number 24 [ 74.359246][ T10] usb 3-1: USB disconnect, device number 13 [ 74.662617][ T2183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.566'. [ 74.811633][ T2201] fuse: Bad value for 'fd' [ 75.010097][ T2203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 75.019602][ T2203] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 75.220149][ T2208] devpts: called with bogus options [ 75.450183][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.459195][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.468245][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.477405][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.486446][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.495550][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.504813][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.514015][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.523237][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.532770][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.541720][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.550858][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.555800][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 75.559858][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.576234][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.585118][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.594114][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.603305][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.615496][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.632100][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.641362][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.650560][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.661313][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.670602][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.687815][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.697368][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.705820][ T10] usb 3-1: device descriptor read/64, error -71 [ 75.707977][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.721757][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.731056][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.740195][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.749240][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.758450][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.767869][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.777021][ T2237] tipc: Enabling of bearer rejected, failed to enable media [ 75.851051][ T2274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 75.957759][ T10] usb 3-1: device descriptor read/64, error -71 [ 75.973240][ T2276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.982154][ T2276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.195804][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 76.206479][ T1255] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 76.325820][ T10] usb 3-1: device descriptor read/64, error -71 [ 76.356871][ T1255] usb 2-1: config 1 interface 0 altsetting 209 endpoint 0x2 has invalid maxpacket 64, setting to 8 [ 76.368797][ T1255] usb 2-1: config 1 interface 0 has no altsetting 0 [ 76.568171][ T10] usb 3-1: device descriptor read/64, error -71 [ 76.676136][ T10] usb usb3-port1: attempt power cycle [ 76.762850][ T2314] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 76.824575][ T2327] tipc: Enabling of bearer rejected, failed to enable media [ 76.834663][ T2327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.614'. [ 77.035830][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 77.056827][ T10] usb 3-1: device descriptor read/8, error -71 [ 77.187033][ T10] usb 3-1: device descriptor read/8, error -71 [ 77.425814][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 77.446858][ T10] usb 3-1: device descriptor read/8, error -71 [ 77.576836][ T10] usb 3-1: device descriptor read/8, error -71 [ 77.685962][ T10] usb usb3-port1: unable to enumerate USB device [ 77.847949][ T2346] netlink: 44 bytes leftover after parsing attributes in process `syz.3.620'. [ 77.856956][ T2346] netlink: 43 bytes leftover after parsing attributes in process `syz.3.620'. [ 77.865915][ T2346] netlink: 'syz.3.620': attribute type 6 has an invalid length. [ 77.873594][ T2346] netlink: 'syz.3.620': attribute type 5 has an invalid length. [ 77.881301][ T2346] netlink: 43 bytes leftover after parsing attributes in process `syz.3.620'. [ 78.319857][ T36] kauditd_printk_skb: 68 callbacks suppressed [ 78.319876][ T36] audit: type=1400 audit(1756958093.324:489): avc: denied { ioctl } for pid=2348 comm="syz.2.621" path="socket:[17524]" dev="sockfs" ino=17524 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.319910][ T2349] syzkaller0: entered promiscuous mode [ 78.356243][ T2349] syzkaller0: entered allmulticast mode [ 78.442019][ T36] audit: type=1400 audit(1756958093.444:490): avc: denied { mounton } for pid=2357 comm="syz.2.624" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 78.490384][ T36] audit: type=1400 audit(1756958093.494:491): avc: denied { read write } for pid=2360 comm="syz.2.625" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 78.516094][ T36] audit: type=1400 audit(1756958093.494:492): avc: denied { open } for pid=2360 comm="syz.2.625" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 78.552297][ T36] audit: type=1400 audit(1756958093.554:493): avc: denied { connect } for pid=2351 comm="syz.3.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.571962][ T36] audit: type=1400 audit(1756958093.554:494): avc: denied { ioctl } for pid=2351 comm="syz.3.622" path="socket:[17547]" dev="sockfs" ino=17547 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.725838][ T1301] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 78.875806][ T1301] usb 3-1: Using ep0 maxpacket: 16 [ 78.881489][ T1301] usb 3-1: too many configurations: 97, using maximum allowed: 8 [ 78.890240][ T1301] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.900394][ T1301] usb 3-1: config 0 has no interfaces? [ 78.906668][ T1301] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.916913][ T1301] usb 3-1: config 0 has no interfaces? [ 78.923122][ T1301] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.933357][ T1301] usb 3-1: config 0 has no interfaces? [ 78.939677][ T1301] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.949852][ T1301] usb 3-1: config 0 has no interfaces? [ 78.956120][ T1301] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.966271][ T1301] usb 3-1: config 0 has no interfaces? [ 78.973413][ T1255] usb 2-1: New USB device found, idVendor=1e71, idProduct=2020, bcdDevice= 0.40 [ 78.982787][ T1301] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.983185][ T1255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.000482][ T1301] usb 3-1: config 0 has no interfaces? [ 79.001589][ T1255] usb 2-1: Product: 柲ዿꀩ끒뚫锏燣ꙑᩅ剥ㄨ༢をꌀ皉꒧㮖ᯛ⩭㽢▀䭨떫㘆笭貄鍍엇晦⒱犎쓐ڋ冀轋⟽胸眇㚞Ⳟᣫ荃ꖓ䔈鿥蓙㔖씆弣㰇᫧᧡ᰱ퀟⾚虜ㆰ憑딄ᰟ荗뛌䧎茠뚊㜓㣘㜰럙驒늊嵡骭ꢬ⊀Üﻝ䜜赠쟏ࢻ䅼⠢ꛛ帉蒫嗳ﯶ퐧駋舞쭇톮㝄籟햠觲侒糺מ徝虌䭦罾ڭٖ䬷ᯏ [ 79.019164][ T1301] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.045299][ T1255] usb 2-1: can't set config #1, error -71 [ 79.057913][ T1301] usb 3-1: config 0 has no interfaces? [ 79.065400][ T1255] usb 2-1: USB disconnect, device number 25 [ 79.067124][ T1301] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.081235][ T36] audit: type=1400 audit(1756958094.074:495): avc: denied { connect } for pid=2366 comm="syz.1.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.081727][ T1301] usb 3-1: config 0 has no interfaces? [ 79.104848][ T36] audit: type=1400 audit(1756958094.104:496): avc: denied { read write } for pid=2366 comm="syz.1.627" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.133258][ T2361] rust_binder: Error while translating object. [ 79.133316][ T2361] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 79.137219][ T36] audit: type=1400 audit(1756958094.104:497): avc: denied { open } for pid=2366 comm="syz.1.627" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.159926][ T2361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:459 [ 79.175231][ T1301] usb 3-1: string descriptor 0 read error: -71 [ 79.178194][ T36] audit: type=1400 audit(1756958094.104:498): avc: denied { ioctl } for pid=2366 comm="syz.1.627" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x55c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.187807][ T1301] usb 3-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 79.224930][ T1301] usb 3-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 79.234231][ T1301] usb 3-1: config 0 descriptor?? [ 79.239541][ T1301] usb 3-1: can't set config #0, error -71 [ 79.255927][ T1301] usb 3-1: USB disconnect, device number 18 [ 79.310814][ T2376] netlink: 9584 bytes leftover after parsing attributes in process `syz.3.629'. [ 79.746717][ T2378] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.746980][ T2379] rust_binder: Error in use_page_slow: ESRCH [ 79.753540][ T2380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:461 [ 79.753576][ T2379] rust_binder: use_range failure ESRCH [ 79.769033][ T2379] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 79.774753][ T2379] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 79.782716][ T2379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:461 [ 79.876482][ T2387] netlink: 4 bytes leftover after parsing attributes in process `syz.5.632'. [ 79.958252][ T2395] fuse: Bad value for 'fd' [ 80.035878][ T649] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 80.051209][ T2408] Invalid ELF header type: 2 != 1 [ 80.119615][ T2413] capability: warning: `syz.5.642' uses 32-bit capabilities (legacy support in use) [ 80.139679][ T2413] netlink: 'syz.5.642': attribute type 1 has an invalid length. [ 80.215787][ T649] usb 3-1: Using ep0 maxpacket: 16 [ 80.222760][ T649] usb 3-1: config 6 has an invalid interface number: 90 but max is 1 [ 80.235782][ T649] usb 3-1: config 6 has an invalid interface number: 141 but max is 1 [ 80.244010][ T649] usb 3-1: config 6 has no interface number 0 [ 80.255816][ T649] usb 3-1: config 6 has no interface number 1 [ 80.275810][ T649] usb 3-1: config 6 interface 90 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 80.286787][ T649] usb 3-1: config 6 interface 90 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 80.314026][ T649] usb 3-1: config 6 interface 90 altsetting 6 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 80.335788][ T649] usb 3-1: config 6 interface 141 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 80.355780][ T649] usb 3-1: config 6 interface 141 altsetting 2 bulk endpoint 0x9 has invalid maxpacket 16 [ 80.376504][ T649] usb 3-1: config 6 interface 141 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 80.387365][ T649] usb 3-1: config 6 interface 141 altsetting 2 bulk endpoint 0xD has invalid maxpacket 288 [ 80.397451][ T649] usb 3-1: config 6 interface 90 has no altsetting 0 [ 80.404174][ T649] usb 3-1: config 6 interface 141 has no altsetting 0 [ 80.416005][ T649] usb 3-1: New USB device found, idVendor=1b80, idProduct=e397, bcdDevice=ca.d9 [ 80.425135][ T649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.436720][ T2430] 9pnet_fd: Insufficient options for proto=fd [ 80.442918][ T649] usb 3-1: Product: 긔鲪ᱎ慑쫥⭁鼞啇ꁟﱯĶ釨냰蒥坖깤崰賘誇弾붚䟼쒍麁琢൞ᠾ뢓팇鵀꫑ℤ꺅䭝㖑緞틃⿍ꣾ導浂吖ﶋ㥛䜉첼䩛ᨐ㷑ּ鴳ꩡ췕ꐾ쒆ⶼ엔㢒픶鵅䖡劍뎣ࢹ詡悱࣠湃䡚蹬ꂁ徒㎞웹薓쨊ꖭϧ‰⠽啿蟇艫蓽钜훗ᨋ㣌䒂횱笲끰䫣⒪ᵷ롣派괝咍朅㿅㚋谺姍꩙蚅␠ [ 80.495768][ T649] usb 3-1: Manufacturer: 㰌 [ 80.503712][ T649] usb 3-1: SerialNumber:  [ 80.530169][ T2433] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.530209][ T2433] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:360 [ 80.591787][ T2436] binder: Binderfs stats mode cannot be changed during a remount [ 80.726351][ T649] usb 3-1: USB disconnect, device number 19 [ 80.759942][ T2447] rust_binder: Write failure EFAULT in pid:375 [ 81.002437][ T2461] netlink: 300 bytes leftover after parsing attributes in process `syz.3.658'. [ 81.078523][ T2472] netlink: 'syz.3.662': attribute type 4 has an invalid length. [ 81.155013][ T2479] veth1_macvtap: left promiscuous mode [ 81.160793][ T2479] macsec0: entered allmulticast mode [ 81.245956][ T2491] rust_binder: Error in use_page_slow: ESRCH [ 81.245983][ T2491] rust_binder: use_range failure ESRCH [ 81.253893][ T2491] rust_binder: Failed to allocate buffer. len:1072, is_oneway:false [ 81.259755][ T2491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 81.268057][ T2491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:469 [ 81.379151][ T2514] overlay: Unknown parameter 'smackfsroot' [ 81.486182][ T1301] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 81.635803][ T1301] usb 2-1: Using ep0 maxpacket: 32 [ 81.642210][ T1301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.653893][ T1301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.663730][ T1301] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 81.672841][ T1301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.681640][ T1301] usb 2-1: config 0 descriptor?? [ 81.688144][ T1301] hub 2-1:0.0: USB hub found [ 81.888912][ T1301] hub 2-1:0.0: 10 ports detected [ 81.894894][ T1301] hub 2-1:0.0: insufficient power available to use all downstream ports [ 82.337266][ T2558] fuse: Bad value for 'user_id' [ 82.342244][ T2558] fuse: Bad value for 'user_id' [ 82.519112][ T2569] fuseblk: Unknown parameter 'aao/-Ҥ :I:qpޔdlGvق< [ 82.519112][ T2569] ńsFOzn' [ 82.544670][ T2571] __vm_enough_memory: pid: 2571, comm: syz.2.694, bytes: 18014402804453376 not enough memory for the allocation [ 82.927321][ T1301] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 82.933767][ T1301] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 82.942606][ T1301] usbhid 2-1:0.0: can't add hid device: -32 [ 82.948770][ T1301] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 83.070472][ T2579] 9pnet_fd: Insufficient options for proto=fd [ 83.088110][ T2582] /dev/rnullb0: Can't open blockdev [ 83.227113][ T2602] Invalid logical block size (4) [ 83.334514][ T2610] rust_binder: 529: no such ref 3 [ 83.339735][ T2610] rust_binder: Write failure EINVAL in pid:529 [ 83.395523][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 83.395544][ T36] audit: type=1400 audit(1756958098.394:537): avc: denied { read } for pid=2611 comm="syz.5.707" laddr=::ffff:127.0.0.1 lport=20001 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.456249][ T36] audit: type=1326 audit(1756958098.464:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2616 comm="syz.5.709" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9dea18ebe9 code=0x0 [ 83.653804][ T36] audit: type=1400 audit(1756958098.654:539): avc: denied { write } for pid=2633 comm="syz.2.715" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.895784][ T45] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 84.047107][ T45] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 84.058311][ T45] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 84.069091][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 84.075768][ T45] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 84.084891][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.093698][ T45] usb 3-1: config 0 descriptor?? [ 84.099020][ T2634] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 84.308896][ T36] audit: type=1400 audit(1756958099.314:540): avc: denied { append } for pid=2633 comm="syz.2.715" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.338388][ T36] audit: type=1400 audit(1756958099.344:541): avc: denied { map } for pid=2654 comm="syz.1.722" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 84.362143][ T45] usb 3-1: string descriptor 0 read error: -71 [ 84.370257][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 84.376367][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 84.385181][ T45] usb 3-1: USB disconnect, device number 20 [ 84.394915][ T2663] rust_binder: 389: no such ref 1 [ 84.396062][ T10] usb 2-1: USB disconnect, device number 26 [ 84.400971][ T2663] rust_binder: 389: no such ref 1 [ 84.411102][ T2663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:389 [ 84.753112][ T2665] overlayfs: empty lowerdir [ 84.782637][ T36] audit: type=1400 audit(1756958099.784:542): avc: denied { nlmsg_read } for pid=2669 comm="syz.3.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 84.803354][ T36] audit: type=1400 audit(1756958099.784:543): avc: denied { write } for pid=2675 comm="syz.3.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.822970][ T36] audit: type=1400 audit(1756958099.784:544): avc: denied { bind } for pid=2675 comm="syz.3.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.940438][ T2686] bridge_slave_0: left allmulticast mode [ 84.946325][ T2686] bridge_slave_0: left promiscuous mode [ 84.952059][ T2686] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.982068][ T36] audit: type=1400 audit(1773735544.981:545): avc: denied { map } for pid=2692 comm="syz.3.734" path="socket:[17244]" dev="sockfs" ino=17244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 85.014934][ T36] audit: type=1400 audit(1773735545.011:546): avc: denied { listen } for pid=2694 comm="syz.3.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.149020][ T2717] netlink: 100 bytes leftover after parsing attributes in process `syz.1.740'. [ 85.158404][ T2717] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 85.232221][ T2731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=2731 comm=syz.5.746 [ 85.663409][ T2748] /dev/rnullb0: Can't open blockdev [ 85.840325][ T2766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.759'. [ 85.950140][ T2776] cgroup2: Unknown parameter 'devices' [ 85.987680][ T2780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.764'. [ 86.005795][ T1301] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 86.166934][ T1301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 86.176870][ T1301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 86.188074][ T1301] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 86.197286][ T1301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.205550][ T1301] usb 3-1: Product: syz [ 86.210082][ T1301] usb 3-1: Manufacturer: syz [ 86.214779][ T1301] usb 3-1: SerialNumber: syz [ 86.222035][ T1301] usb 3-1: config 0 descriptor?? [ 86.228860][ T1301] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 86.245628][ T2789] fuseblk: Unknown parameter 'groupid' [ 86.336109][ T2797] Invalid logical block size (4) [ 86.373194][ T2804] rust_binder: inc_ref_done called when no active inc_refs [ 86.518965][ T2810] IPv6: NLM_F_CREATE should be specified when creating new route [ 86.536293][ T1301] usb 3-1: USB disconnect, device number 21 [ 86.537006][ T2810] IPv6: NLM_F_REPLACE set, but no existing node found! [ 86.554522][ T429] udevd[429]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.641596][ T2817] netlink: 680 bytes leftover after parsing attributes in process `syz.3.776'. [ 87.330482][ T2840] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.784'. [ 87.356271][ T649] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 87.469302][ T2851] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 87.506952][ T649] usb 3-1: config 1 has an invalid descriptor of length 107, skipping remainder of the config [ 87.525631][ T649] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.540576][ T649] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 87.550103][ T2860] overlayfs: failed to clone upperpath [ 87.550413][ T649] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 87.557739][ T2861] netlink: 'syz.1.789': attribute type 4 has an invalid length. [ 87.563896][ T649] usb 3-1: SerialNumber: syz [ 87.609035][ T2865] 9pnet_fd: Insufficient options for proto=fd [ 87.630922][ T2870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=2870 comm=syz.3.793 [ 87.643663][ T2870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=2870 comm=syz.3.793 [ 87.697727][ T2872] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 87.697779][ T2872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:441 [ 88.151899][ T2884] batadv_slave_1: entered promiscuous mode [ 88.168555][ T2884] batadv_slave_1: left promiscuous mode [ 88.618531][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 88.618551][ T36] audit: type=1400 audit(1773735548.621:575): avc: denied { append } for pid=2894 comm="syz.1.802" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 89.369576][ T36] audit: type=1400 audit(1773735549.371:576): avc: denied { create } for pid=2928 comm="syz.5.814" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.412311][ T36] audit: type=1400 audit(1773735549.371:577): avc: denied { unlink } for pid=1860 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.470463][ T36] audit: type=1400 audit(1773735549.471:578): avc: denied { ioctl } for pid=2918 comm="syz.3.811" path="socket:[18797]" dev="sockfs" ino=18797 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.501518][ T36] audit: type=1400 audit(1773735549.501:579): avc: denied { setopt } for pid=2918 comm="syz.3.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.608974][ T36] audit: type=1400 audit(1773735549.611:580): avc: denied { append } for pid=2939 comm="syz.1.818" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 89.823377][ T2949] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 208, size: 238) [ 89.823419][ T2949] rust_binder: Error while translating object. [ 89.834090][ T2949] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 89.840371][ T2949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:462 [ 89.904828][ T2956] rust_binder: Error while translating object. [ 89.914092][ T2956] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 89.920367][ T2956] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:469 [ 89.943486][ T2958] rust_binder: Write failure EFAULT in pid:471 [ 89.994506][ T36] audit: type=1400 audit(1773735549.991:581): avc: denied { load_policy } for pid=2963 comm="syz.1.827" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 89.994802][ T2964] ------------[ cut here ]------------ [ 90.026565][ T2964] WARNING: CPU: 1 PID: 2964 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 90.036276][ T2964] Modules linked in: [ 90.040392][ T2964] CPU: 1 UID: 0 PID: 2964 Comm: syz.1.827 Not tainted syzkaller #0 ecd017b10525a6fce0a0b730885af6e9bd831db9 [ 90.052046][ T2964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.062227][ T2964] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 90.068463][ T2964] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d d9 43 ee 05 00 0f 85 be 00 00 00 c6 05 cc 43 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 90.088151][ T2964] RSP: 0018:ffffc90002daf580 EFLAGS: 00010246 [ 90.094264][ T2964] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 90.102330][ T2964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90002daf638 [ 90.110396][ T2964] RBP: ffffc90002daf6c0 R08: ffffc90002daf637 R09: 0000000000000000 [ 90.118438][ T2964] R10: ffffc90002daf620 R11: fffff520005b5ec7 R12: ffffc90002daf5c0 [ 90.126488][ T2964] R13: dffffc0000000000 R14: 1ffff920005b5eb4 R15: 0000000000000000 [ 90.134450][ T649] usb 3-1: 0:2 : does not exist [ 90.134586][ T2964] FS: 00007fdb837aa6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 90.147084][ T649] usb 3-1: unit 5 not found! [ 90.148474][ T2964] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.159785][ T2964] CR2: 0000200000001000 CR3: 0000000118458000 CR4: 00000000003526b0 [ 90.168033][ T2964] Call Trace: [ 90.171342][ T2964] [ 90.174298][ T2964] ? vfs_write+0x3c0/0xe80 [ 90.178802][ T2964] ? ksys_write+0x141/0x250 [ 90.179223][ T649] usb 3-1: USB disconnect, device number 22 [ 90.183343][ T2964] ? x64_sys_call+0x271c/0x2ee0 [ 90.183388][ T2964] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 90.199978][ T2964] ? hashtab_init+0xdb/0x1f0 [ 90.204616][ T2964] ___kmalloc_large_node+0xb5/0x250 [ 90.209994][ T2964] ? hashtab_init+0xdb/0x1f0 [ 90.214629][ T2964] __kmalloc_large_node_noprof+0x1e/0xe0 [ 90.220379][ T2964] ? hashtab_init+0xdb/0x1f0 [ 90.225090][ T2964] __kmalloc_noprof+0x26d/0x450 [ 90.230034][ T2964] hashtab_init+0xdb/0x1f0 [ 90.234488][ T2964] ? common_read+0x16d/0x480 [ 90.239205][ T2964] symtab_init+0x44/0x70 [ 90.243493][ T2964] common_read+0x1de/0x480 [ 90.247997][ T2964] ? __cfi_common_read+0x10/0x10 [ 90.252978][ T2964] ? hashtab_init+0x105/0x1f0 [ 90.257757][ T2964] policydb_read+0xaab/0x28c0 [ 90.262481][ T2964] ? kasan_save_alloc_info+0x40/0x50 [ 90.267850][ T2964] ? __cfi_policydb_read+0x10/0x10 [ 90.273005][ T2964] ? security_load_policy+0x128/0x12f0 [ 90.278565][ T2964] security_load_policy+0x162/0x12f0 [ 90.283915][ T2964] ? irqentry_exit+0x4a/0x60 [ 90.288599][ T2964] ? exc_page_fault+0x66/0xc0 [ 90.293337][ T2964] ? asm_exc_page_fault+0x2b/0x30 [ 90.298485][ T2964] ? __cfi_security_load_policy+0x10/0x10 [ 90.304347][ T2964] ? rep_movs_alternative+0x4a/0xa0 [ 90.306803][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 90.309641][ T2964] sel_write_load+0x298/0x5e0 [ 90.330280][ T2964] ? futex_wait+0x29a/0x7a0 [ 90.334826][ T2964] ? __cfi_sel_write_load+0x10/0x10 [ 90.340104][ T2964] ? __cfi_futex_wait+0x10/0x10 [ 90.345004][ T2964] ? bpf_lsm_file_permission+0xd/0x20 [ 90.350530][ T2964] ? __cfi_sel_write_load+0x10/0x10 [ 90.355829][ T2964] vfs_write+0x3c0/0xe80 [ 90.360151][ T2964] ? __cfi_vfs_write+0x10/0x10 [ 90.365048][ T2964] ? __kasan_check_write+0x18/0x20 [ 90.370282][ T2964] ? mutex_lock+0x92/0x1c0 [ 90.374734][ T2964] ? __cfi_mutex_lock+0x10/0x10 [ 90.379641][ T2964] ? __fget_files+0x2c5/0x340 [ 90.384355][ T2964] ksys_write+0x141/0x250 [ 90.388767][ T2964] ? __cfi_ksys_write+0x10/0x10 [ 90.393652][ T2964] ? __kasan_check_write+0x18/0x20 [ 90.398846][ T2964] ? fpregs_restore_userregs+0x11d/0x260 [ 90.404514][ T2964] __x64_sys_write+0x7f/0x90 [ 90.409181][ T2964] x64_sys_call+0x271c/0x2ee0 [ 90.413904][ T2964] do_syscall_64+0x58/0xf0 [ 90.418383][ T2964] ? clear_bhb_loop+0x50/0xa0 [ 90.423097][ T2964] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.429108][ T2964] RIP: 0033:0x7fdb8298ebe9 [ 90.433553][ T2964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.453319][ T2964] RSP: 002b:00007fdb837aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 90.461818][ T2964] RAX: ffffffffffffffda RBX: 00007fdb82bc5fa0 RCX: 00007fdb8298ebe9 [ 90.469872][ T2964] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000005 [ 90.477928][ T2964] RBP: 00007fdb82a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 90.485972][ T2964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.494064][ T2964] R13: 00007fdb82bc6038 R14: 00007fdb82bc5fa0 R15: 00007ffee556e448 [ 90.502128][ T2964] [ 90.505178][ T2964] ---[ end trace 0000000000000000 ]--- [ 90.510924][ T2964] SELinux: failed to load policy