last executing test programs: 22.992183026s ago: executing program 0 (id=101): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7, "b05c83f6"}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc548, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x3f, 0x2, 0x3, 0x1, 0x6, 0x1, {0x9, 0x21, 0x8, 0x7, 0x1, {0x22, 0x43d}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0xa, 0xfe}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x5, 0x5, 0x3, 0x20, 0x6}, 0x0, 0x0}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000000) writev(0xffffffffffffffff, 0x0, 0x0) 22.367067056s ago: executing program 0 (id=106): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x1802, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x183281) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r1], 0x0) 20.71635053s ago: executing program 0 (id=117): r0 = fsopen(&(0x7f0000000040)='gfs2\x00', 0x1) brk(0x689d80000000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x180) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000080)={0x3b, 0x0, 0x0}) sendfile(r1, r1, 0x0, 0x7ffff000) sched_yield() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) 19.794223883s ago: executing program 0 (id=125): r0 = socket(0x10, 0x803, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x189, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x193) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r2) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000500)=""/193, 0xc1}, {&(0x7f0000003040)=""/4109, 0x100d}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000002bc0)=""/118, 0x76}, {&(0x7f0000000600)=""/149, 0x95}, {&(0x7f0000000240)=""/280, 0x118}, {&(0x7f0000002d00)=""/118, 0x76}, {&(0x7f0000000400)=""/53, 0x35}], 0xa}, 0x10}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1008}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) 19.658457315s ago: executing program 0 (id=128): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) munlock(&(0x7f0000151000/0x3000)=nil, 0x3000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x4340, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000080)) pipe(&(0x7f0000000180)) 19.526026565s ago: executing program 0 (id=130): r0 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x57, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832e"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 19.446351152s ago: executing program 32 (id=130): r0 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x57, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832e"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2.60877638s ago: executing program 1 (id=284): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x1f2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000400)='./file1\x00', 0x14587e, 0x0) io_setup(0x3ff, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000740)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x2000000, r0}]) 2.592887011s ago: executing program 1 (id=285): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa, 0xc0, 0x3, [{{0x9, 0x4, 0x0, 0x6a, 0x1, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x80, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0x5, 0x5}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x0, 0x7, 0xb, 0x0, 0xff}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r3, 0x4068aea3, &(0x7f0000000500)={0xd4, 0x0, 0x5}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @request_death], 0x0, 0x0, 0x0}) 1.280895907s ago: executing program 1 (id=299): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) sendto$inet6(r1, &(0x7f0000000a40)="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", 0x595, 0x4, &(0x7f0000000000)={0xa, 0x4e20, 0xfb12, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x3}, 0x1c) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x54c, 0x9cc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x55, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x84, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0xc45}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x6, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0xd3, 0x1, 0x3}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xa1, 0x7b, 0x0, 0x40}, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="05fb000000"], 0x5, [{0x7a, &(0x7f0000000240)=@string={0x7a, 0x3, "5da3eed5a7492bcf3a19e7df5050f49b6f4b17daac2ecc81158679f52ad9f07a7c62b40a232c01f90afc291088841722a09709cb3fef57f3d432d81edf12d65ef8b5d9f169ccfbd91e7958bb464dd55c6da1465a8f4c606941d471bfc28f5c8d975f04c9400a1890167edf234143cf23a0a6494d53569fbf"}}, {0xa3, &(0x7f00000002c0)=@string={0xa3, 0x3, "10380a4881f820a52688426a7498abab92453e4cfe8ff1395575452a8d52d1b08070f383a2bd7ee5c213aa9447c24ed3e0571038169beb21a7d227acdf045b83027abc292dddc3a944772f4c02df2234122edc16af683bc73ea40b34313f010d9a8676a27bb129283f84a0a51ed836d93962c7d66f662ae54b443dc7f721f1cc35c33342ccca20aeaffb870626f173915138a7a6d034e69b64dff76b6e0ef029a2"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2401}}]}) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (rerun: 32) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x4000, 0x100000001}) (async) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) fstat(0xffffffffffffffff, 0x0) unshare(0x22020600) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000001c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) write$bt_hci(r7, 0x0, 0x6) (async, rerun: 64) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r5, &(0x7f0000000200), 0x4001) (rerun: 64) syz_open_dev$hiddev(&(0x7f0000000080), 0x5, 0x6480) close_range(r0, 0xffffffffffffffff, 0x0) 1.186048474s ago: executing program 2 (id=301): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async, rerun: 64) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) (async, rerun: 64) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, r3, 0x0, 0xfffffffffffffbff) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x13, 0x0, 0x0) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) (async, rerun: 32) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000002600)='./binderfs2/custom1\x00') bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xa, r6}, 0x10) sendmmsg$inet6(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000000c0)="d4dff951ee4978de54899790dd6fad72b4ade4e5d2f1a5560e7193d163cc701a196f42e465d43babf7cc8ae62f", 0x2d}, {&(0x7f0000000100)="b64a7425a42fe6254172a82ca89a4e868baebcd6872540e2ae8ee3e9cd46b84c442e9a9050d637a906b0e916729ea6612a53c1e244f389fd853939fcfe3902f46ff84be37e230dcce3cb7bb20e8ea0d742738d2ec1cd72b9a08d2be51258d192c80d235e138d9ccdddfc443a5fc5b2a456f1d24fafd1ed2a09abd3ee4603cb4e879978ef72cd07f9b416b673c4c2c09c8cd15d45f23d195c5330da2334eeff9e0a4029deca19db4c2e42b598074ecf03724e00b2a7", 0xb5}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="7ac582e35cc14a356a8fae203c104cd865bbfb013ae8a366b23c9d6c80c57a9b9964cf53ea3ab1341c10d541bd46e670eceb1ef55d2b0926a5088d90e92ed173489f858adba696c32432d5f954273a0e1b6b96b95d99d55307b688a34d91c891e95cfb2554ade950ce7a8c3ad4db0bd713768e3dda92f5b11ce85f97315a9f03ed4cc6b58740ddbb41b116d3f2a0abbec5c2ff93ab589b866dbf1f9b406d96914a6bb057ee91e8838c28", 0xaa}, {&(0x7f0000002f40)="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", 0x167}, {&(0x7f0000001380)="c8d3fffcf12597fc6cd5950495a94d846b70e08a327e93368c062bc91d347140d5357ba111c5ecda9b79caab18618a880443258c86fab39ef2f02e69f2aecd11b73248f6c04ac9ba6ede8dfbef9225d02e92994705e0013a2c930ddee4bc2d11cf61bc8d03aa7813b5963a384e112d874194ff45143352740cc04d007dccbc31fecb489daf6641b97da2b7de9c4b865a545f9315e2e70318ee2eb54273e61ac354e2d16b31e61aa5b6404b3a2abb70df6a2b56c3a7eded6a331f8a26537186c1bdfc03cfb889c43ab0029ebf164a8985f4e836ef58eb14de3dd82bd522a0e6438527dcefdf4bcc42739ae0520952a52e10dbe06ff77832cc7b67f8515b3c6a3def3cf6ee12454b02faf77fc96790d7c50f266cd450f9db20a0ba665e957e0549a9bf1dcada00f91f7060e236a131aa007db0c771522ead4c72ccd36aae05ae513d8c840247c8abca72e590d927b870cda5628be47c2e0ae855af4b238c3afed5271c2481cb9208592e1fb9f0d91af804e691e3c7d3d0699cd83c7698cbfdd04395ea5f53dbac35ecf9bc2e511895dabf04195a6b76678e1ad5c73d945e5521958435627b6bcb63bb04b2017846810d1baea174bdf786a466b52aad4b80b8bcc5d1d4f390747ef5c134de66bb7bb5b6dfc9e011925d279032b36c3837685f7072052037d69f79dcf8bbd949ca55b9eb4bb9560bb9415eded5a84469f3004490f6d0ce51476fb5d5a3833510ef139a160b7f74bf16239ed611906e356497f18385135b19a5ac91c93385fb416cdf09b042ebe7694c864732d6b9dbf948f0b24c28b4e3819b9b91192b15f3b4c735666b0fa295dba51b75c94d22003e0546560e39a0a45f7c09132a76beeab3e0ccdabe694608a756ff5ec8945f5ae9d7244a5bcd396232f48dc0ab0415a3e78efa5685d586ba77e64d8f4b28dc272521ffe6a791f24c0f1bb63f22fcf862c22d2684254f271d7d685c6c05904f1190e5347392dc7d6a2e77676f9a59fcf063fc5cad40fe59d11907c4c7f2028281dee48737e7b5ab127ec0f89ee00ed46a4ad483efb9c4d299361abea392cb26711bbdb1707d402e8bc13ca05c049415f47e93ae7123fb222691f8345c2008c20e5c6360995bd3088343789fe8d987132f2d4baf2177786d494b7190c06f060bb0d0640dc54c366ac8d64998528aa6709a2d029a95e05c0394527814cd5e94920e450f04a0a45b4c9883eeeb6677c344a2caa5951d1c1e600d78af75e434cb312449495fd223682864d28156f87e39f541908a08ce4ad97e01d385223a0c1dd1e80d9694a8a7c3610abdbeaef959be0e6c014dd970b34cf47d318c49c02877ab44854f67255a4d6c4b9e48fa65c534af080269002c78786e60320248d00c739672892ef92df0d5e9b825f5b4fab3ebbeb0d3f77a62f7ebce057ef52887b8b5d512ffa92aa5843ef93415a1e5215f977e28e9613ebe8b2be1a248b9c344c2babfc33ffe4c6b36f5cf15b706772a1e54e629c9d718177925b41916a0a0301a8df34b6796ab1f947c98a520ebeb6db82bdf547b261df811058c758118a8762732ebd98d2e472b8cb12b55dcc12ee971e1caa3fd58a91bac23cf0bafa78dc17808317a07619719a32f7a79b225403f18b9c6729128520f150f4f92b058c889ce3815ef89813c54f6ffbcff9c6f163c65221185b043fdffb749593cb0d83377477cbe4c7147a4e8a954f153fa3aa07437e7625f24522a268ea15613a19ea7c3f9258e98e026b45bf9b1daa154bfc3f3d521177e0183847f02778f619e7284ff239013e4d1d3dd21f4e938de2034354b83b1179840262e50f5ab5c779c710eebb2aea80f0e1dd5d09b0996101aaf295d9ebfaa22bf9cac8d6a8fc7e81d7bce692ca0d6c50d510fffcc253832da0f3e803eeff83e20eb8564e36616cec0de8e7e38df9cfb112c969a393f904db22175ac0b3d26696d3ca06b26aed8bc4d111e4ff133ef27065ef205eeb4a713844f8f66498b385fc5b6830e911179c5ea42e5af45236a96d79eee9e4580d826db48ab52303fd343f224161db1fa940f78b03d74d1f8305795b5e4a15a03e2dc2a9b3fab3b8c1f89f20764c00609626a036f1fd43f680baba884254e8eb7052895f89726fdef661f23e9f4fe3478b3ae2677facf10a6092414952b2c4363824d1f4c6cdebd31fc1431ab44916ee866696a6af55ec22ff59de7a74b899d62f7fbbf97d6d41f62b7aa780e494e490969c912628035d134323351b8ca9d625448ecddd1768155eb50aabc88b306ea9b2bb6270296f7351401f7e84a900aa3dd9b2b70a500ed15b707855d4feb22c61ae2d90775663767ca006668baa8d761f6c48fc3c43b3ca3d85db9ff1f756c2ba2cdbdb3247fa9f43dd7a0f570d6188a2ab799b0d6af9eda2578e5bcf49700a4d1f5593f83bfd3851b1860713950a2cfdc4f70d1a79aae569b9b2eaf3fd090c4290f9283b75db7b46c0627eb892107f08082148f43ae378d06db9dd4fa933b5dde49b6815d81665e12def0a0603eebfef177501e3cb45ff2222cba681194e2769ca0322553c4b45b7c7e6e5bd593ede65f3c60a40ade2c45258e1af011ced92af3769899675bd0f9aefb98d12d6a430024aabe88d6555556e8b233b6d637cc14f2b5e75f62d1991269cf227e9aa9a7ef22794beb5d4d19a94dac421d169a85b6ff54389d7f90b29cbec616a33320862b5c2bfd8830d304f711edbf031547136628dee10b912e67dd7a9d6b0a0e1e429163d5a7ccf2a5be98ec7bf78b7bd5b97fa1f977783f54e87d77218912538fd040351fa77bb430ca10ab85869d12a47651a7999d81eff68be245c3a28da245be456b3c94e1131ea643ecccccdd6e97b21869456d5675f3f45bf89db23cc299d9bb350525ff2db0b2a53155d015b77defe59200f0015bb185582379c16f4cb2efe65978cbce65feff407a067175c0969af748ca3fd0c4de1e9551d0369e15605c90301c0b90318d58c060cd1e81c52c9fbcb3d2d03683a666fc600dc7c8e2037a30963fd534cc408fca0e7d01cdc22b1890568ce4b6e0bb10499feb93ea689f38e8adfb14d07454b01554683f24ed81699094263e5f0966a43929453e78cdb2aa68af15bcb2811384532d255af3be1509ddbc1afdaa62eadbd29ae364411c8578971acc6a1d782d699f85fc7ed9fe7555eb220e271de1ec98951112ee4046e9056d15365d62bd2c9a6340fec2c1030e70611329f0b861bc13e31a8cc13cb48722dcd003f6440613ce19d3de59a7d4c33eabb18f44a9bf0135cdbe92c70a655a4ccc3503d2979b0a0720f45229013fdd7718f5ebfc832b1db36c47a1f1fa96c8861a7a5c59837ffc6c2570eea5313251bd3adae79e681297ec6a9e516e7ebfb12a913303f10deae29888281b75d95dc57917d1c86529f8809b0c497dd9d761af1178ccb730ee950d0035d7b9dba5b842ca2c5e46957b2b454d5e10ec396c8f30818d3a53ae14b55ebd8dec5dfc15af9ac69c1e97751f841a25ed2350a3f59d65042c5708055af87c93287fdc017adca23c78ec536ae9ad2bc927669ba0b1f984a0b2171f9757f0e6e4a983d015038859502e4cf642ee9125091401ab09d0e045a0d437baf5e35e2055ff5f11183c116d06c3d6477b3599ee91453a5df0ac36a50373cb590af9da8911e1534430d9aedcabf366d385c18d26ed4ce496dfcb46fe22e35589cc0fa2d2609f38137f609249e1f060e7b3cf76745765c2232b68cb0c0cf340ffe6cb18c43d1dbf6f6625fcaf96bd9223044dbe6f3bbc02ea8ac28b4cabd3909c97cb28f8c11612baf39a6efba759420b88f4cdb4a251060d58f00614d3fa4969d7c6098305ae2c2e6dff982fec34600b8931ba1b5b1e9ab325df182acb5ddcf3cb415f13e5346b251e6520b5f55bb83bbee61609c5331313c76a1a148ae9740023de3d5e401d90a5c08d32631435d8557fa0be951f0defc149e2b532c1ff4308a9c3021578373a5b9ec7e5ea235dee356558cd39f2f0e3c35234c28a0521904064f362028e1642b936ee228c902582f276ece6721f23f3418576c3b449c02ac43542ee28892d4ba658e2dab660350c46422dccb5b67a2cf94f33e7b526b1f3572cbae2458d2b431ccaff2b09b8be8284a9a5cc4e92fbb08779cc7f487cccc064bba057c6902f0e2bebca9f0365a1be8c20c2e8db6408b803b58962f51621b69c8e07f03ad91340ab3f8b41c34fade1e7d2e95ef5eda3ff9aac2db0c3c020385119731452a483390f8c82a492419c26421cc4c1fb1f2fb145fc7f15322ec112e92a54f3163f9cedefb97face541e82f097c4e238bbc5009ca1150bdb4f14f88876934ff7b220c6aecd7f87d7ccedf97b8282dde27039c88dd503c2dea167a65f3905ed5616272cde43e2fd7fe03f174fa29121e2c2af4b2e26b3073c23fa745194a66d2ca1ca2f408440dcf13e296b76db2c667f83d8ad8557738287b8a97f00229a04d21b4168c453661a1ed79fcf86e8cc5a9738ac88833c901a42e7d83178d7e832fde2fe540e06128a82a3ce39f452649c6441374c6edf731c9c2e7bb2b8b9cc295497b9c1b386347d344e57609696b057b489f9c366b130a984eb78fadc8b3eaae9b13ad1366bfa9dd478053443d9ed8e3500ea66dc4d118cf4f65d139bd0d45bc821132e9a4df6b7bbc8c70cd9bdef808966845aa45dfbf947fe08a5207cf85d2283ae87e77caaa7faae9525b11b923505a99bcbf90cbef2348daabd362f98741c45b6fc1a64271f12246cfb624daa6679a947685944f594361e877f198d867705f49bb9a736f9e9488f817fdc4ba08fbf2d80b643debfa3f9113269f6030b5dcdf2f77e6771c5c224bd879cd565af7da401198d9df7af9eca70f093c5d62efc8378acd82be22eb8d355300758d7964f54e022227c55624dcf2eb67a7d587147150725e1a1fd0d2e829f8f4016eb968774bc4a7966b6b4afdf9f6d9ce35244e4a0973e3b8006a3e14500d3914566e80394197c3358c323ff1591440b7ffddf69e73801cd2598e711c34f1245e5980f520208bc9359f2e426091dd420d5ca2ce33e2a9a9f1e9d12182e42dc17124f12e7ac0cc39832ba57b6e40cb21a47485ce76f4ded2cc4c136f8265e400edf026bb8261f30db4be2658a41fe459b8e179cdbda73781653e13fc3e844a18806ee7fcf32daf5386acc42d5285d8809f66f9ba831efe43f83b3668770e70aadfc78e0fdce07bb75437b3494739c63e6d5db430593cb2df7d180e51f8ef988404666f811bf22c3dafedef96aeccdd991ac0f44c2f11f1f62b6cd32637bf88a2d45a9cee0caeda4ab49157f84d73c1e9f62b0e078a2c6150edcccd0d3876f6ef485afacdc1d5d2fb1681010f6c91d324c792da9d5f6827d7a496b5db6a2e3db385de48a43bb1e8470ac98a573403ef1caffb1c153f9bbca70199e702874608e7ac79611e17d27ee01404f369703a74da8a240e9fc98d6edf9f42d482c2ee940f5f434c681f849b4c969e65e2bfe7371ebefa35e33e9393ddb19329a1143090b2f496d9816425ece2c745fda77c1e0f9c1f50f3b9242d152ecb505644d83bd83392598949151cdbbed4c32b59b051ba440cd94ecfd3384f3d5e97a8a56c8e087d6347031ccbeeb33873cc7152b3e0678a1cddcedfe065aec6b11f8b831ea6e4da5ed5c8f03e071d5533166713b74ae62703050f78ce3c25c1c2d0ee7a4426ec8e3f5122e9479cc53b2f67c6b9b4477f324caa4ac2044ca254ba396d8f44c09249b241f7cfec618a4e9dfbba92ce5596e489", 0x1000}, {&(0x7f0000002380)="f4ad100366db9c72812cf7f08a68649461034352136de4e4fc7d20d61cd0c7ac288ab536e07f4308b97d738831f8a448e16050a36cd282c6dbd72f4b0f3c39ebdc9fa16da5250f8116b00b96783ff05503ca5dc97ce0d68933f2739e0e97650c630dceddcb9966808ba9e080c0107e6d79f067985a70cbc484a35d7ca81827ff3ef3efa70ae732adbf9552a7343394d130c74603fb84ef4cc551e7c15edc15c0c30270187687c8afd6fdf9e8f803d9c10c90b93472754cde09f6", 0xba}, {&(0x7f0000002440)="578f4b0e3d4b1591697fde2228f5c5ee9114ec584af479f8751a36b40b6459ebf4817b25fa7b42543db8bea94dcb8499bb2c65b531895142a9cf1c5b215aac09", 0x40}, {&(0x7f0000002480)="e1dd57b6bb7021f25156f76b3f25fcff68cef8c495bed4e9e54315ee1c996feec0c353301fe0", 0x26}, {&(0x7f0000001280)="f26c6831179d8881fa86ccb8e28fb09a8da23b1b0b9504b00838f53921adecf5198ab42958e0759cc4e6ac37307d448506cdba9194542ff1c0715e6263e25dd03bd91f176fb57cdfe2ede3e2bf03d7ba00836aa5cfb048fae7d0", 0x5a}], 0xa, &(0x7f0000002dc0)=ANY=[@ANYBLOB="24000000000000002900000032000000fc000000000000000000000000000001", @ANYRES32=r6, @ANYBLOB="0000000014000000000000002900000008000000050000000000000098000000000000002900000039000000111002a500000000fe00000000000000000000000000002300000000000000000000000000000001fe8000000000000000200000000000aafe8000000000000000000000000000bbff010000000000000000000000000001fc010000000000000000000000000000fe8000000000000000000000000000aafc0200000000000000000000000000014758fb9efd435d11d1babbea66e4bb7b2806a3a7a331c756eebbfb057396e68d21ddbffbf43a6b0726d56af0061714ed985110f9ad62b50f176a9724aafc201313c6f8b2fb407a2ebb4c10c0e769f0feae3b63eba07823b1fd95481cb72252b1fae857136800353875afb8521d23828e8a1d64593a71dc604c2d2b3b78d439b579dbd739f5023bcc8284d892214e090c6d870ba9"], 0xd8}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002700)="5e85889ddaa28f976dee1206f998252634f92acc3c27e907c565c97f2855c6623fb78a1eede9c9bbe352039815a7c238f985d218f95a58a2d185fc01a24842090c31fa3b9edd545eb4ed3d14c3fe0d53d70918b391c575a215498b303285b0a47e245b3c87d67c10276cd6bcfca597509c7f56bbe38b9e6eb26ae5d8da0a3acf00e9c20826090578ebea19acaae0ffc84fe13a5d1f1cd645a2dfdbe9ab0985fb4182fbb5250aa246e546c3304f6070a86409fbc657365e7ad3373b57b758c0c2b8733d60d9e10c8be784ebd8754282fd0aaf63769898c9a49cf92357cf7e62a192e9d351862181f99895e649", 0xec}, {&(0x7f0000002800)="595db7ea1410e592bf4e931b6384fb2af97ab2665dd63f90a138a18effd72a04e0846ee48c0f972fa15f8fc624ee21833d01a4546ffc6d52fa68201ab7f8f119ec28df35d7a4aeab8d36", 0x4a}, {&(0x7f0000002880)="7133f151370c44b6cb5cedbea9ab50f3e2ffc511ee02522d69d2aa25fcaf038faa411ceb6ccb21884b2186a7decabbbb246b3d02054c614febc3d3004a053773106faf6de2fd89f771bd4592fded95aad38c458973694b35dd87ed291d5e2ae632a272d964db3bd26efa8012c8d2a8868b77566a9650f0eb40181c7a8b5f993c6b02f0ed84b9fdaeffb628ebcef0fe47d8625ae12a20e1167260601f9e6e457faaae7f8838b094fbe5d90072cb0439a658b4d51691191b19d55dc1", 0xbb}, {&(0x7f0000002940)="c9aa40a1ac56f3a968e03a524867ce85ac3f8ed2032d009701e8724498f1ddf2396e6f97ed696bb66c7fed792b096e1097dcb4cbe868ab661a0ddbe686e6cfc330d54d6c702d23a7a053f601d3d578340cb5b16ba8fa80c8eefa5a740f7c72fcb22ef8bbeb2397779f2ccff9", 0x6c}, {&(0x7f00000029c0)="0eb5fc28cf6850e496975eaf34294c0ca849e4", 0x13}, {&(0x7f0000002a00)="7cb9906b4f38b57fb6534d9e4c1bd2a8a9f2b5168251ca5f1617faef37f3159551ba6da4e91231e6a1175b73eee440f64ae27d8fcc97e39d955c5303da0b3c1cd58ff28d78c2bd2844e6611b96e203528c6cda75e03a9e24db55b3c8d85113325acbed29082077d94b0ab81bf060a977ce69720db317bb1fa252a7eee4afdeb016998ccf412378a4a71ee99c190ab14a1160ef6fbf1698cc1c9e0adc63984f94bca03ef8dbca7ecf7f76c8cbafb1f294f818cf2d0517b61ec7039268665a176d7b517eb7a02f5de01e7bb50ccb", 0xcd}, {&(0x7f0000002b00)="cee50ebcb03989c12169809791b0dc6423ade625c439eb16471e00fc8959fd9b70927c03aec4fe9bc9a7da33a41eac0d6af5380694cc012e926d266042d62ad8f65cef670ffee442b5592e090f800c23dfb5376ce2df3e8808c168edd236b92784540d9b0ebcbd56e2511beb1d30002b62150305dbee1e8a7c60180f2846493e2122f041793c96bd73491dd52b069170358af5d1e69d7f3022c8ea5e9c65979ca5c41622078f0da1f7aa359e4d93d282dcaaa5447cae97cee775fa2d795c064847678a780f59", 0xc6}, {&(0x7f0000002c00)="06b726081bfb9fcecb5d9d6f753e839b0c9d51b5c6f230bedc82546a3b2a9e6deebb47755e307acca8adca13de1729e9", 0x30}, {&(0x7f0000002c40)="c11b302dfe946d988dfef134068a445f4d6ca2eeb9774deef60381f090a615c02564b40a65baaece9808d1dcf43a586f6b2147660726fefb", 0x38}], 0x9}}], 0x2, 0x20000085) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async) fadvise64(r7, 0x6b, 0x4000000000f7c, 0x4) 1.178727935s ago: executing program 2 (id=302): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000580)="07b1ee9d249302bd40ca0444c9581b3de7bddfc6da6a04c73c2662c0642d5e44bcdde4f7c8d4d82b339433adaba6391d4c9275493ce9971627bcb9a8b74394c5edb4dd04b12759e56e2f164f42b3c0295cd78961fee40738f068b9ac35ab97e2b584c3a2371cb09240239392abf94c059dcc6062bc502d3f29f659fe6031b6b3dfd25da19475e2a338cc0f589cae37edbf662fa507278003317a0dbdf4220632a9acff3f923a9c1bb3d5bfc8b1ab4c11713d0e9ca09cd06c947ad691af8b7d044febd12d68a96fa637be8195e50e2fa20b75c06d2c5b950aa5bc633e3fc8158fce8e0459daeccf344823fc636f039e54ff5c5f0063a082f68938a6923a5d2df85f202eb320c2f6d2fd4fa2bfd08ffcdd1b792db8577bf6e6fcf34ee8437b9fc731a36efee6c704185fe1f0c62a5d63bdf1477ac5b88ff1cefe583db6d00206284e87d3f450e29c285805b4feb24548570dac5abd7947f014ea6b1a8c5bb94634ea503e94752805af9955dc66e007968c8ab5671f03040ab0fefcb4172f04dfa2f3aa80b9f3487e576b183c98d2a2a45349a9f34d1dcedb1a49a022066e7ef8678894ca659729fe3183727785cbcfcade666d6baebcbda0cf9ea07f7849115aa00e3838bcf3af64694871fcd57f73bbebdf4fedcf4d82d29a41ced6df07bef8633e4c4606e57463887e376bb75268103e62e8cda17a5c4dba5049a87ae49e3141d4ea36476a69931047a7ab0edcbf377d9b92e521ac4cecb99affb0617257daa2b87c65acc7dc8bfd34a0cbe2c7f7dcfc6064c8895912676876c0f66c90df21434baf990dc331d9670e65c1279c11941d0f15d82bcbbc2a3b7b35e2364310415009fc497e517c0431dfeeafe3e477f72df2ca1619ff7af042d5fc1640943f4b52696eac2ff4db2f3d4432aa5fbd68212b3568f3bda38b5ea51324c0f4dc6767920727aea47477b44a4a5ff064b92fa8543f11f5c8499e62ef993c1eac3162b17f632a0fa3ca6c50e0f332322b729516f86d6f9af40d21ee8d5fa26f5c0636279bbe3cf0824530250b665126738d3fabb8c96df24d2d657794038bf45fda599bbaeb612760db177700900f12592530afa27fe386d7e43ad5288b1e385b9a5ac486696cbf4dcb1cf324781b95956fa2fae51778e991085ce731b998df0baadc87ab8a64bea2752846af8c7223666f2e3421a0aab0fcad462762a0b5f8fc84c909f43e3dc9f9edc28f288b1ef5b3c540ee5cc936b4a0f9476201242dd7f35e843f29d160c8fce003925023c5c3409ef7fc3d9ae43364bfe5a92d9682e87a62c49070b2085d439f40b4b7abc822733925be753e61e427eb658c9eb564ec4b1e006492a57ea56af14f4dfc4576a2ffb3c8ee3b35ca4913a7d41d4fdca7496130513809a2ed298e3c8b7859a59c3b42ffab897145b1890e50214a6fac895795f186a7334c93d289772c97fb077a11bf2ea43801275610e31e7be616a10f885b6b80d1bedab79f7a8648a41e9987f3b8ce5646a3d6573b0dd09db734f34efa9c53680538325e7fcf066be56568244f3274bb1be994580639fec3e397f934ec0805a170080bd7f11a6641566f0a4cc4d5bcbc47a486235e7645da7b29273b7f680ba0e2a7d92fe37c7d854597a2ef109eeb3b819f8e99ea220e476b08101a325320c03b47ed34f1f796984cb89357aa858bf7e19f868b332900c97b2fec8eff66837b75c77288e035a3f0966b8d6547d1c3162d565cbb97a5e5e29123f85bb6373eff1a58aae1fa3eeed7126281870707ca517d6d7295abcd1a9b318c7e669018a9673d9198f355fe85046b94ce9ced10c599dae644425c1b27d91b313825274222e0249b2b37f9db506e5cd948d43bfaf081783e2e75abac9b75d604c009e4faeef6f204e0c7d9813df6a91e851ac288dcfe21cfa624abac357e00e8f15c84298c0f75064bbbb8e15076c473a60b8e1238b544efeb92aed5553c69e28d42a75e2f8043b11146712a9338fff445bdd0ef0a0585fa1fc3c0ebd864b6fe2f82fbbb7b72e60c044c3c604a55f7f77b3381a18254e1dcf29d319f3dbefbed6d8c532f4f95eb1fdd4f8421eb8ff1074de242c4a672d83ffe2628da7d05f2ba996559a6560240ffb725b877a87732b5e9bc9c552e3a3cb53cdd46b9249805a8e46a0169cb5bc23075cfd94a0dcf52dd55a0d9ca3d68dc7cf37d1b416311a321f8bbe80c11292c7f65eaac4d6a75d561a7db25da0a101c5966754aa1b06dbd388192366b4b298b1a2c5804e83814cf7ca1fb4be3a6776838b56ad52aa3876555a7dcb0b30f83326d6378ad22d9cc790763021cb2cec5119c5c5b9fd65d378d65832f67fa920a731fa78a0c351ef95a036981fa76b5752419084d5342c74a6cf24340592357103eb8589f92c756bdca1f237fb56f76965b7a640a863b232eecf02c683b8643f35cedb3e4b897e0932d0539326110eb963a72433cc6c9fc67b91942cc4a4d658919b16ee1a3a65fc29d94aaaa0344e1d7a1ce98a147c7bf148042cf1b0fbd156a822aea2ed5dc52705199008fef8d61adfb48bba9f9d91489fe3f6c54075d45b3304f04d3b3bf32fa7d3186408cab233f7f893bfc8f922ffc98cdbc5e1263da2569c63a61b43978c2d03ebf889a00bdc996fdb0d7251f846aa04de23213f54be409002c0b695b2f0e1c34f295ed754de96a77afbf94d5fcf4fdb12d8a453f93f3603dd45536f045b911d639bf29587b0b48a2945337a8aaf4fd1b0c4d7be96ca77905e0e1ce90387068f20d05c8352279e0e4dc044bc74557a6bb7ba8a9417fec9da6361decd7b1e8a193fcbb7a743b87e3487f62ba0dd44a76bb48e09090912e484bb8b5665902fc5cfed613bb5453ea8439752fcc7b0a16c1cc17a5657fb7c8e4a51ad501921db60cfb7651bd9211f74675c71bcd129a4e5ebf2554be3e224ccdd8983fcbe56906904c21ae19aecf1df22e752dad30c524b51696dfe7e3ad633e37aef474380962b1828959b3409e17dba6a4801bd8d27d6bb4a8c1f2665c80f90bcd892233eed747f6edbbfc505e2860fc7e474ccc6cd22f15efdaa1ff9e7969cf615c0cfe4bd156a48c52654f50b04cc7b31ef6e65e02f29269702b7581062575fa993b6fbc79709e1657312261d5df2f70b60b71189ec60fcfbdb9d7b954e7435d8a272594be5e0abd985a77069088f902d6f3490e3f4d25c264b50d7eafa68ad38c97d8062e4ddf3d43564606b54850980bf72ea46fef9f3e3036136591a2ddd807f72339d435e54bcc14dc16134348b0a11025c00aa73964b2d700866ee4fa597fb3aea5c85497f18764a9d55cbf10155e09c74d221fd3186bfc7e37e9cf610f19d30df362b95fc09a24c9ba4f31d7d8f6bb334d8aa4819d9916c9ab2141c5d4795d6d4923176c43984e531357c8b4b5c66336bced16b44af51842048e7765d031067fc7e904b6567c86c53e1d02a5ccf1ee3cfbe49e12029eb53f74b977872968586fa92e41b21b0370e93e1703d64d20b9bfda5dc653d12a4d7c066ad60b3bd9113a8035d3b8a4bd3206c123cc9602f15f241991708b9502d7ee6a67ce5c4f38c63903201587e4ecbc3118c7513bdd0a3442cd044a592db82cc3ed80bb2831669c309f0c61fca40766598c45767fe224cf3c7adf90b18df50e93c8b3ba7a659c78c20d629ea3f5de2613876ab6645c138c88f91c849c778218f5d81da777c67cb70bc3a921f6e6d4c04f69bc224491dc94de23b52fd0052619db919ff54cacda88d9ea59861bd25a2c27c1f29608e1a28cf7bca7e23cc002d6719fe03061f480accd3c4d39386364a3e85ff6bded927d62cca37c009a953d5f33287c55b199402af89eac66286cb6df5456505f1c0844402aed14e3ea730d69cd693723d1606f53a7962253b40fcd7baba46767545388a67e0db04ac39346bcd0802bf22df30ef0abf57036fcddfa52279eb72f827b461f253bf5b37ff70f623e373d3d4cd5197af1bb3ea360b15edb8d99cdaf2bde3dd8b5ce651c30b95ddf1fae7388d3090a4964fbd8e94d49e86c142451adbc5059e687015b876107aaeba5c22ef589f0f4ec93b746fbc1dfcec81eab206d4083bdaa5b7ab3485f271ce826e10c9afa4c88ffcdb2589a7a9d1a0230efd5e7a5edbc0049e39193eacdaa5ab396a5ecef88955132c0103ed3c425acacce5ff145bffd47f9ef5c2052a360e2dbd12e58cc06668b552e5cdcc034ba061a835a532da755747783432d03c2827f8b759715349665b2894d04812782c2607d2432ecd897c3a61095add69ea9270f7f3a1bcc37855a076d681166a13f190cfaee83d0be1fe24aeb8f9483389b933ac7e1153f58ead3b6c8547da8ce8268f8a0553b148a6d8ed9544f8291748bffdbe1f86fd9eb05f07759eaa11ec1edeb64a0437a0a8ac5692e63f56b637e5021d7d77cf3aefdf51793e9a717e36c4dc4dc036d146ad3932536b99801a0297a0b92b69e66499fa71fed4a68dcafed668d76746c578b7c1f1cc479ac43092770abaecbe4a94f4d41667e0eab823488c9f4bde21d4c0a4903151d4a4e44acb655dc1a84c976d6b7c177090ba21153062664af4b97f373e9a89a44ae0a5d2de1e64e9598b978a6ff08302e5ed1095e005eeeaa407d0ba0f6d7225d6e312f4141295933005e5493e0584491e35ecee53a024d106f75f7085fb5e826aaea68acfbde9f4d3476433469ff4adbe898f6bcefee7be791174032479c2bfda3dd37671bdbec3562d8790c74fac1366f76a337a04206aa7f485fc32c73ab6e85093564b108a9bce4cb36a8fe99b51423d32c674179a349758fab762a44143dcedf5a96db7baf021441aa613fec0e16f2f83c61518755992b834e9228dc7fd5bcb0850d684b46ad24e8f42b95876880bf5296905310dcc0d21d9266a0a727ed7f6a33e33c33b499801112d6fa3defa9d49049058c841efbc6a537b659756cd384beeb707a230e8b915831eebf71a868f707a5d8cbfbe97f856ea11d94bc097912ef65f42cabb8a240e66afb298c28541d7f70030566d605015f509a53dea03d81407e21899ae528e29ecec40ec6403e5407c628e1b5e5b9d08fca71dcbe73c25e2bc6f97f716e065c292d75c8ac4eb54aa85e5eeadd3c695a94c551a437a0d2cb1c4d41e1c85185e59b159649877a19d6966fd6a4ca14a4aa689cf5c7e1e3a1a4b8566403d4b36a2a8bce0460fdfadc914c872919447450584f5535cecdc563657589b0ed506337919a5c3a981853d9c05ece47fa54b0e7f19ef37ff0ffb5cb762ab515e175e7b43cc6cc8f5bb73a1195974d9f31000fb807947be56a1f74a941d530727f9816d49a2defd65d7962b63c606ed8d7089983f7e9e3ae0ddb3621153a11cd4876a9b5632ebdef5ffa3a18249424eebd20689bbf8df0b3fe3ea972a2612b2659e2815bcf7835075ccbe7acdf92938547ed4a31bfd511b76da90aee49b235a70f2f4b7e734835c97a0cedd194688ac6576e1caf8368c9234cea09bde67ae99f8843113cc7af28a6aae8c983309a0287442ed8c0fbdca3754b32ad25033e436bb54317491aed9d05f412bccc399a7545537ebc44816abd16a08bfb9dbac8b3a3040579d629d15cc92f8f0435da09ad2af2f3fbe27ff05e89ad4386d9e2f5c37f4fa41095b32746f119a613d99fa292f78e84be5d44e83cf6d36ff409f0f02d281ae10323fab2f5bbd2783667a17d3782fad5314157e9c017b3dd4e1f66c16dd7241db6bd6cec147935765cf673abcb64dd25367cd3f5945e9687e8ba825777602171bae8acd163ebf1", 0x1000, 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r1) (async) add_key$user(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000200)="266deaf2e84f61045f80ab3d2674d36df60bc6aaf1d7259a4ee1c315e066e8ed2a4887d60750", 0x26, 0xfffffffffffffffc) (async) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, r1) (async) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$NS_GET_USERNS(r2, 0x8004b708, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (rerun: 64) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) 1.006333619s ago: executing program 2 (id=304): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000200)=[{&(0x7f0000000340)="1f", 0x1}], 0x1, 0x8, 0x7, 0x17) 1.006058039s ago: executing program 4 (id=305): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001600)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xc}, @fda={0x66646185, 0x8, 0x2, 0x2f}, @flat=@handle={0x73682a85, 0x101, 0x7}}, &(0x7f0000000080)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 994.65727ms ago: executing program 2 (id=306): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x5, 0x0, 0x1000, 0x3, 0x4, 0x1, 0xfffffffffffffff9, 0x7, 0xfffffffffffffff7, 0x7, 0x80000001, 0x6, 0x8, 0xc367, 0x400, 0x6], 0xdddd1000, 0x189410}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000300), 0x402700, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0500561008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 986.2476ms ago: executing program 4 (id=307): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x7) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x200400c0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 916.283466ms ago: executing program 4 (id=308): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000500)=""/193, 0xc1}, {&(0x7f0000003040)=""/4109, 0x100d}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000002bc0)=""/118, 0x76}, {&(0x7f0000000600)=""/149, 0x95}, {&(0x7f0000000240)=""/280, 0x118}, {&(0x7f0000002d00)=""/118, 0x76}, {&(0x7f0000000400)=""/53, 0x35}], 0xa}, 0x10}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1008}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) (fail_nth: 22) 916.002247ms ago: executing program 4 (id=309): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r0, 0x12) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x3, 0x2, 0xff, 0x5, 0x8, 0x1f}, 0x20) r3 = socket$inet(0x2, 0x801, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000140)="df6b", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)='\\Q', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="076978997a7fd8", 0x7}], 0x1}}], 0x3, 0x4000051) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) splice(r3, 0x0, r4, 0x0, 0x9, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="9c00000000010000000000000000000002000008060012400002000008000740000000050800034000001000280004802400018005000300070000000600040003090000060005000fbb000005000100000000d21000164000000003fffffffa0000000b18000480140003800800034000000009050001008100000008000340000014001800018006000340000300000c000280050001002f000000"], 0x9c}}, 0x0) 915.785916ms ago: executing program 2 (id=310): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7, "b05c83f6"}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc548, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x3f, 0x2, 0x3, 0x1, 0x6, 0x1, {0x9, 0x21, 0x8, 0x7, 0x1, {0x22, 0x43d}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0xa, 0xfe}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x5, 0x5, 0x3, 0x20, 0x6}, 0x0, 0x0}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) writev(0xffffffffffffffff, 0x0, 0x0) 858.329341ms ago: executing program 4 (id=311): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000500)=""/181, 0xb5}, {&(0x7f0000003040)=""/4109, 0x100d}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000002bc0)=""/118, 0x76}, {&(0x7f0000000600)=""/149, 0x95}, {&(0x7f0000000240)=""/280, 0x118}, {&(0x7f0000002d00)=""/118, 0x76}, {&(0x7f0000000400)=""/60, 0x3c}], 0xa}, 0x10}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1008}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) (fail_nth: 18) 741.4451ms ago: executing program 4 (id=312): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000001c0)=0x7) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x461, 0x4e72, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00e10f9e31b70d41900000"], 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syz_tun\x00', 0xa03}) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x8001, @none}, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf25080000001800048013000100"], 0x2c}}, 0x26008890) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000680)={&(0x7f0000000380), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0xac, r5, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "bed070fa956d78d364068b2847a56158c4ee43e0e9879807dfef9e27f01849"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "2ef3528442731d463a65470f89edcc9ad14e84b2a36b1fa7bb75"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x10000}, 0x24048091) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/228, 0xe4}, {&(0x7f0000000500)=""/181, 0xb5}, {&(0x7f0000003040)=""/4103, 0x1007}, {&(0x7f00000005c0)=""/161, 0xa1}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000002bc0)=""/118, 0x76}, {&(0x7f0000000780)=""/141, 0x8d}, {&(0x7f0000000240)=""/280, 0x118}, {&(0x7f0000002d00)=""/118, 0x76}, {&(0x7f0000000400)=""/60, 0x3c}], 0xa}, 0x80000010}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1008}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) 210.785993ms ago: executing program 3 (id=317): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/anycast6\x00') io_setup(0x201, &(0x7f0000001540)=0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x403d, r1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2, r1}]) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 160.863197ms ago: executing program 3 (id=318): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x10, 0x4, @thr={&(0x7f0000000000)="e3bc7c06b6743b741f6ac0df7b8b6f31a1a96a55110ed6b19fc4ceaf2da5e95e98b490f57473265dfa14b9b1708dd6bbfc01a079becbca7c06ee4921f14b1dce6e41d1b647839c4702054d79325f8cbbf264a9b468f2cde1e0361b918f869e08393c1c2fd7695529884d210235934e2983fedde20a46ff155b54b16b5f5428bf276133ad78aea6d3e07655e1020fe76046a7da835ad9439ea9b76ad9707f74b34c0628035a58aec7b3b9a2cabd255b9be2a947", &(0x7f00000000c0)="7feeb1c9089f7ce3fb88f4f8c209623b19e2666785e0e1320a4fad918e536a9aef720e0e55e93c59fe3ae1ca34a2373c4fdef6d56c36bf999e5d43e8af2951d4513fc0792f73da15cf561c"}}, &(0x7f0000000240)) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000500)=""/216, 0xd8}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/128, 0x80}, {&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000002bc0)=""/128, 0x80}, {&(0x7f0000000c80)=""/162, 0xa2}, {&(0x7f0000002f00)=""/268, 0x10c}, {&(0x7f0000000440)=""/134, 0x86}, {&(0x7f0000000180)=""/67, 0x43}, {&(0x7f0000000b00)=""/158, 0x9e}], 0xa}, 0xe}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x4, 0x10d}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008075}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000801) 104.145462ms ago: executing program 3 (id=319): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x5, 0x0, 0x1000, 0x3, 0x4, 0x1, 0xfffffffffffffff9, 0x7, 0xfffffffffffffff7, 0x7, 0x80000001, 0x6, 0x8, 0xc367, 0x400, 0x6], 0xdddd1000, 0x189410}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0500561008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 98.595382ms ago: executing program 1 (id=320): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r0, 0x1, 0x1) getdents64(r0, &(0x7f00000020c0)=""/54, 0x36) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) fcntl$setflags(r1, 0x2, 0x1) (async) fcntl$setflags(r1, 0x2, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000040)) 60.818515ms ago: executing program 1 (id=321): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000500)=""/193, 0xc1}, {&(0x7f0000003040)=""/4109, 0x100d}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000002bc0)=""/118, 0x76}, {&(0x7f0000000600)=""/149, 0x95}, {&(0x7f0000000240)=""/280, 0x118}, {&(0x7f0000002d00)=""/118, 0x76}, {&(0x7f0000000400)=""/53, 0x35}], 0xa}, 0x10}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1008}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) (fail_nth: 23) 60.626085ms ago: executing program 1 (id=322): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7, "b05c83f6"}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12011001000000086d0448c5400001020301090224000101ff00090904003f0203010601092108000701223d04090581030800010afec7c90284b3ed9419381b85d4f1ca2aea94fa557c31ea7b636cc9e9e093d73bf38e15eec223046797ef0cd45c06918b9a6025e296eca1173520da90c8f7ff5d218a244e7fb2ec5bc8a08ea2e04ceb7a1f3a587a3eed94607fbfd26c2d62533ec9a4013ffa049456fed004548c48c3b03ba5c4c6bf7973458dfb61d6e4f965ff6e100c34c4c7318270cff99ddce0624cffa456fb1f5272fb3e8b2604242dfc4e026bb8712a0b2fbf5c", @ANYRES32=r0], &(0x7f0000000380)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x5, 0x5, 0x3, 0x20, 0x6}, 0x0, 0x0}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) lstat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r3, r4) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000103, 0x0, 0xc3b}]}) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xca04, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0xa, "ac00"}, @global=@item_012={0x1, 0x1, 0x9, "a5"}]}}, 0x0}, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) mkdirat(0xffffffffffffffff, &(0x7f0000000e40)='./file0\x00', 0x52) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 59.732505ms ago: executing program 3 (id=323): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000500)=""/181, 0xb5}, {&(0x7f0000003040)=""/4109, 0x100d}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000002bc0)=""/118, 0x76}, {&(0x7f0000000600)=""/149, 0x95}, {&(0x7f0000000240)=""/280, 0x118}, {&(0x7f0000002d00)=""/118, 0x76}, {&(0x7f0000000400)=""/60, 0x3c}], 0xa}, 0x10}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1008}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) (fail_nth: 19) 6.301979ms ago: executing program 3 (id=324): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9084) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x40000000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 6.141889ms ago: executing program 3 (id=325): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0xa1ff, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x57, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=326): r0 = socket(0x10, 0x803, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, 0x0, &(0x7f00000000c0)) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0xf3a, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0) splice(r2, 0x0, r5, 0x0, 0x100000004, 0x0) read$FUSE(r1, &(0x7f0000000880)={0x2020}, 0x2020) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000500)=""/181, 0xb5}, {&(0x7f0000003040)=""/4109, 0x100d}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000002bc0)=""/118, 0x76}, {&(0x7f0000000600)=""/149, 0x95}, {&(0x7f0000000240)=""/280, 0x118}, {&(0x7f0000002d00)=""/118, 0x76}, {&(0x7f0000000400)=""/60, 0x3c}], 0xa}, 0x10}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1008}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) kernel console output (not intermixed with test programs): cess permissive=1 [ 13.804458][ T36] audit: type=1400 audit(1755932069.230:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts. [ 21.186624][ T36] audit: type=1400 audit(1755932076.630:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.187790][ T282] cgroup: Unknown subsys name 'net' [ 21.209697][ T36] audit: type=1400 audit(1755932076.630:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.238363][ T36] audit: type=1400 audit(1755932076.660:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.238575][ T282] cgroup: Unknown subsys name 'devices' [ 21.426726][ T282] cgroup: Unknown subsys name 'hugetlb' [ 21.432408][ T282] cgroup: Unknown subsys name 'rlimit' [ 21.547434][ T36] audit: type=1400 audit(1755932076.990:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.571848][ T36] audit: type=1400 audit(1755932076.990:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.597067][ T36] audit: type=1400 audit(1755932076.990:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.600683][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.629965][ T36] audit: type=1400 audit(1755932077.070:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.656503][ T36] audit: type=1400 audit(1755932077.070:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.685148][ T36] audit: type=1400 audit(1755932077.130:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.685648][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.711216][ T36] audit: type=1400 audit(1755932077.130:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.516226][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.523480][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.530643][ T292] bridge_slave_0: entered allmulticast mode [ 22.536984][ T292] bridge_slave_0: entered promiscuous mode [ 22.543892][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.551261][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.558664][ T292] bridge_slave_1: entered allmulticast mode [ 22.565128][ T292] bridge_slave_1: entered promiscuous mode [ 22.649610][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.656847][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.664209][ T289] bridge_slave_0: entered allmulticast mode [ 22.670600][ T289] bridge_slave_0: entered promiscuous mode [ 22.677722][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.685102][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.692847][ T289] bridge_slave_1: entered allmulticast mode [ 22.699318][ T289] bridge_slave_1: entered promiscuous mode [ 22.722953][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.730505][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.737598][ T290] bridge_slave_0: entered allmulticast mode [ 22.743889][ T290] bridge_slave_0: entered promiscuous mode [ 22.756696][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.763862][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.771137][ T290] bridge_slave_1: entered allmulticast mode [ 22.777452][ T290] bridge_slave_1: entered promiscuous mode [ 22.830713][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.838204][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.845614][ T291] bridge_slave_0: entered allmulticast mode [ 22.852009][ T291] bridge_slave_0: entered promiscuous mode [ 22.858600][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.865933][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.873021][ T291] bridge_slave_1: entered allmulticast mode [ 22.879647][ T291] bridge_slave_1: entered promiscuous mode [ 22.968322][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.975433][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.982904][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.990018][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.039945][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.047035][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.059611][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.066888][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.094078][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.101269][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.108993][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.116561][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.127165][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.134431][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.142150][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.149291][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.165263][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.172935][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.180710][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.189194][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.196793][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.204121][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.212042][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.219578][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.230347][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.237628][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.261890][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.269277][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.280739][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.287914][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.306149][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.313824][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.342032][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.349240][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.366168][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.373251][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.381529][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.388861][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.406987][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.414300][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.441638][ T289] veth0_vlan: entered promiscuous mode [ 23.450211][ T292] veth0_vlan: entered promiscuous mode [ 23.470282][ T292] veth1_macvtap: entered promiscuous mode [ 23.505736][ T289] veth1_macvtap: entered promiscuous mode [ 23.522470][ T291] veth0_vlan: entered promiscuous mode [ 23.522980][ T292] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.531861][ T290] veth0_vlan: entered promiscuous mode [ 23.574278][ T291] veth1_macvtap: entered promiscuous mode [ 23.616655][ T290] veth1_macvtap: entered promiscuous mode [ 23.695825][ T341] netlink: 'syz.0.1': attribute type 28 has an invalid length. [ 23.706810][ T341] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.726627][ T336] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 23.726671][ T336] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 23.737307][ T336] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:2 [ 23.744205][ T341] rust_binder: Error while translating object. [ 23.772476][ T31] rust_binder: 335: removing orphan mapping 0:24 [ 23.794449][ T341] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 23.794489][ T341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 24.114420][ T329] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 24.224463][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.275876][ T329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 24.287022][ T329] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 24.300150][ T329] usb 2-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 24.309632][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.318729][ T329] usb 2-1: config 0 descriptor?? [ 24.324143][ T348] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 24.354437][ T31] usb 1-1: device descriptor read/64, error -71 [ 24.506864][ T45] rust_binder: 337: removing orphan mapping 0:24 [ 24.594425][ T31] usb 1-1: device descriptor read/64, error -71 [ 24.736905][ T329] logitech 0003:046D:CA04.0001: unbalanced delimiter at end of report description [ 24.746713][ T329] logitech 0003:046D:CA04.0001: parse failed [ 24.753013][ T329] logitech 0003:046D:CA04.0001: probe with driver logitech failed with error -22 [ 24.834596][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 24.942587][ T348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.951747][ T348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.961467][ T348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.970134][ T31] usb 1-1: device descriptor read/64, error -71 [ 24.971219][ T348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.003720][ T331] usb 2-1: USB disconnect, device number 2 [ 25.114461][ T329] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.214432][ T31] usb 1-1: device descriptor read/64, error -71 [ 25.278290][ T329] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.294453][ T329] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.310137][ T329] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 25.323133][ T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 25.324526][ T31] usb usb1-port1: attempt power cycle [ 25.337104][ T329] usb 4-1: SerialNumber: syz [ 25.548500][ T329] usb 4-1: 0:2 : does not exist [ 25.565484][ T329] usb 4-1: USB disconnect, device number 2 [ 25.576816][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.674645][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 25.715477][ T31] usb 1-1: device descriptor read/8, error -71 [ 25.865538][ T31] usb 1-1: device descriptor read/8, error -71 [ 26.104416][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 26.125458][ T31] usb 1-1: device descriptor read/8, error -71 [ 26.200941][ T36] kauditd_printk_skb: 72 callbacks suppressed [ 26.200960][ T36] audit: type=1400 audit(1755932081.640:146): avc: denied { mounton } for pid=385 comm="syz.1.18" path="/6/file0" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 26.263396][ T31] usb 1-1: device descriptor read/8, error -71 [ 26.310733][ T392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20'. [ 26.321782][ T392] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 26.321812][ T392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:22 [ 26.356537][ T36] audit: type=1400 audit(1755932081.800:147): avc: denied { setopt } for pid=393 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.387764][ T31] usb usb1-port1: unable to enumerate USB device [ 26.400523][ T36] audit: type=1400 audit(1755932081.800:148): avc: denied { create } for pid=393 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.424212][ T36] audit: type=1400 audit(1755932081.800:149): avc: denied { connect } for pid=393 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.724859][ T329] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.857411][ T36] audit: type=1400 audit(1755932082.300:150): avc: denied { unlink } for pid=415 comm="syz.1.29" name="#1" dev="tmpfs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 26.879879][ T36] audit: type=1400 audit(1755932082.300:151): avc: denied { mount } for pid=415 comm="syz.1.29" name="/" dev="overlay" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.881276][ T329] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.913087][ T329] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 26.922999][ T329] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 26.932227][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 26.940419][ T329] usb 3-1: SerialNumber: syz [ 26.972004][ T418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=418 comm=syz.1.30 [ 27.107654][ T331] rust_binder: 420: removing orphan mapping 0:24 [ 27.114825][ T331] rust_binder: 420: removing orphan mapping 24:96 [ 27.148685][ T329] usb 3-1: 0:2 : does not exist [ 27.156563][ T329] usb 3-1: USB disconnect, device number 2 [ 27.164906][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.177112][ T425] FAULT_INJECTION: forcing a failure. [ 27.177112][ T425] name failslab, interval 1, probability 0, space 0, times 1 [ 27.193867][ T425] CPU: 0 UID: 0 PID: 425 Comm: syz.0.32 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 27.193892][ T425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 27.193900][ T425] Call Trace: [ 27.193905][ T425] [ 27.193910][ T425] __dump_stack+0x21/0x30 [ 27.193930][ T425] dump_stack_lvl+0x10c/0x190 [ 27.193945][ T425] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.193961][ T425] dump_stack+0x19/0x20 [ 27.193975][ T425] should_fail_ex+0x3d9/0x530 [ 27.193992][ T425] should_failslab+0xac/0x100 [ 27.194005][ T425] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 27.194023][ T425] ? rust_helper_krealloc+0x33/0xd0 [ 27.194038][ T425] ? __kasan_kmalloc+0x96/0xb0 [ 27.194065][ T425] krealloc_noprof+0x8d/0x130 [ 27.194077][ T425] rust_helper_krealloc+0x33/0xd0 [ 27.194091][ T425] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0x91/0x100 [ 27.194114][ T425] _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xb1/0x100 [ 27.194133][ T425] _RNvMs3_NtCshgDM7dBCdno_11rust_binder6threadNtB5_11ThreadError7try_new+0x76/0x3a0 [ 27.194152][ T425] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x473/0x1440 [ 27.194177][ T425] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 27.194192][ T425] ? security_inode_alloc+0x51/0x200 [ 27.194209][ T425] ? inode_init_always_gfp+0x756/0x9e0 [ 27.194222][ T425] ? proc_pid_make_inode+0x25/0x140 [ 27.194234][ T425] ? proc_tid_base_lookup+0x2f/0x40 [ 27.194248][ T425] ? do_filp_open+0x1c6/0x3e0 [ 27.194261][ T425] ? do_sys_openat2+0x12c/0x1c0 [ 27.194275][ T425] ? __x64_sys_openat+0x13a/0x170 [ 27.194289][ T425] ? x64_sys_call+0xe69/0x2ee0 [ 27.194304][ T425] ? do_syscall_64+0x58/0xf0 [ 27.194323][ T425] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.194346][ T425] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 27.194366][ T425] ? avc_has_perm_noaudit+0x268/0x360 [ 27.194382][ T425] ? __asan_memcpy+0x5a/0x80 [ 27.194397][ T425] ? avc_has_perm_noaudit+0x286/0x360 [ 27.194412][ T425] ? avc_has_perm+0x144/0x220 [ 27.194427][ T425] ? __cfi_avc_has_perm+0x10/0x10 [ 27.194443][ T425] ? selinux_file_open+0x457/0x610 [ 27.194457][ T425] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a4/0x2cd0 [ 27.194472][ T425] ? avc_has_extended_perms+0x7c7/0xdd0 [ 27.194487][ T425] ? __asan_memcpy+0x5a/0x80 [ 27.194503][ T425] ? avc_has_extended_perms+0x921/0xdd0 [ 27.194518][ T425] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 27.194546][ T425] ? do_vfs_ioctl+0xeda/0x1e30 [ 27.194558][ T425] ? arch_stack_walk+0x10b/0x170 [ 27.194575][ T425] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 27.194589][ T425] ? _parse_integer+0x2e/0x40 [ 27.194606][ T425] ? ioctl_has_perm+0x384/0x4d0 [ 27.194619][ T425] ? has_cap_mac_admin+0xd0/0xd0 [ 27.194632][ T425] ? proc_fail_nth_write+0x17e/0x210 [ 27.194646][ T425] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 27.194661][ T425] ? selinux_file_ioctl+0x6e0/0x1360 [ 27.194674][ T425] ? vfs_write+0x8ba/0xe80 [ 27.194684][ T425] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 27.194715][ T425] ? __cfi_vfs_write+0x10/0x10 [ 27.194725][ T425] ? __kasan_check_write+0x18/0x20 [ 27.194740][ T425] ? mutex_unlock+0x8b/0x240 [ 27.194756][ T425] ? __cfi_mutex_unlock+0x10/0x10 [ 27.194772][ T425] ? __fget_files+0x2c5/0x340 [ 27.194785][ T425] ? __fget_files+0x2c5/0x340 [ 27.194796][ T425] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 27.194813][ T425] ? __se_sys_ioctl+0x114/0x1b0 [ 27.194825][ T425] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 27.194841][ T425] __se_sys_ioctl+0x132/0x1b0 [ 27.194853][ T425] __x64_sys_ioctl+0x7f/0xa0 [ 27.194865][ T425] x64_sys_call+0x1878/0x2ee0 [ 27.194880][ T425] do_syscall_64+0x58/0xf0 [ 27.194894][ T425] ? clear_bhb_loop+0x50/0xa0 [ 27.194905][ T425] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.194921][ T425] RIP: 0033:0x7f95a298ebe9 [ 27.194932][ T425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 27.194943][ T425] RSP: 002b:00007f95a371c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 27.194958][ T425] RAX: ffffffffffffffda RBX: 00007f95a2bb6090 RCX: 00007f95a298ebe9 [ 27.194967][ T425] RDX: 00002000000002c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 27.194975][ T425] RBP: 00007f95a371c090 R08: 0000000000000000 R09: 0000000000000000 [ 27.194983][ T425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 27.194990][ T425] R13: 00007f95a2bb6128 R14: 00007f95a2bb6090 R15: 00007ffcfc4f99e8 [ 27.195000][ T425] [ 27.674773][ T425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 27.800907][ T36] audit: type=1400 audit(1755932083.240:152): avc: denied { ioctl } for pid=440 comm="syz.3.38" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x127e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 27.952918][ T36] audit: type=1400 audit(1755932083.390:153): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 27.973157][ T36] audit: type=1400 audit(1755932083.400:154): avc: denied { ioctl } for pid=448 comm="syz.1.41" path="socket:[4570]" dev="sockfs" ino=4570 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.007373][ T36] audit: type=1400 audit(1755932083.400:155): avc: denied { write } for pid=448 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.051878][ T459] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 28.091002][ T461] FAULT_INJECTION: forcing a failure. [ 28.091002][ T461] name failslab, interval 1, probability 0, space 0, times 0 [ 28.112132][ T461] CPU: 1 UID: 0 PID: 461 Comm: syz.0.46 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 28.112164][ T461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 28.112175][ T461] Call Trace: [ 28.112181][ T461] [ 28.112188][ T461] __dump_stack+0x21/0x30 [ 28.112218][ T461] dump_stack_lvl+0x10c/0x190 [ 28.112241][ T461] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.112266][ T461] ? selinux_file_open+0x457/0x610 [ 28.112288][ T461] dump_stack+0x19/0x20 [ 28.112310][ T461] should_fail_ex+0x3d9/0x530 [ 28.112336][ T461] should_failslab+0xac/0x100 [ 28.112357][ T461] __kmalloc_node_noprof+0x6c/0x450 [ 28.112385][ T461] ? __kvmalloc_node_noprof+0x11d/0x300 [ 28.112411][ T461] __kvmalloc_node_noprof+0x11d/0x300 [ 28.112457][ T461] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 28.112482][ T461] ? is_bpf_text_address+0x17b/0x1a0 [ 28.112503][ T461] traverse+0xf5/0x720 [ 28.112524][ T461] ? __cfi_mutex_lock+0x10/0x10 [ 28.112553][ T461] seq_read_iter+0xe55/0xfe0 [ 28.112577][ T461] seq_read+0x2e3/0x3d0 [ 28.112597][ T461] ? __cfi_seq_read+0x10/0x10 [ 28.112617][ T461] ? __cfi_selinux_file_permission+0x10/0x10 [ 28.112640][ T461] ? __kasan_check_write+0x18/0x20 [ 28.112665][ T461] ? proc_fail_nth_write+0x17e/0x210 [ 28.112689][ T461] ? __cfi_seq_read+0x10/0x10 [ 28.112710][ T461] proc_reg_read+0x1fa/0x2f0 [ 28.112726][ T461] ? __cfi_proc_reg_read+0x10/0x10 [ 28.112743][ T461] vfs_read+0x278/0xb60 [ 28.112772][ T461] ? __cfi_vfs_read+0x10/0x10 [ 28.112799][ T461] ? __fget_files+0x2c5/0x340 [ 28.112821][ T461] ksys_pread64+0x170/0x270 [ 28.112838][ T461] ? __cfi_ksys_pread64+0x10/0x10 [ 28.112857][ T461] __x64_sys_pread64+0x9f/0xb0 [ 28.112876][ T461] x64_sys_call+0x2a34/0x2ee0 [ 28.112903][ T461] do_syscall_64+0x58/0xf0 [ 28.112926][ T461] ? clear_bhb_loop+0x50/0xa0 [ 28.112945][ T461] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.112973][ T461] RIP: 0033:0x7f95a298ebe9 [ 28.112990][ T461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 28.113005][ T461] RSP: 002b:00007f95a373d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 28.113026][ T461] RAX: ffffffffffffffda RBX: 00007f95a2bb5fa0 RCX: 00007f95a298ebe9 [ 28.113041][ T461] RDX: 00000000000000c3 RSI: 0000200000000180 RDI: 0000000000000005 [ 28.113054][ T461] RBP: 00007f95a373d090 R08: 0000000000000000 R09: 0000000000000000 [ 28.113065][ T461] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 28.113076][ T461] R13: 00007f95a2bb6038 R14: 00007f95a2bb5fa0 R15: 00007ffcfc4f99e8 [ 28.113092][ T461] [ 28.531646][ T9] rust_binder: 471: removing orphan mapping 0:24 [ 28.548220][ T9] rust_binder: 0: removing orphan mapping 24:96 [ 28.558921][ T479] rust_binder: Write failure EFAULT in pid:22 [ 28.684519][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.854446][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 28.859822][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 28.868778][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.880242][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.890952][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 28.900543][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.910023][ T10] usb 2-1: config 0 descriptor?? [ 28.914401][ T65] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.916181][ T10] hub 2-1:0.0: USB hub found [ 29.035587][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 29.048686][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 29.061776][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 29.071165][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.080200][ T9] usb 1-1: config 0 descriptor?? [ 29.084409][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 29.085720][ T485] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 29.091756][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.109253][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.119816][ T65] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 29.133635][ T10] hub 2-1:0.0: 1 port detected [ 29.133731][ T65] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 29.149049][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.158182][ T65] usb 3-1: config 0 descriptor?? [ 29.400826][ T493] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.58'. [ 29.488985][ T494] kvm: MWAIT instruction emulated as NOP! [ 29.501777][ T9] logitech 0003:046D:CA04.0002: unbalanced delimiter at end of report description [ 29.511650][ T9] logitech 0003:046D:CA04.0002: parse failed [ 29.518215][ T9] logitech 0003:046D:CA04.0002: probe with driver logitech failed with error -22 [ 29.569285][ T65] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.576861][ T65] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.584477][ T65] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.591851][ T65] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.599310][ T65] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.606787][ T65] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.614124][ T65] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.621792][ T65] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.642247][ T65] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input4 [ 29.656327][ T65] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 29.703732][ T485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.712937][ T485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.721996][ T485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.722513][ T9] rust_binder: 492: removing orphan mapping 0:24 [ 29.731143][ T485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.753939][ T10] hub 2-1:0.0: activate --> -90 [ 29.754543][ T65] usb 1-1: USB disconnect, device number 6 [ 29.770027][ T9] rust_binder: 0: removing orphan mapping 24:96 [ 29.865279][ T360] usb 3-1: USB disconnect, device number 3 [ 30.153378][ T9] usb 2-1: USB disconnect, device number 3 [ 30.524707][ T523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:62 [ 30.554822][ T528] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 30.574991][ T528] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 30.645350][ T533] rust_binder: Write failure EINVAL in pid:39 [ 30.645483][ T533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:39 [ 30.764437][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.914500][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 30.924544][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 30.931071][ T9] usb 4-1: config 2 has an invalid interface number: 194 but max is 0 [ 30.939461][ T9] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 30.949853][ T9] usb 4-1: config 2 has no interface number 0 [ 30.956303][ T9] usb 4-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 30.968131][ T9] usb 4-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 30.981585][ T9] usb 4-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 30.990792][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.000065][ T523] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 31.075562][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 31.086942][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 31.100747][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 31.110063][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.118867][ T10] usb 2-1: config 0 descriptor?? [ 31.124300][ T535] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 31.228976][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 31.228996][ T36] audit: type=1400 audit(1755932086.670:180): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.260856][ T538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 31.265749][ T540] netlink: 'syz.2.73': attribute type 12 has an invalid length. [ 31.284420][ T541] netlink: 'syz.2.73': attribute type 12 has an invalid length. [ 31.292852][ T541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.300325][ T540] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 31.452883][ T36] audit: type=1400 audit(1755932086.890:181): avc: denied { read } for pid=547 comm="syz.2.76" dev="nsfs" ino=4026532325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.483310][ T36] audit: type=1400 audit(1755932086.890:182): avc: denied { open } for pid=547 comm="syz.2.76" path="net:[4026532325]" dev="nsfs" ino=4026532325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.511207][ T36] audit: type=1400 audit(1755932086.890:183): avc: denied { create } for pid=547 comm="syz.2.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.531383][ T36] audit: type=1400 audit(1755932086.910:184): avc: denied { setopt } for pid=547 comm="syz.2.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.557371][ T36] audit: type=1400 audit(1755932086.910:185): avc: denied { bind } for pid=547 comm="syz.2.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.577683][ T10] logitech 0003:046D:CA04.0004: unbalanced delimiter at end of report description [ 31.588026][ T10] logitech 0003:046D:CA04.0004: parse failed [ 31.595183][ T10] logitech 0003:046D:CA04.0004: probe with driver logitech failed with error -22 [ 31.714493][ T488] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.753523][ T535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.762236][ T535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.770933][ T535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.779482][ T535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.789571][ T45] usb 2-1: USB disconnect, device number 4 [ 31.844497][ T488] usb 3-1: device descriptor read/64, error -71 [ 32.084484][ T488] usb 3-1: device descriptor read/64, error -71 [ 32.176572][ T36] audit: type=1400 audit(1755932087.620:186): avc: denied { setopt } for pid=560 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.176696][ C1] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96 [ 32.196745][ T36] audit: type=1400 audit(1755932087.650:187): avc: denied { listen } for pid=560 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 32.324445][ T488] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.454420][ T488] usb 3-1: device descriptor read/64, error -71 [ 32.474535][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 32.491827][ T571] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.504998][ T36] audit: type=1400 audit(1755932087.950:188): avc: denied { ioctl } for pid=570 comm="syz.1.87" path="socket:[6498]" dev="sockfs" ino=6498 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.572094][ T572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=572 comm=syz.1.87 [ 32.574408][ T36] audit: type=1400 audit(1755932088.010:189): avc: denied { bind } for pid=570 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.645484][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.655925][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.666070][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 32.675551][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 32.683940][ T10] usb 1-1: SerialNumber: syz [ 32.704375][ T488] usb 3-1: device descriptor read/64, error -71 [ 32.814485][ T488] usb usb3-port1: attempt power cycle [ 32.834640][ T576] fuse: Bad value for 'group_id' [ 32.839653][ T576] fuse: Bad value for 'group_id' [ 32.876229][ T581] rust_binder: Error while translating object. [ 32.876270][ T581] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 32.882734][ T581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:78 [ 32.903199][ T10] usb 1-1: 0:2 : does not exist [ 32.925695][ T10] usb 1-1: USB disconnect, device number 7 [ 32.935163][ T583] FAULT_INJECTION: forcing a failure. [ 32.935163][ T583] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 32.949870][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.974406][ T583] CPU: 1 UID: 0 PID: 583 Comm: syz.1.91 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 32.974441][ T583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 32.974452][ T583] Call Trace: [ 32.974459][ T583] [ 32.974466][ T583] __dump_stack+0x21/0x30 [ 32.974495][ T583] dump_stack_lvl+0x10c/0x190 [ 32.974518][ T583] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.974541][ T583] dump_stack+0x19/0x20 [ 32.974573][ T583] should_fail_ex+0x3d9/0x530 [ 32.974598][ T583] should_fail+0xf/0x20 [ 32.974620][ T583] should_fail_usercopy+0x1e/0x30 [ 32.974637][ T583] _copy_to_user+0x24/0xa0 [ 32.974658][ T583] simple_read_from_buffer+0xed/0x160 [ 32.974682][ T583] proc_fail_nth_read+0x19e/0x210 [ 32.974705][ T583] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 32.974727][ T583] ? bpf_lsm_file_permission+0xd/0x20 [ 32.974752][ T583] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 32.974774][ T583] vfs_read+0x278/0xb60 [ 32.974802][ T583] ? __cfi_vfs_read+0x10/0x10 [ 32.974826][ T583] ? __kasan_check_write+0x18/0x20 [ 32.974851][ T583] ? mutex_lock+0x92/0x1c0 [ 32.974877][ T583] ? __cfi_mutex_lock+0x10/0x10 [ 32.974902][ T583] ? __fget_files+0x2c5/0x340 [ 32.974924][ T583] ksys_read+0x141/0x250 [ 32.974942][ T583] ? __cfi_ksys_read+0x10/0x10 [ 32.974961][ T583] ? __kasan_check_read+0x15/0x20 [ 32.974987][ T583] __x64_sys_read+0x7f/0x90 [ 32.975005][ T583] x64_sys_call+0x2638/0x2ee0 [ 32.975033][ T583] do_syscall_64+0x58/0xf0 [ 32.975054][ T583] ? clear_bhb_loop+0x50/0xa0 [ 32.975074][ T583] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.975103][ T583] RIP: 0033:0x7f222698d5fc [ 32.975121][ T583] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 32.975138][ T583] RSP: 002b:00007f22277d1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 32.975161][ T583] RAX: ffffffffffffffda RBX: 00007f2226bb5fa0 RCX: 00007f222698d5fc [ 32.975176][ T583] RDX: 000000000000000f RSI: 00007f22277d10a0 RDI: 0000000000000006 [ 32.975188][ T583] RBP: 00007f22277d1090 R08: 0000000000000000 R09: 0000000000000000 [ 32.975201][ T583] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 32.975214][ T583] R13: 00007f2226bb6038 R14: 00007f2226bb5fa0 R15: 00007fffa2202c48 [ 32.975231][ T583] [ 33.154419][ T488] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 33.285407][ T488] usb 3-1: device descriptor read/8, error -71 [ 33.493032][ T488] usb 3-1: device descriptor read/8, error -71 [ 33.546127][ T9] usb 4-1: string descriptor 0 read error: -71 [ 33.583288][ T9] usb 4-1: USB disconnect, device number 3 [ 33.662501][ T595] ======================================================= [ 33.662501][ T595] WARNING: The mand mount option has been deprecated and [ 33.662501][ T595] and is ignored by this kernel. Remove the mand [ 33.662501][ T595] option from the mount to silence this warning. [ 33.662501][ T595] ======================================================= [ 33.697842][ T595] tmpfs: Bad value for 'size' [ 33.755218][ T596] rust_binder: 595 RLIMIT_NICE not set [ 33.764538][ T488] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 33.795826][ T488] usb 3-1: device descriptor read/8, error -71 [ 33.828334][ T9] rust_binder: 594: removing orphan mapping 0:4248 [ 33.864395][ T331] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 33.925971][ T488] usb 3-1: device descriptor read/8, error -71 [ 34.025672][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 34.040076][ T488] usb usb3-port1: unable to enumerate USB device [ 34.049580][ T331] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 34.063752][ T331] usb 2-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 34.073041][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.081647][ T331] usb 2-1: config 0 descriptor?? [ 34.086957][ T591] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 34.100226][ T616] FAULT_INJECTION: forcing a failure. [ 34.100226][ T616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.113461][ T616] CPU: 0 UID: 0 PID: 616 Comm: syz.3.105 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 34.113504][ T616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 34.113517][ T616] Call Trace: [ 34.113524][ T616] [ 34.113533][ T616] __dump_stack+0x21/0x30 [ 34.113557][ T616] dump_stack_lvl+0x10c/0x190 [ 34.113576][ T616] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.113592][ T616] dump_stack+0x19/0x20 [ 34.113614][ T616] should_fail_ex+0x3d9/0x530 [ 34.113631][ T616] should_fail+0xf/0x20 [ 34.113646][ T616] should_fail_usercopy+0x1e/0x30 [ 34.113657][ T616] _copy_from_user+0x22/0xb0 [ 34.113670][ T616] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x491/0xa290 [ 34.113696][ T616] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 34.113727][ T616] ? is_bpf_text_address+0x17b/0x1a0 [ 34.113740][ T616] ? kernel_text_address+0xa9/0xe0 [ 34.113754][ T616] ? __kernel_text_address+0x11/0x40 [ 34.113768][ T616] ? unwind_get_return_address+0x51/0x90 [ 34.113781][ T616] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 34.113798][ T616] ? arch_stack_walk+0x10b/0x170 [ 34.113815][ T616] ? stack_trace_save+0x9d/0xe0 [ 34.113830][ T616] ? stack_depot_save_flags+0x38/0x800 [ 34.113847][ T616] ? kasan_save_stack+0x4d/0x60 [ 34.113858][ T616] ? kasan_save_stack+0x3e/0x60 [ 34.113869][ T616] ? __kasan_record_aux_stack+0xb2/0xd0 [ 34.113883][ T616] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 34.113898][ T616] ? __call_rcu_common+0xd5/0x700 [ 34.113915][ T616] ? call_rcu+0x14/0x20 [ 34.113930][ T616] ? __kasan_check_write+0x18/0x20 [ 34.113945][ T616] ? _raw_spin_trylock+0xaf/0x130 [ 34.113959][ T616] ? __cfi__raw_spin_trylock+0x10/0x10 [ 34.113973][ T616] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.113991][ T616] ? _raw_spin_unlock+0x45/0x60 [ 34.114004][ T616] ? call_rcu_nocb+0x6bd/0xc10 [ 34.114018][ T616] ? swake_up_one_online_ipi+0x30/0x30 [ 34.114032][ T616] ? __cfi_mt_free_rcu+0x10/0x10 [ 34.114046][ T616] ? mas_leaf_max_gap+0x496/0x690 [ 34.114061][ T616] ? is_bpf_text_address+0x17b/0x1a0 [ 34.114073][ T616] ? kernel_text_address+0xa9/0xe0 [ 34.114086][ T616] ? __kernel_text_address+0x11/0x40 [ 34.114099][ T616] ? unwind_get_return_address+0x51/0x90 [ 34.114112][ T616] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 34.114128][ T616] ? arch_stack_walk+0x10b/0x170 [ 34.114145][ T616] ? stack_depot_save_flags+0x38/0x800 [ 34.114161][ T616] ? kasan_save_alloc_info+0x40/0x50 [ 34.114175][ T616] ? kasan_save_track+0x4f/0x80 [ 34.114186][ T616] ? kasan_save_track+0x3e/0x80 [ 34.114196][ T616] ? kasan_save_alloc_info+0x40/0x50 [ 34.114211][ T616] ? __kasan_kmalloc+0x96/0xb0 [ 34.114222][ T616] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 34.114239][ T616] ? krealloc_noprof+0x8d/0x130 [ 34.114250][ T616] ? rust_helper_krealloc+0x33/0xd0 [ 34.114264][ T616] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xb1/0x100 [ 34.114286][ T616] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 34.114312][ T616] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a4/0x2cd0 [ 34.114326][ T616] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 34.114342][ T616] ? __se_sys_ioctl+0x132/0x1b0 [ 34.114358][ T616] ? __x64_sys_ioctl+0x7f/0xa0 [ 34.114369][ T616] ? x64_sys_call+0x1878/0x2ee0 [ 34.114385][ T616] ? do_syscall_64+0x58/0xf0 [ 34.114398][ T616] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.114417][ T616] ? __kasan_kmalloc+0x96/0xb0 [ 34.114429][ T616] ? kasan_save_alloc_info+0x40/0x50 [ 34.114443][ T616] ? __kasan_kmalloc+0x96/0xb0 [ 34.114454][ T616] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 34.114471][ T616] ? __kasan_check_write+0x18/0x20 [ 34.114486][ T616] ? _raw_spin_lock+0x8c/0x120 [ 34.114499][ T616] ? __cfi__raw_spin_lock+0x10/0x10 [ 34.114513][ T616] ? __asan_memset+0x39/0x50 [ 34.114527][ T616] ? _raw_spin_unlock+0x45/0x60 [ 34.114540][ T616] ? rust_helper_spin_unlock+0x19/0x30 [ 34.114555][ T616] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0xdfc/0x1440 [ 34.114575][ T616] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 34.114591][ T616] ? security_inode_alloc+0x51/0x200 [ 34.114615][ T616] ? inode_init_always_gfp+0x756/0x9e0 [ 34.114629][ T616] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 34.114650][ T616] ? __asan_memcpy+0x5a/0x80 [ 34.114665][ T616] ? avc_has_perm_noaudit+0x286/0x360 [ 34.114681][ T616] ? avc_has_perm+0x144/0x220 [ 34.114696][ T616] ? __cfi_avc_has_perm+0x10/0x10 [ 34.114712][ T616] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0 [ 34.114729][ T616] ? avc_has_extended_perms+0x7c7/0xdd0 [ 34.114752][ T616] ? __asan_memcpy+0x5a/0x80 [ 34.114777][ T616] ? avc_has_extended_perms+0x921/0xdd0 [ 34.114802][ T616] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 34.114828][ T616] ? do_vfs_ioctl+0xeda/0x1e30 [ 34.114840][ T616] ? arch_stack_walk+0x10b/0x170 [ 34.114856][ T616] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 34.114870][ T616] ? _parse_integer+0x2e/0x40 [ 34.114886][ T616] ? ioctl_has_perm+0x384/0x4d0 [ 34.114899][ T616] ? has_cap_mac_admin+0xd0/0xd0 [ 34.114913][ T616] ? proc_fail_nth_write+0x17e/0x210 [ 34.114928][ T616] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 34.114942][ T616] ? selinux_file_ioctl+0x6e0/0x1360 [ 34.114955][ T616] ? vfs_write+0x8ba/0xe80 [ 34.114965][ T616] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 34.114978][ T616] ? __cfi_vfs_write+0x10/0x10 [ 34.114988][ T616] ? __kasan_check_write+0x18/0x20 [ 34.115003][ T616] ? mutex_unlock+0x8b/0x240 [ 34.115019][ T616] ? __cfi_mutex_unlock+0x10/0x10 [ 34.115034][ T616] ? __fget_files+0x2c5/0x340 [ 34.115047][ T616] ? __fget_files+0x2c5/0x340 [ 34.115058][ T616] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 34.115074][ T616] ? __se_sys_ioctl+0x114/0x1b0 [ 34.115086][ T616] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 34.115102][ T616] __se_sys_ioctl+0x132/0x1b0 [ 34.115114][ T616] __x64_sys_ioctl+0x7f/0xa0 [ 34.115126][ T616] x64_sys_call+0x1878/0x2ee0 [ 34.115142][ T616] do_syscall_64+0x58/0xf0 [ 34.115155][ T616] ? clear_bhb_loop+0x50/0xa0 [ 34.115167][ T616] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.115183][ T616] RIP: 0033:0x7fab5b98ebe9 [ 34.115194][ T616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.115205][ T616] RSP: 002b:00007fab5a3f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 34.115219][ T616] RAX: ffffffffffffffda RBX: 00007fab5bbb6090 RCX: 00007fab5b98ebe9 [ 34.115229][ T616] RDX: 00002000000002c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 34.115237][ T616] RBP: 00007fab5a3f7090 R08: 0000000000000000 R09: 0000000000000000 [ 34.115245][ T616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.115252][ T616] R13: 00007fab5bbb6128 R14: 00007fab5bbb6090 R15: 00007ffdd92d2068 [ 34.115262][ T616] [ 34.150801][ T617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:80 [ 34.500866][ T331] logitech 0003:046D:CA04.0005: unbalanced delimiter at end of report description [ 34.584255][ T631] FAULT_INJECTION: forcing a failure. [ 34.584255][ T631] name failslab, interval 1, probability 0, space 0, times 0 [ 34.589554][ T331] logitech 0003:046D:CA04.0005: parse failed [ 34.594124][ T631] CPU: 1 UID: 0 PID: 631 Comm: syz.2.110 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 34.594158][ T631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 34.594170][ T631] Call Trace: [ 34.594176][ T631] [ 34.594183][ T631] __dump_stack+0x21/0x30 [ 34.594211][ T631] dump_stack_lvl+0x10c/0x190 [ 34.594235][ T631] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.594259][ T631] dump_stack+0x19/0x20 [ 34.594281][ T631] should_fail_ex+0x3d9/0x530 [ 34.594322][ T631] should_failslab+0xac/0x100 [ 34.594342][ T631] __kmalloc_noprof+0x69/0x450 [ 34.594366][ T631] ? iovec_from_user+0x94/0x320 [ 34.594388][ T631] iovec_from_user+0x94/0x320 [ 34.594407][ T631] ? unwind_get_return_address+0x51/0x90 [ 34.594428][ T631] __import_iovec+0x154/0x7d0 [ 34.594449][ T631] import_iovec+0x81/0xb0 [ 34.594469][ T631] ___sys_recvmsg+0x43c/0x510 [ 34.594495][ T631] ? __sys_recvmsg+0x280/0x280 [ 34.594520][ T631] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 34.594544][ T631] ? selinux_file_permission+0x309/0xb30 [ 34.594566][ T631] ? __fget_files+0x2c5/0x340 [ 34.594587][ T631] do_recvmmsg+0x326/0x770 [ 34.594612][ T631] ? __sys_recvmmsg+0x290/0x290 [ 34.594637][ T631] ? __cfi_vfs_write+0x10/0x10 [ 34.594656][ T631] ? fput+0x1a5/0x240 [ 34.594676][ T631] __x64_sys_recvmmsg+0x191/0x240 [ 34.594701][ T631] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 34.594725][ T631] ? __kasan_check_read+0x15/0x20 [ 34.594750][ T631] x64_sys_call+0x292c/0x2ee0 [ 34.594774][ T631] do_syscall_64+0x58/0xf0 [ 34.594794][ T631] ? clear_bhb_loop+0x50/0xa0 [ 34.594812][ T631] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.594838][ T631] RIP: 0033:0x7f7fd558ebe9 [ 34.594853][ T631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.594868][ T631] RSP: 002b:00007f7fd635f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 34.594890][ T631] RAX: ffffffffffffffda RBX: 00007f7fd57b5fa0 RCX: 00007f7fd558ebe9 [ 34.594904][ T631] RDX: 0000000000000007 RSI: 0000200000005280 RDI: 0000000000000003 [ 34.594916][ T631] RBP: 00007f7fd635f090 R08: 0000000000000000 R09: 0000000000000000 [ 34.594928][ T631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.594940][ T631] R13: 00007f7fd57b6038 R14: 00007f7fd57b5fa0 R15: 00007fffe5d804e8 [ 34.594954][ T631] [ 34.708443][ T591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.710967][ T331] logitech 0003:046D:CA04.0005: probe with driver logitech failed with error -22 [ 34.729322][ T591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.148925][ T360] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 35.176956][ T591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.188932][ T591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.203039][ T45] usb 2-1: USB disconnect, device number 5 [ 35.305624][ T360] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.320998][ T360] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.331022][ T360] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 35.340669][ T360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 35.349202][ T360] usb 1-1: SerialNumber: syz [ 35.409345][ T646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=646 comm=syz.3.114 [ 35.559253][ T360] usb 1-1: 0:2 : does not exist [ 35.569335][ T360] usb 1-1: USB disconnect, device number 8 [ 35.585386][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.885883][ T653] FAULT_INJECTION: forcing a failure. [ 35.885883][ T653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 35.899559][ T653] CPU: 0 UID: 0 PID: 653 Comm: syz.1.116 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 35.899593][ T653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 35.899604][ T653] Call Trace: [ 35.899612][ T653] [ 35.899621][ T653] __dump_stack+0x21/0x30 [ 35.899650][ T653] dump_stack_lvl+0x10c/0x190 [ 35.899673][ T653] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.899697][ T653] dump_stack+0x19/0x20 [ 35.899718][ T653] should_fail_ex+0x3d9/0x530 [ 35.899744][ T653] should_fail+0xf/0x20 [ 35.899766][ T653] should_fail_usercopy+0x1e/0x30 [ 35.899783][ T653] _copy_from_user+0x22/0xb0 [ 35.899802][ T653] ___sys_recvmsg+0x12f/0x510 [ 35.899828][ T653] ? __sys_recvmsg+0x280/0x280 [ 35.899851][ T653] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 35.899880][ T653] ? selinux_file_permission+0x309/0xb30 [ 35.899908][ T653] ? __fget_files+0x2c5/0x340 [ 35.899933][ T653] do_recvmmsg+0x326/0x770 [ 35.899959][ T653] ? __sys_recvmmsg+0x290/0x290 [ 35.899982][ T653] ? __cfi_vfs_write+0x10/0x10 [ 35.900001][ T653] ? fput+0x1a5/0x240 [ 35.900021][ T653] __x64_sys_recvmmsg+0x191/0x240 [ 35.900047][ T653] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 35.900072][ T653] ? __kasan_check_read+0x15/0x20 [ 35.900097][ T653] x64_sys_call+0x292c/0x2ee0 [ 35.900122][ T653] do_syscall_64+0x58/0xf0 [ 35.900143][ T653] ? clear_bhb_loop+0x50/0xa0 [ 35.900161][ T653] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.900187][ T653] RIP: 0033:0x7f222698ebe9 [ 35.900203][ T653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.900218][ T653] RSP: 002b:00007f22277d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 35.900240][ T653] RAX: ffffffffffffffda RBX: 00007f2226bb5fa0 RCX: 00007f222698ebe9 [ 35.900254][ T653] RDX: 0000000000000007 RSI: 0000200000005280 RDI: 0000000000000003 [ 35.900266][ T653] RBP: 00007f22277d1090 R08: 0000000000000000 R09: 0000000000000000 [ 35.900288][ T653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.900299][ T653] R13: 00007f2226bb6038 R14: 00007f2226bb5fa0 R15: 00007fffa2202c48 [ 35.900314][ T653] [ 36.456618][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 36.456641][ T36] audit: type=1400 audit(1755932091.590:203): avc: denied { read } for pid=654 comm="syz.0.117" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.486430][ T36] audit: type=1400 audit(1755932091.590:204): avc: denied { open } for pid=654 comm="syz.0.117" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.553563][ T36] audit: type=1400 audit(1755932091.590:205): avc: denied { ioctl } for pid=654 comm="syz.0.117" path="/dev/input/event0" dev="devtmpfs" ino=192 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.645452][ T669] FAULT_INJECTION: forcing a failure. [ 36.645452][ T669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.678118][ T669] CPU: 0 UID: 0 PID: 669 Comm: syz.2.123 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 36.678156][ T669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 36.678168][ T669] Call Trace: [ 36.678175][ T669] [ 36.678183][ T669] __dump_stack+0x21/0x30 [ 36.678215][ T669] dump_stack_lvl+0x10c/0x190 [ 36.678240][ T669] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.678277][ T669] dump_stack+0x19/0x20 [ 36.678300][ T669] should_fail_ex+0x3d9/0x530 [ 36.678329][ T669] should_fail+0xf/0x20 [ 36.678354][ T669] should_fail_usercopy+0x1e/0x30 [ 36.678373][ T669] _copy_to_iter+0x3bb/0x14b0 [ 36.678410][ T669] ? __cfi__copy_to_iter+0x10/0x10 [ 36.678432][ T669] ? check_stack_object+0x82/0x140 [ 36.678461][ T669] ? __virt_addr_valid+0x2a6/0x380 [ 36.678484][ T669] ? __check_object_size+0x455/0x620 [ 36.678514][ T669] __skb_datagram_iter+0x103/0x930 [ 36.678541][ T669] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 36.678569][ T669] skb_copy_datagram_iter+0x44/0x160 [ 36.678595][ T669] netlink_recvmsg+0x2c5/0xdf0 [ 36.678623][ T669] ? __cfi_netlink_recvmsg+0x10/0x10 [ 36.678653][ T669] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 36.678677][ T669] ? security_socket_recvmsg+0x3a/0xf0 [ 36.678706][ T669] ? __cfi_netlink_recvmsg+0x10/0x10 [ 36.678732][ T669] sock_recvmsg+0x216/0x270 [ 36.678755][ T669] ____sys_recvmsg+0x1ca/0x460 [ 36.678783][ T669] ? __sys_recvmsg_sock+0x60/0x60 [ 36.678813][ T669] ? import_iovec+0x81/0xb0 [ 36.678836][ T669] ___sys_recvmsg+0x1b6/0x510 [ 36.678864][ T669] ? __sys_recvmsg+0x280/0x280 [ 36.678892][ T669] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 36.678921][ T669] ? selinux_file_permission+0x309/0xb30 [ 36.678945][ T669] ? __fget_files+0x2c5/0x340 [ 36.678968][ T669] do_recvmmsg+0x326/0x770 [ 36.679005][ T669] ? __sys_recvmmsg+0x290/0x290 [ 36.679032][ T669] ? __cfi_vfs_write+0x10/0x10 [ 36.679053][ T669] ? fput+0x1a5/0x240 [ 36.679076][ T669] __x64_sys_recvmmsg+0x191/0x240 [ 36.679105][ T669] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 36.679133][ T669] ? __kasan_check_read+0x15/0x20 [ 36.679161][ T669] x64_sys_call+0x292c/0x2ee0 [ 36.679189][ T669] do_syscall_64+0x58/0xf0 [ 36.679212][ T669] ? clear_bhb_loop+0x50/0xa0 [ 36.679231][ T669] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.679270][ T669] RIP: 0033:0x7f7fd558ebe9 [ 36.679288][ T669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.679304][ T669] RSP: 002b:00007f7fd635f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 36.679329][ T669] RAX: ffffffffffffffda RBX: 00007f7fd57b5fa0 RCX: 00007f7fd558ebe9 [ 36.679345][ T669] RDX: 0000000000000007 RSI: 0000200000005280 RDI: 0000000000000003 [ 36.679359][ T669] RBP: 00007f7fd635f090 R08: 0000000000000000 R09: 0000000000000000 [ 36.679372][ T669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.679384][ T669] R13: 00007f7fd57b6038 R14: 00007f7fd57b5fa0 R15: 00007fffe5d804e8 [ 36.679402][ T669] [ 37.100933][ T36] audit: type=1400 audit(1755932092.540:206): avc: denied { write } for pid=677 comm="syz.2.127" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.167981][ T36] audit: type=1400 audit(1755932092.570:207): avc: denied { open } for pid=677 comm="syz.2.127" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.230531][ T36] audit: type=1400 audit(1755932092.670:208): avc: denied { ioctl } for pid=677 comm="syz.2.127" path="socket:[7045]" dev="sockfs" ino=7045 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.324509][ T13] bridge_slave_1: left allmulticast mode [ 37.330605][ T13] bridge_slave_1: left promiscuous mode [ 37.339719][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.350455][ T36] audit: type=1400 audit(1755932092.790:209): avc: denied { map } for pid=682 comm="syz.1.129" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.378869][ T13] bridge_slave_0: left allmulticast mode [ 37.387943][ T13] bridge_slave_0: left promiscuous mode [ 37.394840][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.401997][ T36] audit: type=1400 audit(1755932092.790:210): avc: denied { read write } for pid=682 comm="syz.1.129" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.432969][ T36] audit: type=1400 audit(1755932092.790:211): avc: denied { map } for pid=682 comm="syz.1.129" path="socket:[7053]" dev="sockfs" ino=7053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 37.489766][ T36] audit: type=1400 audit(1755932092.930:212): avc: denied { mounton } for pid=689 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.558737][ T13] veth1_macvtap: left promiscuous mode [ 37.564460][ T13] veth0_vlan: left promiscuous mode [ 37.603635][ T689] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.610817][ T689] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.618078][ T689] bridge_slave_0: entered allmulticast mode [ 37.624983][ T689] bridge_slave_0: entered promiscuous mode [ 37.637732][ T689] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.645042][ T689] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.652217][ T689] bridge_slave_1: entered allmulticast mode [ 37.659062][ T689] bridge_slave_1: entered promiscuous mode [ 37.709731][ T689] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.716952][ T689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.724230][ T689] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.731397][ T689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.750673][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.758463][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.767858][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.774945][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.796441][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.803503][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.815112][ T689] veth0_vlan: entered promiscuous mode [ 37.826175][ T689] veth1_macvtap: entered promiscuous mode [ 37.975180][ T709] rust_binder: Write failure EFAULT in pid:5 [ 37.975241][ T709] rust_binder: Write failure EFAULT in pid:5 [ 38.161767][ T747] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.174990][ T747] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 38.231398][ T751] 9pnet_fd: Insufficient options for proto=fd [ 38.281688][ T757] input: syz1 as /devices/virtual/input/input5 [ 38.992744][ T778] 9pnet_fd: Insufficient options for proto=fd [ 39.004606][ T331] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 39.164886][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.166449][ T792] FAULT_INJECTION: forcing a failure. [ 39.166449][ T792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.186988][ T331] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 39.190133][ T792] CPU: 1 UID: 0 PID: 792 Comm: syz.2.158 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 39.190163][ T792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 39.190174][ T792] Call Trace: [ 39.190180][ T792] [ 39.190187][ T792] __dump_stack+0x21/0x30 [ 39.190215][ T792] dump_stack_lvl+0x10c/0x190 [ 39.190236][ T792] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.190257][ T792] dump_stack+0x19/0x20 [ 39.190275][ T792] should_fail_ex+0x3d9/0x530 [ 39.190299][ T792] should_fail+0xf/0x20 [ 39.190319][ T792] should_fail_usercopy+0x1e/0x30 [ 39.190335][ T792] _copy_to_iter+0x56e/0x14b0 [ 39.190355][ T792] ? __cfi__copy_to_iter+0x10/0x10 [ 39.190373][ T792] ? check_stack_object+0x82/0x140 [ 39.190399][ T792] ? __virt_addr_valid+0x2a6/0x380 [ 39.190418][ T792] ? __check_object_size+0x455/0x620 [ 39.190444][ T792] __skb_datagram_iter+0x103/0x930 [ 39.190485][ T792] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 39.190508][ T792] skb_copy_datagram_iter+0x44/0x160 [ 39.190531][ T792] netlink_recvmsg+0x2c5/0xdf0 [ 39.190556][ T792] ? __cfi_netlink_recvmsg+0x10/0x10 [ 39.190582][ T792] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 39.190603][ T792] ? security_socket_recvmsg+0x3a/0xf0 [ 39.190629][ T792] ? __cfi_netlink_recvmsg+0x10/0x10 [ 39.190652][ T792] sock_recvmsg+0x216/0x270 [ 39.190674][ T792] ____sys_recvmsg+0x1ca/0x460 [ 39.190700][ T792] ? __sys_recvmsg_sock+0x60/0x60 [ 39.190726][ T792] ? import_iovec+0x81/0xb0 [ 39.190746][ T792] ___sys_recvmsg+0x1b6/0x510 [ 39.190771][ T792] ? __sys_recvmsg+0x280/0x280 [ 39.190796][ T792] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 39.190821][ T792] ? selinux_file_permission+0x309/0xb30 [ 39.190842][ T792] ? __fget_files+0x2c5/0x340 [ 39.190862][ T792] do_recvmmsg+0x326/0x770 [ 39.190887][ T792] ? __sys_recvmmsg+0x290/0x290 [ 39.190912][ T792] ? __cfi_vfs_write+0x10/0x10 [ 39.190930][ T792] ? fput+0x1a5/0x240 [ 39.190952][ T792] __x64_sys_recvmmsg+0x191/0x240 [ 39.190984][ T792] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 39.191009][ T792] ? __kasan_check_read+0x15/0x20 [ 39.191034][ T792] x64_sys_call+0x292c/0x2ee0 [ 39.191058][ T792] do_syscall_64+0x58/0xf0 [ 39.191079][ T792] ? clear_bhb_loop+0x50/0xa0 [ 39.191097][ T792] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.191122][ T792] RIP: 0033:0x7f7fd558ebe9 [ 39.191138][ T792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.191152][ T792] RSP: 002b:00007f7fd635f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 39.191173][ T792] RAX: ffffffffffffffda RBX: 00007f7fd57b5fa0 RCX: 00007f7fd558ebe9 [ 39.191186][ T792] RDX: 0000000000000007 RSI: 0000200000005280 RDI: 0000000000000003 [ 39.191199][ T792] RBP: 00007f7fd635f090 R08: 0000000000000000 R09: 0000000000000000 [ 39.191210][ T792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.191221][ T792] R13: 00007f7fd57b6038 R14: 00007f7fd57b5fa0 R15: 00007fffe5d804e8 [ 39.191236][ T792] [ 39.254364][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 39.263991][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.444358][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 39.455520][ T331] usb 5-1: config 0 descriptor?? [ 39.481347][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.548395][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.558455][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 39.567677][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.581738][ T31] usb 2-1: config 0 descriptor?? [ 39.591847][ T31] hub 2-1:0.0: USB hub found [ 39.788253][ T31] hub 2-1:0.0: 1 port detected [ 39.927018][ T768] fuse: Bad value for 'user_id' [ 39.927240][ T802] fuse: Bad value for 'user_id' [ 39.932233][ T768] fuse: Bad value for 'user_id' [ 39.937411][ T802] fuse: Bad value for 'user_id' [ 39.964499][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 40.115584][ T45] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 40.126237][ T45] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 40.137175][ T45] usb 4-1: config 1 interface 0 has no altsetting 0 [ 40.143908][ T804] 9pnet_fd: Insufficient options for proto=fd [ 40.155636][ T45] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 40.166583][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.175037][ T45] usb 4-1: Product: syz [ 40.179533][ T45] usb 4-1: Manufacturer: syz [ 40.184201][ T45] usb 4-1: SerialNumber: syz [ 40.190855][ T800] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 40.198384][ T800] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 40.405128][ T31] hub 2-1:0.0: activate --> -90 [ 40.807994][ T776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.817064][ T776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.832675][ T31] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 40.842300][ T31] usb 2-1-port1: cannot disable (err = -71) [ 40.847550][ T488] usb 2-1: USB disconnect, device number 6 [ 41.047989][ T813] FAULT_INJECTION: forcing a failure. [ 41.047989][ T813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.061611][ T813] CPU: 0 UID: 0 PID: 813 Comm: syz.2.166 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 41.061654][ T813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 41.061662][ T813] Call Trace: [ 41.061667][ T813] [ 41.061672][ T813] __dump_stack+0x21/0x30 [ 41.061699][ T813] dump_stack_lvl+0x10c/0x190 [ 41.061723][ T813] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.061748][ T813] ? __sys_recvmsg_sock+0x60/0x60 [ 41.061775][ T813] dump_stack+0x19/0x20 [ 41.061794][ T813] should_fail_ex+0x3d9/0x530 [ 41.061812][ T813] should_fail+0xf/0x20 [ 41.061827][ T813] should_fail_usercopy+0x1e/0x30 [ 41.061838][ T813] _copy_from_user+0x22/0xb0 [ 41.061856][ T813] ___sys_recvmsg+0x12f/0x510 [ 41.061882][ T813] ? __sys_recvmsg+0x280/0x280 [ 41.061909][ T813] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 41.061935][ T813] ? selinux_file_permission+0x309/0xb30 [ 41.061951][ T813] ? __fget_files+0x2c5/0x340 [ 41.061965][ T813] do_recvmmsg+0x326/0x770 [ 41.061981][ T813] ? __sys_recvmmsg+0x290/0x290 [ 41.061998][ T813] ? __cfi_vfs_write+0x10/0x10 [ 41.062017][ T813] ? fput+0x1a5/0x240 [ 41.062039][ T813] __x64_sys_recvmmsg+0x191/0x240 [ 41.062066][ T813] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 41.062092][ T813] ? __kasan_check_read+0x15/0x20 [ 41.062108][ T813] x64_sys_call+0x292c/0x2ee0 [ 41.062124][ T813] do_syscall_64+0x58/0xf0 [ 41.062137][ T813] ? clear_bhb_loop+0x50/0xa0 [ 41.062150][ T813] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.062176][ T813] RIP: 0033:0x7f7fd558ebe9 [ 41.062193][ T813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.062208][ T813] RSP: 002b:00007f7fd635f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 41.062245][ T813] RAX: ffffffffffffffda RBX: 00007f7fd57b5fa0 RCX: 00007f7fd558ebe9 [ 41.062261][ T813] RDX: 0000000000000007 RSI: 0000200000005280 RDI: 0000000000000003 [ 41.062270][ T813] RBP: 00007f7fd635f090 R08: 0000000000000000 R09: 0000000000000000 [ 41.062278][ T813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.062286][ T813] R13: 00007f7fd57b6038 R14: 00007f7fd57b5fa0 R15: 00007fffe5d804e8 [ 41.062296][ T813] [ 41.388381][ T45] (unnamed net_device) (uninitialized): Assigned a random MAC address: 12:ca:4e:58:31:be [ 41.400345][ T45] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 41.409636][ T45] usb 4-1: USB disconnect, device number 4 [ 41.564437][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 41.715431][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.725662][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.735443][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 41.744582][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 41.752637][ T10] usb 3-1: SerialNumber: syz [ 41.779444][ T331] usbhid 5-1:0.0: can't add hid device: -71 [ 41.787104][ T331] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 41.796870][ T331] usb 5-1: USB disconnect, device number 2 [ 41.805735][ T826] 9pnet_fd: Insufficient options for proto=fd [ 41.894403][ T45] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 41.926550][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 41.926569][ T36] audit: type=1326 audit(1755932097.370:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=830 comm="syz.3.173" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab5b98ebe9 code=0x0 [ 41.964864][ T10] usb 3-1: 0:2 : does not exist [ 41.971339][ T10] usb 3-1: unit 14 not found! [ 41.978607][ T10] usb 3-1: USB disconnect, device number 8 [ 41.992490][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.046101][ T45] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 42.055444][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.064172][ T45] usb 2-1: config 0 descriptor?? [ 42.134438][ T331] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 42.264447][ T331] usb 5-1: device descriptor read/64, error -71 [ 42.504445][ T331] usb 5-1: device descriptor read/64, error -71 [ 42.525818][ T36] audit: type=1400 audit(1755932097.970:234): avc: denied { create } for pid=833 comm="syz.2.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 42.545772][ T36] audit: type=1400 audit(1755932097.970:235): avc: denied { read write } for pid=833 comm="syz.2.174" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 42.570709][ T36] audit: type=1400 audit(1755932097.970:236): avc: denied { open } for pid=833 comm="syz.2.174" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 42.595448][ T36] audit: type=1400 audit(1755932097.970:237): avc: denied { ioctl } for pid=833 comm="syz.2.174" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 42.621321][ T36] audit: type=1400 audit(1755932097.970:238): avc: denied { read } for pid=833 comm="syz.2.174" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.631919][ T838] fuse: Bad value for 'fd' [ 42.651483][ T838] syz.2.176 uses obsolete (PF_INET,SOCK_PACKET) [ 42.688116][ T36] audit: type=1400 audit(1755932098.130:239): avc: denied { getopt } for pid=839 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.689537][ T840] incfs: Error accessing: ./file0. [ 42.715208][ T840] incfs: mount failed -20 [ 42.774384][ T331] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 42.806466][ T36] audit: type=1400 audit(1755932098.250:240): avc: denied { mounton } for pid=848 comm="syz.2.181" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.914420][ T331] usb 5-1: device descriptor read/64, error -71 [ 43.046500][ T857] FAULT_INJECTION: forcing a failure. [ 43.046500][ T857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.060064][ T857] CPU: 1 UID: 0 PID: 857 Comm: syz.3.185 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 43.060105][ T857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 43.060117][ T857] Call Trace: [ 43.060124][ T857] [ 43.060130][ T857] __dump_stack+0x21/0x30 [ 43.060152][ T857] dump_stack_lvl+0x10c/0x190 [ 43.060167][ T857] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.060182][ T857] ? unwind_get_return_address+0x51/0x90 [ 43.060197][ T857] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 43.060214][ T857] dump_stack+0x19/0x20 [ 43.060233][ T857] should_fail_ex+0x3d9/0x530 [ 43.060250][ T857] should_fail+0xf/0x20 [ 43.060265][ T857] should_fail_usercopy+0x1e/0x30 [ 43.060277][ T857] _copy_from_user+0x22/0xb0 [ 43.060290][ T857] ___sys_recvmsg+0x12f/0x510 [ 43.060308][ T857] ? __sys_recvmsg+0x280/0x280 [ 43.060324][ T857] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 43.060341][ T857] ? selinux_file_permission+0x309/0xb30 [ 43.060355][ T857] ? __fget_files+0x2c5/0x340 [ 43.060369][ T857] do_recvmmsg+0x326/0x770 [ 43.060386][ T857] ? __sys_recvmmsg+0x290/0x290 [ 43.060401][ T857] ? __cfi_vfs_write+0x10/0x10 [ 43.060414][ T857] ? fput+0x1a5/0x240 [ 43.060428][ T857] __x64_sys_recvmmsg+0x191/0x240 [ 43.060445][ T857] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 43.060462][ T857] ? __kasan_check_read+0x15/0x20 [ 43.060488][ T857] x64_sys_call+0x292c/0x2ee0 [ 43.060504][ T857] do_syscall_64+0x58/0xf0 [ 43.060518][ T857] ? clear_bhb_loop+0x50/0xa0 [ 43.060530][ T857] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.060547][ T857] RIP: 0033:0x7fab5b98ebe9 [ 43.060558][ T857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.060569][ T857] RSP: 002b:00007fab5c71f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 43.060585][ T857] RAX: ffffffffffffffda RBX: 00007fab5bbb5fa0 RCX: 00007fab5b98ebe9 [ 43.060594][ T857] RDX: 0000000000000007 RSI: 0000200000005280 RDI: 0000000000000003 [ 43.060603][ T857] RBP: 00007fab5c71f090 R08: 0000000000000000 R09: 0000000000000000 [ 43.060611][ T857] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.060619][ T857] R13: 00007fab5bbb6038 R14: 00007fab5bbb5fa0 R15: 00007ffdd92d2068 [ 43.060629][ T857] [ 43.154395][ T331] usb 5-1: device descriptor read/64, error -71 [ 43.198075][ T36] audit: type=1400 audit(1755932098.630:241): avc: denied { read } for pid=858 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.199718][ T488] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 43.256566][ T859] pim6reg1: entered promiscuous mode [ 43.342950][ T859] pim6reg1: entered allmulticast mode [ 43.364721][ T331] usb usb5-port1: attempt power cycle [ 43.404462][ T488] usb 3-1: Using ep0 maxpacket: 32 [ 43.411105][ T488] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.421320][ T488] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 43.430626][ T488] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.439999][ T488] usb 3-1: config 0 descriptor?? [ 43.446353][ T488] hub 3-1:0.0: USB hub found [ 43.624387][ T10] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 43.646346][ T488] hub 3-1:0.0: 1 port detected [ 43.714415][ T331] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 43.735728][ T331] usb 5-1: device descriptor read/8, error -71 [ 43.754410][ T10] usb 4-1: device descriptor read/64, error -71 [ 43.768684][ T45] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 43.778938][ T45] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 43.789505][ T45] asix 2-1:0.0: probe with driver asix failed with error -71 [ 43.798191][ T45] usb 2-1: USB disconnect, device number 7 [ 43.865617][ T331] usb 5-1: device descriptor read/8, error -71 [ 43.994392][ T10] usb 4-1: device descriptor read/64, error -71 [ 44.104447][ T331] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 44.125679][ T331] usb 5-1: device descriptor read/8, error -71 [ 44.234485][ T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 44.251036][ T45] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 44.255504][ T331] usb 5-1: device descriptor read/8, error -71 [ 44.258257][ T801] usb 3-1: USB disconnect, device number 9 [ 44.364423][ T10] usb 4-1: device descriptor read/64, error -71 [ 44.374679][ T331] usb usb5-port1: unable to enumerate USB device [ 44.604379][ T10] usb 4-1: device descriptor read/64, error -71 [ 44.714530][ T10] usb usb4-port1: attempt power cycle [ 44.868783][ T883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134 [ 44.933678][ T36] audit: type=1400 audit(1755932100.370:242): avc: denied { connect } for pid=887 comm="syz.4.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.054381][ T10] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 45.075379][ T10] usb 4-1: device descriptor read/8, error -71 [ 45.205417][ T10] usb 4-1: device descriptor read/8, error -71 [ 45.445390][ T10] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 45.465678][ T10] usb 4-1: device descriptor read/8, error -71 [ 45.595614][ T10] usb 4-1: device descriptor read/8, error -71 [ 45.626228][ T904] FAULT_INJECTION: forcing a failure. [ 45.626228][ T904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.639824][ T904] CPU: 0 UID: 0 PID: 904 Comm: syz.1.201 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 45.639857][ T904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 45.639868][ T904] Call Trace: [ 45.639874][ T904] [ 45.639883][ T904] __dump_stack+0x21/0x30 [ 45.639913][ T904] dump_stack_lvl+0x10c/0x190 [ 45.639936][ T904] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.639963][ T904] dump_stack+0x19/0x20 [ 45.639987][ T904] should_fail_ex+0x3d9/0x530 [ 45.640016][ T904] should_fail+0xf/0x20 [ 45.640042][ T904] should_fail_usercopy+0x1e/0x30 [ 45.640060][ T904] _copy_from_user+0x22/0xb0 [ 45.640082][ T904] ___sys_recvmsg+0x12f/0x510 [ 45.640110][ T904] ? __sys_recvmsg+0x280/0x280 [ 45.640138][ T904] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 45.640164][ T904] ? selinux_file_permission+0x309/0xb30 [ 45.640188][ T904] ? __fget_files+0x2c5/0x340 [ 45.640210][ T904] do_recvmmsg+0x326/0x770 [ 45.640237][ T904] ? __sys_recvmmsg+0x290/0x290 [ 45.640264][ T904] ? __cfi_vfs_write+0x10/0x10 [ 45.640284][ T904] ? fput+0x1a5/0x240 [ 45.640308][ T904] __x64_sys_recvmmsg+0x191/0x240 [ 45.640336][ T904] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 45.640366][ T904] ? __kasan_check_read+0x15/0x20 [ 45.640393][ T904] x64_sys_call+0x292c/0x2ee0 [ 45.640418][ T904] do_syscall_64+0x58/0xf0 [ 45.640443][ T904] ? clear_bhb_loop+0x50/0xa0 [ 45.640471][ T904] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.640501][ T904] RIP: 0033:0x7f222698ebe9 [ 45.640517][ T904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.640531][ T904] RSP: 002b:00007f22277d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 45.640550][ T904] RAX: ffffffffffffffda RBX: 00007f2226bb5fa0 RCX: 00007f222698ebe9 [ 45.640563][ T904] RDX: 0000000000000007 RSI: 0000200000005280 RDI: 0000000000000003 [ 45.640574][ T904] RBP: 00007f22277d1090 R08: 0000000000000000 R09: 0000000000000000 [ 45.640585][ T904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.640595][ T904] R13: 00007f2226bb6038 R14: 00007f2226bb5fa0 R15: 00007fffa2202c48 [ 45.640609][ T904] [ 45.673175][ T909] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.704645][ T10] usb usb4-port1: unable to enumerate USB device [ 45.706295][ T910] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 45.824374][ T331] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 45.986543][ T921] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.044429][ T331] usb 5-1: Using ep0 maxpacket: 8 [ 46.057716][ T331] usb 5-1: unable to get BOS descriptor or descriptor too short [ 46.066771][ T331] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 46.075394][ T331] usb 5-1: config 0 has no interface number 0 [ 46.081748][ T331] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 46.093068][ T331] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 16394, setting to 1024 [ 46.104658][ T331] usb 5-1: config 0 interface 88 has no altsetting 0 [ 46.114043][ T331] usb 5-1: string descriptor 0 read error: -22 [ 46.120447][ T331] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 46.129876][ T331] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 46.138968][ T331] usb 5-1: config 0 descriptor?? [ 46.146650][ T331] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input6 [ 46.234434][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 46.254452][ T862] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 46.349205][ T801] usb 5-1: USB disconnect, device number 7 [ 46.384445][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 46.395086][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.406915][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.418340][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 46.427881][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.436985][ T862] usb 3-1: config index 0 descriptor too short (expected 240, got 45) [ 46.446387][ T862] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 46.457903][ T45] usb 2-1: config 0 descriptor?? [ 46.463329][ T862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.474805][ T862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.486368][ T45] hub 2-1:0.0: USB hub found [ 46.491168][ T862] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.28 [ 46.500730][ T862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.509906][ T862] usb 3-1: config 0 descriptor?? [ 46.685936][ T45] hub 2-1:0.0: 1 port detected [ 46.920567][ T862] usbhid 3-1:0.0: can't add hid device: -71 [ 46.927748][ T862] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 46.937220][ T862] usb 3-1: USB disconnect, device number 10 [ 47.039671][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 47.039690][ T36] audit: type=1400 audit(1755932102.480:246): avc: denied { bind } for pid=932 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.290751][ T862] hub 2-1:0.0: activate --> -90 [ 47.491517][ T862] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 47.528727][ T937] fuse: Bad value for 'rootmode' [ 47.534544][ T937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=937 comm=syz.2.212 [ 47.547313][ T937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=937 comm=syz.2.212 [ 47.693119][ T36] audit: type=1400 audit(1755932103.130:247): avc: denied { create } for pid=919 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 47.721972][ T36] audit: type=1400 audit(1755932103.160:248): avc: denied { sys_admin } for pid=919 comm="syz.1.207" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 47.766642][ T36] audit: type=1400 audit(1755932103.200:249): avc: denied { create } for pid=942 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 47.800524][ T36] audit: type=1400 audit(1755932103.240:250): avc: denied { map } for pid=943 comm="syz.4.215" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.912480][ T953] Zero length message leads to an empty skb [ 47.993496][ T958] FAULT_INJECTION: forcing a failure. [ 47.993496][ T958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.007085][ T958] CPU: 0 UID: 0 PID: 958 Comm: syz.3.220 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 48.007121][ T958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.007134][ T958] Call Trace: [ 48.007140][ T958] [ 48.007148][ T958] __dump_stack+0x21/0x30 [ 48.007189][ T958] dump_stack_lvl+0x10c/0x190 [ 48.007215][ T958] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.007242][ T958] ? __sys_recvmsg_sock+0x60/0x60 [ 48.007272][ T958] dump_stack+0x19/0x20 [ 48.007296][ T958] should_fail_ex+0x3d9/0x530 [ 48.007325][ T958] should_fail+0xf/0x20 [ 48.007352][ T958] should_fail_usercopy+0x1e/0x30 [ 48.007371][ T958] _copy_from_user+0x22/0xb0 [ 48.007393][ T958] ___sys_recvmsg+0x12f/0x510 [ 48.007420][ T958] ? __sys_recvmsg+0x280/0x280 [ 48.007448][ T958] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 48.007476][ T958] ? selinux_file_permission+0x309/0xb30 [ 48.007502][ T958] ? __fget_files+0x2c5/0x340 [ 48.007525][ T958] do_recvmmsg+0x326/0x770 [ 48.007554][ T958] ? __sys_recvmmsg+0x290/0x290 [ 48.007582][ T958] ? __cfi_vfs_write+0x10/0x10 [ 48.007604][ T958] ? fput+0x1a5/0x240 [ 48.007628][ T958] __x64_sys_recvmmsg+0x191/0x240 [ 48.007656][ T958] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 48.007685][ T958] ? __kasan_check_read+0x15/0x20 [ 48.007715][ T958] x64_sys_call+0x292c/0x2ee0 [ 48.007744][ T958] do_syscall_64+0x58/0xf0 [ 48.007769][ T958] ? clear_bhb_loop+0x50/0xa0 [ 48.007789][ T958] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.007818][ T958] RIP: 0033:0x7fab5b98ebe9 [ 48.007836][ T958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.007854][ T958] RSP: 002b:00007fab5c71f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 48.007877][ T958] RAX: ffffffffffffffda RBX: 00007fab5bbb5fa0 RCX: 00007fab5b98ebe9 [ 48.007893][ T958] RDX: 0000000000000007 RSI: 0000200000005280 RDI: 0000000000000003 [ 48.007907][ T958] RBP: 00007fab5c71f090 R08: 0000000000000000 R09: 0000000000000000 [ 48.007920][ T958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 48.007933][ T958] R13: 00007fab5bbb6038 R14: 00007fab5bbb5fa0 R15: 00007ffdd92d2068 [ 48.007951][ T958] [ 48.354501][ T45] usb 2-1: USB disconnect, device number 8 [ 48.375723][ T969] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 48.384241][ T969] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 48.393170][ T969] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 48.401286][ T969] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 48.613117][ T36] audit: type=1400 audit(1755932104.050:251): avc: denied { append } for pid=973 comm="syz.2.227" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.638362][ T36] audit: type=1400 audit(1755932104.060:252): avc: denied { ioctl } for pid=977 comm="syz.4.229" path="socket:[11512]" dev="sockfs" ino=11512 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.665384][ T36] audit: type=1400 audit(1755932104.070:253): avc: denied { search } for pid=981 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.689048][ T36] audit: type=1400 audit(1755932104.070:254): avc: denied { read } for pid=982 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.714140][ T36] audit: type=1400 audit(1755932104.070:255): avc: denied { open } for pid=982 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.000954][ T998] 9pnet_fd: Insufficient options for proto=fd [ 49.158183][ T1011] FAULT_INJECTION: forcing a failure. [ 49.158183][ T1011] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 49.171907][ T1011] CPU: 1 UID: 0 PID: 1011 Comm: syz.3.234 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 49.171942][ T1011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.171954][ T1011] Call Trace: [ 49.171960][ T1011] [ 49.171968][ T1011] __dump_stack+0x21/0x30 [ 49.171999][ T1011] dump_stack_lvl+0x10c/0x190 [ 49.172024][ T1011] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.172050][ T1011] ? is_bpf_text_address+0x17b/0x1a0 [ 49.172072][ T1011] dump_stack+0x19/0x20 [ 49.172097][ T1011] should_fail_ex+0x3d9/0x530 [ 49.172240][ T1011] should_fail_alloc_page+0xeb/0x110 [ 49.172262][ T1011] __alloc_pages_noprof+0x19b/0x7b0 [ 49.172288][ T1011] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 49.172312][ T1011] ? stack_depot_save_flags+0x38/0x800 [ 49.172342][ T1011] ? _RNvMNtCshgDM7dBCdno_11rust_binder11transactionNtB2_11Transaction3new+0x335/0x1f90 [ 49.172372][ T1011] ? kasan_save_track+0x4f/0x80 [ 49.172400][ T1011] ? kasan_save_alloc_info+0x40/0x50 [ 49.172425][ T1011] ? __kasan_kmalloc+0x96/0xb0 [ 49.172445][ T1011] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 49.172473][ T1011] ? krealloc_noprof+0x8d/0x130 [ 49.172491][ T1011] ? rust_helper_krealloc+0x33/0xd0 [ 49.172518][ T1011] rust_helper_alloc_pages+0x30/0xc0 [ 49.172544][ T1011] _RNvMs4_NtCshgDM7dBCdno_11rust_binder10page_rangeNtB5_19ShrinkablePageRange13use_page_slow+0xf4/0xa10 [ 49.172575][ T1011] ? __cfi__RNvMs4_NtCshgDM7dBCdno_11rust_binder10page_rangeNtB5_19ShrinkablePageRange13use_page_slow+0x10/0x10 [ 49.172609][ T1011] ? kasan_save_alloc_info+0x40/0x50 [ 49.172632][ T1011] ? __kasan_kmalloc+0x96/0xb0 [ 49.172652][ T1011] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 49.172682][ T1011] ? __kasan_check_write+0x18/0x20 [ 49.172707][ T1011] ? _raw_spin_lock+0x8c/0x120 [ 49.172730][ T1011] ? __cfi__raw_spin_lock+0x10/0x10 [ 49.172753][ T1011] ? rust_helper_krealloc+0x33/0xd0 [ 49.172777][ T1011] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0x91/0x100 [ 49.172817][ T1011] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x2292/0x4760 [ 49.172856][ T1011] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 49.172914][ T1011] _RNvMNtCshgDM7dBCdno_11rust_binder11transactionNtB2_11Transaction3new+0x335/0x1f90 [ 49.172942][ T1011] ? __cfi__RNvMNtCshgDM7dBCdno_11rust_binder11transactionNtB2_11Transaction3new+0x10/0x10 [ 49.172975][ T1011] ? stack_depot_save_flags+0x38/0x800 [ 49.173004][ T1011] ? kasan_save_track+0x4f/0x80 [ 49.173023][ T1011] ? kasan_save_track+0x3e/0x80 [ 49.173041][ T1011] ? kasan_save_alloc_info+0x40/0x50 [ 49.173064][ T1011] ? __kasan_kmalloc+0x96/0xb0 [ 49.173084][ T1011] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 49.173122][ T1011] ? krealloc_noprof+0x8d/0x130 [ 49.173140][ T1011] ? rust_helper_krealloc+0x33/0xd0 [ 49.173162][ T1011] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xb1/0x100 [ 49.173196][ T1011] ? _RINvMNtNtCs43vyB533jt3_6kernel4list3arcINtB3_7ListArcINtCshgDM7dBCdno_11rust_binder7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1U_EEBS_+0x79/0x3b0 [ 49.173245][ T1011] ? _RINvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x81e/0xdd0 [ 49.173274][ T1011] ? _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x1978/0xa290 [ 49.173300][ T1011] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0 [ 49.173323][ T1011] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 49.173349][ T1011] ? __se_sys_ioctl+0x132/0x1b0 [ 49.173369][ T1011] ? __x64_sys_ioctl+0x7f/0xa0 [ 49.173390][ T1011] ? x64_sys_call+0x1878/0x2ee0 [ 49.173415][ T1011] ? do_syscall_64+0x58/0xf0 [ 49.173437][ T1011] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.173469][ T1011] ? kasan_save_alloc_info+0x40/0x50 [ 49.173492][ T1011] ? __kasan_kmalloc+0x96/0xb0 [ 49.173511][ T1011] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 49.173537][ T1011] ? rust_helper_krealloc+0x33/0xd0 [ 49.173560][ T1011] ? krealloc_noprof+0xfa/0x130 [ 49.173576][ T1011] ? rust_helper_krealloc+0x33/0xd0 [ 49.173598][ T1011] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0x91/0x100 [ 49.173632][ T1011] ? __asan_memset+0x39/0x50 [ 49.173659][ T1011] _RINvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x890/0xdd0 [ 49.173691][ T1011] ? __cfi__RINvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x10/0x10 [ 49.173722][ T1011] ? __kasan_check_write+0x18/0x20 [ 49.173746][ T1011] ? _raw_spin_lock+0x8c/0x120 [ 49.173767][ T1011] ? __cfi__raw_spin_lock+0x10/0x10 [ 49.173781][ T1011] ? _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x1927/0xa290 [ 49.173797][ T1011] ? __asan_memcpy+0x5a/0x80 [ 49.173813][ T1011] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x1978/0xa290 [ 49.173839][ T1011] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 49.173871][ T1011] ? is_bpf_text_address+0x17b/0x1a0 [ 49.173884][ T1011] ? kernel_text_address+0xa9/0xe0 [ 49.173899][ T1011] ? __kernel_text_address+0x11/0x40 [ 49.173912][ T1011] ? unwind_get_return_address+0x51/0x90 [ 49.173926][ T1011] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 49.173942][ T1011] ? arch_stack_walk+0x10b/0x170 [ 49.173960][ T1011] ? stack_trace_save+0x9d/0xe0 [ 49.173976][ T1011] ? stack_depot_save_flags+0x38/0x800 [ 49.173993][ T1011] ? kasan_save_stack+0x4d/0x60 [ 49.174004][ T1011] ? kasan_save_stack+0x3e/0x60 [ 49.174014][ T1011] ? __kasan_record_aux_stack+0xb2/0xd0 [ 49.174038][ T1011] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 49.174054][ T1011] ? __call_rcu_common+0xd5/0x700 [ 49.174070][ T1011] ? call_rcu+0x14/0x20 [ 49.174086][ T1011] ? __kasan_check_write+0x18/0x20 [ 49.174110][ T1011] ? _raw_spin_trylock+0xaf/0x130 [ 49.174124][ T1011] ? __cfi__raw_spin_trylock+0x10/0x10 [ 49.174138][ T1011] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.174155][ T1011] ? _raw_spin_unlock+0x45/0x60 [ 49.174169][ T1011] ? call_rcu_nocb+0x6bd/0xc10 [ 49.174183][ T1011] ? swake_up_one_online_ipi+0x30/0x30 [ 49.174207][ T1011] ? __cfi_mt_free_rcu+0x10/0x10 [ 49.174220][ T1011] ? mas_leaf_max_gap+0x496/0x690 [ 49.174236][ T1011] ? is_bpf_text_address+0x17b/0x1a0 [ 49.174248][ T1011] ? kernel_text_address+0xa9/0xe0 [ 49.174262][ T1011] ? __kernel_text_address+0x11/0x40 [ 49.174276][ T1011] ? unwind_get_return_address+0x51/0x90 [ 49.174289][ T1011] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 49.174305][ T1011] ? arch_stack_walk+0x10b/0x170 [ 49.174323][ T1011] ? stack_depot_save_flags+0x38/0x800 [ 49.174339][ T1011] ? kasan_save_alloc_info+0x40/0x50 [ 49.174357][ T1011] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xb1/0x100 [ 49.174378][ T1011] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 49.174404][ T1011] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a4/0x2cd0 [ 49.174418][ T1011] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 49.174434][ T1011] ? __x64_sys_ioctl+0x7f/0xa0 [ 49.174446][ T1011] ? x64_sys_call+0x1878/0x2ee0 [ 49.174462][ T1011] ? do_syscall_64+0x58/0xf0 [ 49.174475][ T1011] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.174495][ T1011] ? __kasan_kmalloc+0x96/0xb0 [ 49.174507][ T1011] ? kasan_save_alloc_info+0x40/0x50 [ 49.174521][ T1011] ? __kasan_kmalloc+0x96/0xb0 [ 49.174533][ T1011] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 49.174550][ T1011] ? __kasan_check_write+0x18/0x20 [ 49.174570][ T1011] ? _raw_spin_lock+0x8c/0x120 [ 49.174591][ T1011] ? __cfi__raw_spin_lock+0x10/0x10 [ 49.174614][ T1011] ? _raw_spin_unlock+0x45/0x60 [ 49.174636][ T1011] ? rust_helper_spin_unlock+0x19/0x30 [ 49.174654][ T1011] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0xdfc/0x1440 [ 49.174675][ T1011] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 49.174693][ T1011] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 49.174714][ T1011] ? __asan_memcpy+0x5a/0x80 [ 49.174729][ T1011] ? avc_has_perm_noaudit+0x286/0x360 [ 49.174746][ T1011] ? avc_has_perm+0x144/0x220 [ 49.174762][ T1011] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0 [ 49.174778][ T1011] ? avc_has_extended_perms+0x7c7/0xdd0 [ 49.174793][ T1011] ? __asan_memcpy+0x5a/0x80 [ 49.174808][ T1011] ? avc_has_extended_perms+0x921/0xdd0 [ 49.174823][ T1011] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 49.174845][ T1011] ? do_vfs_ioctl+0xeda/0x1e30 [ 49.174856][ T1011] ? arch_stack_walk+0x10b/0x170 [ 49.174873][ T1011] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 49.174886][ T1011] ? _parse_integer+0x2e/0x40 [ 49.174904][ T1011] ? ioctl_has_perm+0x384/0x4d0 [ 49.174917][ T1011] ? has_cap_mac_admin+0xd0/0xd0 [ 49.174931][ T1011] ? proc_fail_nth_write+0x17e/0x210 [ 49.174946][ T1011] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 49.174961][ T1011] ? selinux_file_ioctl+0x6e0/0x1360 [ 49.174974][ T1011] ? vfs_write+0x8ba/0xe80 [ 49.174985][ T1011] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 49.174998][ T1011] ? __cfi_vfs_write+0x10/0x10 [ 49.175008][ T1011] ? __kasan_check_write+0x18/0x20 [ 49.175023][ T1011] ? mutex_unlock+0x8b/0x240 [ 49.175042][ T1011] ? __cfi_mutex_unlock+0x10/0x10 [ 49.175058][ T1011] ? __fget_files+0x2c5/0x340 [ 49.175071][ T1011] ? __fget_files+0x2c5/0x340 [ 49.175083][ T1011] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 49.175107][ T1011] ? __se_sys_ioctl+0x114/0x1b0 [ 49.175119][ T1011] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 49.175140][ T1011] __se_sys_ioctl+0x132/0x1b0 [ 49.175153][ T1011] __x64_sys_ioctl+0x7f/0xa0 [ 49.175165][ T1011] x64_sys_call+0x1878/0x2ee0 [ 49.175180][ T1011] do_syscall_64+0x58/0xf0 [ 49.175193][ T1011] ? clear_bhb_loop+0x50/0xa0 [ 49.175205][ T1011] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.175222][ T1011] RIP: 0033:0x7fab5b98ebe9 [ 49.175234][ T1011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.175245][ T1011] RSP: 002b:00007fab5a3f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.175261][ T1011] RAX: ffffffffffffffda RBX: 00007fab5bbb6090 RCX: 00007fab5b98ebe9 [ 49.175271][ T1011] RDX: 00002000000002c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 49.175282][ T1011] RBP: 00007fab5a3f7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.175292][ T1011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 49.175300][ T1011] R13: 00007fab5bbb6128 R14: 00007fab5bbb6090 R15: 00007ffdd92d2068 [ 49.175311][ T1011] [ 49.208792][ T1012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:167 [ 49.209122][ T1011] rust_binder: Error in use_page_slow: ENOMEM [ 50.272561][ T1011] rust_binder: use_range failure ENOMEM [ 50.281847][ T1011] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 50.287824][ T1011] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 50.296271][ T1011] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:167 [ 50.507769][ T1039] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:187 [ 50.641716][ T1042] FAULT_INJECTION: forcing a failure. [ 50.641716][ T1042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.680319][ T1042] CPU: 0 UID: 0 PID: 1042 Comm: syz.3.246 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 50.680357][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.680369][ T1042] Call Trace: [ 50.680377][ T1042] [ 50.680386][ T1042] __dump_stack+0x21/0x30 [ 50.680424][ T1042] dump_stack_lvl+0x10c/0x190 [ 50.680448][ T1042] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.680472][ T1042] ? __sys_recvmsg_sock+0x60/0x60 [ 50.680501][ T1042] dump_stack+0x19/0x20 [ 50.680523][ T1042] should_fail_ex+0x3d9/0x530 [ 50.680550][ T1042] should_fail+0xf/0x20 [ 50.680573][ T1042] should_fail_usercopy+0x1e/0x30 [ 50.680592][ T1042] _copy_from_user+0x22/0xb0 [ 50.680612][ T1042] ___sys_recvmsg+0x12f/0x510 [ 50.680638][ T1042] ? __sys_recvmsg+0x280/0x280 [ 50.680665][ T1042] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 50.680691][ T1042] ? selinux_file_permission+0x309/0xb30 [ 50.680713][ T1042] ? __fget_files+0x2c5/0x340 [ 50.680745][ T1042] do_recvmmsg+0x326/0x770 [ 50.680772][ T1042] ? __sys_recvmmsg+0x290/0x290 [ 50.680797][ T1042] ? __cfi_vfs_write+0x10/0x10 [ 50.680817][ T1042] ? fput+0x1a5/0x240 [ 50.680838][ T1042] __x64_sys_recvmmsg+0x191/0x240 [ 50.680865][ T1042] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 50.680892][ T1042] ? __kasan_check_read+0x15/0x20 [ 50.680917][ T1042] x64_sys_call+0x292c/0x2ee0 [ 50.680943][ T1042] do_syscall_64+0x58/0xf0 [ 50.680965][ T1042] ? clear_bhb_loop+0x50/0xa0 [ 50.680984][ T1042] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.681019][ T1042] RIP: 0033:0x7fab5b98ebe9 [ 50.681036][ T1042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.681052][ T1042] RSP: 002b:00007fab5c71f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 50.681075][ T1042] RAX: ffffffffffffffda RBX: 00007fab5bbb5fa0 RCX: 00007fab5b98ebe9 [ 50.681091][ T1042] RDX: 0000000000000007 RSI: 0000200000005280 RDI: 0000000000000003 [ 50.681104][ T1042] RBP: 00007fab5c71f090 R08: 0000000000000000 R09: 0000000000000000 [ 50.681118][ T1042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.681130][ T1042] R13: 00007fab5bbb6038 R14: 00007fab5bbb5fa0 R15: 00007ffdd92d2068 [ 50.681146][ T1042] [ 51.254382][ T862] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 51.281441][ T1054] netlink: 'syz.1.250': attribute type 3 has an invalid length. [ 51.289463][ T1054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 51.415444][ T862] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.434344][ T862] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.464439][ T862] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 51.473618][ T862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 51.489617][ T862] usb 4-1: SerialNumber: syz [ 51.708250][ T862] usb 4-1: 0:2 : does not exist [ 51.718945][ T862] usb 4-1: USB disconnect, device number 9 [ 51.984383][ T488] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 52.124836][ T488] usb 3-1: device descriptor read/64, error -71 [ 52.217497][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 52.217516][ T36] audit: type=1400 audit(1755932107.660:268): avc: denied { write } for pid=1068 comm="syz.4.255" laddr=fe80::a8aa:aaff:feaa:aa16 lport=60 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.287166][ T36] audit: type=1400 audit(1755932107.730:269): avc: denied { getopt } for pid=1073 comm="syz.4.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.374486][ T488] usb 3-1: device descriptor read/64, error -71 [ 52.614456][ T488] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 52.622336][ T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 52.754480][ T488] usb 3-1: device descriptor read/64, error -71 [ 52.775745][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 52.787034][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 52.800332][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 52.809720][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.818855][ T10] usb 5-1: config 0 descriptor?? [ 52.824250][ T1084] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 52.994395][ T488] usb 3-1: device descriptor read/64, error -71 [ 53.004058][ T36] audit: type=1400 audit(1755932108.440:270): avc: denied { execute } for pid=1097 comm="syz.3.267" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.029031][ T1098] usb usb8: usbfs: process 1098 (syz.3.267) did not claim interface 9 before use [ 53.104636][ T488] usb usb3-port1: attempt power cycle [ 53.164409][ T331] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 53.234755][ T10] logitech 0003:046D:CA04.0006: unbalanced delimiter at end of report description [ 53.245017][ T10] logitech 0003:046D:CA04.0006: parse failed [ 53.251344][ T10] logitech 0003:046D:CA04.0006: probe with driver logitech failed with error -22 [ 53.315562][ T331] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.326536][ T331] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.336460][ T331] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 53.345925][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 53.354679][ T331] usb 2-1: SerialNumber: syz [ 53.436800][ T1084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.446081][ T1084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.454611][ T488] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 53.470402][ T329] usb 5-1: USB disconnect, device number 8 [ 53.495574][ T488] usb 3-1: device descriptor read/8, error -71 [ 53.566678][ T331] usb 2-1: 0:2 : does not exist [ 53.573994][ T331] usb 2-1: USB disconnect, device number 9 [ 53.583972][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.625647][ T488] usb 3-1: device descriptor read/8, error -71 [ 53.757275][ T1112] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.757308][ T1112] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.827046][ T1119] TCP: TCP_TX_DELAY enabled [ 53.838755][ T36] audit: type=1400 audit(1755932109.280:271): avc: denied { getopt } for pid=1118 comm="syz.3.274" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.864372][ T488] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 53.895885][ T488] usb 3-1: device descriptor read/8, error -71 [ 54.025958][ T488] usb 3-1: device descriptor read/8, error -71 [ 54.135001][ T488] usb usb3-port1: unable to enumerate USB device [ 54.504396][ T862] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 54.654453][ T862] usb 2-1: Using ep0 maxpacket: 32 [ 54.665060][ T862] usb 2-1: unable to get BOS descriptor or descriptor too short [ 54.674000][ T862] usb 2-1: config 1 interface 0 altsetting 106 bulk endpoint 0x1 has invalid maxpacket 64 [ 54.690781][ T862] usb 2-1: config 1 interface 0 altsetting 106 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 54.704950][ T862] usb 2-1: config 1 interface 0 has no altsetting 0 [ 54.713816][ T862] usb 2-1: string descriptor 0 read error: -22 [ 54.720272][ T862] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 54.729422][ T862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.742287][ T1142] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 54.751874][ T1142] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 54.767896][ T1155] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.290'. [ 54.783221][ T36] audit: type=1400 audit(1755932110.220:272): avc: denied { setopt } for pid=1154 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 54.810883][ T488] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 54.852297][ T1167] 9pnet: Could not find request transport: fd0x0000000000000004 [ 54.872957][ T36] audit: type=1400 audit(1755932110.310:273): avc: denied { read } for pid=1161 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 54.897242][ T1170] netlink: 'syz.2.296': attribute type 1 has an invalid length. [ 54.963747][ T1142] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 54.983648][ T1174] __vm_enough_memory: pid: 1174, comm: syz.4.294, bytes: 18014402804453376 not enough memory for the allocation [ 54.998246][ T488] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 55.015192][ T488] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 55.043000][ T488] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 55.055901][ T488] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.063348][ T862] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 106 proto 1 vid 0x0525 pid 0xA4A8 [ 55.070710][ T488] usb 4-1: config 0 descriptor?? [ 55.080633][ T1148] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 55.099108][ T862] usb 2-1: USB disconnect, device number 10 [ 55.111417][ T862] usblp0: removed Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network: [ 55.427413][ T36] audit: type=1400 audit(1755932110.870:274): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 55.473517][ T36] audit: type=1400 audit(1755932110.910:275): avc: denied { read write } for pid=1198 comm="ip" path="/dev/console" dev="rootfs" ino=1069 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 55.492783][ T488] logitech 0003:046D:CA04.0007: unbalanced delimiter at end of report description [ 55.534594][ T488] logitech 0003:046D:CA04.0007: parse failed [ 55.540776][ T488] logitech 0003:046D:CA04.0007: probe with driver logitech failed with error -22 [ 55.586118][ T36] audit: type=1400 audit(1755932111.030:276): avc: denied { create } for pid=1201 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 OK Stopping iptables: [ 55.642731][ T36] audit: type=1400 audit(1755932111.030:277): avc: denied { read write } for pid=1201 comm="syz.1.299" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 OK [ 55.689959][ T1217] rust_binder: BINDER_SET_CONTEXT_MGR already set Stopping system message bus: [ 55.689989][ T1217] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.713545][ T1217] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.713579][ T1217] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.726644][ T329] usb 4-1: USB disconnect, device number 10 [ 55.739924][ T1217] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.740002][ T1217] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.754821][ T1217] rust_binder: BINDER_SET_CONTEXT_MGR already set done [ 55.761483][ T1217] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.816847][ T1226] 9pnet: Could not find request transport: fd0x0000000000000004 [ 55.824386][ T488] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 55.846673][ T1229] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 55.846706][ T1229] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:80 [ 55.913248][ T1240] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 55.927026][ T1240] rust_binder: Read failure Err(EFAULT) in pid:87 [ 55.962940][ T1245] FAULT_INJECTION: forcing a failure. [ 55.962940][ T1245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.994421][ T1245] CPU: 1 UID: 0 PID: 1245 Comm: syz.4.311 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 55.994455][ T1245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 55.994467][ T1245] Call Trace: [ 55.994474][ T1245] [ 55.994481][ T1245] __dump_stack+0x21/0x30 killall: can't k[ 55.994513][ T1245] dump_stack_lvl+0x10c/0x190 ill pid 350: No [ 55.994537][ T1245] ? __cfi_dump_stack_lvl+0x10/0x10 such process[ 55.994561][ T1245] ? __sys_recvmsg_sock+0x60/0x60 [ 55.994589][ T1245] dump_stack+0x19/0x20 [ 55.994611][ T1245] should_fail_ex+0x3d9/0x530 [ 55.994639][ T1245] should_fail+0xf/0x20 killall: can't k[ 55.994662][ T1245] should_fail_usercopy+0x1e/0x30 ill pid 351: No [ 55.994676][ T1245] _copy_from_user+0x22/0xb0 such process ki[ 55.994694][ T1245] ___sys_recvmsg+0x12f/0x510 llall: can't kil[ 55.994716][ T1245] ? __sys_recvmsg+0x280/0x280 l pid 500: No su[ 55.994738][ T1245] ? __cfi_kstrtouint_from_user+0x10/0x10 ch process [ 55.994759][ T1245] ? selinux_file_permission+0x309/0xb30 [ 55.994780][ T1245] ? __fget_files+0x2c5/0x340 [ 55.994799][ T1245] do_recvmmsg+0x326/0x770 [ 55.994821][ T1245] ? __sys_recvmmsg+0x290/0x290 [ 55.994843][ T1245] ? __cfi_vfs_write+0x10/0x10 [ 55.994859][ T1245] ? fput+0x1a5/0x240 [ 55.994878][ T1245] __x64_sys_recvmmsg+0x191/0x240 Stopping klogd: [ 55.994900][ T1245] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 55.994923][ T1245] ? __kasan_check_read+0x15/0x20 [ 55.994945][ T1245] x64_sys_call+0x292c/0x2ee0 [ 55.994967][ T1245] do_syscall_64+0x58/0xf0 [ 55.994985][ T1245] ? clear_bhb_loop+0x50/0xa0 [ 55.995002][ T1245] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.995025][ T1245] RIP: 0033:0x7f440c58ebe9 OK [ 55.995040][ T1245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.995062][ T1245] RSP: 002b:00007f440aff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b Stopping acpid: [ 55.995081][ T1245] RAX: ffffffffffffffda RBX: 00007f440c7b5fa0 RCX: 00007f440c58ebe9 [ 55.995094][ T1245] RDX: 0000000000000007 RSI: 0000200000005280 RDI: 0000000000000003 [ 55.995105][ T1245] RBP: 00007f440aff7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.995116][ T1245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.995126][ T1245] R13: 00007f440c7b6038 R14: 00007f440c7b5fa0 R15: 00007fffa80ddcb8 [ 55.995140][ T1245] [ 56.032747][ T488] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 56.263478][ T488] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.274488][ T488] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.284581][ T488] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 56.299276][ T488] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 56.308928][ T488] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 56.317153][ T488] usb 2-1: Manufacturer: syz [ 56.323969][ T488] usb 2-1: config 0 descriptor?? [ 56.414395][ T862] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 56.472668][ T1259] 9pnet: Could not find request transport: fd0x0000000000000004 [ 56.496139][ T1261] can0: slcan on ptm0. [ 56.543852][ T1260] can0 (unregistered): slcan off ptm0. [ 56.566559][ T862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 56.577974][ T862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 56.589137][ T862] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 56.598644][ T862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.607624][ T862] usb 5-1: config 0 descriptor?? [ 56.613252][ T1252] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 56.740626][ T488] usbhid 2-1:0.0: can't add hid device: -71 [ 56.747032][ T1273] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 56.747723][ T488] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 56.767327][ T488] usb 2-1: USB disconnect, device number 11 [ 56.924907][ T1289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:266 [ 57.028370][ T862] usbhid 5-1:0.0: can't add hid device: -71 [ 57.043646][ T862] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 57.052138][ T862] usb 5-1: USB disconnect, device number 9 [ 57.104441][ T488] usb 2-1: new full-speed USB device number 12 using dummy_hcd OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK [ 57.255745][ T488] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 57.267811][ T488] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 57.282499][ T488] usb 2-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 57.291777][ T488] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.300525][ T488] usb 2-1: config 0 descriptor?? [ 57.305876][ T1278] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 57.439887][ T36] kauditd_printk_skb: 28 callbacks suppressed Connection to 10.128.1.44 closed by remote host. [ 57.439910][ T36] audit: type=1400 audit(1755932112.880:306): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[2233]" dev="pipefs" ino=2233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 57.504934][ T488] usbhid 2-1:0.0: can't add hid device: -71 [ 57.511046][ T488] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 57.547580][ T488] usb 2-1: USB disconnect, device number 12 [ 57.745440][ T13] bridge_slave_1: left allmulticast mode [ 57.751227][ T13] bridge_slave_1: left promiscuous mode [ 57.757600][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.765153][ T13] bridge_slave_0: left allmulticast mode [ 57.771190][ T13] bridge_slave_0: left promiscuous mode [ 57.777850][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.917318][ T13] veth1_macvtap: left promiscuous mode [ 57.923021][ T13] veth0_vlan: left promiscuous mode [ 58.178404][ T13] bridge_slave_1: left allmulticast mode [ 58.184106][ T13] bridge_slave_1: left promiscuous mode [ 58.190070][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.197719][ T13] bridge_slave_0: left allmulticast mode [ 58.203459][ T13] bridge_slave_0: left promiscuous mode [ 58.209576][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.218671][ T13] bridge_slave_1: left allmulticast mode [ 58.224446][ T13] bridge_slave_1: left promiscuous mode [ 58.230027][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.237681][ T13] bridge_slave_0: left allmulticast mode [ 58.243400][ T13] bridge_slave_0: left promiscuous mode [ 58.249159][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.256884][ T13] bridge_slave_1: left allmulticast mode [ 58.262531][ T13] bridge_slave_1: left promiscuous mode [ 58.268239][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.276029][ T13] bridge_slave_0: left allmulticast mode [ 58.281707][ T13] bridge_slave_0: left promiscuous mode [ 58.287389][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.499564][ T13] veth1_macvtap: left promiscuous mode [ 58.505171][ T13] veth0_vlan: left promiscuous mode [ 58.510723][ T13] veth1_macvtap: left promiscuous mode [ 58.516549][ T13] veth0_vlan: left promiscuous mode [ 58.522191][ T13] veth1_macvtap: left promiscuous mode [ 58.527775][ T13] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 59.558372][ T1296] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 59.565486][ T1296] ACPI: PM: Preparing to enter system sleep state S5 [ 59.572699][ T1296] kvm: exiting hardware virtualization [ 59.578827][ T1296] reboot: Power down serialport: VM disconnected.