last executing test programs: 45.271592767s ago: executing program 0 (id=325): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f00000000c0)={0x14}, 0x14) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x80040, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0x16) listen(0xffffffffffffffff, 0x3) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) getdents64(r2, &(0x7f00000046c0)=""/4096, 0x1000) getdents64(r2, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000006c0)={0x6, 0x0, [{0x80a0000, 0x9d, &(0x7f0000000100)=""/157}, {0x1, 0x82, &(0x7f0000000340)=""/130}, {0x8000000, 0x69, &(0x7f00000001c0)=""/105}, {0x4000, 0x79, &(0x7f0000000280)=""/121}, {0x1, 0x47, &(0x7f0000000400)=""/71}, {0x0, 0xe8, &(0x7f0000000480)=""/232}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa2302, 0x0) ioctl$TCFLSH(r3, 0x80045439, 0x40bea7b87a0000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000511000/0x400000)=nil) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4002, 0x0) ioctl$BLKRRPART(r5, 0x125f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) 44.925989883s ago: executing program 0 (id=330): socket$inet6(0xa, 0x3, 0x3a) (async) r0 = socket$inet6(0xa, 0x3, 0x3a) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000002040), 0x410281, 0x0) r1 = dup3(r0, r0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(r0) listen(r1, 0xd) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x84}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x84}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000002080)={0x1154, r4, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x17}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x26}, @NL80211_ATTR_IE={0x10ff, 0x2a, [@random_vendor={0xdd, 0x21, "ccd773c63b6abf8e89227b0ac9c1089f8c41f9604ddebcc03133301cd1409a0851"}, @measure_req={0x26, 0x1003, {0x7, 0x2, 0x4, "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"}}, @random_vendor={0xdd, 0xb0, "5d7c3d0b571e2f399a3231fd2638cc7b16c6ebb4a8910421d6ae2c55d2536050530ce14bfa9bf9ba116a1e47c7da20424f21641e15d34b55256d3ff98a1f6b380655a2880d3e067559eee5d8d980a6e61d7c4c45e78732a0bb60b1c2e7b3709d8f1c371af82164573f2ac95e4f66399e8d3c4e97d1500f0ff9844bbc125285646e904ddfed5cac32cda788c31216e7692acacddfbbd63a87d8bc52acc7cbfdd56da8a7395d1b0e082649e3665b18626c"}, @prep={0x83, 0x1f, {{}, 0x0, 0xf, @device_b, 0x800, @void, 0x1800000, 0x7, @device_b, 0x2e}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x1154}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"37fc1c356f86682b5ab3ecc4a98d4c64", 0x0, 0x0, {0xffffffffffffffff, 0x3}, {0xe8b, 0xfffffffe}, 0x7, [0x9, 0x3, 0x9, 0x7f, 0xe, 0x9, 0x5, 0x3, 0x3ff, 0x8, 0xa, 0x3, 0xe8, 0x5, 0x7ff2e33a, 0x7]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000300)={0x0, 0x2, 0x1, [0x3, 0x1000, 0x3, 0x10000, 0x5], [0x3, 0x8, 0x20000000000, 0x7, 0x80000001, 0x5, 0x9, 0x4, 0x6c05, 0x87, 0x3, 0x10001, 0x7fffffff, 0x70000000000000, 0xff, 0xb, 0x780, 0x1, 0x0, 0x74b, 0x2, 0x2, 0xf334, 0x1, 0x8, 0x9, 0x5, 0x8000, 0x8, 0x1, 0xf, 0x7, 0x3, 0x6, 0x8000000000000000, 0x2020, 0x3, 0xc07, 0x3554, 0x7fff, 0x25f, 0x3, 0x7, 0x2, 0xd23, 0x5, 0x1, 0x9, 0x6, 0x7fff, 0x10, 0x7, 0x7bbb5a4f, 0xeac6, 0x6, 0xc6d, 0x0, 0x80000001, 0x7fff, 0x797, 0xfffffffffffffffb, 0x9, 0x2c, 0xfffffffffffffffd, 0x8, 0x3, 0x8000, 0x1, 0x6, 0x9, 0x1, 0xea4, 0x8, 0x1000, 0xdd, 0x3, 0x1, 0x9, 0x8, 0x8, 0xfffffffffffff1f3, 0xfffffffffffffff8, 0x8000000000000000, 0x3b, 0xf9e, 0x8000000000000001, 0x5, 0x81, 0x8, 0x9, 0x8, 0x6, 0x7, 0x0, 0xffffffffffff9af5, 0xd, 0x3ea, 0x75, 0x80000000, 0x59e, 0xe, 0x7fffffff, 0x3025, 0x6, 0x1000, 0x2, 0x7, 0x7, 0x4, 0x3, 0x5, 0x3, 0x10001, 0x7, 0x0, 0x3, 0x1, 0xfffffffffffffffe, 0x1, 0x1, 0x6]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000740)={{r0}, r5, 0x1a, @unused=[0x101, 0x9, 0x7], @devid=r6}) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r7, 0x52b, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 44.814287245s ago: executing program 0 (id=331): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145480, 0x0) r1 = inotify_init1(0x800) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x541b, 0x5) ioctl$BLKRRPART(r0, 0x125f, 0x0) 43.919829509s ago: executing program 0 (id=332): ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000300)={0x683, 0x30, '\x00', 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x8, 0x3, 0x4, 0xfffffffb}, 0x10) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x8, 0x3, 0x4, 0xfffffffb}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket(0xa, 0x3, 0x1a) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000240)=0xf, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0xf001, 0x5, 0x6, 0xbb}, {0xf6, 0x7, 0x3, 0x7}, {0x9c, 0x1, 0x4, 0x400}, {0x5, 0xf4, 0x1, 0x4}, {0x4, 0x5, 0xf, 0x38000}]}) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020f003176c40000000000109022400010000000009040000120701030009050102001000000009057d0200"], 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB='context']) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB='context']) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x3, 0x80000}, 0x8) (async) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x3, 0x80000}, 0x8) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x0, 0x0, 0x1d}}], 0x1, 0x5c05) (async) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x0, 0x0, 0x1d}}], 0x1, 0x5c05) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0x20800, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000480)) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@remote, @dev={0xac, 0x14, 0x14, 0x40}}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) (async) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast1, @loopback, @multicast2}, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000000)=0x6, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r1, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b00)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002100)={'batadv_slave_0\x00'}) 42.518107252s ago: executing program 0 (id=336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x4000}) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x800454e0, 0xf0ff1f00000000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') prctl$PR_MCE_KILL(0x21, 0x0, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @random="2f304136b1ff"}) openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x50, 0x0, &(0x7f0000002040)="7797f473010e3c6f412193d01ca46e5d1fd37e1ff088862e47734ac7eb2e436321311317afe07822a299d63328f5c10a5f99166b47868f357ba1edd6b402c7022a1fe37f5f729dd812db18dad930f670"}) 42.247249546s ago: executing program 0 (id=337): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) sendfile(r0, r0, 0x0, 0x7ffff000) 27.289956789s ago: executing program 32 (id=337): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) sendfile(r0, r0, 0x0, 0x7ffff000) 6.072427472s ago: executing program 2 (id=685): sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16, @ANYRES32, @ANYBLOB="04005e801c005e8008000700c5f133694bbd07cb55000000080003006e8f000030005e800800020003000000080002491acf00000c0001000101000001"], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000340)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, 0x0, 0x0, 0x3b00, 0x0, 0x0) 6.071211732s ago: executing program 2 (id=686): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/256, 0x107f, 0x0, 0x0}, &(0x7f0000000180)=0x8d) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2001000010003b620000000000000000fe8000000000000000000000000000bbac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+\x00'/113], 0x120}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000340)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f0000000300), 0xa6, 0x3b00, 0x0, 0xfffffffffffffdfd) (fail_nth: 5) 6.010602733s ago: executing program 2 (id=687): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r2, 0x0, 0xd, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x210040, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000580)={0x9}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000480)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000280)=0x7}) recvmmsg(r0, &(0x7f0000001f40)=[{{&(0x7f00000004c0)=@ax25={{0x3, @default}, [@null, @remote, @null, @bcast, @null, @bcast, @default, @netrom]}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/184, 0xb8}, {&(0x7f0000000980)=""/135, 0x87}], 0x2, &(0x7f0000000a80)=""/32, 0x20}, 0x8}, {{&(0x7f0000000ac0)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000b40)=""/122, 0x7a}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/147, 0x93}], 0x3, &(0x7f0000001cc0)=""/234, 0xea}, 0x5}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001dc0)=""/48, 0x30}, {&(0x7f0000001e00)=""/114, 0x72}], 0x2, &(0x7f0000001ec0)=""/85, 0x55}, 0x71}], 0x3, 0x40010022, &(0x7f0000002000)={0x77359400}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x50, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, 0x0}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x110a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 5.127926317s ago: executing program 2 (id=693): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r0, 0x0, 0x33, 0x0, 0x0) set_robust_list(&(0x7f0000000100)={0x0, 0x4}, 0x18) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000000)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a4"}) r2 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}, [{{0x9, 0x5, 0x82, 0x2, 0x35982fc7e402f0a2, 0x24, 0x4, 0x45}}]}}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="a903020000000203"]}, 0x0) syz_usb_control_io(r2, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0003840000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_read(r2, 0x1, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000000000000000) write$char_usb(r3, &(0x7f0000001680)="f31552c51e", 0x5) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)='S', 0xfd5e}, {&(0x7f0000000300)="3abdaa395e013bd8fddad5750aa96b9ed656c8a58f60", 0x16}], 0x2}, 0x4004004) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r8, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x25}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4090}, 0x24000000) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x22800, 0x40) ioctl$EVIOCGPHYS(r9, 0x80404507, &(0x7f0000000040)=""/21) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x17440) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000080)={0x0, 0x1, 0x2fe, 0x0, 0x0, 0x1, 0x0}) ioctl$ASHMEM_SET_SIZE(r10, 0x40087703, 0x7) 4.527891977s ago: executing program 3 (id=704): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000900), 0x10, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x67, 0x0, 0x2, 0x4, "9daea758", "3c4d15c3"}}, 0x0}, 0x0) read(r0, &(0x7f0000000100)=""/84, 0x74) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) fstat(r3, &(0x7f0000000880)) fallocate(r2, 0x0, 0x0, 0x1000f4) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) close(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) writev(r2, &(0x7f0000000b80)=[{&(0x7f0000000a80)="950aa6", 0x3}], 0x1) read(r0, &(0x7f0000001940)=""/4096, 0x1000) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000740)={0x1f, @none}, 0x8) listen(r5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000200)={0x3, 0x0, 0x89e, 0x5, 0x8, 0xffffffff, 0xfffffffffffeffff, 0x8}, &(0x7f0000000240)={0xd4, 0xa, 0xa, 0xd32, 0xfe, 0x10001, 0x4c0000000000, 0x20000000}, &(0x7f0000000300)={0x0, 0x1ff, 0x1000, 0x4, 0x5, 0x20000000, 0x0, 0x80000001}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x6]}, 0x8}) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000000)) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000000c0)=[0xc72, 0x8]) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) 3.171005039s ago: executing program 3 (id=711): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0xf544, r0, 'id0\x00'}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000240)={[0x6, 0x4, 0x4, 0x8, 0xa509, 0xa, 0x6, 0x0, 0x1, 0x46, 0xc9e, 0x20000, 0x8, 0x3, 0x401, 0x7638175c], 0x100000, 0x180000}) ppoll(&(0x7f0000000180)=[{r0, 0x4010}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) 3.07206025s ago: executing program 3 (id=716): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x161000, 0x0) fadvise64(0xffffffffffffffff, 0xf4a, 0x1, 0x2) read(r0, &(0x7f0000000040)=""/106, 0x6a) 3.05719343s ago: executing program 3 (id=717): r0 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='^\t*([%\x8e\x00', &(0x7f0000000200)='@!\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000001c0)={0x0, &(0x7f00000009c0)}, 0xfffffffffffffcda) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_usb_disconnect(r2) syz_usb_connect(0x2, 0x24, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r2, @ANYRES32=r2], 0x0) ioctl$EVIOCRMFF(r2, 0xc0085504, &(0x7f0000000140)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x6, 0x4e22, 0x0, 0xa, 0x0, 0xc0}, {0x0, 0x30, 0x0, 0x4, 0x0, 0x4}, {0x0, 0x0, 0x9c}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0x32}, 0xdb8a783c920bc1cc, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x3507, 0x4, 0x3}}, 0xe8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000740)=0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240096676bc50ebd7057276a101aaa449658f194718946edd1232001000010000904430002317d55000905020200020200"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r6) prctl$PR_SET_KEEPCAPS(0x8, 0x0) mount$binder(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB='stats=globa=00000000000000000004,max=00000000000000000002,obj_type=}Kb#{!\\/},\x00\x00\x00\x00\x00\x00']) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="20010400000094c161b4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv2(r7, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/111, 0x6f}, {&(0x7f0000000240)=""/123, 0x7b}, {&(0x7f0000000940)=""/89, 0x59}, {&(0x7f0000000340)=""/115, 0x73}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000a80)=""/246, 0xf6}, {&(0x7f0000000640)=""/200, 0xc8}], 0x7, 0x8001, 0x6, 0x0) pidfd_send_signal(r4, 0x3c, 0x0, 0x0) fchdir(r0) 1.964207178s ago: executing program 2 (id=721): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00']) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x3f7}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) fsmount(0xffffffffffffffff, 0x1, 0xf6) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000600)={[0x7fffffffffffffff, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1, 0x0, 0x9, 0x1000, 0xc8, 0x3, 0x100000000, 0x7fffffffffffffff, 0x9, 0x1, 0x972, 0xffffffffffffffff], 0xeeee0000, 0x1000}) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r1, &(0x7f00000006c0)="6bb07df6f54a", 0x6, 0x4004084, 0x0, 0x0) setresuid(0xee00, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f00000000c0)={0x200000000005, 0x8000000000200003}, 0x0) setpriority(0x1, 0x0, 0xffffffffffffffcd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0xfffffffc, @empty, 0x3cf921f0}, 0x1c) listen(r3, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r4, @ANYRES64=r0], 0x0) write$binfmt_elf64(r4, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x59, 0x8, 0xbf, 0x40, 0x85, 0x3, 0x3, 0x40, 0x1a3, 0x40, 0xa7, 0x3, 0x4, 0x38, 0x1, 0x8001, 0x4, 0xea}, [{0x60000000, 0x7, 0x7ff, 0x10001, 0x5, 0x8, 0x9, 0x400}], "e75abc3a29d7468f08a6bc7b9a8c063367b52d9caf535cc6455065f92c95df64db0ea1b825126e75902c2fd11f34b15883751861ba481bd53d65a64bc99242a8d5a226edbe08c9c7f74315cdccb2b53b061f956aa3dadf7784a6ab391a9d2a6df932f835800fa0a6cdba6b864c5e2a4ad0c3e5713d081209361286bd343726671ce37bef21", ['\x00', '\x00', '\x00']}, 0x3fd) openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) 1.742408482s ago: executing program 4 (id=732): clock_settime(0xfffffffb, &(0x7f0000000140)) (fail_nth: 2) 1.692263663s ago: executing program 4 (id=733): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x2800) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000080)='./control\x00', 0x6000c11) rmdir(&(0x7f0000001c00)='./control\x00') clock_settime(0xfffffffb, &(0x7f0000000140)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3, 0x102, 0x9, {r4, r5/1000+60000}, {0x0, 0x2710}, {0x4, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x1, 0x0, 0x1}, 0x3a, 0x1, 0x0, 0x0, "8d5a08e1fe0a582c4ece5403312f6d09851f86e24e37f7aa211f1f4136d7e6e003718fc771b59722a537eaa17eaa7daeba9589cfdb1c601400095aa936e9d0ff"}}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) 1.420083767s ago: executing program 4 (id=734): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000095}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket(0x2, 0x80000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) clock_settime(0xfffffffb, &(0x7f0000000140)) 1.24084582s ago: executing program 4 (id=735): timer_create(0x5, &(0x7f0000000000)={0x0, 0xb, 0x8, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x7, 0x100, 0x7, 0x6, 0x10, 0x0}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x404000, 0x0) (async) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x404000, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000200)={r3, r4, 0x401}) (async) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000200)={r3, r4, 0x401}) prlimit64(r1, 0xe, 0x0, &(0x7f0000000240)) (async) prlimit64(r1, 0xe, 0x0, &(0x7f0000000240)) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f00000002c0)={0x2, 0x1}) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f0000000300)={0xcc, 0x0, 0x1}) (async) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f0000000300)={0xcc, 0x0, 0x1}) timer_settime(r0, 0x0, &(0x7f0000000380), &(0x7f00000003c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r6, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x6a}, @NL80211_ATTR_CSA_IES={0x8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x4}]}, @NL80211_ATTR_CSA_IES={0x14, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x0, 0xfff8, 0x6, 0x401, 0x40, 0x1]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x389}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0xc0) r8 = open_tree(r3, &(0x7f00000005c0)='./file0\x00', 0x8100) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x98, r9, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x57}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) read$FUSE(r3, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r8, &(0x7f0000002800)={0x18, 0x0, r10, {0x180}}, 0x18) (async) write$FUSE_BMAP(r8, &(0x7f0000002800)={0x18, 0x0, r10, {0x180}}, 0x18) listen(r3, 0x4) openat$cgroup(r3, &(0x7f0000002840)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r3, &(0x7f0000002840)='syz0\x00', 0x200002, 0x0) pipe(&(0x7f0000002880)) (async) pipe(&(0x7f0000002880)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r14, &(0x7f00000028c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f0000006c80)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000006d80)=0xe8) statx(r14, &(0x7f0000006f00)='./file0\x00', 0x0, 0x7ff, &(0x7f0000006f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000007040)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private1}}, &(0x7f0000007140)=0xe8) getgroups(0x8, &(0x7f0000007180)=[r12, r16, r12, r16, r16, r16, r16, r16]) syz_fuse_handle_req(r13, &(0x7f0000004900)="f19fb78bd62a8c0a117d79cbaa479a3c0f98d89c5619426a38d7698d83fc415904183890944825d27f5fe0107d11b741f7433861e99d11805f7ce9dc1c2d1fc81a58fda295e73affd04fd08d6ef8780338e9560ff38d89c638e223beb1de9ec6a954532e3d1c65831b8a81abbbfc027c178dadfa59888caad2b9b0df303f73e8fb6f7ce0981a5d274ec9e92868f817b5cbe15569abf1ab1a80913ff18b3de11c342d7c49c1c888ad2b2a75649065d4db2ff75cf40d268d9df213cd7a010bcc9874e6a253b0476ea224541aa75d6f87964569ced9e12455c26e804f0a6fa4ca61421f8ef0b07d0163a3cf9a07c201340b96e12303799efcb71e7e92f75dd38d0e4e8c097b26eea9b0db23f323c2ed41fd9395144cf3b1b24f49a627b1df2dd0c6364d82ebae8bfc1c0ba23ee3920ab9749e8c6b5cf322936c37c0a2bcb275163fbf1626560285a6329cd02fc305469ac9c6882870d195daed5e980ba2cb922b2dbd3c864fe80fcf55e1f05a43d634d519392cc4fa1c3db5b2c2a9e222051a5b56306e75e59401ca510644283c330449fbb824758ac5fbecf7edb87c3e3c2862a3ad9fcdee25718b21d8c1bbf512568b424c04ce9409e668a4739c03cdc67c90202e9646fdc051443932bda42fd303e4b8fc0cee5900952dfca8134f8f380756651de4a82dbee10b3562817f19a82f270724eb6805ba7e73bc4c7ab41e6166dee95b1a136065c6af68793bed5af11ac3fb6768946ddba2a09d3ee45d90345910380800b8f740a2ea31f78b1ed83c3477431c601931607e2f9dcddf1638f09b6f5c498c1089df9f190041f3a66572d5da79123faed1c28c5f5273d18aa9d4f86b8c687d14fe9a5da0eb6ad763b6e966ce3bc595d9dc682a79082c4a7ede3f178dda3272bd5942410f3411a3b96033bd5b539a68d05e83a6812acef021446a52cd6454b5c70b7200fabc46be45eb36b52c9a8d04aec07baf37c403fb7f6cd3b01d3596a0320cb06e6a842ef547bfc9c8f8a7addb909f854cfb16f3e29dd46f47ebdf2878ec86745ebc7cc6923cb8884fbd2247734d531f69fc8cc7a1720b56894c5b35a0352acd432b9fe7c2de458335410de0b70f2087f363a17b47b6ee65bdb237e10abb45b44945c4f2588cbaffbcf056a1d7da9a1b956459b147968d7c0696b962ab51caaf61e2d36c68e7d83924a7053d6d908928db56387ed4eb043800e329061bbad5bf6c3d3a7566f54c9715f5fe227dc907b04dadea92928943e3b92d048847808768654784aa6b2d10e8f98c2c669dceb07bd6ae46f5b4606cd64afc1a6ac1bfd2e429d91efafdb3268b051c93ec7c2698a04cee58555160117d61e2e9d6135396cf4b0418b55e3e55a1a9ca57625a9a4f4966212d2d11174cd9251f281522c125a04f9e025b1b1ed0d8b942a3049e03b2816055aa3442d079e1eaf36ac1146173c4aa8bd44e82978562e2cb986004343e1036e79f3beb8fa5c1145570a427b5cf71cb2c955f207789f14a75af44cf63bbdae145eed842e8c4c255210d3a4904987c27cbc6da31603ebda40ebaa5cbb10b48221e2e4d2186483e180d022051cdf650d743d0746c2edc1ffcfb4b919a889577600a7b1fd3f629a6a84dfeffda740aaa9a7fa475b06ac5785afc4a65a279e10697021464c0a31dac5856d5b97627ad5095d6f0399c1ad241b0c40e591892825f437c4cef85a7871ef6918411017bc1f641385930b9074a784b9da87faff0bcc149533162333c7e6d2e83fcc91fb4dc91599a33d0e7714b093478b991e68144cb22796cf27c608923a61d9759cba976b37c1d9b697a2e072e0d84806f6fd5dd23fb6e8fcfcdef6a357f1862389211e5ad7aba159482aa596dbabb024b34c73a1c6ce22077fcf4e7d0dd2a9e283155d719965e0c8015fa70147f776881889d240178b392684d3cb7c80a00435bdaf57f4e74c105f02b660a7d8026eeba307154e9b478bf182a5a9499d233dc554cdf3ddebd24fcd4ab8ef6e597feefd5d9748f9f0ff330ec0b3ee7cc0e145ff5b66c2843e86b6f7d4b99dd41535d944249004f89a7ce55c424a053d225d9ca2a13ed52ee9d7ef1b3e5d23f9c13f5b301da092c0ea42bcaebb9fdeb04a65025f0ff37582208cdfd9c90432578f95ae99a97d02fb33f9f90e831544796064fe27b50b9656da441746aa5a2eb8e3f390a1380644ac2a1d573edca8bab6911f75b94c306a528271423ee0e239014ffd67abdd3e15b4bcfa7e827accf847e8de3d1250c59688aba6e3d3b96cccda013812e3c2be4d7386f41924e518edb5b07ea397de2fb62cf8d4c0115ffd29e9a94a360488f1906b53613fcf180d1271ed2f0ca166f00e31f164ad7df8fb44cde0f8178abb808ba1f24abfd3fbd70514b07a53838d971f0b66ad6ce624d4afc8bdbc9b92aa7c2b54b6116b8900394d8f54f567ee5103f5127cc7742c1f301c04fcd706b65b3a965b2f8189ec5aa0e78e7ea11f48d75e5b3c68d49a17b557f754501f0b5c869e13ef0251d32be40adf07dcecf1360c14520c58a2fd92c020495f85a15a8fa0dd318a9e9f130f9122cc1e21fc34a0b8e415a8bfbfb052df51404f606b9760b847fc7ee7c5976572a8c90be97fca09971b072b4e60378cf98f8d9b8f74774b7a750258a042760b99c20ef73bdaadafae5a19754560aaa0c7d58bde9e0875aa852c01e5e3e1d1ccf046a081eb2f7dcf25975c780704ca87e9bd93ee1dad53bfeddaa1c500136c2d4d476852a09ada9aa019021507d302b12392e84d0c37026c1d6fe736969fd3e1b9f0413068b1f24941f2611290d6707e4f70d11591b3e10ae57642905a08c906d1c879a9283aac6b745f18822d6f5ed4a53a0f40fe5d9e6ce020484c3babe35acb93c4b835a60e66b349225265b949a7d581def43db63125d6011cec794dff4fecd56d6bbd22540bce85fc1b528dba516cb52c9d4d7d3c52514ba50ffb6c6e6bf2ae019aa472ba97643dca2d0bc7af6069b50058a198196386aa063b25376eba924e08ee008d9c2c5700dbecacb7892065c87ae2facc8be5a5e2f643929c9f7749828c1cee03b1b1daef8e84672620b2af2947e07f42cb4afd4b4c096285873554e1f57ccc5abfb48584534d6be3f7258a0a11798ab37e9d58ed9c990920f7f7ca115898cbbfced08bd38cd01b56b123dee3d9fa8a9eb67b4ad25dc473c0a5987b51e2ce449e65480ae3b84404f786b1f216866aa13fb557fbfff10acced334aabaa5ecfcb41e12c040f3bbef99892182f7b5c8264d138a8d2ee9de873d13259e1230133f995948229db1389b3fd6a1e7ff8da5a42c3d8af4654d11bacec6a150254439b4e6cc613b0ac881de4857413c3e9f251a9bfcf4135781cdc7eeee3937b48bced4592de1577d8b66eee22da3eeadb9d9e9f5b0d4d09889b6a8bcfc72a4321d6acef2f7d44d9cb9ba60342ff7ec899d1fc7885647a09c76e665a0e9b936b78353160395c6255f4668a699a1280c4d27d84e133963a2987dd038fe1ff90f789014d5438532ce77262d209b3c1cfcd55ffe6a1315a540c8db960c1ed13a16a8f65c519f85dec02975a64c93e589f460f40006ba85e5312aca8b8677114c3f96a6926f58bca5570fe1508ddcfae66ed83f75b06cdae0e8beb35c25ecd8a5c0870bbc534571a8aab33f13ebee44f81dac23892f7daa08a087c6b6d827cf44bd6e9a1f284ef2f4d0e5ed70e8afbc10f5f019531f8ecc9b63408f8c3c9d7d04fb788a23807a816828a57ca7285c896c9154a4cfaa376b8a41694b53faced62c70448475ab0f366dbc305a3fdf8461133df6fcf242a1b81ce908ecb871261bee21cca24866f331cc8a7d3f47a3df97f05487bc0e6d979acd31c6c3f9bc1d854b4cecdc07e128d6ffd4af56489cb19025559727bfc19d01e090fedb5f56ea93b1b524962ddea52f325438b122096e29fc2dab26fe517e5334b274e90bcfa5063ad714b8c0c5b2b5cd3d775ea14ac5ea6aece1ad3f3ea741923430d972e29d5c77888362cb31ad59e39d218cb51290ff1693fe26b3653ead2555d08f8650f547ccad3bd808d315d12ab6db0b07065192ef6626d5453324a471b4cff59a3ebce467cb9add16083ea08ddb57fb7f26c5befffcb140b17094050e96128403e53c82277ec268e36803808e27f3a1e692d16fbe2bfee929a1e89a2ad30942140da525b1388130b0d90f02f327b28acb00c968572dc1f2bce363e744240c4a06359219cea4e05590679a78f14abc2cb1dbeac073f806c6c6fd91fca6975d66ff04992334587301f5b2b8714f7d49b83c9485e17f3b52445eb535edd0cfca1f17c3f22860b4b0ff3c02e6447994f9dd90a570cd1388feed07d3ff155866bb48979f69bef9e37df58283c3d910095a5df90e1fba584ce782ccdf475299ac79b898d3e4ca16be8a5a7753ea1d6d4fca77dc1a357e3c2da13cdfc259fa03558166927e179dd2850cb9449df0cafc81961f837738a3523f0a108e82e31e894c8fb4206cfe6b7e86076d94f7e23cafc2d6256ff22a349fd4a24b9761130c2015eeaa7a0d62152c2cc61d127893dd6a10c17a2ac4c9b61aa251d5503ea6aa6633b63ec6687dce63cfb8e4723765cb10eaa1b47262befeaa2349afffc8d325ba5a960f277fb21631b77d7b71d533ffb9d6f19c458366ac602b546643966ad45b576a022a62af74024cdd9aaa51e702784d0e11c2f75ae27ce771be6cd49cb3753f57f299ad2abc1aff6505ce2fa9fee908bd03e5482f8f14900a3cb72084a4690fe5bab4e3a1d06f7de31461720f7aa7d25e9bc107fde0f8c1e588abf5a61fcfe239d6468121705651e56202917826387ab323b15868828ab3334cf7ebdf82fe2d5a080221d3af2bd6a2d5413bdcc7bbabd944c6b06b15fe7cacbbd3d3a408927f515d75653af6e2dbadaa1fad323ec3fc21f6b0cba0517b53010b51371d049239055bb8e7a83081b58067de8fdf3385bd2e35648c277dca15106a55063c7462226ea499aee5e67d6c8b2d180348624dadfc7da2f8ee70412fa1a61c596f5ed2c31806aaeba817e4e25c053f52985efb0de13502f3cb06a2c33f9a7e0e392c2684971547541028875d3c0226074c8dfe326c09ce836e9db520c62b03602c5096466fbc087f6b64e88891ffef6f92d321b3c7214e3ac4200bc1c141ca9660df4a71f1755fb42f5d94a9c1218a913a1fb4c8bfc97cb74f34f8543fed3602a7d18df3c34bc31a17616507a9b6cfbbc5f08b598b541621db2cfc13586fb5898e767435637118aa7b81d389d7240ebef012575df62e77abe4772384188c6d78a835934463b474c86973d7880c46a941011985285989d2f18afb708cc50eeac2ae698015714fa163f7a504d283a4613743ec363848de97c3e384bb1fb8238e2b0f69773c57778b040e1b9d084db31fb037d96e943d43ca73a1c3ba36b7ad43e5fdff92b24ba79d80c12fd65aa8b1d1e3d94917c73809780553ba4bd10c3ccafa2c07e89542938980999f55329c37013660e52688e3b53f6e2bcb903deed5965a44ed2b8bb5f184fdaec76de95c6c92b198d82c5883b46db996ac4505682df52645b05f0bbb5977a77369345e5a0d1ddf0090d94af7a893f3aa2cf1704460d6545f2fff70133f37b7f24aaadf28bae1c4033548d2d02578168b7343b8118219b5debff490343daf981b3ac809e61a1ee69ee0b04767140cdd4af3260bd5033289c30046e0305baaa6a1b6d11362074ac6896a14595a38ff0d78f622b08d5677053fd56b8896be43d2bac55f68cad7d1c169d265993208432c568a6e9f149eea3cb4c91374eff62a73a422783a9e963d231882bcc0e7af34c5fd8c44e6c4feb80d573c6c866cd2b85decd027d6fe2440125c7ab4e513e48c78f1dbcef6d9b991709533a83f8e8da0e88610aded422d272fb83ffa0cc1b8e54f04508bac83da7acbdebf5dc36eca097de11e0982078e3442b444e2cb1589dde6452889fa8a5d6e493097d74907ff27fe5793b4836f33cf692881e2c7926179fcd8fe0b6c20f25141a34da7394830d9a873201c04da9b1353d49288b45ab0f4fecc148e08f61c1cc5b72cd473922b2f243fb0fbd0c1a4bef7794e59d134477c85d29dc92a821790d93cfe9f78ca72e37b8e4b7ffad59b146818973262b60d6a2749dd4977f5384f79f7fc17c94da7d0ac9f2d137be5bddfec553af16dfdc2e7b56e15ae3e498958eb8c98982e0f89122b6b015ec78b2635fbf98e75b56403969be1a7f0dffa8d50507bd4b60c5c9ee99a938ee41ba9f869c84a03c7e583590142ab4047659b8612242e4af245b45f38a67edaab345e54be5415f58695cce6d05c382def16bed28961499dd9245e9e0a77859a5b26318b94ce2f571fbbfe466e53cae8d0a258068d1356530d98b9165f28c446e767d8b3a4e91acfa62aeeb5e97054b9268432d0c25904339d430dd25768680072e91513fc1d569176cc1c251eda5031203f3098f91e2678bf6c116cff6fcf7d7df1e463db940e85d1709e43886eeed204907cee50f2270c2866a066a6856112e73092131fee5aa8437fdd5a841ba0c638e87e1746a3ed9c1a22c8a769896b40281045934fe255a1f2f2670f968a228eb2ec1e032c75d065160b73a8d55061410fbbb7cb4eba23e16ee9149fcb3f25022df8ba94341e925e78b7dbadcca565247be5fcd8a92ba7eb0bdaf5e8243633c3c1703216621691817bf2688544bc2d6004ed3afee4e5dbfe82ed09eb16fb52549034dfc2fc2901d796ae489f2ef46378d513d080354653505fce509e6563794ff26b42537f82a9779215f5f733cb8e5d3b2e136713769de6ffb3cdeab89c90f1fafd46845d2cb52ddb7ecc4424766d04b49073000121a0094051ce8b68d86ddbe99ee435a57ee2b5bf19a077ebfc8f0bd7df2c90422585afc083169565729af01add4cafd9d71a2f1cd6aa0d7ec3cc9b96fa8d3d0fc0f2466d4e6a452c3c26356aaa28d66c8ce0f41abc654a8a25d6a1888888336b440d03c8cd19decf1f2dabb905f4064546b63aaabb90e54c6a6d387d13b69a818a5883cb757ac3633aba1362c46e54c336c440191b6308148f38918b4c9668125ca40636dff6fe2126641e3ffe7b8b4f60ba920adf8bf285a98a37703a2d488b472dc9bd190749e1da34abde7199e2a563904596142d8945e43e258350c001a894772f0d5ffbc5546cf87e73f9009cc85d13770b5e51d7623e36ec172c88da528c83d4e8d9c43a97ef5e3ea60d9600135774ada2f9682db32c1e5443c151881fbf4e89e0adcf89e83fb5b59009b0eee9465922f3ce556efdcd730dd930f149cd2f6891fb38fbc8e7cff4ecdbc792865c3638b1b37eba6ab4fcb9a4264f0e036b7b12b164b800edb979f8db320477d826925035696833bf63313215db4c1813f59feefaba88161500ec31a521fc2afd3d6e2673a6941de34ccf7ae324a758be3719d8b632812afa92361deb7da950c3dde2c1ba12aa88cc4f826773daf7cac9457241287b1f7f5632abacb72f2acf62661da5a58099c7d3ef46ffb090da49420e4d4e9b1f8bfc52c078a7ff95b56722173915f22275e5408181ccfd6baef8e582a45b9664154967d3b592c720f7ef850454641a823178f32ffb673451768dcb4767a8d47cf397ce912c7c10bf8515d00bc836e19ed5a40355779df0e3a470c365872d58d6c0b90e0b8ebe6e0a20b44f76825d430fc77c203e55d3a97d4ec794a8fc407903810a234221d7a2420a85b4824d31d1cb0530ebea4985cfbb5f95b9feab4211b880fd9831fe224df228fbf2ea0fcf0ad0659595d8cc87c7a0ae3a3abd2fb594c111d94a207304e58e4d7ec54b180ef27398ccb52069d8a57306ddbb07ebe58a872b8857ec7d2e2179cefd0f10fcadece40c04cbc19fe32acae6c450ecbfa1711bfa5c2b0eaa5a6174ff2e0d79d38d68b7839311e1f80a334c2c1d797fbb3f4cd218740666e5a00cfbe63a47453c376675f007ce115dec03014e3f7bcc311d21348a7b5ace64a645a5eb59322fd7ad3ee9aa7cddb2d052ff617f86bd6482f843419a9af96f4ef510eae441392079fe39b627981b4c427ad69b93fa07dbf957461dd402130f9d947ab6134fdbec1daae2726cafbd5060761a649393a574d1d7117e9b8e192ba0fe15d86b4e7f0058ce35e00eeefb65a50bfb7de472c82253a1ca42cc2d7d64cdb9628f33359771f6e168137c7b8e46d9172a359c50e9405dca73ab7386852f18450baaeade034e58214ff3bbeaec891e92096d91e1f2aefef66774fa2105b8f2450426f5e302bf1332480538dea8fa898d7f09ccbe6626518ac0e9e27d2647ffe488dc9ceffb5b407652f75ae5c389ce597a03c5b07fba8765b386f4473979bd151b2dd0b0a69972d79dbafc5d6aa0cd143720ef2e687f7d73cccae6fc3c565acfe7b5c8a29ef67a751ab926da1c7b3b4b61bfe3c9c3dd7c0f634e008e6bd0df099bcd8a18fe5b4014d97896c8310f77d1e5f144df964294f226d50a3a41eacd7136a079639e6eabb275e7239ee490c891e2b9492fb4062eb1a4f6991cfa8a2413161b3234e84a8096b192bfed6cd2387736b156c7dd93b16fe5e91da0bdb01e7b5a35ba51d337712f9578dc5f70cfb4e7006a3fa4ddaf9169d9cff0531cebac6b84326884cb027d08c7cc0a90fad23fbae5b36130a13174a7f459df82fe1bfe6e1bcc87910a7e3444fe58b5979d9020a5578eba57f7e741cbfe7d7fb2d140b7efd24800d4c07b677349bf8ac008d95de7e002f2219d653be3f29816276b14fb2e88364ffca73c0de62a4f5df7dd35608d1c14d341215936c648332d2c40021b474648f92b0f0015e3845356cea0c9bce20bea0d05e43078614963f3f09695b5bd77d14b770e6eefd2dbd051e7ed113ccdd2b62737c82166eef310821c0d3285d97bc7fa82502d056768cb8eb5693c05fbaea9163910e2a1c6b48694d3fd0a66b22e4a0032b3fa3e93e15199daf11e2639e0edc860c5a40e83ad3007f58b11cdc9c06cb8bea5357dc64ae8beecb9c1f6a8e969a431a61ea4484b94fa87f5c78ba24918e9f8a19713dcba71d46ec8d73329a4b81d71d26748a7f072de3bc6b5d52b4f426dbda64f0890beb9686c3cefd2c15c642af383bf72cee844e09078fb1e620ed6e5f4e1b09783e92a76bf22f4a17a3855f5b522f9c7cdcf0dcd833fdd19e96ab803cf9d62d089bda318f1b50f5b954a0cf879e59666c869799a8f485ddfd810dc9ab39f5707151b45c15d9164a9ecdd66ffb4f78ce1bc9dc1cd8e3d47e024829b58c52d429781a819ea9e97487de7995f91be60cc3c68b6685afa854946a1c939c2159450f67b3e4b4ec6e274dc4ca4722a977547ed6569ec8bdac5be8f5dda595166ce7057836ad1cfeb8654a2b083099b6cc5d3e722bde305b877ddd50dc31b9d8d7c26b555db0b8167592d3fc254a0dfc68c5307f8c6d811921ee7538d5f5e09f0a84396de1fcdd24f0a7b9dd5958fe74b6d37b9e260af0d8557e85b57f3c5e9f6f601c8399bf2d5da62b8b603166f07872655588bddc9ac75db2163bc47c0e6ff34573ec52585a46a135f8270772410fab6de2ece063d56e9326cfe2ede4be1b9f44c0aaf87f439a369a645c0da02fe3818da3bf9ae326d2d718d9332232c62a6f004720c0cfab8aac39ed5fd3856dc7a1f6409dfb4d6462ba0b390c42f938aa0bf75afc1bc0c37fac3422b528bd63fa7450cb13fdf313be55c9731531defea3805651ac835bbd379eb018c621301901a87345f4b93eceedc1d0c2d1e777e8ceb9aca3b4fee4b986ef57cd884b7da54ad6f1eed6adb70de7e71c0e06d0d55d293c1cae6e94a5fb203b04520347b28bfcf95b7c7440f27c35d60d8445e414e4e8c81eafe03ca1e9bc6474e9044c198f68f149a4913cd9679caa2ee5b001cff68a91e3a3113fdb138754d0e4b07756431b9677cff2f3804c16b20e98ad1b3e5e2b64abe6fec886faa92d8042d5b93093f6478671bf3f46884b29e87085497c0f7dfe9b05d242324f18f211308cb8718e285a0b8d14219d97ef788dc8840b53c2579ddf0edc683ccc7fb3afc49dad1280c7037253e193b569c7f58a31b3c2e268adefe4c22cd85a18fcd4905830fba1da3e1c5e721b789034911c0cc250efe6cc7be5c1fb507657e8b86259bf3c77d083decb7d633f1b748461eb83b1da2be79efe8fd659a2cb52a36c0f24d0d84e037ec48daae2f50d5d63978c240a2fa8dcd8e8d3fec3a3216de1249b10289c867ddbb1360680dbbe6cfd713a41c5c545f5e2573b6caf0241f4ffdd3f7e1b1afa0fcc6f4fc2632f7eb0f43575ca09caa667e54dafdfe5a1ffc0a53cce6bebf20619a304fee03a0cf9b96f4017b335c21207cff356640a1b7e5c943e76a548b1fc49e471e34413c3aeed099ccb085d04f8c6e1716dddf7df7c8be4492560a4d0064c637db580bbff404d9b6fa68392b2826b2e101bd42d5c60d74f905269e63f53f2c5ea3b83945d000f2ce005bdd38a63c1dc494e537f32eb241ae0db096c95e65dae7e72365fe6adeabaa2c3ab55f225a08a9fc626798effdee430a60e48da878fd2135f5afa5795ef10f925824a12b74ca70f1adf577650ba94f24794ea3b6fc1ee716c29f37ce1f05ba3056df200047f4c856de9bb7fb077f3ecd8f7da1132fb30c9491a435cb95fdcd6e94d74fbe04738f87bee30f7d579e12f49d7dd517d2254dea91c4426a46bf68b3a52b1c016faf26b13aec066aee375d3b500b771dba170c13cfb0546f4d5f93e6d6c554a71e2c476658665539ec2745e6dbfb8c45b3be277e93dc0eb6fb892a657be1dc00e5477d8199c7f74863ae6b8ffe9694be3165175a68d835c92e9226988c2ff2fbb6360b4753165e69f5f181f01363a9bfbf1ea3644cb77a0d07303936e938d67f9b8a54c4d7102c8136a6a7e5298390304b6678e022a080d346996e9cad7b20bcce02db1f81177d2b1bedbf5998db345b4817ab35d8cfad006855ba10f19f5da122c3dd433577a79c4daa8ce0cb49a79e0984e0802c128d6f444d9ef609ac1f5f8d1e9b0afa2bd0eaf6cbbec0bca25c2ff5f0bb6a36ee33e5539016d4343f7762e461b28dd6ccf6594858091ab62ef484de2ac3871a47a8ed3ac54a0258ac60d77cdf8ac3dec0d574be4a338bc88774f5a4e420438d8b5e4148307ea28777a5f2c40898247ceefc0ac04f5610233a013d9b16976b853a9793de58b0e7c35ab8b43b309a7d9b09901b93717a91ec174eb799fe54408990504c398ebe3175e4b2352ed6358043caaf42cc4cc2904037383b45d266acd09605315beda0101e55abb6e32c683523f7668e483f9f953b11715fe92da69458c7e87d1de9ed1a36d08270780cac916dccfd5f4216626aa6bafec27c09ab00a934e28548f8d7c6952b6c01a6b38143e8c5018a5e8857feda9755985cae5490baa0a52edb055e16e55dcdd0f965e2695fae543e8ea2b59023d8f67381cb78742c0e9b165f038860f9d72f3b78a780a222d143af6d7892da7ff9bf8f8a89741b67138b6a718cb9c86317457969336cdf269d08b5df5b241b1f5c8f781811f32ae9bf5842ca29", 0x2000, &(0x7f0000007740)={&(0x7f0000006900)={0x50, 0xfffffffffffffff5, 0x3, {0x7, 0x2b, 0x8, 0x1000001, 0xa4c3, 0x80, 0x1, 0x5, 0x0, 0x0, 0x40, 0x3e}}, &(0x7f0000006980)={0x18, 0x0, 0x10000, {0x10001}}, &(0x7f00000069c0)={0x18, 0x0, 0x7, {0xe}}, &(0x7f0000006a00)={0x18, 0x0, 0x75, {0x9}}, &(0x7f0000006a40)={0x18, 0xffffffffffffffda, 0x8, {0x5}}, &(0x7f0000006a80)={0x28, 0x0, 0x7, {{0x6, 0x5, 0x2, r17}}}, &(0x7f0000006ac0)={0x60, 0x0, 0x8000, {{0x2, 0x13c, 0xe, 0x9, 0x7, 0x80000000, 0x8b1, 0x40}}}, &(0x7f0000006b40)={0x18, 0x0, 0x81, {0x7fff}}, &(0x7f0000006b80)={0x15, 0x0, 0x4, {'syz0\x00'}}, &(0x7f0000006bc0)={0x20, 0x0, 0x239, {0x0, 0x8}}, &(0x7f0000006c00)={0x78, 0xfffffffffffffffe, 0x8, {0xdf1, 0xa, 0x0, {0x2, 0x7, 0x8, 0xffffffffffffffff, 0x400, 0x1, 0x0, 0xe, 0x69, 0x2000, 0x2, r11, r16, 0x94b, 0x1}}}, &(0x7f0000006dc0)={0x90, 0x0, 0x1ff, {0x1, 0x0, 0xfffffffffffffc01, 0x5, 0xef6, 0x4, {0x2, 0x35, 0x5, 0xfffffffffffffffe, 0x3, 0x3, 0xfffffff9, 0x80, 0xc, 0xa000, 0xffffffff, r18, r12, 0x7, 0x2}}}, &(0x7f0000006e80)={0x78, 0xfffffffffffffff5, 0xb0e1, [{0x1, 0x6, 0x9, 0xd, '*^\xc6-*(},+'}, {0x0, 0x3, 0x2, 0x6, '^]'}, {0x5, 0x5f, 0x1, 0x1b5fe03f, '&'}]}, &(0x7f00000071c0)={0x328, 0xffffffffffffffda, 0x8001, [{{0x2, 0x3, 0xfb, 0xc, 0x717, 0x76f, {0x1, 0x7, 0x8, 0x2, 0xb67, 0x1, 0x0, 0x80000001, 0x8, 0xa000, 0x0, r11, r19, 0x2, 0x7b861512}}, {0x6, 0x4, 0x7, 0x7, '*$#],^.'}}, {{0x2, 0x0, 0x8000000000000001, 0x8000000000000000, 0x2, 0x5, {0x6, 0x0, 0x9, 0xfffffffffffffffe, 0x3, 0x7fffffffffffffff, 0x6, 0x5, 0x200, 0x4000, 0x10001, r11, r16, 0x100, 0x9}}, {0x6, 0xfffffffffffff409, 0x6, 0xffb, '\xff\xff\xff\xff\xff\xff'}}, {{0x1, 0x0, 0x6, 0x10001, 0x3, 0x8, {0x1, 0x4, 0x1c, 0x101, 0x7f, 0xf, 0x4, 0x7fffffff, 0x7fffffff, 0x2000, 0x40, r20, r21, 0xfffffffa, 0x2}}, {0x5, 0x9, 0x5, 0x5, '($!].'}}, {{0x0, 0x3, 0x6, 0x12, 0x7, 0x6, {0x5, 0x7, 0x3, 0x7, 0x2, 0x81, 0x6, 0x2, 0x5d38, 0xa000, 0x1, r15, r16, 0xf, 0x4}}, {0x4, 0x82, 0x0, 0xfffffff7}}, {{0x1, 0x2, 0x9, 0x0, 0x4, 0x3, {0x6, 0x6, 0x0, 0x9, 0x7, 0xd, 0x8, 0x1000, 0x101, 0x1000, 0x3ff, r15, r16, 0x1, 0x9}}, {0x5, 0x4, 0x1, 0x5, '\x00'}}]}, &(0x7f0000007500)={0xa0, 0x0, 0x6, {{0x3, 0x2, 0x0, 0x5, 0xffffff5e, 0x1, {0x5, 0x5, 0xfffffffffffffffd, 0x4, 0x1, 0xa88, 0x8, 0x7, 0x1, 0x1000, 0x9, r15, r16, 0x3, 0x7}}, {0x0, 0x10}}}, &(0x7f00000075c0)={0x20, 0x0, 0x25431e06, {0x800, 0x0, 0x7, 0x4}}, &(0x7f0000007600)={0x130, 0x0, 0x100000000, {0xffffffffffffff1a, 0x80, 0x0, '\x00', {0x4, 0x40, 0x2, 0xe7, r11, r12, 0xc000, '\x00', 0xe17b, 0x401, 0x1, 0x3, {0x7, 0xfffffffc}, {0x6, 0x2}, {0x1, 0x3}, {0x1, 0x1}, 0x46, 0x7, 0x40, 0x3ff}}}}) 487.279722ms ago: executing program 1 (id=737): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x38) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000004400)=0x5, 0x4) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0x3, 0x0, &(0x7f0000000040)) mount$fuse(0x0, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000700), 0x0, &(0x7f0000000f40)=ANY=[]) write$FUSE_INIT(r5, 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80801) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat(r7, 0x0, 0x18b043, 0x49) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg(r8, &(0x7f0000000e40)=[{{&(0x7f0000000040)=@l2={0x1f, 0x3, @any, 0xf6, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)="9cb399c6beb9f5ff337752a8bb4499e1a3bb652c9383ed368f0632e814d69648ea2eadeee3a9fcba81f6f918df9403b0b882bf83f696374152b900802e1ac7fe4111e754372cf95a4ef926f8e99c330a", 0x50}, {&(0x7f0000000280)="287abc840fa0d2c330c68c21c778a2e1be4c9b413e6f6019d7033fd83841199312f1824992470b2ebec686d00819fed92433a88c8285e5aba0503f5d4027f4640b408132781c03fcd2b61f9b6b8e41e84ca4b079ca5835f9e729377f47a0baa70563f2244a9736b972a46617d00039e772445d7480962ccddaec5d6df3812c63f7db79ca32293427f4096c77296c01c419e0f62cc92b73a5530944ee37260b38281d47ed2e34149c81b8a8206d38d513eb6a7cf74220c6e4e9cf03ad831485b5f3f2b4b06d8a7ee960e93c654ad88fa41b8f65de094b7cc773f2de42999d31", 0xdf}, {&(0x7f0000000380)="6f3258eb0ea08f40815ca0bb45480c8ea7867de150239097cbf27ff39b20ef0e8810e863cd57bdc11044dd47863a32309e1c4f8eae23d02ec3eaf96e7ceb3dfd1f5df8c63df937a8a6e1b7828f461c789d", 0x51}, {&(0x7f0000000100)="1b4d5d656b4ed4cb590dfbd7c5fc7ec58d7bdd978d39ca3f9ab6902b321e35bbfd3c415912058519a5ae3811", 0x2c}, {&(0x7f0000000400)="50589456639e181c924923435d186da67066191d78188ba119b1f502e5deecce402b3f7351799582e405436bd765c346da3259eae07c614b83fd326e781d1c2d5240f13f800ac8c1ce6559e9759ad06628ffbd05e2f90ab969e3", 0x5a}, {&(0x7f0000000480)="ffac2f95440c946537c3f07f120643a404814428192746b310553282181ebe255b5a57f816931bec66f991662d25273d20e6cbd70afae2bac5d3e9344817fd39dfc48bc01d00ebfe2e1c8f338d62dfa803874460b67613025af2e798adb3ceb61ed5ab56c19637a7c40cd5281c6acee7fad9deeec055d9cbac56993a42123db3afdf64a92c9c7b782c6a90e5b2ad4528d0204b78ec86647acb97b9aa1ec3314cb042be077e2d02cd7bd97d28fa63fbd45270ddba693097953bd6", 0xba}], 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x148}}, {{&(0x7f0000000740)=@in={0x2, 0x4e23, @loopback}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000007c0)="1ce5b29fb9c8d5493f55cdb6ffea7bf69ce3bde7533bef5bfdc06d9bd5707387550f49604ee14780b612dcd13aeead1476bdbf66b4ab1dd07f76c7bcdeeaa7289c6c85f689cadd3e91771a9e786fac95949def8b59ee812660b7295e3a6c07b19c32421b2b2559159d9a2be98fca70a49a27e395fbee9d8eec2037bb3921ee0f7bc4d62c26c8dc24e529cfe7710a5c2e", 0x90}, {&(0x7f0000000880)="f77f887fa9c5eddeb4b9bb6262fadfea8ee54ac0557c183a8fe3aca267a6408cf3b30713a41456920362f61fd28d9c6465e2205bf41039f7718e6d8595102d9bfbbaf582913c41036c7a74b6b683039fabf2167d0ef26914859444", 0x5b}, {&(0x7f0000000900)="24181b5f25edf8ca47170a89e6d8fc8c2afbf93778ad786b07a2fe8f37c890ea520a0db47f6f80fdf1f3f296a3339c9b3cd69310fead50ccb2ac392a881f2d44cd585ae43bec256000e9e1e1446a950402290a3dd39e0545e3c1f0d755eaf99118e2f0b46564c2a52e598c00e36976a087ed469cc81d0068bc1948572c3f33f6b9154dfde89591c015ea391a42f5aa66ce6e1695af40c214b8bea15898fc8c2f18632c6f94", 0xa5}, {&(0x7f0000000180)="c59c5b9afce58f3ad1c88f79f9b9a18e1792e584a86715930fc86be379a331673f6151ee331447321d7d5536e69c3bc53c73c68c78e17d7b949bef21203aae", 0x3f}], 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x140}}, {{&(0x7f0000000b40)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-aesni)\x00'}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000d40)="a2435b3bd45e85212de9a9ec2154b646b932a7f84ab15d63beea86d0894364f694475a3a6b63339919542844dddbbe0d98068c5175bbcafd19bd3fb75a5684941072d64710e91700e0979294754513beccf2e1116a9a4522cf5ae9516c1b270bac960b657bfcaa18754230f17f3f2fddf0cd6d0f8278d8f8f8619b99ffa01b6bc94c8c7ec869925e5c6e913072f65fb7c5a3facc4cf277fa53b2dba5c3515c1078b3fbe664f934bd32021a70f9ea9cfb89d57200cef991c050bd5d2329dc25ce4f56b6cc4334110a3e7cdc2b482883968a411a", 0xd3}, {&(0x7f0000000bc0)="e408b875a57f3056ab2885e574e47f3738f351791b9260292bbed60d30162b6fe318b7e90b6a2068305a7c0ab11e8a507fb6a2c795760fa20d5e99deb722c74c3f039dc285", 0x45}], 0x2}}], 0x3, 0x40) setns(r8, 0x10000000) 485.735882ms ago: executing program 2 (id=738): mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext']) (async) mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext']) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffffd, 0xc19a00, 0x0, 0xfffd}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0x800000}, {0x6}]}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0x800000}, {0x6}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x0) ioctl$BLKTRACESETUP(r3, 0x40806685, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)={0xf, 0x0, [{0x4b564d02, 0x0, 0x7f}]}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[]) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[]) 432.528413ms ago: executing program 1 (id=739): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) syz_io_uring_setup(0x2d1f, &(0x7f0000000300)={0x0, 0x3e16, 0x4000, 0x3, 0x288}, &(0x7f0000000140), &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, 0xf) unshare(0x400) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(r2, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/200, 0xc8, 0x1, 0x19}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/153, 0x99, 0x2, 0x1e}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 430.872863ms ago: executing program 1 (id=740): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040)) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000080), &(0x7f00000000c0)=0x24) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe8, r1, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x3e}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x7]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1000}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x82, 0xbe, "17b8569035bff1a1d538af2e379908c7f460af02c7ea46f177c99511832ab69fe5577a84886615c9039005d70999c34c6d73dd4b3fe05165b51dfccf4791290551864946f569c04a59a57ff14ee142e0d944ef622dc57f4fb3bb3ff8f1e6ef349564919f2dcb9d3da83edc972d5d2f77baa41f700187a93033e40e13c1a6"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xb}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x4, 0x6, 0x9]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40021}, 0x1) close(r0) rt_sigaction(0x7, &(0x7f0000000440)={&(0x7f0000000380)="0f5b15edc73c888317007300c401c9e9c647dfd7667a04c463bd7f7d99c7c421cdde6b78c4411c1541170f8332233333", 0x10000000, &(0x7f00000003c0)="3666420f383c20c423f96117e36444dbf5c4837905350f00000085c4011016e2c421a556a446000000806566410fd0bd06000000c4e1fc2f9f61e70000c4027932a9dad60000c442c19a044d0b000000", {[0x6]}}, &(0x7f0000000580)={&(0x7f0000000480)="64652e0f72f60ec403794a687f6642f60804660f381c5ce5a2c46272f748076426f0ff8af2ffffffdabb08000000666566430f3830ed8f489ca27179eac4a3656b6c62df9e", 0x0, &(0x7f0000000500)="f2470f2d0c71c4c1f5631d36e14264c4c1fd29709ec461cb5e09c4e27d5aa0555956b4c46259a922f340c1a37b9f000000f30f01e83666410f38f6a200008000c4024d2f39"}, 0x8, &(0x7f00000005c0)) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}]}, 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x4000) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000700)={0xa, 0x4e23, 0x2, @local, 0x9}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f0000000840)=0xe8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x4010, r0, 0x6a1e4000) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x7ff, 0x0, 0x7, 0xfffffffffffff800, 0x0, 0x80000}, {0x1, 0x8, 0x8000000000000000, 0x9, 0x1, 0x7}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000ec0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b40)={0x334, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "22ec31698a9de4d6b43019ee77b79b9c50d8b513f7f6277e568965a68b84"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "eba40b93ea261e452491a4428d02abdfe797bbbc6bd9bc619b0249f8bda8d848b2e59f10"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc0000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fad6a51}]}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xba8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8da}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffa3}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x137}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "f2c1353bae6f952bfc414194995ad31052d3b638cfab5e3afac8e8314077e97e5f2a47de"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x4104}, 0x10) pwritev2(r2, &(0x7f0000001400)=[{&(0x7f0000000f00)="b12a59d37727939611ca3bc9861eabd9f7f846c85ecab9d1c429544a91fc20c563ec33a11ff8081b6b2105867bcef4d3cb786447b5539626e1677f64b6f205d2d6ebf8b636b0392f544e89fc3dabbcecbd1d05f396266320051b2015af3cbd7dfbd1ca867d0aec92fdd7f65012f227b73aa44f125a0e1991bf1bf20936ef", 0x7e}, {&(0x7f0000000f80)="8421f50cc22259c02b423f463b20014e87de6586a73dc76a2734bbc69dc053d30956bbee960632abb01b82a83b8aa6a489bd0eddc97ffcda8a676271e80ce0e41146d90e15114bad6e913f56f5f59317638e0eee59b8f614441f538f4dc3cc02e6df6761b3ec968da6bac2bc6dc33faafe828f6b9f9f5bf0322bb38c9df904883b8c174d4a2cfb107f6a7270edd7827e307ebcdfa4ecfa5299ad98aad53f08cffd1f8da591a0296ce8d1b0d3b767d9b0486d9971593de14c117d284c7c898e2615c28932d147d30176602f831f741e3887a63386196617f4cdfb53305b4ed663eb1ec73e64425b791069ba7abc75f5c8", 0xf0}, {&(0x7f0000001080)="61afedd39724253f23090f1310a4d3d9c312c8ccf2954ecba0055b60544c583a1c2b0e7586b1ce94a3b01be9874f2dfe5d5e222d2f004bdbaf8c5252e250c199f4d61b0d5d7cf5772d9898d72a51606e17bcc2d6de755b025f923604050d950a6575318fe0b62b60d809f386cc302ae9c2572e8a1d367f7d85be82cef94198df3db93829484316d26ca9c25a973e20a4e33d8da9c90ef28ea64ed234b2f7d1b8138f8bc1956b537bc443a31051298fb9b6a78d1e3bc9832cf8d41d1e0f9d4a", 0xbf}, {&(0x7f0000001140)="d365453e83e90c2528d37a3462dbf8b5a2dad79b10cbc9402bfcdbe62c5e0cbaa6", 0x21}, {&(0x7f0000001180)="b8da5c399d2649915a1e5b1aaf77e130978272db3446ceaab47d92f8350684cd5bfbb69b81d8e1fba7cab76aca58f49daba10e17dcda8c74ec882d5938aa3371f905bea6d7314b4d038feb555a63c30fae0c3f5f9cd9078c43c425c17e27485016fa176d0a4e24add63fa4e06919e553cd086a5450d37b7963bb7c314e81f2d17e92f2ea9426882703a1cc88cff2ba22f5729cf80a410eaa95b090ff1e98b151f2461b451256d74ffd877643ebe4d964c5be", 0xb2}, {&(0x7f0000001240)="66e3544cfd6e6239673331706377b32eb745f9d0e0cd24db382f27aaa971bad7ba74df387d126f9ea1625b1d127abca11f04ef05ababa5b7600cff013f57d065d2d2fcc4ce7b9811930d034f9d69c345", 0x50}, {&(0x7f00000012c0)="fd79a939b5b6b8bd2528c734bb1c57c74d3ac2481501108ec94258b1e40343ee37590e3221a2ef567e2eb21e7532214e941923f54b166972c5f71d97a603ef4ffe1e59742d392094a17d2533c40fb9f1808aa8516d4e31bf62df688e3500c525548128671cf838b2", 0x68}, {&(0x7f0000001340)="8d62d254ce6c38ee91b4013d0b93f111796860784e5326cd45fd4017409d1f974e4ae973e1611fccdbfd55a489b69922b7e292913ba9f30fb22d4e99fc2ca1d36d97f4a699e9f15d91514960cedbf257a7cd7bb743c363ba303918dc8f34d0f6adb734c5db033655ffb3bbee5b8783b36440a3eb9ec9fbd441f9bbd8e2d8a2d1fc8a9a609dce4264e4ce00a323d26ee9192afc11f2a1a70b0841daa10091f5eb3bf7f8aa0920100834fa4b220c39ea6b6a450d46e68004", 0xb7}], 0x8, 0x8, 0xfffffff9, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000014c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001740)={&(0x7f0000001500)={0x214, r1, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x27, 0xcb, 0x5, 0x5a5f, 0x2000, 0x6, 0x3, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x99, 0x6, 0x9, 0x6, 0x7, 0x8000, 0x7, 0x1000]}}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x4, 0x8, 0xffff, 0x6, 0x8f, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x16, 0x6, 0xd337a12ae994f414, 0x6d, 0x60, 0x3, 0x18, 0x1, 0x24, 0x36, 0x2, 0x8228270b44c58268, 0x36, 0x16, 0x48, 0x1, 0x5, 0x9, 0x5, 0x24, 0x14]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x1, 0x2, 0xb49a, 0x6, 0x0, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x5, 0x9}, {0x7, 0x4}, {0x6, 0x2}, {0x2}, {0x5}, {0x0, 0x5}, {0x0, 0x9}, {0x4, 0x7}, {0x7, 0x9}, {0x6, 0x5}, {0x7}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x6}, {}, {0x3, 0x5}, {0x0, 0x8}, {0x7, 0x2}, {0x7, 0x2}, {0x1, 0x4}, {0x6, 0x8}, {0x0, 0x5}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {}, {0x3, 0x3}, {0x7, 0x2}, {0x6, 0x6}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x7, 0x6}, {0x5, 0x2}, {0x3, 0x7}, {0x7, 0x6}, {0x3, 0x9}, {0x5, 0x4}, {0x6, 0x8}, {0x0, 0x4}, {0x0, 0x2}, {0x2, 0x4}, {0x0, 0x8}, {0x0, 0x4}, {0x4, 0xa}, {0x2, 0xa}, {0x1, 0x8}, {0x0, 0x6}, {0x0, 0x9}, {0x7, 0x3}, {0x1, 0x3}, {0x6, 0x8}, {0x1, 0x9}, {0x1, 0x8}, {0x0, 0x5}, {0x7, 0x7}, {0x5, 0x3}, {0x0, 0x3}, {0x5, 0x8}, {0x7, 0x5}, {0x7, 0x6}, {0x4, 0x9}, {0x0, 0x16}, {0x1, 0x4}, {0x0, 0x3}, {0x0, 0x8}, {0x0, 0x6}, {0x1, 0x9}, {0x7, 0x2}, {0x5, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7ff, 0x8, 0xf, 0x0, 0x7, 0x101, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fb3, 0x4, 0xbe, 0x4f, 0x28, 0x7fff, 0x7, 0x7]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x7}, {0x2, 0x1}, {0x4, 0x7}, {0x1, 0x7}, {0x7, 0x8}, {0x6}, {0x0, 0x3}, {0x1, 0x1}, {0x6, 0x8}, {0x6, 0xa}, {0x3, 0x8}, {0x0, 0x7}, {0x4, 0x1}, {0x0, 0x8}, {0x6, 0x6}, {0x5, 0x3}, {0x7, 0x3}, {0x0, 0x4}, {0x4, 0x1}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x3}, {0x1, 0xa}, {0x7, 0x2}, {0x5}, {0x3, 0x2}, {0x6}, {0x4, 0x9}, {0x4, 0x1a}, {0x1, 0x4}, {0x3, 0x9}, {0x2, 0xa}, {0x3, 0x4}, {0x0, 0x2}, {0x5, 0xa}, {0x4, 0x7}, {0x3, 0x9}, {0x2, 0x5}, {0x1, 0x1}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x24, 0x6c, 0x9, 0x16, 0x1b, 0xb, 0x12, 0x30, 0x12, 0x3, 0x50, 0x18, 0xc, 0x60, 0x1b, 0x4, 0x18, 0x5, 0x16, 0x48, 0x6c, 0x2, 0x1, 0x9, 0x1b, 0x12, 0x12, 0x3, 0x9, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x3}, {0x3, 0x9}, {0x4, 0x8}, {0x1, 0x5}, {0x3, 0xa}, {0x3, 0x1}, {0x4, 0x8}, {0x1, 0x16}, {0x0, 0xa}, {0x3, 0x7}, {0x6, 0x6}, {0x2, 0x5}, {0x6, 0x1}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x9}, {0x7, 0x1}, {0x2, 0x9}, {0x7, 0x3}, {0x5, 0x5}, {}, {0x2, 0x5}, {0x4, 0x3}, {0x7, 0x8}, {}, {0x1, 0x5}, {0x7, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x48, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x18, 0x3, 0x1, 0x18, 0x5, 0x2, 0x16, 0x12, 0x1b, 0x57, 0x1, 0x12, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x4000080}, 0x4002010) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000017c0)="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") sendmsg$inet(r0, &(0x7f0000002b80)={&(0x7f00000018c0)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000001900)="824dc18f0694c8c44d6ac7ae92d42a9ed0785f6a117b6cddac99ca9b6793a5c59ec38fbb39d5beca29f67768aee1a86ee98a278fd4472ad31ac137d24135243b322bc7016d31d18a0eae6c76f7a77dbef60b8521b0611dda0faad816f0f3b801f4cfd3bc8a3630c3f6562a846ce824f757861599e96c438afbb26fae3d0dfa9215d90fdf5d5960980cc7a71361834d3cf0dc359fcf6cdc23cd389972bbd7d1b204e407c2c971e786166bac5e1708cc0cd5056e555f1cbfd53e49fc78ead868aef63554a050e6ec965baffaf1e2060e1eecb71ffdbcdd8f5cc11d828e682b5ba6950884e1bd33946756d4db9e168f292e", 0xf0}, {&(0x7f0000001a00)="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", 0x1000}], 0x2, &(0x7f0000002a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x101}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x356a}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @empty}}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0xa0, [@dev={0xac, 0x14, 0x14, 0x29}, @multicast2, @local, @broadcast, @broadcast, @private=0xa010102, @rand_addr=0x64010101]}, @cipso={0x86, 0x19, 0x3, [{0x2, 0xb, "a1ad4a39cb6d13703c"}, {0x0, 0x4, "ceb4"}, {0x0, 0x4, 'i]'}]}, @generic={0x82, 0xb, "8b3614604f2d081b4c"}, @cipso={0x86, 0x31, 0x3, [{0x6, 0x9, "f718257d38d853"}, {0x7, 0x10, "bae78ec690239cdb31a9729e5213"}, {0x5, 0x5, "b0da7b"}, {0x7, 0xd, "06138ccaef43c1dbff56e0"}]}, @timestamp_addr={0x44, 0x24, 0xb, 0x1, 0x5, [{@broadcast, 0xdca}, {@local, 0x3}, {@rand_addr=0x64010100, 0x80}, {@local, 0x1}]}]}}}], 0x110}, 0x40000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000002bc0)={0x10}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000002cc0)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x30, r1, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x800, 0x6e}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xff80}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x10) r6 = userfaultfd(0x80000) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002d00), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000002dc0)={0x0, "0076f188f65ebc30383b320a4a233c11"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000003dc0)={{r0}, 0x0, 0xc, @inherit={0x80, &(0x7f0000002d40)={0x0, 0x7, 0x7fffffff, 0x2, {0x0, 0xffff, 0xfff, 0x6, 0x7}, [0x7, 0x8, 0xffffffff, 0x5, 0xffffffffffffff81, 0x4, 0x0]}}, @devid=r8}) signalfd4(r6, &(0x7f0000004dc0)={[0x5]}, 0x8, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000004f00)={&(0x7f0000004e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004ec0)={&(0x7f0000004e40)={0x54, r1, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2db7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x8800) 430.291513ms ago: executing program 1 (id=741): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) r0 = userfaultfd(0x80001) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000480)=@urb_type_control={0x2, {0x7}, 0x8, 0x20, &(0x7f0000000340)={0x0, 0x9, 0x0, 0xfff8, 0x80}, 0x8, 0xf92d, 0x1c, 0x0, 0x80, 0xf11, &(0x7f0000000400)="29458fec9e9d007212031de5c1ded7753a7dc403e9193d6200fe4c7cf9db818e8e24f67ce0e611b771044555d4fc181bf651911e4abdfb55c29ebe4fcadd6729c7175afc4ed352be62cc5da93a4f67e39aeea6a72fa090085798b7955c824bde19"}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mkdir(&(0x7f0000001f40)='./file0\x00', 0x84) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x400c0) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/202, 0xca}, {&(0x7f0000000180)=""/170, 0xaa}, {&(0x7f0000000d80)=""/4070, 0xfe6}, {&(0x7f0000000800)=""/196, 0xc4}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000380)=""/67, 0x43}, {&(0x7f0000000100)=""/27, 0x1b}], 0x7}}], 0x2, 0x40, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) madvise(&(0x7f00001d7000/0x4000)=nil, 0x4000, 0x12) 334.113315ms ago: executing program 4 (id=742): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r1, 0x29, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000000c0)={0x2, 'dvmrp1\x00', {0x100}, 0x6}) 306.276365ms ago: executing program 4 (id=743): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000095}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket(0x2, 0x80000, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) 228.036686ms ago: executing program 1 (id=744): sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16, @ANYRES32, @ANYBLOB="04005e801c005e8008000700c5f133694bbd07cb55000000080003006e8f000030005e800800020003000000080002491acf00000c0001000101000001"], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r0, &(0x7f0000000340)=@other={'lock', ' ', 'io'}, 0x8) write$vga_arbiter(r0, &(0x7f0000000280)=@other={'unlock', ' ', 'io'}, 0xa) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000340)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f0000000300), 0xa6, 0x3b00, 0x0, 0xfffffffffffffdfd) 164.075037ms ago: executing program 1 (id=745): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x582, 0x0, 0x4348}]}) clock_nanosleep(0x2, 0x1, &(0x7f0000000240)={r0, r1+60000000}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r5, 0x8100}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@increfs, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/106, 0x6a, 0x2, 0x2b}, @flat=@weak_binder={0x77622a85, 0x100}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/1, 0x1, 0x0, 0x3c}}, &(0x7f00000003c0)={0x0, 0xffffffffffffff6d, 0x40}}}], 0x0, 0x0, 0x0}) r6 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="1e840300008c71ef28ff4b"], 0xffdd) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x10, 0xe0, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x3, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x8, 0x0, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0x6}}]}}}]}}]}}, &(0x7f0000000080)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x5, 0x40, 0x9, 0xff, 0x5}, 0x53, &(0x7f0000000100)={0x5, 0xf, 0x53, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x0, 0x0, 0x1, [0xf, 0xff000f, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x93, 0x8, 0x0, 0x5261, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xa6, 0x9, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9e, 0xb8, 0x9}, @ssp_cap={0xc, 0x10, 0xa, 0xf9, 0x0, 0x7, 0xf00, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x5, 0x0, 0x7, 0x92}]}, 0x1, [{0x64, &(0x7f0000000180)=@string={0x64, 0x3, "f2e42974c27e07393310d41a54b57c26500424e115473da4d31a2a8466f8b19fa260084e8b2b75ba9b4c7c2c607d6183e7df227d8ce115d6be9de33e44d4bbd3c4511661a6f2ff4c463f93a87b31b44a9bb59402149fd5e319d2b351327038a5878a"}}]}) 39.811809ms ago: executing program 3 (id=746): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2d000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/256, 0x100, 0x0, 0x0}, &(0x7f0000000180)=0x40) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000680)=ANY=[@ANYBLOB="010000", @ANYRES32=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYBLOB="c1af7e21bc71b42da5b5c655dad8e6e14d", @ANYRESHEX=0x0, @ANYRES64=r0, @ANYRES8=r0, @ANYRES16=0x0]) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000000)) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000200)={0xe, 0x80, 0x73cf}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x24) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2001000010003b620000000000000000fe8000000000000000000000000000bbac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+\x00'/113], 0x120}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r4, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000340)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000140)=0x7fffffff, 0x4) sendto$inet6(r4, &(0x7f0000000480)="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", 0x1d3, 0x4005, 0x0, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f00000001c0)={0x7, 0x9, 0x1}) 0s ago: executing program 3 (id=747): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{}, {@subsystem='memory'}]}) r0 = socket(0x5, 0xa, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000080), &(0x7f0000000140)=0x4) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) dup2(r0, r0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) rmdir(&(0x7f0000000180)='./file0\x00') r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) write$uinput_user_dev(r3, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x3], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffeffffe, 0x0, 0x5], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5b2bb47c], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239]}, 0x45c) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f00000002c0)=[@free_buffer={0x40086315}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): translating object. [ 36.121783][ T691] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 36.123256][ T692] @: renamed from vlan0 (while UP) [ 36.128013][ T36] audit: type=1400 audit(1750489854.770:236): avc: denied { ioctl } for pid=689 comm="syz.2.130" path="socket:[6493]" dev="sockfs" ino=6493 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.166765][ T691] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:123 [ 36.183283][ T694] rust_binder: Error while translating object. [ 36.192546][ T694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 36.198802][ T694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:125 [ 36.236849][ T698] syzkaller0: entered promiscuous mode [ 36.252993][ T698] syzkaller0: entered allmulticast mode [ 36.271505][ T706] binder: Unknown parameter 'fscontext?}' [ 36.356969][ T717] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 36.446961][ T725] rust_binder: Error while translating object. [ 36.455029][ T725] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.461190][ T725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:135 [ 36.530462][ T733] rust_binder: Write failure EFAULT in pid:149 [ 36.563345][ T740] rust_binder: Error while translating object. [ 36.569627][ T740] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.577109][ T740] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:151 [ 36.615032][ T623] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.774987][ T623] usb 2-1: Using ep0 maxpacket: 32 [ 36.780938][ T761] syz.0.156 uses obsolete (PF_INET,SOCK_PACKET) [ 36.788013][ T623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.815056][ T623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.824860][ T623] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 36.835676][ T623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.845733][ T623] usb 2-1: config 0 descriptor?? [ 36.851648][ T623] hub 2-1:0.0: USB hub found [ 36.968233][ T767] netlink: 20 bytes leftover after parsing attributes in process `syz.2.158'. [ 36.993766][ T770] rust_binder: Write failure EINVAL in pid:172 [ 37.135012][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 37.185031][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 37.255864][ T623] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 37.295016][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 37.301253][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.318343][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.328295][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 37.337382][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.345041][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 37.353204][ T45] usb 1-1: config 0 descriptor?? [ 37.360024][ T45] hub 1-1:0.0: USB hub found [ 37.467273][ T719] binder: Bad value for 'defcontext' [ 37.474097][ T623] usbhid 2-1:0.0: can't add hid device: -71 [ 37.480185][ T623] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 37.506887][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 37.512605][ T623] usb 2-1: USB disconnect, device number 4 [ 37.526757][ T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.541754][ T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.551666][ T9] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 37.564729][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 37.565341][ T45] hub 1-1:0.0: 1 port detected [ 37.575093][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 37.587818][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.602299][ T9] usb 3-1: config 0 descriptor?? [ 37.813390][ T794] binder: Bad value for 'stats' [ 37.852010][ T796] binfmt_misc: register: failed to install interpreter file ./file0 [ 37.861695][ T796] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 38.010682][ T9] hid (null): invalid report_size 27418 [ 38.024419][ T9] hid (null): report_id 1505116794 is invalid [ 38.031714][ T9] hid (null): unknown global tag 0xe [ 38.037197][ T9] hid (null): unknown global tag 0xd [ 38.145015][ T556] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 38.169404][ T306] hub 1-1:0.0: activate --> -90 [ 38.229975][ T777] rust_binder: Error in use_page_slow: ESRCH [ 38.230001][ T777] rust_binder: use_range failure ESRCH [ 38.236256][ T777] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 38.241740][ T777] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 38.249908][ T777] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:178 [ 38.296081][ T556] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 38.315990][ T556] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 38.328907][ T556] usb 4-1: New USB device found, idVendor=1477, idProduct=1024, bcdDevice= 0.00 [ 38.337980][ T556] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.346659][ T556] usb 4-1: config 0 descriptor?? [ 38.351927][ T802] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 38.765181][ T818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.779613][ T818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.857714][ T306] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 38.857746][ T9] usb 1-1: USB disconnect, device number 6 [ 38.864901][ T306] usb 1-1-port1: attempt power cycle [ 38.914474][ T556] usbhid 4-1:0.0: can't add hid device: -71 [ 38.925173][ T556] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 38.936604][ T556] usb 4-1: USB disconnect, device number 3 [ 39.000624][ T826] rust_binder: Write failure EFAULT in pid:82 [ 39.411251][ T844] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.415031][ T556] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 39.467235][ T851] rust_binder: Error while translating object. [ 39.467262][ T851] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.473579][ T851] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:160 [ 39.606053][ T556] usb 4-1: config 1 interface 0 has no altsetting 0 [ 39.626377][ T556] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 39.637952][ T556] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.656995][ T556] usb 4-1: Product: syz [ 39.663391][ T556] usb 4-1: Manufacturer: syz [ 39.672668][ T556] usb 4-1: SerialNumber: syz [ 40.055319][ T539] usb 3-1: USB disconnect, device number 6 [ 40.201664][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 40.201682][ T36] audit: type=1400 audit(1750489858.850:268): avc: denied { mounton } for pid=861 comm="syz.2.190" path="/63/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 40.284061][ T556] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 40.534998][ T623] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 40.637054][ T36] audit: type=1400 audit(1750489859.280:269): avc: denied { read write } for pid=830 comm="syz.3.181" name="lp0" dev="devtmpfs" ino=453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 40.674976][ T36] audit: type=1400 audit(1750489859.280:270): avc: denied { open } for pid=830 comm="syz.3.181" path="/dev/usb/lp0" dev="devtmpfs" ino=453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 40.696155][ T623] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.714982][ T623] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.745611][ T623] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 40.764848][ T623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.773098][ T623] usb 2-1: Product: syz [ 40.784997][ T623] usb 2-1: Manufacturer: syz [ 40.795006][ T623] usb 2-1: SerialNumber: syz [ 40.968067][ T872] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 41.002496][ T866] netlink: 36 bytes leftover after parsing attributes in process `syz.1.191'. [ 41.011482][ T866] tipc: Started in network mode [ 41.016410][ T866] tipc: Node identity 7, cluster identity 4711 [ 41.022600][ T866] tipc: Node number set to 7 [ 41.065104][ T874] capability: warning: `syz.2.194' uses deprecated v2 capabilities in a way that may be insecure [ 41.080826][ T876] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:108 [ 41.192137][ T36] audit: type=1400 audit(1750489859.840:271): avc: denied { create } for pid=877 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 41.228998][ T878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:190 [ 41.229435][ T878] rust_binder: Error while translating object. [ 41.238683][ T878] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.244916][ T878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:190 [ 41.254381][ T36] audit: type=1400 audit(1750489859.880:272): avc: denied { read } for pid=877 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 41.345884][ T36] audit: type=1400 audit(1750489860.000:273): avc: denied { read } for pid=94 comm="acpid" name="mouse8" dev="devtmpfs" ino=457 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 41.357247][ T881] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:190 [ 41.374220][ T883] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.390817][ T36] audit: type=1400 audit(1750489860.000:274): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/mouse8" dev="devtmpfs" ino=457 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 41.435429][ T36] audit: type=1400 audit(1750489860.000:275): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/mouse8" dev="devtmpfs" ino=457 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 41.552056][ T892] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 41.633161][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.660275][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.679973][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.700245][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.720485][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.740641][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.761232][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.781404][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.815069][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.851545][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.874687][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.894877][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.916423][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.942294][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.967172][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.983586][ T900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:198 [ 41.990389][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.035386][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.041910][ T36] audit: type=1400 audit(1750489860.690:276): avc: denied { accept } for pid=905 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.055820][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.091332][ T9] usb 4-1: USB disconnect, device number 4 [ 42.105213][ T9] usblp0: removed [ 42.117852][ T36] audit: type=1326 audit(1750489860.770:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=907 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e95d8e929 code=0x7ffc0000 [ 42.126290][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.141205][ T908] binder: Unknown parameter '' [ 42.200707][ T911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.202403][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.218019][ T911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.227281][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.238230][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.247614][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.258714][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.267980][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.277461][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.286752][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.296082][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.305368][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.314589][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.324389][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.333648][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.343029][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.352287][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.361632][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.370849][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.380096][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.389953][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.399287][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.408520][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.417775][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.426976][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.436389][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.445611][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.454817][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.464120][ T896] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.515047][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 42.667127][ T9] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 42.675556][ T9] usb 4-1: config 0 has no interface number 0 [ 42.682154][ T9] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 42.694009][ T9] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 42.705986][ T9] usb 4-1: config 0 interface 230 has no altsetting 0 [ 42.715848][ T9] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 42.734984][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.743111][ T9] usb 4-1: Product: syz [ 42.747664][ T9] usb 4-1: Manufacturer: syz [ 42.752283][ T9] usb 4-1: SerialNumber: syz [ 42.758147][ T9] usb 4-1: config 0 descriptor?? [ 42.763714][ T912] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 42.770981][ T912] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 42.785659][ T9] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 42.796138][ T9] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 42.937373][ T943] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 42.945074][ T943] SELinux: failed to load policy [ 42.999235][ T948] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 43.007962][ T948] rust_binder: Write failure EINVAL in pid:208 [ 43.257416][ T623] usb 2-1: 0:2 : does not exist [ 43.282610][ T623] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 43.303952][ T623] usb 2-1: USB disconnect, device number 5 [ 43.435741][ T971] rust_binder: Error while translating object. [ 43.435768][ T971] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 43.442063][ T971] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:228 [ 43.462934][ T971] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.572547][ T984] syzkaller0: entered promiscuous mode [ 43.578261][ T984] syzkaller0: entered allmulticast mode [ 43.794991][ T623] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 43.956796][ T623] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.974976][ T623] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 43.996178][ T623] usb 2-1: string descriptor 0 read error: -22 [ 44.002384][ T623] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.06 [ 44.014971][ T623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 44.035889][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.163777][ T1008] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 44.163801][ T1008] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 44.172495][ T1008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:244 [ 44.219824][ T1013] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.229534][ T1013] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.236257][ T1013] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.248671][ T1013] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.250527][ T1013] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.263279][ T1013] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.267364][ T1013] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.273842][ T1013] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.280285][ T1013] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.288373][ T1013] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.294851][ T1013] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.309362][ T623] usb 2-1: USB disconnect, device number 6 [ 44.317745][ T1013] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.317767][ T1013] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.324777][ T1013] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.334570][ T1022] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 45.093013][ T9] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 45.127503][ T9] usb 4-1: USB disconnect, device number 5 [ 45.173826][ T1038] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.205778][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 45.205796][ T36] audit: type=1400 audit(1750489863.860:291): avc: denied { getopt } for pid=1037 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.252482][ T1041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.357197][ T1045] fuse: Bad value for 'user_id' [ 45.362444][ T1045] fuse: Bad value for 'user_id' [ 45.417972][ T36] audit: type=1400 audit(1750489864.070:292): avc: denied { nlmsg_read } for pid=1052 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.444989][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 45.468574][ T1055] xfrm0: mtu less than device minimum [ 45.474294][ T36] audit: type=1400 audit(1750489864.120:293): avc: denied { read write } for pid=1054 comm="syz.0.254" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 45.500057][ T36] audit: type=1400 audit(1750489864.120:294): avc: denied { open } for pid=1054 comm="syz.0.254" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 45.613259][ T36] audit: type=1400 audit(1750489864.260:295): avc: denied { write } for pid=1060 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.615375][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 45.639134][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.650958][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.660908][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 45.673918][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 45.674867][ T1061] tmpfs: Unknown parameter '' [ 45.683113][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.688513][ T36] audit: type=1400 audit(1750489864.330:296): avc: denied { mounton } for pid=1060 comm="syz.1.256" path="/syzcgroup/net/syz1/syz0/file1" dev="cgroup" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 45.705514][ T9] usb 4-1: config 0 descriptor?? [ 45.769455][ T1074] rust_binder: Write failure EINVAL in pid:267 [ 45.783547][ T36] audit: type=1400 audit(1750489864.430:297): avc: denied { append } for pid=1075 comm="syz.2.261" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.815257][ T36] audit: type=1400 audit(1750489864.460:298): avc: denied { shutdown } for pid=1075 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.854992][ T36] audit: type=1400 audit(1750489864.500:299): avc: denied { create } for pid=1082 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 45.960104][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 45.966885][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 45.985067][ T9] usb 4-1: USB disconnect, device number 6 [ 46.074980][ T623] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 46.243101][ T623] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.263635][ T623] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.273382][ T36] audit: type=1400 audit(1750489864.910:300): avc: denied { bind } for pid=1110 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.324999][ T623] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 46.344223][ T623] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 46.364415][ T623] usb 3-1: SerialNumber: syz [ 46.485328][ T1118] capability: warning: `syz.0.273' uses 32-bit capabilities (legacy support in use) [ 46.510017][ T1121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.274'. [ 46.528069][ T1124] netlink: 116 bytes leftover after parsing attributes in process `syz.1.274'. [ 46.537210][ T1122] rust_binder: Write failure EFAULT in pid:169 [ 46.537267][ T1121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.274'. [ 46.542024][ T1125] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 46.553172][ T1125] rust_binder: Error while translating object. [ 46.571549][ T1125] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.578327][ T1125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:275 [ 46.588866][ T623] usb 3-1: 0:2 : does not exist [ 46.624839][ T623] usb 3-1: USB disconnect, device number 7 [ 46.726296][ T1142] rust_binder: Write failure EFAULT in pid:275 [ 46.796406][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.867451][ T1145] rust_binder: Write failure EINVAL in pid:137 [ 46.891388][ T1151] netlink: 596 bytes leftover after parsing attributes in process `syz.3.284'. [ 47.126852][ T1155] binder: Unknown parameter ' ' [ 47.156161][ T1159] binder: Unknown parameter ' 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 47.156161][ T1159] ctxt 144295 [ 47.156161][ T1159] btime 1750489818 [ 47.156161][ T1159] processes 1153 [ 47.156161][ T1159] procs_running 4 [ 47.156161][ T1159] procs_blocked 1 [ 47.156161][ T1159] softirq 83348 149 2443 84 4317 1032 0 919 3033 69368 2003 [ 47.156161][ T1159] ' [ 47.271243][ T1162] rust_binder: Write failure EINVAL in pid:242 [ 47.271738][ T1162] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 47.595580][ T1172] rust_binder: Write failure EINVAL in pid:250 [ 47.875004][ T623] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 48.034984][ T623] usb 3-1: Using ep0 maxpacket: 32 [ 48.047920][ T623] usb 3-1: unable to get BOS descriptor or descriptor too short [ 48.062287][ T623] usb 3-1: config 0 has no interfaces? [ 48.069173][ T623] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 48.079959][ T623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.088026][ T623] usb 3-1: Product: syz [ 48.092201][ T623] usb 3-1: Manufacturer: syz [ 48.096837][ T623] usb 3-1: SerialNumber: syz [ 48.102377][ T623] usb 3-1: config 0 descriptor?? [ 48.205005][ T306] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 48.384999][ T306] usb 4-1: Using ep0 maxpacket: 16 [ 48.416757][ T306] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 48.427223][ T306] usb 4-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 48.439056][ T1192] can0: slcan on ptm0. [ 48.461905][ T306] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 48.488296][ T306] usb 4-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 48.517157][ T306] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 48.563720][ T306] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 48.573001][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.589185][ T306] usb 4-1: Product: syz [ 48.600917][ T306] usb 4-1: Manufacturer: syz [ 48.615681][ T306] usb 4-1: SerialNumber: syz [ 48.918879][ T1192] can0 (unregistered): slcan off ptm0. [ 49.001604][ T1223] netlink: 'syz.1.300': attribute type 8 has an invalid length. [ 49.117099][ T1231] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197 [ 49.174921][ T1236] netlink: 64 bytes leftover after parsing attributes in process `syz.1.302'. [ 49.240645][ T1243] syzkaller0: entered allmulticast mode [ 49.305367][ T1253] rust_binder: Write failure EINVAL in pid:200 [ 49.371884][ T306] usb 4-1: USB disconnect, device number 7 [ 49.555592][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.614579][ T1174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.623737][ T1174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.632942][ T623] usb 3-1: USB disconnect, device number 8 [ 50.075003][ T623] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 50.195010][ T657] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 50.214996][ T306] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 50.245147][ T623] usb 3-1: config index 0 descriptor too short (expected 227, got 149) [ 50.253431][ T623] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 50.261832][ T623] usb 3-1: config 220 has an invalid descriptor of length 204, skipping remainder of the config [ 50.272476][ T623] usb 3-1: config 220 has no interface number 2 [ 50.278752][ T623] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 50.292253][ T623] usb 3-1: config 220 interface 0 has no altsetting 0 [ 50.299036][ T623] usb 3-1: config 220 interface 76 has no altsetting 0 [ 50.306186][ T623] usb 3-1: config 220 interface 1 has no altsetting 0 [ 50.314300][ T623] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 50.323449][ T623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.331566][ T623] usb 3-1: Product: syz [ 50.335890][ T623] usb 3-1: Manufacturer: syz [ 50.340501][ T623] usb 3-1: SerialNumber: syz [ 50.355006][ T657] usb 4-1: Using ep0 maxpacket: 8 [ 50.361430][ T657] usb 4-1: unable to get BOS descriptor or descriptor too short [ 50.369151][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 50.377356][ T657] usb 4-1: config 10 has an invalid interface number: 81 but max is 0 [ 50.384999][ T306] usb 1-1: Using ep0 maxpacket: 16 [ 50.385700][ T657] usb 4-1: config 10 has no interface number 0 [ 50.392215][ T306] usb 1-1: config 4 has an invalid interface number: 15 but max is 0 [ 50.397026][ T657] usb 4-1: config 10 interface 81 has no altsetting 0 [ 50.405269][ T306] usb 1-1: config 4 has no interface number 0 [ 50.413438][ T657] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 50.418099][ T306] usb 1-1: config 4 interface 15 has no altsetting 0 [ 50.426984][ T657] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.435886][ T306] usb 1-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 50.441681][ T657] usb 4-1: Product: syz [ 50.450989][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.454872][ T657] usb 4-1: Manufacturer: syz [ 50.463145][ T306] usb 1-1: Product: syz [ 50.467712][ T657] usb 4-1: SerialNumber: syz [ 50.471857][ T306] usb 1-1: Manufacturer: syz [ 50.480885][ T306] usb 1-1: SerialNumber: syz [ 50.487095][ T306] ax88179_178a 1-1:4.15: probe with driver ax88179_178a failed with error -22 [ 50.524983][ T9] usb 2-1: device descriptor read/64, error -71 [ 50.548749][ T1174] rust_binder: Failed to allocate buffer. len:144, is_oneway:true [ 50.551754][ T623] usb 3-1: selecting invalid altsetting 0 [ 50.565457][ T623] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 50.571821][ T623] usb 3-1: No valid video chain found. [ 50.582503][ T623] usb 3-1: USB disconnect, device number 9 [ 50.679955][ T657] ums-jumpshot 4-1:10.81: USB Mass Storage device detected [ 50.688491][ T657] ums-jumpshot 4-1:10.81: Quirks match for vid 05dc pid 0001: 2 [ 50.741186][ T657] usb 4-1: USB disconnect, device number 8 [ 50.764994][ T9] usb 2-1: device descriptor read/64, error -71 [ 50.793598][ T623] usb 1-1: USB disconnect, device number 11 [ 51.005010][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 51.144999][ T9] usb 2-1: device descriptor read/64, error -71 [ 51.214499][ T1287] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 51.244988][ T1287] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 51.259243][ T1287] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 51.280620][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 51.280634][ T36] audit: type=1400 audit(1750489869.930:336): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.317123][ T1292] binder: Bad value for 'max' [ 51.321749][ T1294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'. [ 51.331376][ T1294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=1294 comm=syz.3.318 [ 51.379229][ T1301] binder: Bad value for 'defcontext' [ 51.394991][ T9] usb 2-1: device descriptor read/64, error -71 [ 51.457839][ T36] audit: type=1400 audit(1750489870.110:337): avc: denied { connect } for pid=1314 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.505091][ T9] usb usb2-port1: attempt power cycle [ 51.625004][ T306] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 51.665879][ T36] audit: type=1400 audit(1750489870.320:338): avc: denied { sqpoll } for pid=1321 comm="syz.3.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 51.688332][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.776112][ T306] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 51.786091][ T306] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 51.799827][ T306] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.808997][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 51.817053][ T306] usb 3-1: SerialNumber: syz [ 51.825994][ T1298] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 51.875018][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 51.905998][ T9] usb 2-1: device descriptor read/8, error -71 [ 51.917184][ T1326] netlink: 112 bytes leftover after parsing attributes in process `syz.0.330'. [ 51.926506][ T1327] netlink: 112 bytes leftover after parsing attributes in process `syz.0.330'. [ 51.972609][ T36] audit: type=1326 audit(1750489870.620:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1330 comm="syz.0.331" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd00918e929 code=0x0 [ 52.033790][ T1298] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 52.046065][ T9] usb 2-1: device descriptor read/8, error -71 [ 52.244756][ T306] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 52.285013][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 52.307553][ T9] usb 2-1: device descriptor read/8, error -71 [ 52.436170][ T9] usb 2-1: device descriptor read/8, error -71 [ 52.545086][ T9] usb usb2-port1: unable to enumerate USB device [ 52.648588][ T1298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.658707][ T1298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.828545][ T36] audit: type=1326 audit(1750489871.480:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1349 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00918e929 code=0x7ffc0000 [ 52.874982][ T36] audit: type=1326 audit(1750489871.480:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1349 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00918e929 code=0x7ffc0000 [ 52.905018][ T36] audit: type=1326 audit(1750489871.480:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1349 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00918e929 code=0x7ffc0000 [ 52.938485][ T36] audit: type=1326 audit(1750489871.480:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1349 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00918e929 code=0x7ffc0000 [ 52.962586][ T36] audit: type=1326 audit(1750489871.480:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1349 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd00918e929 code=0x7ffc0000 [ 52.986025][ T36] audit: type=1326 audit(1750489871.480:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1349 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00918e929 code=0x7ffc0000 [ 53.094991][ T45] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 53.282466][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 53.311392][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 4096, setting to 1024 [ 53.338456][ T45] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 53.362937][ T45] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x7D, changing to 0xD [ 53.374561][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 53.384441][ T45] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 53.394275][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 53.412820][ T45] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 53.422064][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.439315][ T45] usb 1-1: config 0 descriptor?? [ 53.649834][ T1351] binder: Unknown parameter 'context' [ 53.655848][ T1350] binder: Unknown parameter 'context' [ 53.668354][ T1350] netlink: 'syz.0.332': attribute type 4 has an invalid length. [ 53.682000][ T45] usb 1-1: USB disconnect, device number 12 [ 53.745011][ T528] Bluetooth: hci0: command 0x1003 tx timeout [ 53.751099][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.253130][ T1363] rust_binder: Write failure EINVAL in pid:318 [ 54.253233][ T1363] rust_binder: Read failure Err(EAGAIN) in pid:318 [ 54.403754][ T45] usb 3-1: USB disconnect, device number 10 [ 54.461839][ T45] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 55.271674][ T1410] rust_binder: Write failure EINVAL in pid:222 [ 55.316441][ T1414] rust_binder: Write failure EINVAL in pid:224 [ 56.152295][ T1471] overlayfs: missing 'workdir' [ 56.244991][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 56.424998][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 56.442143][ T9] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 56.454981][ T9] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 56.473555][ T9] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 56.485060][ T9] usb 2-1: config 250 has no interface number 0 [ 56.491377][ T9] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 56.511043][ T36] kauditd_printk_skb: 111 callbacks suppressed [ 56.511058][ T36] audit: type=1400 audit(1750489875.160:457): avc: denied { bind } for pid=1489 comm="syz.3.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.524974][ T9] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 56.564494][ T9] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 15571, setting to 1024 [ 56.565012][ T36] audit: type=1400 audit(1750489875.190:458): avc: denied { map } for pid=1489 comm="syz.3.365" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 56.594971][ T9] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 56.609610][ T36] audit: type=1400 audit(1750489875.190:459): avc: denied { execute } for pid=1489 comm="syz.3.365" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 56.619681][ T9] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 56.665344][ T9] usb 2-1: config 250 interface 228 has no altsetting 0 [ 56.675062][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 56.684994][ T9] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 56.693259][ T9] usb 2-1: Product: syz [ 56.697529][ T9] usb 2-1: SerialNumber: syz [ 56.704055][ T9] hub 2-1:250.228: bad descriptor, ignoring hub [ 56.710677][ T9] hub 2-1:250.228: probe with driver hub failed with error -5 [ 56.795165][ T539] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 56.904547][ T9] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 56.925031][ T539] usb 4-1: device descriptor read/64, error -71 [ 56.989983][ T36] audit: type=1400 audit(1750489875.640:460): avc: denied { ioctl } for pid=1495 comm="syz.2.367" path="socket:[11780]" dev="sockfs" ino=11780 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.014690][ T1496] vcan0: entered allmulticast mode [ 57.164991][ T539] usb 4-1: device descriptor read/64, error -71 [ 57.175457][ C0] usblp0: nonzero read bulk status received: -71 [ 57.284994][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 57.295175][ T65] usb 2-1: USB disconnect, device number 11 [ 57.301828][ T65] usblp0: removed [ 57.404997][ T539] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 57.415005][ T45] usb 3-1: device descriptor read/64, error -71 [ 57.535017][ T539] usb 4-1: device descriptor read/64, error -71 [ 57.655022][ T45] usb 3-1: device descriptor read/64, error -71 [ 57.774998][ T539] usb 4-1: device descriptor read/64, error -71 [ 57.792395][ T1500] rust_binder: Read failure Err(EAGAIN) in pid:251 [ 57.885136][ T539] usb usb4-port1: attempt power cycle [ 57.897238][ T45] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 58.034983][ T45] usb 3-1: device descriptor read/64, error -71 [ 58.155032][ T306] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 58.245003][ T539] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 58.266037][ T539] usb 4-1: device descriptor read/8, error -71 [ 58.275075][ T45] usb 3-1: device descriptor read/64, error -71 [ 58.306009][ T306] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 58.316832][ T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.327694][ T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.337451][ T306] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 58.351124][ T306] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 58.360195][ T306] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 58.368287][ T306] usb 2-1: Manufacturer: syz [ 58.373429][ T306] usb 2-1: config 0 descriptor?? [ 58.385780][ T45] usb usb3-port1: attempt power cycle [ 58.395993][ T539] usb 4-1: device descriptor read/8, error -71 [ 58.635014][ T539] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 58.656061][ T539] usb 4-1: device descriptor read/8, error -71 [ 58.724995][ T45] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 58.746839][ T45] usb 3-1: device descriptor read/8, error -71 [ 58.780623][ T306] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 58.788038][ T306] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 58.796611][ T539] usb 4-1: device descriptor read/8, error -71 [ 58.803135][ T306] appleir 0003:05AC:8243.0002: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 58.876137][ T45] usb 3-1: device descriptor read/8, error -71 [ 58.905084][ T539] usb usb4-port1: unable to enumerate USB device [ 59.038191][ T306] usb 2-1: USB disconnect, device number 12 [ 59.115036][ T45] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 59.136041][ T45] usb 3-1: device descriptor read/8, error -71 [ 59.266077][ T45] usb 3-1: device descriptor read/8, error -71 [ 59.375123][ T45] usb usb3-port1: unable to enumerate USB device [ 60.169756][ T1518] Dead loop on virtual device ip6_vti0, fix it urgently! [ 60.294979][ T36] audit: type=1326 audit(1750489878.940:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1523 comm="syz.2.379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43c218e929 code=0x0 [ 60.392086][ T36] audit: type=1400 audit(1750489879.040:462): avc: denied { getopt } for pid=1523 comm="syz.2.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.431620][ T36] audit: type=1400 audit(1750489879.080:463): avc: denied { accept } for pid=1528 comm="syz.3.381" lport=48028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 61.864835][ T1557] netlink: 56 bytes leftover after parsing attributes in process `syz.3.390'. [ 62.054025][ T36] audit: type=1400 audit(1750489880.700:464): avc: denied { getopt } for pid=1576 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.175009][ T45] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 62.199433][ T36] audit: type=1400 audit(1750489880.850:465): avc: denied { map } for pid=1582 comm="syz.2.400" path="socket:[16443]" dev="sockfs" ino=16443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 62.326601][ T45] usb 4-1: config 1 has an invalid interface number: 229 but max is 1 [ 62.334837][ T45] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 62.345206][ T45] usb 4-1: config 1 has no interface number 0 [ 62.351319][ T45] usb 4-1: too many endpoints for config 1 interface 229 altsetting 255: 255, using maximum allowed: 30 [ 62.362714][ T45] usb 4-1: config 1 interface 229 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 62.376570][ T45] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 62.389615][ T45] usb 4-1: config 1 interface 229 has no altsetting 0 [ 62.396539][ T45] usb 4-1: config 1 interface 1 has no altsetting 0 [ 62.400649][ T36] audit: type=1400 audit(1750489881.050:466): avc: denied { bind } for pid=1590 comm="syz.1.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.404727][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.431841][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.439857][ T45] usb 4-1: Product: syz [ 62.444023][ T45] usb 4-1: Manufacturer: syz [ 62.448637][ T45] usb 4-1: SerialNumber: syz [ 62.459432][ T36] audit: type=1400 audit(1750489881.110:467): avc: denied { setopt } for pid=1590 comm="syz.1.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 62.478768][ T36] audit: type=1400 audit(1750489881.110:468): avc: denied { getopt } for pid=1590 comm="syz.1.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 62.559041][ T1597] rust_binder: Write failure EFAULT in pid:291 [ 62.838647][ T36] audit: type=1400 audit(1750489881.490:469): avc: denied { getopt } for pid=1602 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.960303][ T36] audit: type=1400 audit(1750489881.610:470): avc: denied { write } for pid=1608 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.308748][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.503567][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 64.939947][ T9] usb 4-1: USB disconnect, device number 13 [ 64.955642][ T1626] overlayfs: missing 'workdir' [ 65.345030][ T548] Bluetooth: hci0: command 0x1003 tx timeout [ 65.345033][ T528] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.504981][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 65.511156][ T528] Bluetooth: hci1: command 0x1003 tx timeout [ 65.536154][ T1644] rust_binder: Write failure EINVAL in pid:302 [ 65.597809][ T36] audit: type=1400 audit(1750489884.250:471): avc: denied { name_bind } for pid=1650 comm="syz.1.423" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 65.945016][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 65.948164][ T36] audit: type=1400 audit(1750489884.600:472): avc: denied { write } for pid=1668 comm="syz.3.430" name="icmp" dev="proc" ino=4026532586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 65.985093][ T65] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 66.034770][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.086880][ T1675] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.095853][ T1675] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.096192][ T45] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 66.104770][ T1675] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.112481][ T45] usb 2-1: config 0 has no interface number 0 [ 66.127300][ T45] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 66.136973][ T45] usb 2-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 66.146222][ T65] usb 3-1: unable to get BOS descriptor set [ 66.146856][ T45] usb 2-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 66.153051][ T65] usb 3-1: not running at top speed; connect to a high speed hub [ 66.161731][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.171559][ T65] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.190499][ T65] usb 3-1: config 1 interface 0 has no altsetting 0 [ 66.191075][ T45] usb 2-1: config 0 descriptor?? [ 66.202603][ T65] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 66.211865][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.220394][ T65] usb 3-1: Product: syz [ 66.224701][ T65] usb 3-1: Manufacturer: syz [ 66.229428][ T65] usb 3-1: SerialNumber: syz [ 66.255103][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.403389][ T1655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.412518][ T1655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.422017][ T45] usb 2-1: USB disconnect, device number 13 [ 66.447704][ T1664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.456226][ T1664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.841255][ T65] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 66.855124][ T65] usb 3-1: USB disconnect, device number 15 [ 66.862051][ T65] usblp0: removed [ 66.934168][ T36] audit: type=1400 audit(1750489885.580:473): avc: denied { mount } for pid=1680 comm="syz.1.433" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.162191][ T1690] binder: Bad value for 'max' [ 67.397497][ T1692] netlink: 'syz.1.438': attribute type 4 has an invalid length. [ 67.405231][ T539] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 67.413777][ T1692] SELinux: security_context_str_to_sid () failed with errno=-22 [ 67.532391][ T36] audit: type=1400 audit(1750489886.180:474): avc: denied { accept } for pid=1702 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 67.556098][ T539] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.566287][ T539] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 67.568372][ T36] audit: type=1400 audit(1750489886.220:475): avc: denied { lock } for pid=1704 comm="syz.1.443" path="/dev/binderfs/binder0" dev="binder" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.575982][ T539] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 67.608053][ T539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 67.616123][ T539] usb 3-1: SerialNumber: syz [ 67.620899][ T1707] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 67.627736][ T1707] tipc: Can't bind to reserved service type 2 [ 67.746937][ T1709] binder: Unknown parameter '.FvmGͼ( [ 67.746937][ T1709] FbzO9azL' [ 67.828121][ T539] usb 3-1: 0:2 : does not exist [ 67.835417][ T539] usb 3-1: USB disconnect, device number 16 [ 67.995308][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.011040][ T65] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 68.065014][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.065021][ T528] Bluetooth: hci0: command 0x1003 tx timeout [ 68.166576][ T65] usb 2-1: unable to get BOS descriptor or descriptor too short [ 68.174675][ T65] usb 2-1: not running at top speed; connect to a high speed hub [ 68.183232][ T65] usb 2-1: config 1 interface 0 has no altsetting 0 [ 68.191432][ T65] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.200581][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.208597][ T65] usb 2-1: Product: syz [ 68.212744][ T65] usb 2-1: Manufacturer: syz [ 68.217362][ T65] usb 2-1: SerialNumber: syz [ 68.435958][ T65] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 68.450876][ T65] usb 2-1: USB disconnect, device number 14 [ 68.488945][ T1716] rust_binder: inc_ref_done called when no active inc_refs [ 68.509606][ T36] audit: type=1326 audit(1750489887.160:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1719 comm="syz.2.450" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43c218e929 code=0x0 [ 68.939007][ T1734] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 68.939032][ T1734] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 68.947152][ T1734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:343 [ 68.967972][ T1739] rust_binder: Got transaction with invalid offset. [ 68.977160][ T1739] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 68.983784][ T1739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:348 [ 69.124984][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 69.201825][ T1744] binder: Bad value for 'max' [ 69.296005][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.306971][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.316727][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.344973][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 69.354056][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.363189][ T9] usb 3-1: config 0 descriptor?? [ 69.455021][ T65] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 69.536119][ T1747] random: crng reseeded on system resumption [ 69.544801][ T36] audit: type=1400 audit(1750489888.190:477): avc: denied { append } for pid=1746 comm="syz.1.459" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 69.592657][ T36] audit: type=1400 audit(1750489888.240:478): avc: denied { mounton } for pid=1750 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 69.606145][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.640213][ T65] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.657372][ T65] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 69.675019][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 69.685120][ T65] usb 4-1: SerialNumber: syz [ 69.720093][ T1750] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.734980][ T1750] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.742111][ T1750] bridge_slave_0: entered allmulticast mode [ 69.748542][ T1750] bridge_slave_0: entered promiscuous mode [ 69.755901][ T1750] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.762985][ T1750] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.770100][ T1750] bridge_slave_1: entered allmulticast mode [ 69.776564][ T1750] bridge_slave_1: entered promiscuous mode [ 69.856820][ T9] kye 0003:0458:5011.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 69.858811][ T1750] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.874357][ T1750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.881672][ T1750] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.885425][ T9] kye 0003:0458:5011.0003: unbalanced collection at end of report description [ 69.888724][ T1750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.905241][ T9] kye 0003:0458:5011.0003: parse failed [ 69.913273][ T65] usb 4-1: 0:2 : does not exist [ 69.921741][ T9] kye 0003:0458:5011.0003: probe with driver kye failed with error -22 [ 69.933295][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.940906][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.952337][ T65] usb 4-1: USB disconnect, device number 14 [ 69.966943][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.973994][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.996368][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.003461][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.040017][ T1750] veth0_vlan: entered promiscuous mode [ 70.056770][ T1750] veth1_macvtap: entered promiscuous mode [ 70.079222][ T36] audit: type=1400 audit(1750489888.730:479): avc: denied { mounton } for pid=1750 comm="syz-executor" path="/root/syzkaller.yaLGKJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 70.135327][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.165275][ T1757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:4 [ 70.546015][ T1775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.566890][ T1779] rust_binder: Write failure EINVAL in pid:367 [ 71.054409][ T1796] binder: Bad value for 'max' [ 71.205006][ T65] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 71.305089][ T539] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.375160][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 71.386116][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 71.405320][ T65] usb 4-1: config 0 has no interfaces? [ 71.412183][ T65] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 71.421271][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.429320][ T65] usb 4-1: Product: syz [ 71.433505][ T65] usb 4-1: Manufacturer: syz [ 71.438212][ T65] usb 4-1: SerialNumber: syz [ 71.445198][ T65] usb 4-1: config 0 descriptor?? [ 71.466340][ T539] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.476794][ T539] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.486697][ T539] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 71.496045][ T539] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 71.504095][ T539] usb 5-1: SerialNumber: syz [ 71.653698][ T1794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.664427][ T1794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.674228][ T306] usb 4-1: USB disconnect, device number 15 [ 71.716102][ T539] usb 5-1: 0:2 : does not exist [ 71.724318][ T539] usb 5-1: USB disconnect, device number 2 [ 71.731142][ T1798] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 71.767614][ T65] usb 3-1: USB disconnect, device number 17 [ 72.285008][ T539] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 72.433007][ T36] audit: type=1400 audit(1750489891.080:480): avc: denied { read append } for pid=1836 comm="syz.4.485" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.457741][ T1837] bridge0: entered promiscuous mode [ 72.465722][ T1836] bridge0: left promiscuous mode [ 72.470814][ T36] audit: type=1400 audit(1750489891.080:481): avc: denied { open } for pid=1836 comm="syz.4.485" path="/7/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.472587][ T539] usb 3-1: config 0 has an invalid interface number: 123 but max is 0 [ 72.524961][ T539] usb 3-1: config 0 has no interface number 0 [ 72.530517][ T36] audit: type=1400 audit(1750489891.180:482): avc: denied { mounton } for pid=1838 comm="syz.4.486" path="/8/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.536027][ T539] usb 3-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 72.562400][ T539] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.577251][ T539] usb 3-1: Product: syz [ 72.585361][ T539] usb 3-1: Manufacturer: syz [ 72.590163][ T1841] binder: Bad value for 'max' [ 72.594896][ T539] usb 3-1: SerialNumber: syz [ 72.604728][ T539] usb 3-1: config 0 descriptor?? [ 72.610729][ T539] cdc_acm 3-1:0.123: More than one union descriptor, skipping ... [ 72.610982][ T1843] binder: Bad value for 'max' [ 72.650674][ T36] audit: type=1400 audit(1750489891.300:483): avc: denied { accept } for pid=1845 comm="syz.3.488" path="socket:[18235]" dev="sockfs" ino=18235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.714841][ T36] audit: type=1400 audit(1750489891.360:484): avc: denied { wake_alarm } for pid=1849 comm="syz.3.490" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.811294][ T539] usb 3-1: USB disconnect, device number 18 [ 73.572735][ T1858] binder: Bad value for 'max' [ 73.585754][ T36] audit: type=1400 audit(1750489892.240:485): avc: denied { accept } for pid=1855 comm="syz.3.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.608318][ T1859] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 73.608341][ T1859] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 73.618602][ T1859] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:301 [ 73.814978][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 73.996066][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.017946][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.049935][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 74.068614][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 74.095717][ T9] usb 2-1: SerialNumber: syz [ 74.320388][ T9] usb 2-1: 0:2 : does not exist [ 74.343592][ T9] usb 2-1: USB disconnect, device number 15 [ 74.430177][ T1867] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 74.438554][ T1867] rust_binder: Write failure EINVAL in pid:385 [ 74.455445][ T1868] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 74.495028][ T1868] rust_binder: Write failure EINVAL in pid:385 [ 74.555864][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.729630][ T36] audit: type=1400 audit(1750489893.380:486): avc: denied { map } for pid=1877 comm="syz.3.502" path="socket:[18631]" dev="sockfs" ino=18631 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.779320][ T1882] devtmpfs: Unknown parameter '^ *([%' [ 74.784973][ T36] audit: type=1400 audit(1750489893.430:487): avc: denied { ioctl } for pid=1881 comm="syz.3.503" path="socket:[18641]" dev="sockfs" ino=18641 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.819688][ T539] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 74.887160][ T1886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:399 [ 74.984983][ T539] usb 3-1: Using ep0 maxpacket: 8 [ 75.012034][ T539] usb 3-1: config 0 has no interfaces? [ 75.018042][ T539] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 75.030328][ T539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.057807][ T539] usb 3-1: config 0 descriptor?? [ 75.064187][ T1897] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 75.064210][ T1897] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 75.094584][ T1897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:405 [ 75.158121][ T1899] KVM: debugfs: duplicate directory 1899-5 [ 75.234968][ T65] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 75.324335][ T36] audit: type=1400 audit(1750489893.970:488): avc: granted { setsecparam } for pid=1900 comm="syz.1.512" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 75.362900][ T1904] netlink: 220 bytes leftover after parsing attributes in process `syz.1.513'. [ 75.376139][ T1904] 9pnet_fd: Insufficient options for proto=fd [ 75.386178][ T65] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 75.405285][ T65] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 75.421364][ T65] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 75.444970][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.452995][ T65] usb 4-1: Product: syz [ 75.464971][ T65] usb 4-1: Manufacturer: syz [ 75.468379][ T1876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.469590][ T65] usb 4-1: SerialNumber: syz [ 75.483540][ T1876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.494399][ T1876] rust_binder: Failed copying remainder into alloc: EFAULT [ 75.494453][ T1876] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 75.496141][ T65] usb 4-1: config 0 descriptor?? [ 75.514022][ T1876] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 75.515462][ T1876] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:394 [ 75.535759][ T1893] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 75.553057][ T539] usb 3-1: USB disconnect, device number 19 [ 75.567685][ T1893] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 75.590448][ T1908] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 75.590472][ T1908] rust_binder: Error while translating object. [ 75.599520][ T1908] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.605864][ T1908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:416 [ 75.644349][ T1910] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:418 [ 75.654529][ T1910] rust_binder: Error while translating object. [ 75.664294][ T1910] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.671487][ T1910] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:418 [ 75.758881][ T1919] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:426 [ 75.783716][ T1893] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 75.800201][ T1893] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 75.904268][ T1922] 9pnet: p9_errstr2errno: server reported unknown error pA [ 75.952179][ T1924] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 75.952200][ T1924] rust_binder: Read failure Err(EFAULT) in pid:32 [ 75.952395][ T1926] rust_binder: Write failure EINVAL in pid:32 [ 75.961764][ T1927] rust_binder: Error while translating object. [ 75.973046][ T1927] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 75.979713][ T1927] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:429 [ 76.188105][ T36] audit: type=1400 audit(1750489894.840:489): avc: denied { getopt } for pid=1938 comm="syz.4.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.189118][ T1939] rust_binder: Write failure EINVAL in pid:39 [ 76.225219][ T65] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 76.394975][ T539] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 76.556149][ T539] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 76.567858][ T539] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 221, changing to 11 [ 76.579394][ T539] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 50448, setting to 1024 [ 76.590873][ T539] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.604064][ T539] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.613295][ T539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.622374][ T539] usb 3-1: config 0 descriptor?? [ 76.626914][ T36] audit: type=1400 audit(1750489895.280:490): avc: denied { setopt } for pid=1892 comm="syz.3.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.628173][ T1943] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.648781][ T65] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 76.665437][ T65] usb 4-1: USB disconnect, device number 16 [ 76.946407][ T1946] rust_binder: Error while translating object. [ 76.946449][ T1946] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 76.952732][ T1946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:42 [ 77.118920][ T539] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max [ 77.159346][ T539] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 77.177296][ T539] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 77.214973][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.375759][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 77.382761][ T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 77.391155][ T9] usb 5-1: config 0 has no interface number 0 [ 77.415333][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 77.428399][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.441578][ T9] usb 5-1: Product: syz [ 77.455393][ T9] usb 5-1: Manufacturer: syz [ 77.462908][ T9] usb 5-1: SerialNumber: syz [ 77.472158][ T9] usb 5-1: config 0 descriptor?? [ 77.475196][ T1961] rust_binder: Write failure EFAULT in pid:324 [ 77.478685][ T9] smsc95xx v2.0.0 [ 77.505839][ T65] usb 3-1: USB disconnect, device number 20 [ 77.778472][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 77.796636][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 77.806955][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 77.818648][ T9] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 77.830980][ T9] usb 5-1: USB disconnect, device number 3 [ 77.915093][ T623] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 78.075967][ T623] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 78.104973][ T623] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.104984][ T557] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 78.105010][ T623] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.154983][ T623] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.164041][ T623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.175913][ T623] usb 4-1: config 0 descriptor?? [ 78.234977][ T557] usb 2-1: device descriptor read/64, error -71 [ 78.374983][ T539] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 78.474982][ T557] usb 2-1: device descriptor read/64, error -71 [ 78.526098][ T539] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.537084][ T539] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.546902][ T539] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.560078][ T539] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.569170][ T539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.577902][ T539] usb 3-1: config 0 descriptor?? [ 78.583827][ T623] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 78.591533][ T623] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 78.598959][ T623] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 78.606453][ T623] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 78.613855][ T623] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 78.621336][ T623] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 78.629535][ T623] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 78.637032][ T623] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 78.644482][ T623] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 78.651948][ T623] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 78.659388][ T623] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 78.666840][ T623] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 78.674240][ T623] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 78.681664][ T623] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 78.689079][ T623] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 78.696739][ T623] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 78.714597][ T623] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 78.739399][ T557] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 78.771441][ T1991] binder: Bad value for 'stats' [ 78.868042][ T2001] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 78.880999][ T45] usb 4-1: USB disconnect, device number 17 [ 78.889267][ T557] usb 2-1: device descriptor read/64, error -71 [ 78.985424][ T539] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 78.994274][ T2009] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.006915][ T539] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 79.169449][ T557] usb 2-1: device descriptor read/64, error -71 [ 79.295070][ T557] usb usb2-port1: attempt power cycle [ 79.426825][ T36] audit: type=1326 audit(1750489898.080:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c218e929 code=0x7fc00000 [ 79.461509][ T2020] SELinux: policydb version 1288205330 does not match my version range 15-33 [ 79.464973][ T36] audit: type=1400 audit(1750489898.110:492): avc: denied { append } for pid=2019 comm="syz.4.552" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 79.493133][ T2020] SELinux: failed to load policy [ 79.499764][ T36] audit: type=1400 audit(1750489898.110:493): avc: denied { load_policy } for pid=2019 comm="syz.4.552" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 79.522859][ T36] audit: type=1400 audit(1750489898.170:494): avc: granted { setsecparam } for pid=2019 comm="syz.4.552" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 79.542483][ T36] audit: type=1400 audit(1750489898.170:495): avc: granted { setsecparam } for pid=2019 comm="syz.4.552" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 79.643357][ T2027] Zero length message leads to an empty skb [ 79.649458][ T557] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 79.677727][ T557] usb 2-1: device descriptor read/8, error -71 [ 79.778595][ T2032] rust_binder: Write failure EINVAL in pid:91 [ 79.826760][ T557] usb 2-1: device descriptor read/8, error -71 [ 79.838343][ T36] audit: type=1400 audit(1750489898.480:496): avc: denied { read } for pid=2040 comm="syz.3.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.881651][ T2044] binder: Unknown parameter '' [ 80.014991][ T65] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 80.074998][ T557] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 80.106032][ T557] usb 2-1: device descriptor read/8, error -71 [ 80.166203][ T65] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 80.176243][ T65] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 80.236076][ T557] usb 2-1: device descriptor read/8, error -71 [ 80.294004][ T36] audit: type=1326 audit(1750489898.940:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c218e929 code=0x7fc00000 [ 80.334988][ T36] audit: type=1326 audit(1750489898.940:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c218e929 code=0x7fc00000 [ 80.358436][ T557] usb usb2-port1: unable to enumerate USB device [ 80.374963][ T36] audit: type=1326 audit(1750489898.940:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c218e929 code=0x7fc00000 [ 80.398383][ T36] audit: type=1326 audit(1750489898.940:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c218e929 code=0x7fc00000 [ 81.125096][ T539] usb 3-1: USB disconnect, device number 21 [ 82.788469][ T65] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.813384][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.835137][ T65] usb 5-1: can't set config #1, error -71 [ 82.866812][ T65] usb 5-1: USB disconnect, device number 4 [ 83.374969][ T65] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 83.484968][ T623] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 83.555106][ T65] usb 5-1: Using ep0 maxpacket: 32 [ 83.561352][ T65] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 83.571196][ T65] usb 5-1: config 0 has no interface number 0 [ 83.584678][ T65] usb 5-1: config 0 interface 184 has no altsetting 0 [ 83.593037][ T65] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 83.602298][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.618330][ T65] usb 5-1: Product: syz [ 83.622538][ T65] usb 5-1: Manufacturer: syz [ 83.634953][ T65] usb 5-1: SerialNumber: syz [ 83.640583][ T65] usb 5-1: config 0 descriptor?? [ 83.647057][ T623] usb 2-1: config 0 has no interfaces? [ 83.653042][ T65] smsc75xx v1.0.0 [ 83.657727][ T623] usb 2-1: config 0 has no interfaces? [ 83.666862][ T623] usb 2-1: config 0 has no interfaces? [ 83.676068][ T623] usb 2-1: config 0 has no interfaces? [ 83.685439][ T623] usb 2-1: config 0 has no interfaces? [ 83.691548][ T623] usb 2-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 83.700821][ T623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.716656][ T623] usb 2-1: config 0 descriptor?? [ 83.749482][ T2128] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:411 [ 83.865058][ T65] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 83.885104][ T65] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 83.895764][ T65] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 83.910137][ T65] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 83.931300][ T65] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 83.942052][ T65] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 83.953937][ T65] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 83.964023][ T2147] overlayfs: missing 'lowerdir' [ 83.968928][ T65] usb 5-1: USB disconnect, device number 5 [ 84.279306][ T2164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2164 comm=syz.1.589 [ 84.292668][ T2164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.301739][ T2164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.845000][ T556] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 84.902357][ T36] kauditd_printk_skb: 4201 callbacks suppressed [ 84.902375][ T36] audit: type=1400 audit(1750489903.550:4702): avc: denied { mounton } for pid=2179 comm="syz.4.608" path="/file0" dev="ramfs" ino=21878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 84.903029][ T2181] incfs: Backing dir is not set, filesystem can't be mounted. [ 84.938191][ T2181] incfs: mount failed -2 [ 85.006335][ T556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.017366][ T556] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 85.026456][ T556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.035241][ T556] usb 3-1: config 0 descriptor?? [ 85.242885][ T556] logitech 0003:046D:C295.0007: unknown main item tag 0x0 [ 85.250261][ T556] logitech 0003:046D:C295.0007: unknown main item tag 0x0 [ 85.257715][ T556] logitech 0003:046D:C295.0007: unknown main item tag 0x0 [ 85.266292][ T556] logitech 0003:046D:C295.0007: unknown main item tag 0x0 [ 85.273585][ T556] logitech 0003:046D:C295.0007: unknown main item tag 0x0 [ 85.281027][ T556] logitech 0003:046D:C295.0007: unknown main item tag 0x0 [ 85.290908][ T556] logitech 0003:046D:C295.0007: unknown main item tag 0x0 [ 85.309994][ T556] logitech 0003:046D:C295.0007: hidraw0: USB HID v0.00 Device [HID 046d:c295] on usb-dummy_hcd.2-1/input0 [ 85.324499][ T556] logitech 0003:046D:C295.0007: no inputs found [ 85.442023][ T556] usb 3-1: USB disconnect, device number 22 [ 86.066500][ T2227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:423 [ 86.148353][ T2232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:146 [ 86.158445][ T36] audit: type=1400 audit(1750489904.810:4703): avc: denied { append } for pid=2231 comm="syz.4.624" name="pfkey" dev="proc" ino=4026532982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 86.246565][ T36] audit: type=1400 audit(1750489904.900:4704): avc: denied { listen } for pid=2238 comm="syz.3.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.250369][ T623] usb 2-1: USB disconnect, device number 20 [ 86.314595][ T36] audit: type=1400 audit(1750489904.960:4705): avc: denied { write } for pid=2244 comm="syz.1.630" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 86.314784][ T2245] rust_binder: Error while translating object. [ 86.337860][ T2245] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 86.344384][ T2245] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:490 [ 86.501918][ T2260] tipc: Enabling of bearer rejected, media not registered [ 86.573935][ T2264] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:502 [ 86.573978][ T2264] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 86.595156][ T2264] rust_binder: Read failure Err(EFAULT) in pid:502 [ 86.690982][ T2268] FAULT_INJECTION: forcing a failure. [ 86.690982][ T2268] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 86.712893][ T2268] CPU: 0 UID: 0 PID: 2268 Comm: syz.1.639 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 86.712928][ T2268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.712947][ T2268] Call Trace: [ 86.712954][ T2268] [ 86.712963][ T2268] __dump_stack+0x21/0x30 [ 86.712992][ T2268] dump_stack_lvl+0x10c/0x190 [ 86.713023][ T2268] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.713051][ T2268] dump_stack+0x19/0x20 [ 86.713075][ T2268] should_fail_ex+0x3d9/0x530 [ 86.713102][ T2268] should_fail+0xf/0x20 [ 86.713123][ T2268] should_fail_usercopy+0x1e/0x30 [ 86.713148][ T2268] _copy_from_iter+0x1a3/0x14b0 [ 86.713176][ T2268] ? __kernel_text_address+0x11/0x40 [ 86.713200][ T2268] ? __cfi__copy_from_iter+0x10/0x10 [ 86.713227][ T2268] ? txopt_get+0x184/0x210 [ 86.713250][ T2268] ? fl6_sock_lookup+0xe0/0xe0 [ 86.713274][ T2268] ? __ipv6_fixup_options+0x75/0x140 [ 86.713300][ T2268] rawv6_sendmsg+0xa51/0x1840 [ 86.713326][ T2268] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 86.713349][ T2268] ? kstrtouint_from_user+0xfb/0x150 [ 86.713374][ T2268] ? selinux_socket_sendmsg+0x284/0x380 [ 86.713401][ T2268] ? proc_fail_nth_write+0x17e/0x210 [ 86.713429][ T2268] ? __fget_files+0x2c5/0x340 [ 86.713457][ T2268] ? inet_send_prepare+0x64/0x4f0 [ 86.713479][ T2268] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 86.713502][ T2268] inet_sendmsg+0x113/0x120 [ 86.713522][ T2268] __sys_sendto+0x588/0x6f0 [ 86.713552][ T2268] ? __cfi___sys_sendto+0x10/0x10 [ 86.713584][ T2268] ? __kasan_check_write+0x18/0x20 [ 86.713609][ T2268] ? __cfi_ksys_write+0x10/0x10 [ 86.713641][ T2268] __x64_sys_sendto+0xe9/0x100 [ 86.713670][ T2268] x64_sys_call+0x2c2c/0x2ee0 [ 86.713697][ T2268] do_syscall_64+0x58/0xf0 [ 86.713724][ T2268] ? clear_bhb_loop+0x35/0x90 [ 86.713756][ T2268] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.713785][ T2268] RIP: 0033:0x7f04c598e929 [ 86.713819][ T2268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.713836][ T2268] RSP: 002b:00007f04c67b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 86.713863][ T2268] RAX: ffffffffffffffda RBX: 00007f04c5bb5fa0 RCX: 00007f04c598e929 [ 86.713878][ T2268] RDX: 00000000000000a6 RSI: 0000200000000300 RDI: 0000000000000004 [ 86.713892][ T2268] RBP: 00007f04c67b3090 R08: 0000000000000000 R09: fffffffffffffdfd [ 86.713905][ T2268] R10: 0000000000003b00 R11: 0000000000000246 R12: 0000000000000001 [ 86.713935][ T2268] R13: 0000000000000000 R14: 00007f04c5bb5fa0 R15: 00007fff8acb58d8 [ 86.713953][ T2268] [ 87.245967][ T2286] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.275884][ T2291] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 87.282434][ T2291] rust_binder: Error while translating object. [ 87.286177][ T36] audit: type=1400 audit(1750489905.930:4706): avc: denied { connect } for pid=2290 comm="syz.4.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.293156][ T2291] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 87.325669][ T2291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:156 [ 87.412467][ T2305] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 87.455001][ T539] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 87.629554][ T2314] rust_binder: Read failure Err(EAGAIN) in pid:432 [ 87.640520][ T539] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.659047][ T556] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 87.666678][ T539] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 87.677860][ T539] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 87.687121][ T539] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.705561][ T539] usb 2-1: config 0 descriptor?? [ 87.711062][ T2283] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 87.719934][ T539] hub 2-1:0.0: USB hub found [ 87.765654][ T2316] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 87.765686][ T2316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:434 [ 87.836013][ T556] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.856890][ T556] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 87.867038][ T556] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.875357][ T556] usb 5-1: Product: syz [ 87.879576][ T556] usb 5-1: Manufacturer: syz [ 87.884217][ T556] usb 5-1: SerialNumber: syz [ 87.890060][ T556] usb 5-1: config 0 descriptor?? [ 87.896744][ T556] cdc_acm 5-1:0.0: skipping garbage [ 87.919716][ T539] hub 2-1:0.0: 2 ports detected [ 88.097745][ T2303] binder: Bad value for 'stats' [ 88.103221][ T556] usb 5-1: USB disconnect, device number 6 [ 88.351028][ T2325] FAULT_INJECTION: forcing a failure. [ 88.351028][ T2325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.364162][ T2325] CPU: 1 UID: 0 PID: 2325 Comm: syz.3.663 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 88.364188][ T2325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.364198][ T2325] Call Trace: [ 88.364203][ T2325] [ 88.364208][ T2325] __dump_stack+0x21/0x30 [ 88.364229][ T2325] dump_stack_lvl+0x10c/0x190 [ 88.364245][ T2325] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.364265][ T2325] dump_stack+0x19/0x20 [ 88.364280][ T2325] should_fail_ex+0x3d9/0x530 [ 88.364300][ T2325] should_fail+0xf/0x20 [ 88.364314][ T2325] should_fail_usercopy+0x1e/0x30 [ 88.364329][ T2325] _copy_from_user+0x22/0xb0 [ 88.364347][ T2325] csum_and_copy_from_iter_full+0x1ed/0x1c00 [ 88.364368][ T2325] ? __kasan_check_read+0x15/0x20 [ 88.364389][ T2325] ? static_key_count+0x45/0x70 [ 88.364409][ T2325] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 88.364433][ T2325] ? kasan_save_alloc_info+0x40/0x50 [ 88.364447][ T2325] ? __cfi_gfp_zone+0x10/0x10 [ 88.364465][ T2325] ? inode_init_always_gfp+0x756/0x9e0 [ 88.364483][ T2325] ? __cfi_csum_and_copy_from_iter_full+0x10/0x10 [ 88.364503][ T2325] ? __alloc_pages_noprof+0x30d/0x6c0 [ 88.364517][ T2325] ip_generic_getfrag+0x137/0x290 [ 88.364536][ T2325] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 88.364555][ T2325] ? raw6_getfrag+0x183/0x390 [ 88.364570][ T2325] ? csum_partial+0x278/0x300 [ 88.364581][ T2325] ? __asan_memcpy+0x5a/0x80 [ 88.364596][ T2325] raw6_getfrag+0x25a/0x390 [ 88.364612][ T2325] __ip6_append_data+0x1d6a/0x3ab0 [ 88.364631][ T2325] ? __cfi_raw6_getfrag+0x10/0x10 [ 88.364647][ T2325] ? ip6_setup_cork+0x1390/0x1390 [ 88.364661][ T2325] ? lock_sock_nested+0x1f5/0x290 [ 88.364677][ T2325] ip6_append_data+0x1ba/0x380 [ 88.364690][ T2325] ? __cfi_raw6_getfrag+0x10/0x10 [ 88.364706][ T2325] rawv6_sendmsg+0x1314/0x1840 [ 88.364723][ T2325] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 88.364738][ T2325] ? kstrtouint_from_user+0xfb/0x150 [ 88.364753][ T2325] ? selinux_socket_sendmsg+0x284/0x380 [ 88.364770][ T2325] ? proc_fail_nth_write+0x17e/0x210 [ 88.364784][ T2325] ? __fget_files+0x2c5/0x340 [ 88.364802][ T2325] ? inet_send_prepare+0x64/0x4f0 [ 88.364815][ T2325] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 88.364830][ T2325] inet_sendmsg+0x113/0x120 [ 88.364842][ T2325] __sys_sendto+0x588/0x6f0 [ 88.364861][ T2325] ? __cfi___sys_sendto+0x10/0x10 [ 88.364881][ T2325] ? __kasan_check_write+0x18/0x20 [ 88.364907][ T2325] ? __cfi_ksys_write+0x10/0x10 [ 88.364925][ T2325] __x64_sys_sendto+0xe9/0x100 [ 88.364943][ T2325] x64_sys_call+0x2c2c/0x2ee0 [ 88.364962][ T2325] do_syscall_64+0x58/0xf0 [ 88.364980][ T2325] ? clear_bhb_loop+0x35/0x90 [ 88.365001][ T2325] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.365021][ T2325] RIP: 0033:0x7f8e95d8e929 [ 88.365032][ T2325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.365045][ T2325] RSP: 002b:00007f8e96b87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 88.365060][ T2325] RAX: ffffffffffffffda RBX: 00007f8e95fb5fa0 RCX: 00007f8e95d8e929 [ 88.365071][ T2325] RDX: 00000000000000a6 RSI: 0000200000000300 RDI: 0000000000000004 [ 88.365080][ T2325] RBP: 00007f8e96b87090 R08: 0000000000000000 R09: fffffffffffffdfd [ 88.365090][ T2325] R10: 0000000000003b00 R11: 0000000000000246 R12: 0000000000000001 [ 88.365098][ T2325] R13: 0000000000000000 R14: 00007f8e95fb5fa0 R15: 00007ffe00d004b8 [ 88.365110][ T2325] [ 88.807633][ T2332] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 88.807662][ T2332] rust_binder: Error while translating object. [ 88.819912][ T2332] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.826128][ T2332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:466 [ 88.975131][ T2336] rust_binder: Write failure EFAULT in pid:466 [ 89.592167][ T2361] FAULT_INJECTION: forcing a failure. [ 89.592167][ T2361] name failslab, interval 1, probability 0, space 0, times 1 [ 89.623366][ T2361] CPU: 0 UID: 0 PID: 2361 Comm: syz.4.674 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 89.623401][ T2361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.623413][ T2361] Call Trace: [ 89.623421][ T2361] [ 89.623428][ T2361] __dump_stack+0x21/0x30 [ 89.623466][ T2361] dump_stack_lvl+0x10c/0x190 [ 89.623489][ T2361] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.623513][ T2361] ? mroute6_is_socket+0x201/0x2f0 [ 89.623536][ T2361] ? __cfi_mroute6_is_socket+0x10/0x10 [ 89.623559][ T2361] dump_stack+0x19/0x20 [ 89.623582][ T2361] should_fail_ex+0x3d9/0x530 [ 89.623606][ T2361] should_failslab+0xac/0x100 [ 89.623633][ T2361] kmem_cache_alloc_noprof+0x42/0x3a0 [ 89.623657][ T2361] ? skb_clone+0x229/0x460 [ 89.623688][ T2361] skb_clone+0x229/0x460 [ 89.623716][ T2361] ip6_finish_output2+0x1257/0x1990 [ 89.623741][ T2361] ? __asan_memset+0x39/0x50 [ 89.623763][ T2361] ? __cfi_ip6_finish_output2+0x10/0x10 [ 89.623785][ T2361] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 89.623814][ T2361] ip6_finish_output+0x54f/0xb10 [ 89.623835][ T2361] ip6_output+0x1d5/0x3c0 [ 89.623855][ T2361] ? __cfi_ip6_output+0x10/0x10 [ 89.623873][ T2361] ? __cfi_ip6_finish_output+0x10/0x10 [ 89.623893][ T2361] ? __cfi_ip6t_do_table+0x10/0x10 [ 89.623919][ T2361] ? __cfi_ip6_output+0x10/0x10 [ 89.623951][ T2361] ip6_local_out+0x22f/0x440 [ 89.623972][ T2361] ? __cfi_ip6_local_out+0x10/0x10 [ 89.623991][ T2361] ? __cfi_dst_output+0x10/0x10 [ 89.624010][ T2361] ? __asan_memcpy+0x5a/0x80 [ 89.624030][ T2361] ? skb_store_bits+0x77d/0x880 [ 89.624050][ T2361] ip6_push_pending_frames+0x181/0x2e0 [ 89.624072][ T2361] rawv6_push_pending_frames+0x6e8/0x8d0 [ 89.624096][ T2361] ? raw6_getfrag+0x390/0x390 [ 89.624117][ T2361] ? __cfi_raw6_getfrag+0x10/0x10 [ 89.624140][ T2361] rawv6_sendmsg+0x13f0/0x1840 [ 89.624162][ T2361] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 89.624181][ T2361] ? kstrtouint_from_user+0xfb/0x150 [ 89.624203][ T2361] ? selinux_socket_sendmsg+0x284/0x380 [ 89.624234][ T2361] ? proc_fail_nth_write+0x17e/0x210 [ 89.624253][ T2361] ? __fget_files+0x2c5/0x340 [ 89.624278][ T2361] ? inet_send_prepare+0x64/0x4f0 [ 89.624296][ T2361] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 89.624318][ T2361] inet_sendmsg+0x113/0x120 [ 89.624336][ T2361] __sys_sendto+0x588/0x6f0 [ 89.624362][ T2361] ? __cfi___sys_sendto+0x10/0x10 [ 89.624391][ T2361] ? __kasan_check_write+0x18/0x20 [ 89.624413][ T2361] ? __cfi_ksys_write+0x10/0x10 [ 89.624436][ T2361] __x64_sys_sendto+0xe9/0x100 [ 89.624469][ T2361] x64_sys_call+0x2c2c/0x2ee0 [ 89.624493][ T2361] do_syscall_64+0x58/0xf0 [ 89.624528][ T2361] ? clear_bhb_loop+0x35/0x90 [ 89.624554][ T2361] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.624579][ T2361] RIP: 0033:0x7fe22cb8e929 [ 89.624593][ T2361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.624627][ T2361] RSP: 002b:00007fe22d9c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 89.624648][ T2361] RAX: ffffffffffffffda RBX: 00007fe22cdb5fa0 RCX: 00007fe22cb8e929 [ 89.624663][ T2361] RDX: 00000000000000a6 RSI: 0000200000000300 RDI: 0000000000000004 [ 89.624676][ T2361] RBP: 00007fe22d9c1090 R08: 0000000000000000 R09: fffffffffffffdfd [ 89.624689][ T2361] R10: 0000000000003b00 R11: 0000000000000246 R12: 0000000000000001 [ 89.624701][ T2361] R13: 0000000000000000 R14: 00007fe22cdb5fa0 R15: 00007fffc56fa298 [ 89.624728][ T2361] [ 90.038673][ T45] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 90.050269][ T2363] rust_binder: Write failure EFAULT in pid:470 [ 90.095368][ T2368] fuse: Bad value for 'fd' [ 90.117849][ T36] audit: type=1400 audit(1750489908.770:4707): avc: denied { unmount } for pid=1750 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 90.168124][ T2375] binder: Bad value for 'max' [ 90.257554][ T45] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 90.265535][ T556] usb 2-1: USB disconnect, device number 21 [ 90.315002][ T557] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 90.401059][ T36] audit: type=1400 audit(1750489909.050:4708): avc: denied { bind } for pid=2382 comm="syz.2.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.424979][ T657] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 90.438327][ T2389] devtmpfs: Unknown parameter '^ *([%' [ 90.466868][ T557] usb 4-1: config 0 has no interfaces? [ 90.472391][ T557] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 90.481624][ T557] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.490391][ T557] usb 4-1: config 0 descriptor?? [ 90.581497][ T2398] FAULT_INJECTION: forcing a failure. [ 90.581497][ T2398] name failslab, interval 1, probability 0, space 0, times 0 [ 90.594150][ T2398] CPU: 0 UID: 0 PID: 2398 Comm: syz.2.686 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 90.594180][ T2398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.594190][ T2398] Call Trace: [ 90.594195][ T2398] [ 90.594201][ T2398] __dump_stack+0x21/0x30 [ 90.594221][ T2398] dump_stack_lvl+0x10c/0x190 [ 90.594237][ T2398] ? __cfi_dump_stack_lvl+0x10/0x10 [ 90.594255][ T2398] dump_stack+0x19/0x20 [ 90.594275][ T2398] should_fail_ex+0x3d9/0x530 [ 90.594291][ T2398] should_failslab+0xac/0x100 [ 90.594309][ T2398] kmem_cache_alloc_noprof+0x42/0x3a0 [ 90.594325][ T2398] ? skb_clone+0x229/0x460 [ 90.594345][ T2398] ? is_bpf_text_address+0x17b/0x1a0 [ 90.594365][ T2398] skb_clone+0x229/0x460 [ 90.594384][ T2398] dev_queue_xmit_nit+0x1ad/0xae0 [ 90.594398][ T2398] ? netif_skb_features+0x82f/0xbf0 [ 90.594416][ T2398] dev_hard_start_xmit+0x187/0x770 [ 90.594434][ T2398] __dev_queue_xmit+0x19cc/0x3790 [ 90.594451][ T2398] ? __dev_queue_xmit+0x24c/0x3790 [ 90.594468][ T2398] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 90.594489][ T2398] ? raise_softirq_irqoff+0xd/0x40 [ 90.594506][ T2398] ? __napi_schedule_irqoff+0x1e7/0x250 [ 90.594524][ T2398] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 90.594543][ T2398] ? enqueue_to_backlog+0x786/0xbf0 [ 90.594561][ T2398] ? __cfi___dev_queue_xmit+0x10/0x10 [ 90.594579][ T2398] ? netif_rx_internal+0xab/0x340 [ 90.594593][ T2398] ? __cfi_do_softirq+0x10/0x10 [ 90.594611][ T2398] ? __local_bh_enable_ip+0x74/0x80 [ 90.594628][ T2398] ? netif_rx+0x8c/0x290 [ 90.594643][ T2398] ? __asan_memcpy+0x5a/0x80 [ 90.594658][ T2398] ip6_finish_output2+0x116e/0x1990 [ 90.594676][ T2398] ? __cfi_ip6_finish_output2+0x10/0x10 [ 90.594692][ T2398] ? __cfi_dev_loopback_xmit+0x10/0x10 [ 90.594709][ T2398] ip6_finish_output+0x54f/0xb10 [ 90.594734][ T2398] ip6_output+0x1d5/0x3c0 [ 90.594746][ T2398] ? __cfi_ip6_output+0x10/0x10 [ 90.594758][ T2398] ? __cfi_ip6_finish_output+0x10/0x10 [ 90.594770][ T2398] ? __cfi_ip6t_do_table+0x10/0x10 [ 90.594787][ T2398] ? __cfi_ip6_output+0x10/0x10 [ 90.594798][ T2398] ip6_local_out+0x22f/0x440 [ 90.594812][ T2398] ? __cfi_ip6_local_out+0x10/0x10 [ 90.594825][ T2398] ? __cfi_dst_output+0x10/0x10 [ 90.594837][ T2398] ? __asan_memcpy+0x5a/0x80 [ 90.594851][ T2398] ? skb_store_bits+0x77d/0x880 [ 90.594868][ T2398] ip6_push_pending_frames+0x181/0x2e0 [ 90.594883][ T2398] rawv6_push_pending_frames+0x6e8/0x8d0 [ 90.594903][ T2398] ? raw6_getfrag+0x390/0x390 [ 90.594916][ T2398] ? __cfi_raw6_getfrag+0x10/0x10 [ 90.594935][ T2398] rawv6_sendmsg+0x13f0/0x1840 [ 90.594951][ T2398] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 90.594965][ T2398] ? kstrtouint_from_user+0xfb/0x150 [ 90.594980][ T2398] ? selinux_socket_sendmsg+0x284/0x380 [ 90.594997][ T2398] ? proc_fail_nth_write+0x17e/0x210 [ 90.595010][ T2398] ? __fget_files+0x2c5/0x340 [ 90.595027][ T2398] ? inet_send_prepare+0x64/0x4f0 [ 90.595039][ T2398] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 90.595053][ T2398] inet_sendmsg+0x113/0x120 [ 90.595065][ T2398] __sys_sendto+0x588/0x6f0 [ 90.595083][ T2398] ? __cfi___sys_sendto+0x10/0x10 [ 90.595102][ T2398] ? __kasan_check_write+0x18/0x20 [ 90.595117][ T2398] ? __cfi_ksys_write+0x10/0x10 [ 90.595133][ T2398] __x64_sys_sendto+0xe9/0x100 [ 90.595153][ T2398] x64_sys_call+0x2c2c/0x2ee0 [ 90.595170][ T2398] do_syscall_64+0x58/0xf0 [ 90.595187][ T2398] ? clear_bhb_loop+0x35/0x90 [ 90.595207][ T2398] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.595243][ T2398] RIP: 0033:0x7f43c218e929 [ 90.595255][ T2398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.595267][ T2398] RSP: 002b:00007f43c30bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 90.595282][ T2398] RAX: ffffffffffffffda RBX: 00007f43c23b5fa0 RCX: 00007f43c218e929 [ 90.595292][ T2398] RDX: 00000000000000a6 RSI: 0000200000000300 RDI: 0000000000000004 [ 90.595301][ T2398] RBP: 00007f43c30bb090 R08: 0000000000000000 R09: fffffffffffffdfd [ 90.595311][ T2398] R10: 0000000000003b00 R11: 0000000000000246 R12: 0000000000000001 [ 90.595319][ T2398] R13: 0000000000000000 R14: 00007f43c23b5fa0 R15: 00007ffd680791e8 [ 90.595331][ T2398] [ 90.697913][ T2363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.710500][ T657] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.714122][ T2363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.719727][ T657] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.928666][ T2363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.935387][ T657] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 90.944383][ T2363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.958713][ T657] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 91.005986][ T557] usb 4-1: USB disconnect, device number 18 [ 91.007083][ T657] usb 5-1: SerialNumber: syz [ 91.295091][ T657] usb 5-1: 0:2 : does not exist [ 91.303501][ T657] usb 5-1: USB disconnect, device number 7 [ 91.318176][ T36] audit: type=1400 audit(1750489909.970:4709): avc: denied { mounton } for pid=2406 comm="syz.1.689" path="/proc/514/task" dev="proc" ino=23953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 91.485900][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.605454][ T2417] input: syz1 as /devices/virtual/input/input9 [ 91.614646][ T36] audit: type=1400 audit(1750489910.260:4710): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=568 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.645153][ T36] audit: type=1400 audit(1750489910.290:4711): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=568 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.668792][ T36] audit: type=1400 audit(1750489910.290:4712): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=568 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.747536][ T2423] rust_binder: Error while translating object. [ 91.747570][ T2423] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 91.753772][ T2423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:522 [ 91.845000][ T557] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 91.873273][ T2430] devtmpfs: Unknown parameter '^ *([%' [ 91.984320][ T2439] rust_binder: Got transaction with invalid offset. [ 91.984368][ T2439] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.991941][ T2439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:208 [ 92.019676][ T2441] SELinux: security_context_str_to_sid () failed with errno=-22 [ 92.040292][ T2441] rust_binder: Write failure EINVAL in pid:210 [ 92.041897][ T2441] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 92.051501][ T2441] rust_binder: Error while translating object. [ 92.062439][ T2441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.069087][ T2441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:210 [ 92.080179][ T557] usb 3-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 92.102549][ T557] usb 3-1: config 1 interface 0 has no altsetting 0 [ 92.110765][ T557] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 92.119919][ T557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.127975][ T557] usb 3-1: Product: syz [ 92.132178][ T557] usb 3-1: Manufacturer: syz [ 92.139026][ T557] usb 3-1: SerialNumber: syz [ 92.149106][ T2419] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 92.447879][ T2449] binder: Bad value for 'max' [ 92.484990][ T65] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 92.635045][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 92.641249][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.652289][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.662154][ T65] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 92.671219][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.680003][ T65] usb 4-1: config 0 descriptor?? [ 92.686299][ T65] hub 4-1:0.0: USB hub found [ 92.695031][ T623] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 92.846082][ T623] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.856244][ T623] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.865910][ T623] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 92.875011][ T623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 92.883019][ T623] usb 2-1: SerialNumber: syz [ 92.888629][ T65] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 93.015415][ T2453] rust_binder: Write failure EINVAL in pid:215 [ 93.042813][ T2457] devtmpfs: Unknown parameter '^ *([%' [ 93.101417][ T623] usb 2-1: 0:2 : does not exist [ 93.113351][ T623] usb 2-1: USB disconnect, device number 22 [ 93.137659][ T2463] rust_binder: Error while translating object. [ 93.137698][ T2463] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 93.144085][ T2463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223 [ 93.286799][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 93.605437][ T65] usbhid 4-1:0.0: can't add hid device: -71 [ 93.617574][ T65] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 93.659387][ T65] usb 4-1: USB disconnect, device number 19 [ 93.669479][ T36] audit: type=1400 audit(1750489912.320:4713): avc: denied { execute } for pid=2470 comm="syz.1.714" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.696724][ T2473] fuse: Unknown parameter 'zVJZg' [ 93.726680][ T2477] devtmpfs: Unknown parameter '^ *([%' [ 93.959045][ T36] audit: type=1400 audit(1750489912.610:4714): avc: denied { write } for pid=2479 comm="syz.4.718" path="socket:[24791]" dev="sockfs" ino=24791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 94.033818][ T2481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:227 [ 94.164993][ T539] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 94.305330][ T539] usb 4-1: device descriptor read/64, error -71 [ 94.542675][ T2483] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 94.545113][ T539] usb 4-1: device descriptor read/64, error -71 [ 94.556682][ T2485] FAULT_INJECTION: forcing a failure. [ 94.556682][ T2485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.572541][ T2485] CPU: 0 UID: 0 PID: 2485 Comm: syz.1.720 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 94.572571][ T2485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.572582][ T2485] Call Trace: [ 94.572589][ T2485] [ 94.572602][ T2485] __dump_stack+0x21/0x30 [ 94.572624][ T2485] dump_stack_lvl+0x10c/0x190 [ 94.572640][ T2485] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.572656][ T2485] ? vfs_write+0x8ba/0xe80 [ 94.572677][ T2485] dump_stack+0x19/0x20 [ 94.572697][ T2485] should_fail_ex+0x3d9/0x530 [ 94.572718][ T2485] should_fail+0xf/0x20 [ 94.572736][ T2485] should_fail_usercopy+0x1e/0x30 [ 94.572757][ T2485] _copy_from_user+0x22/0xb0 [ 94.572795][ T2485] get_timespec64+0x8f/0x1a0 [ 94.572817][ T2485] ? __cfi_get_timespec64+0x10/0x10 [ 94.572845][ T2485] __x64_sys_clock_settime+0x1cd/0x290 [ 94.572868][ T2485] ? __cfi___x64_sys_clock_settime+0x10/0x10 [ 94.572890][ T2485] ? __kasan_check_read+0x15/0x20 [ 94.572910][ T2485] x64_sys_call+0x1d5b/0x2ee0 [ 94.572928][ T2485] do_syscall_64+0x58/0xf0 [ 94.572947][ T2485] ? clear_bhb_loop+0x35/0x90 [ 94.572973][ T2485] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.573001][ T2485] RIP: 0033:0x7f04c598e929 [ 94.573018][ T2485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.573034][ T2485] RSP: 002b:00007f04c67b3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 94.573053][ T2485] RAX: ffffffffffffffda RBX: 00007f04c5bb5fa0 RCX: 00007f04c598e929 [ 94.573064][ T2485] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 00000000fffffffb [ 94.573074][ T2485] RBP: 00007f04c67b3090 R08: 0000000000000000 R09: 0000000000000000 [ 94.573083][ T2485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.573092][ T2485] R13: 0000000000000001 R14: 00007f04c5bb5fa0 R15: 00007fff8acb58d8 [ 94.573113][ T2485] [ 94.773175][ T557] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 94.788516][ T2489] binder: Bad value for 'max' [ 94.805729][ T557] usb 3-1: USB disconnect, device number 23 [ 94.816202][ T557] usblp0: removed [ 94.839749][ T2495] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 94.839783][ T2495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:232 [ 94.895027][ T539] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 94.949700][ T2509] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 94.949727][ T2509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:244 [ 95.037187][ T2517] FAULT_INJECTION: forcing a failure. [ 95.037187][ T2517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.059475][ T539] usb 4-1: device descriptor read/64, error -71 [ 95.059482][ T2517] CPU: 0 UID: 0 PID: 2517 Comm: syz.4.732 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 95.059512][ T2517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.059527][ T2517] Call Trace: [ 95.059536][ T2517] [ 95.059546][ T2517] __dump_stack+0x21/0x30 [ 95.059591][ T2517] dump_stack_lvl+0x10c/0x190 [ 95.059621][ T2517] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.059650][ T2517] dump_stack+0x19/0x20 [ 95.059676][ T2517] should_fail_ex+0x3d9/0x530 [ 95.059703][ T2517] should_fail+0xf/0x20 [ 95.059727][ T2517] should_fail_usercopy+0x1e/0x30 [ 95.059754][ T2517] _copy_to_user+0x24/0xa0 [ 95.059787][ T2517] simple_read_from_buffer+0xed/0x160 [ 95.059824][ T2517] proc_fail_nth_read+0x19e/0x210 [ 95.059844][ T2517] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 95.059868][ T2517] ? bpf_lsm_file_permission+0xd/0x20 [ 95.059894][ T2517] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 95.059916][ T2517] vfs_read+0x278/0xb60 [ 95.059944][ T2517] ? __cfi_vfs_read+0x10/0x10 [ 95.059970][ T2517] ? __kasan_check_write+0x18/0x20 [ 95.059997][ T2517] ? mutex_lock+0x92/0x1c0 [ 95.060019][ T2517] ? __cfi_mutex_lock+0x10/0x10 [ 95.060040][ T2517] ? __fget_files+0x2c5/0x340 [ 95.060075][ T2517] ksys_read+0x141/0x250 [ 95.060101][ T2517] ? __cfi_ksys_read+0x10/0x10 [ 95.060128][ T2517] ? __x64_sys_clock_settime+0x238/0x290 [ 95.060156][ T2517] ? __kasan_check_read+0x15/0x20 [ 95.060182][ T2517] __x64_sys_read+0x7f/0x90 [ 95.060209][ T2517] x64_sys_call+0x2638/0x2ee0 [ 95.060239][ T2517] do_syscall_64+0x58/0xf0 [ 95.060268][ T2517] ? clear_bhb_loop+0x35/0x90 [ 95.060304][ T2517] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.060338][ T2517] RIP: 0033:0x7fe22cb8d33c [ 95.060358][ T2517] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 95.060380][ T2517] RSP: 002b:00007fe22d9c1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 95.060404][ T2517] RAX: ffffffffffffffda RBX: 00007fe22cdb5fa0 RCX: 00007fe22cb8d33c [ 95.060424][ T2517] RDX: 000000000000000f RSI: 00007fe22d9c10a0 RDI: 0000000000000003 [ 95.060439][ T2517] RBP: 00007fe22d9c1090 R08: 0000000000000000 R09: 0000000000000000 [ 95.060455][ T2517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.060471][ T2517] R13: 0000000000000001 R14: 00007fe22cdb5fa0 R15: 00007fffc56fa298 [ 95.060490][ T2517] [ 95.306839][ T45] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 95.364976][ T557] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 95.456543][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 95.465921][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.476050][ T45] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 95.486655][ T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 95.495828][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.503889][ T45] usb 2-1: Product: syz [ 95.508302][ T45] usb 2-1: Manufacturer: syz [ 95.513117][ T45] usb 2-1: SerialNumber: syz [ 95.518838][ T557] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.529235][ T45] usb 2-1: config 0 descriptor?? [ 95.534969][ T557] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.546452][ T539] usb 4-1: device descriptor read/64, error -71 [ 95.553365][ T557] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 95.562424][ T557] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 95.570457][ T557] usb 3-1: SerialNumber: syz [ 95.655058][ T539] usb usb4-port1: attempt power cycle [ 95.735970][ T45] usb 2-1: USB disconnect, device number 23 [ 95.778999][ T557] usb 3-1: 0:2 : does not exist [ 95.785825][ T557] usb 3-1: USB disconnect, device number 24 [ 95.955575][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 95.994977][ T539] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 96.015912][ T539] usb 4-1: device descriptor read/8, error -71 [ 96.146372][ T539] usb 4-1: device descriptor read/8, error -71 [ 96.320328][ T36] audit: type=1400 audit(1750489914.970:4715): avc: denied { bind } for pid=2536 comm="syz.1.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.340398][ T36] audit: type=1400 audit(1750489914.970:4716): avc: denied { name_bind } for pid=2536 comm="syz.1.740" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 96.351644][ T2532] binder: Bad value for 'stats' [ 96.366334][ T2533] binder: Bad value for 'stats' [ 96.371343][ T36] audit: type=1400 audit(1750489914.970:4717): avc: denied { node_bind } for pid=2536 comm="syz.1.740" saddr=fe80::aa src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 96.393829][ T36] audit: type=1400 audit(1750489914.970:4718): avc: denied { map } for pid=2536 comm="syz.1.740" path="socket:[24536]" dev="sockfs" ino=24536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.417357][ T36] audit: type=1400 audit(1750489914.970:4719): avc: denied { read accept } for pid=2536 comm="syz.1.740" path="socket:[24536]" dev="sockfs" ino=24536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.425000][ T539] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 96.495977][ T539] usb 4-1: device descriptor read/8, error -71 [ 96.626098][ T539] usb 4-1: device descriptor read/8, error -71 [ 96.653935][ T2551] syzkaller0: entered promiscuous mode [ 96.659559][ T2551] syzkaller0: entered allmulticast mode [ 96.735937][ T539] usb usb4-port1: unable to enumerate USB device [ 96.783599][ T2555] cgroup: subsys name conflicts with all [ 96.790131][ T36] audit: type=1400 audit(1750489915.440:4720): avc: denied { create } for pid=2554 comm="syz.3.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 96.812424][ T2555] ------------[ cut here ]------------ [ 96.817965][ T2555] WARNING: CPU: 1 PID: 2555 at mm/page_alloc.c:5157 __alloc_pages_noprof+0xe4/0x6c0 [ 96.827420][ T2555] Modules linked in: [ 96.831334][ T2555] CPU: 1 UID: 0 PID: 2555 Comm: syz.3.747 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 96.844744][ T2555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.854845][ T2555] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 [ 96.860824][ T2555] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d a4 78 ee 05 00 0f 85 c4 00 00 00 c6 05 97 78 ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 96.880498][ T2555] RSP: 0018:ffffc9000d2bf680 EFLAGS: 00010246 [ 96.881155][ T2556] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 96.886637][ T2555] RAX: 0000000000000000 RBX: 1ffff92001a57ed4 RCX: 0000000000000000 [ 96.886656][ T2555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d2bf728 [ 96.886670][ T2555] RBP: ffffc9000d2bf7a8 R08: ffffc9000d2bf727 R09: 0000000000000000 [ 96.886685][ T2555] R10: ffffc9000d2bf710 R11: fffff52001a57ee5 R12: ffffc9000d2bf6c0 [ 96.886700][ T2555] R13: 000000000000000e R14: dffffc0000000000 R15: 0000000000000000 [ 96.886713][ T2555] FS: 00007f8e96b876c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 96.886730][ T2555] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.886744][ T2555] CR2: 0000200000001000 CR3: 0000000141166000 CR4: 00000000003526b0 [ 96.886762][ T2555] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000004 [ 96.895827][ T2556] rust_binder: Write failure EINVAL in pid:494 [ 96.902900][ T2555] DR3: 0000000000000002 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.980563][ T2555] Call Trace: [ 96.983845][ T2555] [ 96.986805][ T2555] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 96.992562][ T2555] ? __kasan_slab_alloc+0x73/0x90 [ 96.997626][ T2555] ? hashtab_init+0xdb/0x1f0 [ 97.002246][ T2555] ___kmalloc_large_node+0x9c/0x1d0 [ 97.007483][ T2555] ? ebitmap_read+0x21d/0x990 [ 97.012190][ T2555] ? hashtab_init+0xdb/0x1f0 [ 97.016812][ T2555] __kmalloc_large_node_noprof+0x1e/0xe0 [ 97.022485][ T2555] ? hashtab_init+0xdb/0x1f0 [ 97.027126][ T2555] __kmalloc_noprof+0x26d/0x450 [ 97.032003][ T2555] hashtab_init+0xdb/0x1f0 [ 97.036466][ T2555] ? policydb_read+0x86f/0x28c0 [ 97.041353][ T2555] symtab_init+0x44/0x70 [ 97.045625][ T2555] policydb_read+0x8fe/0x28c0 [ 97.050332][ T2555] ? kasan_save_alloc_info+0x40/0x50 [ 97.055641][ T2555] ? __cfi_policydb_read+0x10/0x10 [ 97.060778][ T2555] ? security_load_policy+0x128/0x12f0 [ 97.066284][ T2555] security_load_policy+0x162/0x12f0 [ 97.071596][ T2555] ? irqentry_exit+0x4a/0x60 [ 97.076213][ T2555] ? exc_page_fault+0x66/0xc0 [ 97.080912][ T2555] ? asm_exc_page_fault+0x2b/0x30 [ 97.085976][ T2555] ? __cfi_security_load_policy+0x10/0x10 [ 97.091728][ T2555] ? rep_movs_alternative+0x4a/0xa0 [ 97.096967][ T2555] sel_write_load+0x298/0x5e0 [ 97.101677][ T2555] ? __cfi_sel_write_load+0x10/0x10 [ 97.106935][ T2555] ? bpf_lsm_file_permission+0xd/0x20 [ 97.112333][ T2555] ? __cfi_sel_write_load+0x10/0x10 [ 97.117562][ T2555] vfs_write+0x3c0/0xe80 [ 97.121824][ T2555] ? __cfi_vfs_write+0x10/0x10 [ 97.126615][ T2555] ? __kasan_check_write+0x18/0x20 [ 97.131755][ T2555] ? mutex_lock+0x92/0x1c0 [ 97.136204][ T2555] ? __cfi_mutex_lock+0x10/0x10 [ 97.141092][ T2555] ? __fget_files+0x2c5/0x340 [ 97.145839][ T2555] ksys_write+0x141/0x250 [ 97.150194][ T2555] ? xfd_validate_state+0x68/0x150 [ 97.155344][ T2555] ? __cfi_ksys_write+0x10/0x10 [ 97.160222][ T2555] ? __kasan_check_write+0x18/0x20 [ 97.165367][ T2555] ? fpregs_restore_userregs+0x11d/0x260 [ 97.171037][ T2555] __x64_sys_write+0x7f/0x90 [ 97.175668][ T2555] x64_sys_call+0x271c/0x2ee0 [ 97.180377][ T2555] do_syscall_64+0x58/0xf0 [ 97.184822][ T2555] ? clear_bhb_loop+0x35/0x90 [ 97.189548][ T2555] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.195500][ T2555] RIP: 0033:0x7f8e95d8e929 [ 97.199928][ T2555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.219581][ T2555] RSP: 002b:00007f8e96b87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.228041][ T2555] RAX: ffffffffffffffda RBX: 00007f8e95fb5fa0 RCX: 00007f8e95d8e929 [ 97.236048][ T2555] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 97.244043][ T2555] RBP: 00007f8e95e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 97.252041][ T2555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.260056][ T2555] R13: 0000000000000000 R14: 00007f8e95fb5fa0 R15: 00007ffe00d004b8 [ 97.268084][ T2555] [ 97.271113][ T2555] ---[ end trace 0000000000000000 ]--- [ 97.276636][ T2555] SELinux: failed to load policy