last executing test programs: 3.7404988s ago: executing program 1 (id=183): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x6c, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@flat=@weak_binder={0x77622a85, 0x100, 0x3}, @fda={0x66646185, 0xa, 0x1, 0x1d}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @free_buffer, @release, @clear_death={0x400c630f, 0x2}, @enter_looper], 0x78, 0x0, &(0x7f00000001c0)="640aa202c0e6df20e9c39343949a9a9726ecb0a1168444f3c8c200a86ac9c754a8f3e553aaae1aff92ad6eaf03dbd1e4b7927b9030c575f4ceade05f6d5c3d91f973624384731e774a331c239876f6a64a9985f6139fa0645ddc8d4fcf48d82ca0341e558987efd47ceb86a2988812a608247b45407333e6"}) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xc) (async, rerun: 64) r1 = socket(0x1e, 0x4, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff) (async, rerun: 32) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) (rerun: 32) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x4e97}) (async, rerun: 64) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r7, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)=""/159, 0x9f}], 0x7b}, 0x6}], 0x1, 0x3fffcca3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) r8 = getpid() ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000280)={r8, 0x0, 0x4111}) 2.776719576s ago: executing program 1 (id=194): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mlockall(0x7) (async) r3 = dup3(r1, r0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x341342, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x8000, 0x1}) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r9, &(0x7f00000001c0)={0x31, 0x4, 0x0, {0x1, 0xfffffffffffffff8, 0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x31) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000ffdbdf2501"], 0x30}}, 0xc840) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'macvlan1\x00', 0x400}) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) (async) write$cgroup_devices(r4, 0x0, 0x9) (async) ioctl$EVIOCGABS3F(r3, 0x8018457f, 0x0) 2.648865608s ago: executing program 1 (id=197): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160015000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000200)={@my=0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0xd0431000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x3, r0, 'id1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xc}, @fd={0x66642a85, 0x0, r0}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) 1.942326169s ago: executing program 2 (id=207): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) socket$netlink(0x10, 0x3, 0xf) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) close(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r3, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x201, &(0x7f00000001c0)={0x0}) ptrace$poke(0x4, r4, &(0x7f0000000100), 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x20200, 0x0, 0x0, 0x80, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff}}, 0xffffffffffffff8b) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1, 0xa8) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x4}}, 0x24, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1}], 0x1) 1.88999004s ago: executing program 2 (id=209): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x1c, 0x0, &(0x7f0000000040)=[@enter_looper, @increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x2}], 0xbb, 0x0, &(0x7f0000000240)="05de66730879c09a3dad5fda5a11568bd6922cdb8a6c55bad3ce0e7d04883d574b211f9860b41a93ac458aca9afb423d03bb15483d60c14ac6fee5f3fae5d384e42707be029a067801fd291926efc34abc3049c3e2a53a6b88d05b53f9e0e598d164bd80d7dc3a2b92cafd605e38d9d62ed71495a0a11f2b2df6f33e9482ae85adda08eee500da7654f7ab9d754db694b9b9bbad95115f25efc6dd563e708784f81ca79e966bc1608167fa9eb815a3b09bd4042fd962392f1bd82e"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) 1.782098122s ago: executing program 1 (id=211): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x100000, 0x40, 0x0, 0x0, 0x57, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) chdir(&(0x7f00000000c0)='./file0\x00') 1.494670976s ago: executing program 3 (id=214): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 1.436927597s ago: executing program 3 (id=215): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = epoll_create(0x9) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x1, 0x0, 0xd6c6, 0x7}) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000040), 0x4) fadvise64(r0, 0xa, 0x400, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1.372277908s ago: executing program 3 (id=216): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) r1 = eventfd(0x5) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x48e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x1010, r2, 0x147a5000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 1.351506448s ago: executing program 3 (id=217): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x14000a7e) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'veth0_to_team\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x9e, 0x1000, "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"}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write(r3, &(0x7f00000002c0)='u', 0x1) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'veth0_macvtap\x00', 0x1}) 1.292868359s ago: executing program 3 (id=218): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x100000, 0x40, 0x0, 0x0, 0x57, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chdir(&(0x7f00000000c0)='./file0\x00') 1.048764323s ago: executing program 2 (id=219): ptrace(0x8, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/79, 0x4f}, {&(0x7f0000000080)=""/17, 0x11}], 0x2, 0xd2, 0x1) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @hyper}, 0x10) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x902}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, 0x6, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000005) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000300)={0x3, 'virt_wifi0\x00', {}, 0xa8}) r1 = gettid() r2 = syz_open_procfs$userns(r1, &(0x7f0000000340)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xf}]}, 0x44}}, 0x40040) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f0000000580)=0xc) ptrace$setregs(0xd, r6, 0x8000000000000001, &(0x7f00000005c0)="75758f280134ceda489300b09d4454e73d85cab5ab24f41ff005e3c1c31fd63c4fc5a6e79dc8d775390d37c808912f9d8eb1271bbe0a5bed9e1c668642d618d29be7d65c6a5f4cabceda7bdcdfc2fb6a94eb8423b49c4f4645ee8278094ac9740cbe016c61c0b8d4d07699f50b494b3014822b79293e642dde7395b79fecb3aa8dff7afb7d7640ba38d791014bdb0385d988e50bf320c58cbb131dac065850f4708295098574ff1924d661ce0d0a") ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'veth0_to_bond\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000740)={'gre0\x00', &(0x7f00000006c0)={'syztnl2\x00', r7, 0x700, 0x7, 0x2, 0x6, {{0x9, 0x4, 0x3, 0x1, 0x24, 0x67, 0x0, 0x9, 0x0, 0x0, @local, @private=0xa010101, {[@generic={0xfbd0639818ded0cb, 0xf, "9f85626528003b94eab412b0a6"}, @noop]}}}}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r5) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000007c0)={{0x0, 0x2, 0x7, 0x1, 0x7}, 0x101, 0x3}) read$FUSE(r0, &(0x7f0000000840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000002880)={0x18, 0x0, r9, {0x2}}, 0x18) r10 = dup2(r0, r2) r11 = open$dir(&(0x7f00000028c0)='./file0\x00', 0x40, 0x40) lseek(r11, 0x129, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002900)='./file0\x00', &(0x7f0000002940), 0x100) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002a80)={'ip6tnl0\x00', &(0x7f0000002a00)={'syztnl1\x00', r8, 0x2f, 0x7, 0x7f, 0x6, 0x4, @remote, @private2, 0x1, 0x80, 0x8, 0x7}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r10, &(0x7f0000002b40)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x840) dup3(r11, 0xffffffffffffffff, 0x80000) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x40, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 1.035934713s ago: executing program 0 (id=220): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000300)={0x1, 0x8, 0x25, &(0x7f00000002c0)=""/37}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r2, 0x147a5000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffff20}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x3}) 984.916505ms ago: executing program 2 (id=221): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdir(0x0, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x54, 0x0, &(0x7f0000000380)=[@increfs, @transaction_sg={0x40486311, {0xa1ffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0x110a, 0x3}, @fda={0x66646185, 0x0, 0x1, 0x19}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}, 0x40}], 0x0, 0x0, 0x0}) 984.270934ms ago: executing program 0 (id=222): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x10b, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000400)="857846a6d7bcb43f859847bdcfabf578722072451119b9845ef091ed897a05b7bfd3a9244798824c0658eb2710cc9e0c571c64815355307ba71d531b2ea7c5cf991ce8bf58728256edd0abfe27a11c10"}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xb) creat(0x0, 0x40) (async) creat(0x0, 0x40) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x17, 0x1, 0x70bd27, 0x0, {0xb}}, 0x14}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x17, 0x1, 0x70bd27, 0x0, {0xb}}, 0x14}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1c, 0x0, &(0x7f0000000180)=[@enter_looper, @increfs_done={0x40106308, 0x1}, @enter_looper], 0x7e, 0x0, &(0x7f0000000200)="2d04294bc51619ecc39668288ad1cf84920dcf4365a805727a1483878267b2a68c4071b27c8ea9c733a86b7d7695bfa5f1a90ef61570819aabc06c9b70ab6661b7e8a8d116919de9b94dc2b69f5dca622d9761c54afc285b93e1d5bc201a9e780bbac004618e90d7d00dd3aec6bdf98b636960cc2d2439b4d421572719c9"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1c, 0x0, &(0x7f0000000180)=[@enter_looper, @increfs_done={0x40106308, 0x1}, @enter_looper], 0x7e, 0x0, &(0x7f0000000200)="2d04294bc51619ecc39668288ad1cf84920dcf4365a805727a1483878267b2a68c4071b27c8ea9c733a86b7d7695bfa5f1a90ef61570819aabc06c9b70ab6661b7e8a8d116919de9b94dc2b69f5dca622d9761c54afc285b93e1d5bc201a9e780bbac004618e90d7d00dd3aec6bdf98b636960cc2d2439b4d421572719c9"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 983.872894ms ago: executing program 2 (id=223): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x8d) fchdir(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x5c, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x2, 0x39}, @fda={0x66646185, 0x1, 0x1, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000000)={0x0, 0x20, 0x40}}}, @acquire_done={0x40106309, 0x2}, @exit_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 978.805884ms ago: executing program 1 (id=224): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000e9ffff014d564b000000eccd"]) close_range(0xffffffffffffffff, r0, 0x2) 967.438025ms ago: executing program 2 (id=225): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000018c0), 0x8000, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x5a, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)="8578462072451119b9845e0100000000000000d3a9244798824c0658ebf7c69480cdaa5b942710cc9e0c571c64815355307ba71d531b2ea7c5cf0332e8bf58728256edd0abfe27a11c1000"/88}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000200)="2d04294bc51619ecc39668288ad1cf84920dcf4365a805727a1483878267b2a68c4071b27c8ea9c733a86b7d7695bfa5f1a90ef61570819aabc06c9b70ab6661b7e8a8d116919de9b94dc2b69f5dca62"}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a02700000000b3813e"], 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 872.004006ms ago: executing program 1 (id=226): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001480)=0x0) syz_pidfd_open(r4, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x64000600) syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1d39, &(0x7f0000000180)={0x0, 0x2079d9, 0x0, 0x1, 0x29d}, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES64], 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000015c0)={r5, 0x6, 0x5}) syz_clone(0x1022400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x38) close_range(r6, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000100)) 486.281182ms ago: executing program 3 (id=227): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x1c, 0x0, &(0x7f0000000040)=[@enter_looper, @increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x2}], 0xbb, 0x0, &(0x7f0000000240)="05de66730879c09a3dad5fda5a11568bd6922cdb8a6c55bad3ce0e7d04883d574b211f9860b41a93ac458aca9afb423d03bb15483d60c14ac6fee5f3fae5d384e42707be029a067801fd291926efc34abc3049c3e2a53a6b88d05b53f9e0e598d164bd80d7dc3a2b92cafd605e38d9d62ed71495a0a11f2b2df6f33e9482ae85adda08eee500da7654f7ab9d754db694b9b9bbad95115f25efc6dd563e708784f81ca79e966bc1608167fa9eb815a3b09bd4042fd962392f1bd82e"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) 120.867008ms ago: executing program 0 (id=228): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000001c0)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000100)=""/82, 0x52}, {&(0x7f00000002c0)=""/207, 0xcf}], 0x2, 0x33, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x2012, r0, 0xba723000) 74.504419ms ago: executing program 0 (id=229): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000180)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000080)=0x1, 0x4) (async) sendmmsg$inet(r2, &(0x7f0000000680)=[{{&(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x8000) (async) ppoll(&(0x7f0000000080)=[{r0, 0x74a02816d74a82b4}, {r1, 0x2100}, {r1, 0x1000}], 0x3, 0x0, 0x0, 0x0) 59.427569ms ago: executing program 0 (id=230): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) readv(r0, &(0x7f00000007c0)=[{0x0, 0xc}, {&(0x7f0000000700)=""/67, 0x43}, {0x0}], 0x3) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0xf1806, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 0 (id=231): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x80, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x2}, @increfs={0x40046304, 0x1}, @clear_death, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x3, 0x2, 0x5}, @fda={0x66646185, 0x9}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}}, @acquire_done], 0xaf, 0x0, &(0x7f0000000200)="c638bc376fcd96ac48226a73a584ceac71674deba5c06ac314e853f2e88081bc4aca06303a0229e6ec7904ba8959946a29064273f11d5238e44fe603f7ff245323d22c18462fa04377c4e044424c41cf9c067a4b21df9cf82ea8f443c658d0abec73669284eb04db837d5c6b98d0d8a5325b8fbd3cd0c37f63ba2ab1e4dc0155ff373cd2f3d4e9389e492375bb7f1e856f806834eae7e3dd8bfa6626802e734bac5bde0df03a9d9bc41bf9b0504e16"}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000300)) socket$igmp(0x2, 0x3, 0x2) close_range(r0, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) fsopen(&(0x7f0000000380)='msdos\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x18c, r3, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x8}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4090}, 0x4000) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept4$nfc_llcp(r4, &(0x7f0000000680), &(0x7f0000000700)=0x60, 0x81000) r5 = syz_usb_connect$uac1(0x0, 0xf2, &(0x7f0000000740)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x60, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x3, 0x1, 0x36, 0x30, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100, 0xf5}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x307, 0x3, 0x5, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x8, 0x2, 0x7, 0x0, "47f62e", "fdb610"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x1, 0xe4, 0x0, "e64b17"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x4, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x0, 0x77, 0x1}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xe0, 0x4, 0x4, 0x9, "a66a14"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0xec, 0x3, "e0b6bd", "ac"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x41, 0x3, {0x7, 0x25, 0x1, 0x0, 0x56, 0x8b59}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1000, 0x4, 0x6}, @as_header={0x7, 0x24, 0x1, 0x3, 0x6}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x40, 0x4, 0x3, 0x1, "bf9a"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xa, 0xf3, 0x9, 0x4, "", "f83cf3"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x3, 0x80, 0xb5, "de50", "d8"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x80, 0x7fff, 0x40, "e0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x79, 0x8, 0x1c, {0x7, 0x25, 0x1, 0x82, 0xdc, 0x136}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x0, 0x7, 0x0, 0x20, 0x40, 0xb}, 0x142, &(0x7f0000000880)={0x5, 0xf, 0x142, 0x6, [@generic={0xb3, 0x10, 0xa, "a5c51921f12dfcfb9465318a6f31fe0ec3e497d264c8595fe39cd8738611cddeee016d8a242a717891237d0768348f25df2c70ddc1ea8f71bc13014312dc87c056ef36b24959d438d0a997876f878291222d026a1675bdfcf84e0e17ff52d638095b1eca40cd3381b2cd38e6976bb17537e2e5921ea68a52ff9b987a61a57311e6293531aff5dcd640fe73e189097c2b187f7fa556c39077b31e7556eeed92616926548834197be33c8a41cfdcd6cf03"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x40, 0x7, 0xe6, 0x1}, @generic={0x5a, 0x10, 0x3, "d157ac38c24b4ce71453971c8a9bbcebf3f3a8ab06564cd75e13e0ae27173a7c0b7755b2ae55c3959868439a73630fe77e0e9bd5e4adca2323c75c4225bdbbccc515f40e3e11f359c0413a76b02bab6921e5192a31bfa5"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x1, 0x3, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "31d4fe111419e05ec3fb31f39a70064e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x47f3e7ca5a81b86d, 0x40, 0x4, 0x5}]}, 0x1, [{0x2e, &(0x7f0000000a00)=@string={0x2e, 0x3, "7a6f5f14521cd1fdd92187d97e4cf4b9e89244357258a9cbbae5ca3cde61a2758e645b6fef404fef5c155db7"}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000000b80)={0x14, &(0x7f0000000a80)={0x0, 0x22, 0xba, {0xba, 0x5, "d6cbda04034f6e8d0617dbfb3cd21bd60b94b661be2cbf1d8e1b30ced652d93550080ad3c6932262fb3ff4978c1c813f38a78b35fc8a1de124b2194fcceb9aac28367b0047bc35a9cc1ebd492a3d3cf8a6e489bffd2a2ebb0e1756fde86bafa81743d55f869f7ad7d1481347e955b052e7959402374c23ae2ee7457025c9440eb1fcf41518373bfe9502a90b8ca0e5ded87349d3a7c22c77b94d05bacce4830fb0d8a0ca2a57d70dc32302fa0ca97e12e9332c30025e559d"}}, &(0x7f0000000b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c14}}}, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)={0x0, 0x5, 0x3a, "3ae609943f41c3fa93e7699344ec808f079670529b25a90af3258f1d9be675e812fd10f57e9cf2aa66651a12550518ac82142aac33e16a2258e7"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x8d}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c80)={0x20, 0x81, 0x3, "3c6eb3"}, &(0x7f0000000cc0)={0x20, 0x82, 0x2, "72a4"}, &(0x7f0000000d00)={0x20, 0x83, 0x3, "100ca5"}, &(0x7f0000000d40)={0x20, 0x84, 0x4, "d91186fe"}, &(0x7f0000000d80)={0x20, 0x85, 0x3, "510385"}}) r6 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000e40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc087, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x11, 0x20, 0xff, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x62d3420b76aa24a5, 0xa, {0x9, 0x21, 0x101, 0x7, 0x1, {0x22, 0xd09}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x8, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x9, 0x9, 0x10}}]}}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x1, 0x3, 0x40, 0x4, 0x20, 0x62}, 0xf, &(0x7f0000000ec0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x1, 0x8}]}, 0x4, [{0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x2009}}, {0x54, &(0x7f0000000f80)=@string={0x54, 0x3, "cf3f1a368755745dad376f999a66c094c7a012dd96a0cc570251f946453fcd88636d39fe7e5fe5fc00c00923db498379f3c2a53d6df6ee1f62926467603c19d5beb8eb9bbfa5e3bdc98c0367f1bceabb4ba7"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x410}}]}) syz_usb_control_io$hid(r6, &(0x7f0000001340)={0x24, &(0x7f00000010c0)={0x0, 0xb, 0xf4, {0xf4, 0x0, "0f62f69f6da9475fcc76e46b81eaf236142d364286abee06b72a3db0733e58e264bcbedcd24c4d966cae667da5ec5b511850321af30c966f9c8146730fc626b0b895d86720780cddd80bad641dfa1529aff34344d26999d01c4ce06c015f8792c28097a4d357e97d09c0cc600d829ba94f9ced9a033e6efb5244fed146897e089cd46abb91bc8d1bd8a3305e6ff6a0595300797f0311e42610e2dc9e4b08f6d79aed277c60a3494ad0061e7957c8e982a9119d2e2e52df236c5702871c72d5e18f52953863da8a2b4d176a03a95119858e07f3e69940762ff96105c0b632ec92e1cac9f77e79b642318141cd1647f3864ddf"}}, &(0x7f00000011c0)={0x0, 0x3, 0xd0, @string={0xd0, 0x3, "b2d853b9dee2834bccc6c263eeca93956e24c8789076910dfd3f5fa007ac13c198ace44ff6f280c905d91c7f39c896eb28fc4d51d2ce0aa30954ce1589710555c272e9b373c8aa02936aa1994f4649ad9631323df1ec9bb8fa8b2734ab5ca51031ba3ab9d1c331ac4720fde2611557e18c66408b223ac5e31f9e86021606ce186fac0b6571ff29f11fbdac46d0f335e2495e3c94c7cdc88505caadf6fb5cbfec82866661a4d41ecdc254848bf9c423da4972e8e104d9b91c4786f84f5a9b999e591a3cfd88ddc419f06d9b094ffd"}}, &(0x7f00000012c0), &(0x7f0000001300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0xd54}}}}, &(0x7f0000001580)={0x2c, &(0x7f0000001380)={0x40, 0xc, 0xce, "f820413e70d86a7c0b58382fb8c2b4a39edd62fea911719c77556bbc5134844fbb0e37b95f7979669774834fa2cf17bcaa3409611dd19202770ed5760afd0069c4e2f5963a8b6f8a8d64e86fe8686c80e79a04afc0e7b539ec9273ed60d3e1d17d7b2eef100e1a40bd83631da5d29a05dea846ba24a3877e5b5a92e6c75d82c7a255a304dda79fa53bbbb568c0755640690c035d98b7a4f0fe6093a848db5c63d4635364851d12890b5d5b7b0a6ff0c739dc89a47ecaa4afa48ef4793d9aa2141674689cc58d34ca7f9fe9487db5"}, &(0x7f0000001480)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000014c0)={0x0, 0x8, 0x1}, &(0x7f0000001500)={0x20, 0x1, 0x16, "1e9c23b28416a71ae79d0a0a796d698d5b350c8e6b41"}, &(0x7f0000001540)={0x20, 0x3, 0x1, 0x6}}) r7 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'syztnl1\x00', 0x0, 0x7, 0x80, 0x0, 0x7, {{0x13, 0x4, 0x2, 0x2, 0x4c, 0x66, 0x0, 0x40, 0x29, 0x0, @loopback, @private=0xa010101, {[@noop, @timestamp_prespec={0x44, 0x34, 0xb8, 0x3, 0x3, [{@multicast2, 0xe5}, {@multicast1, 0x7}, {@multicast2, 0xb41}, {@rand_addr=0x64010102, 0x9}, {@rand_addr=0x64010101, 0x2ca9c924}, {@empty, 0x100}]}]}}}}}) r9 = syz_io_uring_complete(0x0) bind$xdp(r7, &(0x7f0000001680)={0x2c, 0x1, r8, 0x3c, r9}, 0x10) write$UHID_INPUT(r9, &(0x7f00000016c0)={0x8, {"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", 0x1000}}, 0x1006) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ASHMEM_SET_NAME(r9, 0x41007701, &(0x7f0000002700)='netdevsim') ioctl$RTC_EPOCH_SET(r9, 0x4008700e, 0x1) sendmsg$DEVLINK_CMD_GET(r9, &(0x7f0000002840)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002800)={&(0x7f0000002780)={0x50, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008050}, 0xd44c2e990f94cf65) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000002c80)={0x7, 0x0, [{0xf000, 0xb3, &(0x7f0000002880)=""/179}, {0x2, 0x69, &(0x7f0000002940)=""/105}, {0x6000, 0x21, &(0x7f00000029c0)=""/33}, {0xeeef0000, 0xb6, &(0x7f0000002a00)=""/182}, {0xffff1000, 0x8d, &(0x7f0000002ac0)=""/141}, {0xd000, 0x64, &(0x7f0000002b80)=""/100}, {0x2000, 0x49, &(0x7f0000002c00)=""/73}]}) syz_genetlink_get_family_id$team(&(0x7f0000002d80), r7) futex_waitv(&(0x7f0000004a80)=[{0x4, &(0x7f0000002dc0)=0x9, 0x82}, {0x52, &(0x7f0000002e00)=0xfffffffffffff118, 0x2}, {0x7, &(0x7f0000002e40)=0x9, 0x80}, {0x2, &(0x7f0000002e80)=0x3, 0x82}, {0x0, &(0x7f0000002ec0)=0x100, 0x82}, {0x4, &(0x7f0000002f00)=0xea5, 0x2}, {0x3, &(0x7f0000002f40), 0x2}, {0xffffffffffffffff, &(0x7f0000002f80)=0x4, 0x82}, {0x5, &(0x7f0000002fc0)=0x3, 0x2}, {0xad44, &(0x7f0000003000)=0x5, 0x2}, {0x5, &(0x7f0000003040)=0xffffffff, 0x82}, {0x7, &(0x7f0000003080)=0xa5, 0x82}, {0x8, &(0x7f00000030c0)=0xa6, 0x2}, {0x3, &(0x7f0000003100)=0x3, 0x2}, {0x9, &(0x7f0000003140)=0x59, 0x82}, {0xfff, &(0x7f0000003180)=0xffffffffffffa0c6, 0x2}, {0xffffffffffff91b6, &(0x7f00000031c0)=0x80000000}, {0xf0, &(0x7f0000003200)=0x5, 0x2}, {0x1ff, &(0x7f0000003240)=0x3, 0x2}, {0x7fffffff, &(0x7f0000003280)}, {0x0, &(0x7f00000032c0)=0xa7, 0x82}, {0x200, &(0x7f0000003300), 0x82}, {0xc1, &(0x7f0000003340)=0x6, 0x82}, {0x6b6, &(0x7f0000003380)=0x1, 0x82}, {0x6, &(0x7f00000033c0)=0x1, 0x82}, {0x1, &(0x7f0000003400)=0x1, 0x2}, {0x1, &(0x7f0000003440), 0x2}, {0x4000000000000000, &(0x7f0000003480)=0x2d9, 0x2}, {0x3ff, &(0x7f00000034c0)=0x4, 0x2}, {0x1, &(0x7f0000003500)=0x1b, 0x82}, {0x9, &(0x7f0000003540)=0x81, 0x82}, {0x9, &(0x7f0000003580)=0x8, 0x2}, {0x5, &(0x7f00000035c0)=0x5, 0x2}, {0x2, &(0x7f0000003600)=0x1, 0x2}, {0x1000, &(0x7f0000003640)=0x9818, 0x2}, {0x4, &(0x7f0000003680)=0xfffffffffffffffe, 0x82}, {0x6d0217db, &(0x7f00000036c0)=0x1, 0x5771f02068fc4d4f}, {0x100000000, &(0x7f0000003700)=0x8, 0xf03c0fe21e9e75c6}, {0x4e20, &(0x7f0000003740)=0x9, 0x2}, {0x10001, &(0x7f0000003780)=0x2, 0x2}, {0x8, &(0x7f00000037c0)=0x1, 0x82}, {0x6, &(0x7f0000003800)=0xfffffffffffffff8, 0x80}, {0x3ff, &(0x7f0000003840)=0x1, 0x2}, {0x7a, &(0x7f0000003880)=0x38, 0x2}, {0x3c6, &(0x7f00000038c0)=0x5, 0x82}, {0x1a5b, &(0x7f0000003900)=0x8, 0x2}, {0x2, &(0x7f0000003940), 0x82}, {0xfffffffffffffffd, &(0x7f0000003980)=0x7, 0x2}, {0xd58964, &(0x7f00000039c0)=0x8000000000000001, 0x82}, {0x7, &(0x7f0000003a00)=0xfffffffffffffffb, 0x2}, {0x7, &(0x7f0000003a40)=0x1, 0x2}, {0x5, &(0x7f0000003a80)=0xfff, 0x2}, {0x7, &(0x7f0000003ac0)=0x7fffffffffffffff, 0x2}, {0x10b9, &(0x7f0000003b00)=0x9, 0x82}, {0x4, &(0x7f0000003b40)=0x1, 0x82}, {0xfffffffffffff7d3, &(0x7f0000003b80)=0xc6, 0x82}, {0x7fff, &(0x7f0000003bc0)=0x2, 0x82}, {0x10000, &(0x7f0000003c00)=0x1, 0x82}, {0x2, &(0x7f0000003c40)=0x1, 0x82}, {0xd, &(0x7f0000003c80)=0xffffffff, 0x2}, {0x7fff00000000000, &(0x7f0000003cc0)=0x3ff, 0x2}, {0x9, &(0x7f0000003d00)=0xcc, 0x82}, {0x6, &(0x7f0000003d40)=0xf71, 0xa496d1e22de8af15}, {0x1, &(0x7f0000003d80)=0x1000, 0x82}, {0x5, &(0x7f0000003dc0)=0x3d26, 0x2}, {0xfffffffffffff453, &(0x7f0000003e00)=0x1, 0x82}, {0x6, &(0x7f0000003e40)=0x7, 0x82}, {0xcb40, &(0x7f0000003e80)=0x3eab, 0x2}, {0x40, &(0x7f0000003ec0)=0xffffffff, 0x2}, {0x7fffffffffffffff, &(0x7f0000003f00)=0xb, 0x82}, {0x4, &(0x7f0000003f40)=0x100000001, 0x2}, {0x7, &(0x7f0000003f80)=0xa, 0x82}, {0x7, &(0x7f0000003fc0)=0x15, 0x2}, {0x100, &(0x7f0000004000)=0x16, 0x2}, {0x8, &(0x7f0000004040)=0x10000, 0x2}, {0x276, &(0x7f0000004080)=0xb, 0x82}, {0xe5, &(0x7f00000040c0)=0xa, 0x82}, {0x3, &(0x7f0000004100)=0xffffffff, 0x2}, {0x3, &(0x7f0000004140)=0x8, 0x2}, {0x8f47, &(0x7f0000004180)=0xf, 0x82}, {0x1, &(0x7f00000041c0)=0x9, 0x82}, {0x7702, &(0x7f0000004200)=0x5, 0x82}, {0xc, &(0x7f0000004240)=0x7fff, 0x82}, {0x9, &(0x7f0000004280)=0x6033, 0x82}, {0x2b0, &(0x7f00000042c0)=0x100000000, 0x2}, {0x4, &(0x7f0000004300)=0x6acfc1fb, 0x2}, {0x10, &(0x7f0000004340)=0x2, 0x82}, {0x83a, &(0x7f0000004380)=0x3, 0x82}, {0x1, &(0x7f00000043c0)=0xffffffffffff0001, 0x82}, {0xfad, &(0x7f0000004400)=0x8000, 0x82}, {0x5, &(0x7f0000004440)=0x8b65, 0x82}, {0x218, &(0x7f0000004480)=0xfe, 0x82}, {0x0, &(0x7f00000044c0)=0x453260ca, 0x2}, {0xb, &(0x7f0000004500)=0x1, 0x82}, {0x401, &(0x7f0000004540)=0x7fffffff, 0x82}, {0x9, &(0x7f0000004580)=0x6, 0x82}, {0x5, &(0x7f00000045c0)=0x2, 0x2}, {0x9, &(0x7f0000004600)=0xa, 0x82}, {0x133, &(0x7f0000004640)=0x2, 0x2}, {0x6, &(0x7f0000004680)=0x3, 0x2}, {0x3, &(0x7f00000046c0)=0x7e, 0x82}, {0x4, &(0x7f0000004700)=0x7, 0x2}, {0x100000001, &(0x7f0000004740)=0xe, 0x82}, {0x4, &(0x7f0000004780)=0xec, 0x2}, {0x2, &(0x7f00000047c0)=0x8, 0x82}, {0x101, &(0x7f0000004800), 0x2}, {0x5ee9b257, &(0x7f0000004840)=0x3, 0x2}, {0xaef7, &(0x7f0000004880)=0x8, 0x2}, {0x97b7, &(0x7f00000048c0)=0x8, 0x82}, {0x7fff, &(0x7f0000004900)=0x6, 0x82}, {0x2f, &(0x7f0000004940)=0xffffffffffff57c3, 0x2}, {0xfffffffffffffffa, &(0x7f0000004980)=0x3, 0x82}, {0x7, &(0x7f00000049c0)=0x747a, 0x82}, {0x3, &(0x7f0000004a00)=0x1, 0x2}, {0x100000001, &(0x7f0000004a40)=0xa0, 0x2}], 0x73, 0x0, &(0x7f0000005580), 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.244' (ED25519) to the list of known hosts. [ 24.263963][ T36] audit: type=1400 audit(1753529259.260:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.265488][ T282] cgroup: Unknown subsys name 'net' [ 24.287423][ T36] audit: type=1400 audit(1753529259.260:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.315121][ T36] audit: type=1400 audit(1753529259.290:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.315509][ T282] cgroup: Unknown subsys name 'devices' [ 24.519253][ T282] cgroup: Unknown subsys name 'hugetlb' [ 24.524891][ T282] cgroup: Unknown subsys name 'rlimit' [ 24.619866][ T36] audit: type=1400 audit(1753529259.620:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.643192][ T36] audit: type=1400 audit(1753529259.620:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.668046][ T36] audit: type=1400 audit(1753529259.620:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.679613][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.700079][ T36] audit: type=1400 audit(1753529259.700:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.725599][ T36] audit: type=1400 audit(1753529259.700:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.763352][ T36] audit: type=1400 audit(1753529259.760:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.788952][ T36] audit: type=1400 audit(1753529259.760:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.789013][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.950004][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.957123][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.964220][ T290] bridge_slave_0: entered allmulticast mode [ 25.970876][ T290] bridge_slave_0: entered promiscuous mode [ 25.987841][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.994927][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.002319][ T290] bridge_slave_1: entered allmulticast mode [ 26.008661][ T290] bridge_slave_1: entered promiscuous mode [ 26.101212][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.108319][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.115482][ T289] bridge_slave_0: entered allmulticast mode [ 26.121796][ T289] bridge_slave_0: entered promiscuous mode [ 26.128154][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.135216][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.142493][ T292] bridge_slave_0: entered allmulticast mode [ 26.148890][ T292] bridge_slave_0: entered promiscuous mode [ 26.158467][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.165621][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.172818][ T291] bridge_slave_0: entered allmulticast mode [ 26.179238][ T291] bridge_slave_0: entered promiscuous mode [ 26.185442][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.192792][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.199933][ T289] bridge_slave_1: entered allmulticast mode [ 26.206330][ T289] bridge_slave_1: entered promiscuous mode [ 26.212398][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.219521][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.226711][ T292] bridge_slave_1: entered allmulticast mode [ 26.232984][ T292] bridge_slave_1: entered promiscuous mode [ 26.239209][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.246318][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.253412][ T291] bridge_slave_1: entered allmulticast mode [ 26.259953][ T291] bridge_slave_1: entered promiscuous mode [ 26.395872][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.403121][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.410429][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.417481][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.475752][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.482865][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.490179][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.497236][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.510413][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.517515][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.524810][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.531886][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.542545][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.549667][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.556970][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.564012][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.594522][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.602267][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.609951][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.618290][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.625499][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.632917][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.640255][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.647627][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.668297][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.675361][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.683093][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.690171][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.721679][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.728782][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.739848][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.746947][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.760252][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.767355][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.776974][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.784044][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.801047][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.808158][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.820887][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.827981][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.855074][ T290] veth0_vlan: entered promiscuous mode [ 26.891975][ T290] veth1_macvtap: entered promiscuous mode [ 26.901441][ T291] veth0_vlan: entered promiscuous mode [ 26.921319][ T289] veth0_vlan: entered promiscuous mode [ 26.928315][ T292] veth0_vlan: entered promiscuous mode [ 26.940399][ T291] veth1_macvtap: entered promiscuous mode [ 26.966868][ T292] veth1_macvtap: entered promiscuous mode [ 26.988092][ T289] veth1_macvtap: entered promiscuous mode [ 27.006777][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.050822][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 27.097532][ T337] rust_binder: 2: no such ref 3 [ 27.102489][ T337] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 27.127930][ T343] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 27.167638][ T344] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 27.229056][ T345] rust_binder: Write failure EFAULT in pid:2 [ 27.262222][ T356] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8'. [ 27.278126][ T356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 27.311863][ T359] FAULT_INJECTION: forcing a failure. [ 27.311863][ T359] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 27.325440][ T359] CPU: 1 UID: 0 PID: 359 Comm: syz.1.9 Not tainted 6.12.38-syzkaller-g21fbbe6cf817 #0 3699ea59a0ce13608b0d0a890a5baf062d2929f8 [ 27.325472][ T359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 27.325493][ T359] Call Trace: [ 27.325500][ T359] [ 27.325508][ T359] __dump_stack+0x21/0x30 [ 27.325543][ T359] dump_stack_lvl+0x10c/0x190 [ 27.325565][ T359] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.325589][ T359] ? vsnprintf+0x7b4/0x1aa0 [ 27.325609][ T359] ? __asan_memcpy+0x5a/0x80 [ 27.325634][ T359] dump_stack+0x19/0x20 [ 27.325655][ T359] should_fail_ex+0x3d9/0x530 [ 27.325680][ T359] should_fail+0xf/0x20 [ 27.325702][ T359] should_fail_usercopy+0x1e/0x30 [ 27.325728][ T359] _copy_from_user+0x22/0xb0 [ 27.325747][ T359] kstrtouint_from_user+0xc2/0x150 [ 27.325771][ T359] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 27.325795][ T359] ? selinux_file_permission+0x309/0xb30 [ 27.325814][ T359] ? __cfi_selinux_file_permission+0x10/0x10 [ 27.325833][ T359] proc_fail_nth_write+0x89/0x210 [ 27.325855][ T359] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 27.325877][ T359] ? bpf_lsm_file_permission+0xd/0x20 [ 27.325900][ T359] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 27.325921][ T359] vfs_write+0x3c3/0xe80 [ 27.325947][ T359] ? __cfi_vfs_write+0x10/0x10 [ 27.325977][ T359] ? __kasan_check_write+0x18/0x20 [ 27.326010][ T359] ? mutex_lock+0x92/0x1c0 [ 27.326040][ T359] ? __cfi_mutex_lock+0x10/0x10 [ 27.326070][ T359] ? __fget_files+0x2c5/0x340 [ 27.326100][ T359] ksys_write+0x141/0x250 [ 27.326125][ T359] ? __cfi_ksys_write+0x10/0x10 [ 27.326151][ T359] ? __kasan_check_read+0x15/0x20 [ 27.326175][ T359] __x64_sys_write+0x7f/0x90 [ 27.326200][ T359] x64_sys_call+0x271c/0x2ee0 [ 27.326226][ T359] do_syscall_64+0x58/0xf0 [ 27.326247][ T359] ? clear_bhb_loop+0x50/0xa0 [ 27.326275][ T359] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.326302][ T359] RIP: 0033:0x7f2475b8d45f [ 27.326328][ T359] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 27.326344][ T359] RSP: 002b:00007f2476911030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 27.326368][ T359] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2475b8d45f [ 27.326382][ T359] RDX: 0000000000000001 RSI: 00007f24769110a0 RDI: 0000000000000006 [ 27.326394][ T359] RBP: 00007f2476911090 R08: 0000000000000000 R09: 0000000000000000 [ 27.326406][ T359] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 27.326418][ T359] R13: 0000000000000000 R14: 00007f2475db5fa0 R15: 00007ffc06f150b8 [ 27.326434][ T359] [ 27.926116][ T66] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.939823][ T371] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.992324][ T376] rust_binder: Failed to allocate buffer. len:192, is_oneway:true [ 28.012207][ T379] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.048474][ T383] capability: warning: `syz.0.18' uses deprecated v2 capabilities in a way that may be insecure [ 28.076903][ T384] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 28.078476][ T384] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 28.094463][ T384] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 28.097224][ T66] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 28.110100][ T384] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 28.111611][ T66] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 28.119774][ T384] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 28.130537][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 28.150462][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 28.172470][ T66] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 28.188890][ T66] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 28.198051][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.207401][ T66] usb 2-1: config 0 descriptor?? [ 28.212987][ T367] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 28.342112][ T389] rust_binder: 386 RLIMIT_NICE not set [ 28.494672][ T391] rust_binder: 18: no such ref 0 [ 28.505854][ T391] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 28.539891][ T393] rust_binder: 20: no such ref 3 [ 28.544935][ T393] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 28.605694][ T396] rust_binder: 23: no such ref 3 [ 28.610807][ T396] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 28.637499][ T66] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 28.645100][ T66] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 28.652828][ T66] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 28.660735][ T66] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 28.668652][ T66] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 28.676176][ T66] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 28.683663][ T66] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 28.691449][ T66] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 28.699110][ T66] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 28.706638][ T66] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 28.714058][ T66] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 28.721490][ T66] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 28.728962][ T66] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 28.736483][ T66] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 28.743910][ T66] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 28.752544][ T66] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 28.761515][ T66] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 28.872035][ T404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.872611][ T404] rust_binder: 19: no such ref 768 [ 28.884410][ T404] rust_binder: Failed to allocate buffer. len:192, is_oneway:true [ 28.905111][ T367] veth0_vlan: entered allmulticast mode [ 28.943820][ T415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30 [ 29.056091][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 29.056136][ T333] Bluetooth: hci0: command 0x1003 tx timeout [ 29.376110][ T66] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.457468][ T10] usb 2-1: USB disconnect, device number 2 [ 29.475279][ T36] kauditd_printk_skb: 100 callbacks suppressed [ 29.475302][ T36] audit: type=1400 audit(1753529264.470:174): avc: denied { setopt } for pid=420 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.502616][ T36] audit: type=1400 audit(1753529264.490:175): avc: denied { mount } for pid=420 comm="syz.0.29" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 29.536071][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 29.543051][ T66] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 29.551411][ T66] usb 3-1: config 0 has no interface number 0 [ 29.558052][ T66] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 29.570594][ T66] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 29.581459][ T36] audit: type=1400 audit(1753529264.590:176): avc: denied { nlmsg_tty_audit } for pid=425 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 29.602258][ T66] usb 3-1: config 0 interface 41 has no altsetting 0 [ 29.609533][ T36] audit: type=1400 audit(1753529264.590:177): avc: denied { create } for pid=422 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 29.628954][ T36] audit: type=1400 audit(1753529264.590:178): avc: denied { read write } for pid=425 comm="syz.0.31" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 29.652894][ T36] audit: type=1400 audit(1753529264.590:179): avc: denied { open } for pid=425 comm="syz.0.31" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 29.665287][ T429] ======================================================= [ 29.665287][ T429] WARNING: The mand mount option has been deprecated and [ 29.665287][ T429] and is ignored by this kernel. Remove the mand [ 29.665287][ T429] option from the mount to silence this warning. [ 29.665287][ T429] ======================================================= [ 29.675864][ T36] audit: type=1400 audit(1753529264.590:180): avc: denied { map } for pid=425 comm="syz.0.31" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 29.766094][ T36] audit: type=1400 audit(1753529264.660:181): avc: denied { create } for pid=428 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 29.787356][ T36] audit: type=1400 audit(1753529264.660:182): avc: denied { remount } for pid=428 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 29.803894][ T66] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 29.817958][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.826082][ T66] usb 3-1: Product: syz [ 29.830467][ T66] usb 3-1: Manufacturer: syz [ 29.835328][ T66] usb 3-1: SerialNumber: syz [ 29.840919][ T66] usb 3-1: config 0 descriptor?? [ 29.846191][ T418] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 29.854235][ T418] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 29.887556][ T36] audit: type=1400 audit(1753529264.890:183): avc: denied { block_suspend } for pid=435 comm="syz.0.34" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.894677][ T436] rust_binder: Write failure EINVAL in pid:36 [ 29.909862][ T438] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.921745][ T438] rust_binder: 33: no such ref 16384 [ 29.933597][ T438] rust_binder: Failed to allocate buffer. len:192, is_oneway:true [ 29.948265][ T441] binder: Bad value for 'max' [ 29.980097][ T444] rust_binder: 38: no such ref 3 [ 29.985709][ T444] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 29.994124][ T445] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.995604][ T445] rust_binder: Failed to allocate buffer. len:192, is_oneway:true [ 30.071546][ T450] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.080621][ T418] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 30.094510][ T418] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 30.149621][ T451] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 30.504080][ T66] Error reading MAC address [ 30.536148][ T418] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 30.543462][ T418] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 30.766055][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.916063][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 30.935693][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 30.948486][ T31] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 30.965752][ T66] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 30.965845][ T31] usb 2-1: can't read configurations, error -71 [ 31.163838][ T475] loop7: detected capacity change from 0 to 7 [ 31.261245][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 31.271131][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 31.470687][ T479] netlink: 188 bytes leftover after parsing attributes in process `syz.1.49'. [ 31.495092][ T480] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.507068][ T479] rust_binder: Error in use_page_slow: ESRCH [ 31.507100][ T479] rust_binder: use_range failure ESRCH [ 31.514162][ T479] rust_binder: Failed to allocate buffer. len:1104, is_oneway:true [ 31.529512][ T479] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 31.551957][ T479] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:44 [ 31.703939][ T489] syz.0.52 uses obsolete (PF_INET,SOCK_PACKET) [ 31.804226][ T499] rust_binder: 61: no such ref 16777216 [ 31.809961][ T499] rust_binder: Error while translating object. [ 31.809988][ T499] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 31.824121][ T499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:61 [ 31.914293][ T66] rust_binder: 500: removing orphan mapping 0:4216 [ 32.018814][ T509] netlink: 84 bytes leftover after parsing attributes in process `syz.3.58'. [ 32.147025][ T518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.147644][ T31] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 32.157396][ T518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.172098][ T31] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 32.343298][ T31] usb 3-1: USB disconnect, device number 2 [ 32.396084][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 32.513259][ T525] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.526046][ T45] usb 2-1: device descriptor read/64, error -71 [ 32.550548][ T527] rust_binder: 45: no such ref 3 [ 32.568300][ T530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.569250][ T529] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 32.638477][ T525] 9pnet_fd: Insufficient options for proto=fd [ 32.677580][ T542] netlink: 36 bytes leftover after parsing attributes in process `syz.2.68'. [ 32.723290][ T548] binder: Unknown parameter 'fowner>00000000000000060928' [ 32.749939][ T360] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.756499][ T360] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.766037][ T45] usb 2-1: device descriptor read/64, error -71 [ 32.845595][ T566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.899603][ T573] rust_binder: Failed to allocate buffer. len:184, is_oneway:false [ 33.016043][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 33.093781][ T583] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.156098][ T45] usb 2-1: device descriptor read/64, error -71 [ 33.396045][ T45] usb 2-1: device descriptor read/64, error -71 [ 33.506127][ T45] usb usb2-port1: attempt power cycle [ 33.753872][ T596] 9pnet: Could not find request transport: xen [ 33.813697][ T598] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.814058][ T598] rust_binder: 65: no such ref 3 [ 33.828271][ T598] rust_binder: Write failure EFAULT in pid:65 [ 33.846048][ T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 33.877151][ T45] usb 2-1: device descriptor read/8, error -71 [ 33.925411][ T602] /dev/nullb0: Can't lookup blockdev [ 33.931099][ T602] /dev/nullb0: Can't lookup blockdev [ 33.950642][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.951208][ T604] rust_binder: Failed to allocate buffer. len:1176, is_oneway:true [ 33.970297][ T606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.978862][ T606] rust_binder: 75: no such ref 3 [ 33.990383][ T606] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 34.006153][ T608] rust_binder: Error while translating object. [ 34.006184][ T608] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 34.007156][ T45] usb 2-1: device descriptor read/8, error -71 [ 34.012450][ T608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:92 [ 34.161948][ T622] rust_binder: 103: no such ref 1073741824 [ 34.177036][ T622] rust_binder: Error while translating object. [ 34.177061][ T622] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 34.183232][ T622] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:103 [ 34.225088][ T626] netlink: 1536 bytes leftover after parsing attributes in process `syz.0.94'. [ 34.234483][ T627] 9pnet_fd: Insufficient options for proto=fd [ 34.260700][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 34.287136][ T45] usb 2-1: device descriptor read/8, error -71 [ 34.404585][ T632] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 34.412599][ T632] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 34.421263][ T632] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 34.429593][ T632] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 34.430395][ T45] usb 2-1: device descriptor read/8, error -71 [ 34.445601][ T632] rust_binder: 631 RLIMIT_NICE not set [ 34.500865][ T634] 9pnet_fd: Insufficient options for proto=fd [ 34.548740][ T45] usb usb2-port1: unable to enumerate USB device [ 34.815520][ T645] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.816049][ T333] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.828743][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 34.835157][ T645] rust_binder: 78: no such ref 2717908991 [ 34.842390][ T645] rust_binder: Failed to allocate buffer. len:192, is_oneway:true [ 34.859577][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 34.859597][ T36] audit: type=1400 audit(1753529269.860:231): avc: denied { ioctl } for pid=646 comm="syz.3.104" path="socket:[5283]" dev="sockfs" ino=5283 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.910142][ T36] audit: type=1400 audit(1753529269.910:232): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.956940][ T36] audit: type=1400 audit(1753529269.960:233): avc: denied { create } for pid=653 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.156245][ T664] binder: Unknown parameter 'fscontext?}' [ 35.163167][ T663] 9pnet_fd: Insufficient options for proto=fd [ 35.195411][ T670] rust_binder: 35: no such ref 3 [ 35.205903][ T670] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 35.234410][ T360] Bluetooth: hci0: Frame reassembly failed (-84) [ 35.246010][ T676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.253943][ T676] rust_binder: 95: no such ref 4294967201 [ 35.261307][ T677] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 35.266405][ T676] rust_binder: Failed to allocate buffer. len:192, is_oneway:true [ 35.274658][ T677] rust_binder: Write failure EINVAL in pid:35 [ 35.357701][ T682] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.494066][ T684] 9pnet_fd: Insufficient options for proto=fd [ 35.778357][ T36] audit: type=1400 audit(1753529270.780:234): avc: denied { append } for pid=694 comm="syz.0.121" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 35.885938][ T700] rust_binder: Write failure EINVAL in pid:142 [ 35.911688][ T704] loop7: detected capacity change from 0 to 7 [ 36.157663][ T717] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.158916][ T717] rust_binder: Write failure EFAULT in pid:102 [ 36.170102][ T717] rust_binder: Write failure EFAULT in pid:102 [ 36.191094][ T721] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.196087][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.197936][ T721] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 36.211085][ T36] audit: type=1400 audit(1753529271.200:235): avc: denied { setopt } for pid=716 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.238943][ T36] audit: type=1400 audit(1753529271.200:236): avc: denied { bind } for pid=716 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.268467][ T725] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.268835][ T725] rust_binder: 109: no such ref 3 [ 36.280560][ T725] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 36.304520][ T36] audit: type=1400 audit(1753529271.300:237): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 36.327962][ T728] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 36.335485][ T728] rust_binder: Write failure EINVAL in pid:109 [ 36.338297][ T36] audit: type=1400 audit(1753529271.340:238): avc: denied { mounton } for pid=726 comm="syz.2.134" path="/proc/48/task" dev="proc" ino=5663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 36.339271][ T727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 36.386702][ T36] audit: type=1400 audit(1753529271.390:239): avc: denied { append } for pid=730 comm="syz.2.135" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.418836][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 36.425040][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 36.433325][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.445146][ T10] usb 1-1: config 0 has no interface number 0 [ 36.451439][ T10] usb 1-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 36.466052][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=de.57 [ 36.475141][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.483279][ T10] usb 1-1: Product: syz [ 36.487544][ T10] usb 1-1: Manufacturer: syz [ 36.495500][ T10] usb 1-1: SerialNumber: syz [ 36.504118][ T10] usb 1-1: config 0 descriptor?? [ 36.523889][ T36] audit: type=1400 audit(1753529271.520:240): avc: denied { getopt } for pid=730 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.713169][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 36.723004][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 36.732534][ T10] smsc95xx v2.0.0 [ 36.737175][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 36.747583][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 36.758493][ T10] usb 1-1: USB disconnect, device number 2 [ 36.866102][ T45] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 37.017159][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 57343, setting to 64 [ 37.028161][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 37.039319][ T45] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 37.048437][ T45] usb 3-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 37.056581][ T45] usb 3-1: Product: syz [ 37.060807][ T45] usb 3-1: Manufacturer: syz [ 37.065400][ T45] usb 3-1: SerialNumber: syz [ 37.070815][ T45] usb 3-1: config 0 descriptor?? [ 37.076298][ T734] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 37.122450][ T736] Zero length message leads to an empty skb [ 37.289320][ T734] 9pnet_fd: Insufficient options for proto=fd [ 37.296079][ T333] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 37.335802][ T749] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 37.343048][ T749] rust_binder: Read failure Err(EFAULT) in pid:121 [ 37.368580][ T31] usb 3-1: USB disconnect, device number 3 [ 37.497407][ T756] loop7: detected capacity change from 0 to 7 [ 37.506017][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.515273][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 37.523771][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.532977][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 37.540900][ T756] loop7: unable to read partition table [ 37.547514][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.552359][ T757] can0: slcan on ttyS3. [ 37.564681][ T761] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.564762][ T760] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 37.572294][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.574040][ T756] loop_reread_partitions: partition scan of loop7 (/dev/ttyS3) failed (rc=-5) [ 37.580291][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 37.606867][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.616075][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 37.624400][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.633603][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 37.646278][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.655448][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 37.671178][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.680367][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 37.726397][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 37.731735][ T758] can0 (unregistered): slcan off ttyS3. [ 37.739061][ T45] usb 1-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 64 [ 37.755543][ T45] usb 1-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 16 [ 37.775774][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 37.786307][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 37.807109][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.815162][ T45] usb 1-1: Product: syz [ 37.835904][ T45] usb 1-1: Manufacturer: syz [ 37.845029][ T45] usb 1-1: SerialNumber: syz [ 37.874721][ T742] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 37.885979][ T742] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 37.939031][ T790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.955264][ T793] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.166044][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 38.306033][ T10] usb 4-1: device descriptor read/64, error -71 [ 38.322271][ T45] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 9 proto 2 vid 0x0525 pid 0xA4A8 [ 38.338688][ T45] usb 1-1: USB disconnect, device number 3 [ 38.346886][ T45] usblp0: removed [ 38.398346][ T827] netlink: 'syz.2.158': attribute type 7 has an invalid length. [ 38.406221][ T827] netlink: 'syz.2.158': attribute type 5 has an invalid length. [ 38.413969][ T827] netlink: 17 bytes leftover after parsing attributes in process `syz.2.158'. [ 38.484220][ T829] netlink: 'syz.2.159': attribute type 12 has an invalid length. [ 38.492213][ T830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=830 comm=syz.2.159 [ 38.504827][ T830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=830 comm=syz.2.159 [ 38.517462][ T830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=830 comm=syz.2.159 [ 38.530013][ T830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=830 comm=syz.2.159 [ 38.542758][ T830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=830 comm=syz.2.159 [ 38.555284][ T10] usb 4-1: device descriptor read/64, error -71 [ 38.561675][ T830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=830 comm=syz.2.159 [ 38.574199][ T830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=830 comm=syz.2.159 [ 38.586732][ T830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=830 comm=syz.2.159 [ 38.599232][ T830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=830 comm=syz.2.159 [ 38.611737][ T830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=830 comm=syz.2.159 [ 38.768862][ T845] rust_binder: Write failure EFAULT in pid:96 [ 38.795447][ T850] capability: warning: `syz.1.165' uses 32-bit capabilities (legacy support in use) [ 38.804966][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 38.893791][ T851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.163'. [ 38.936074][ T10] usb 4-1: device descriptor read/64, error -71 [ 39.206032][ T10] usb 4-1: device descriptor read/64, error -71 [ 39.276089][ T866] rust_binder: Write failure EFAULT in pid:103 [ 39.316114][ T10] usb usb4-port1: attempt power cycle [ 39.380597][ T750] rust_binder: 855: removing orphan mapping 0:4216 [ 39.403286][ T868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:157 [ 39.493086][ T884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.175'. [ 39.627697][ T891] netlink: 57 bytes leftover after parsing attributes in process `syz.0.177'. [ 39.686031][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 39.707544][ T898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:181 [ 39.717262][ T10] usb 4-1: device descriptor read/8, error -71 [ 39.767559][ T900] netlink: 'syz.1.181': attribute type 27 has an invalid length. [ 39.775647][ T900] lo: entered promiscuous mode [ 39.780520][ T900] lo: entered allmulticast mode [ 39.787407][ T900] tunl0: entered promiscuous mode [ 39.792532][ T900] tunl0: entered allmulticast mode [ 39.800312][ T900] gre0: entered promiscuous mode [ 39.805429][ T900] gre0: entered allmulticast mode [ 39.811450][ T900] gretap0: entered promiscuous mode [ 39.816812][ T900] gretap0: entered allmulticast mode [ 39.822284][ T900] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 39.847826][ T900] rust_binder: 107: no such ref 3 [ 39.853122][ T900] rust_binder: Write failure EFAULT in pid:107 [ 39.867205][ T10] usb 4-1: device descriptor read/8, error -71 [ 39.891599][ T907] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111 [ 40.126130][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 40.167103][ T10] usb 4-1: device descriptor read/8, error -71 [ 40.297073][ T10] usb 4-1: device descriptor read/8, error -71 [ 40.337159][ T920] input: syz0 as /devices/virtual/input/input5 [ 40.346728][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 40.346747][ T36] audit: type=1400 audit(1753529275.350:278): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=460 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.376216][ T36] audit: type=1400 audit(1753529275.350:279): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=460 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.407553][ T10] usb usb4-port1: unable to enumerate USB device [ 40.415178][ T36] audit: type=1400 audit(1753529275.350:280): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=460 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.506463][ T928] FAULT_INJECTION: forcing a failure. [ 40.506463][ T928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.519830][ T928] CPU: 1 UID: 0 PID: 928 Comm: syz.2.191 Not tainted 6.12.38-syzkaller-g21fbbe6cf817 #0 3699ea59a0ce13608b0d0a890a5baf062d2929f8 [ 40.519867][ T928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 40.519882][ T928] Call Trace: [ 40.519889][ T928] [ 40.519898][ T928] __dump_stack+0x21/0x30 [ 40.519932][ T928] dump_stack_lvl+0x10c/0x190 [ 40.519958][ T928] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.519986][ T928] dump_stack+0x19/0x20 [ 40.520011][ T928] should_fail_ex+0x3d9/0x530 [ 40.520040][ T928] should_fail+0xf/0x20 [ 40.520066][ T928] should_fail_usercopy+0x1e/0x30 [ 40.520096][ T928] strncpy_from_user+0x28/0x270 [ 40.520124][ T928] ? getname_flags+0xc6/0x710 [ 40.520157][ T928] getname_flags+0x102/0x710 [ 40.520187][ T928] ? __kasan_check_write+0x18/0x20 [ 40.520224][ T928] user_path_at+0x2b/0x60 [ 40.520245][ T928] path_setxattr+0x276/0x560 [ 40.520277][ T928] ? simple_xattrs_free+0x180/0x180 [ 40.520315][ T928] ? __cfi_ksys_write+0x10/0x10 [ 40.520347][ T928] __x64_sys_lsetxattr+0xc6/0xe0 [ 40.520376][ T928] x64_sys_call+0x2db8/0x2ee0 [ 40.520405][ T928] do_syscall_64+0x58/0xf0 [ 40.520431][ T928] ? clear_bhb_loop+0x50/0xa0 [ 40.520464][ T928] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.520495][ T928] RIP: 0033:0x7f82d378e9a9 [ 40.520514][ T928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.520544][ T928] RSP: 002b:00007f82d45d6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 40.520568][ T928] RAX: ffffffffffffffda RBX: 00007f82d39b5fa0 RCX: 00007f82d378e9a9 [ 40.520585][ T928] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 40.520601][ T928] RBP: 00007f82d45d6090 R08: 0000000000000000 R09: 0000000000000000 [ 40.520615][ T928] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000001 [ 40.520629][ T928] R13: 0000000000000000 R14: 00007f82d39b5fa0 R15: 00007ffe62efb5f8 [ 40.520648][ T928] [ 40.742940][ T36] audit: type=1400 audit(1753529275.740:281): avc: denied { watch watch_reads } for pid=929 comm="syz.2.192" path="/42/file0" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.981244][ T946] netlink: 'syz.1.197': attribute type 4 has an invalid length. [ 40.989011][ T946] netlink: 'syz.1.197': attribute type 21 has an invalid length. [ 40.996913][ T946] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.197'. [ 41.006580][ T946] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.059063][ T36] audit: type=1400 audit(1753529276.060:282): avc: denied { map } for pid=945 comm="syz.1.197" path="socket:[7659]" dev="sockfs" ino=7659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 41.089387][ T947] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 41.213779][ T36] audit: type=1400 audit(1753529276.210:283): avc: denied { create } for pid=948 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 41.294317][ T956] FAULT_INJECTION: forcing a failure. [ 41.294317][ T956] name failslab, interval 1, probability 0, space 0, times 0 [ 41.307817][ T956] CPU: 0 UID: 0 PID: 956 Comm: syz.0.200 Not tainted 6.12.38-syzkaller-g21fbbe6cf817 #0 3699ea59a0ce13608b0d0a890a5baf062d2929f8 [ 41.307854][ T956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 41.307867][ T956] Call Trace: [ 41.307874][ T956] [ 41.307882][ T956] __dump_stack+0x21/0x30 [ 41.307911][ T956] dump_stack_lvl+0x10c/0x190 [ 41.307935][ T956] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.307959][ T956] dump_stack+0x19/0x20 [ 41.307981][ T956] should_fail_ex+0x3d9/0x530 [ 41.308006][ T956] should_failslab+0xac/0x100 [ 41.308037][ T956] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 41.308065][ T956] ? security_context_to_sid_core+0xc8/0x590 [ 41.308093][ T956] kmemdup_nul+0x5a/0x1a0 [ 41.308117][ T956] security_context_to_sid_core+0xc8/0x590 [ 41.308143][ T956] ? __asan_memcpy+0x5a/0x80 [ 41.308166][ T956] ? avc_has_perm_noaudit+0x286/0x360 [ 41.308189][ T956] ? security_context_to_sid+0x60/0x60 [ 41.308215][ T956] ? __cfi_avc_has_perm+0x10/0x10 [ 41.308239][ T956] security_context_to_sid+0x35/0x60 [ 41.308264][ T956] selinux_inode_setxattr+0x673/0xaf0 [ 41.308292][ T956] ? putname+0x113/0x150 [ 41.308341][ T956] ? user_path_at+0x4c/0x60 [ 41.308358][ T956] ? path_setxattr+0x276/0x560 [ 41.308386][ T956] ? __cfi_selinux_inode_setxattr+0x10/0x10 [ 41.308418][ T956] security_inode_setxattr+0x1d1/0x290 [ 41.308447][ T956] __vfs_setxattr_locked+0x9e/0x240 [ 41.308479][ T956] vfs_setxattr+0x16c/0x2f0 [ 41.308501][ T956] ? __cfi_vfs_setxattr+0x10/0x10 [ 41.308525][ T956] ? mnt_want_write+0x321/0x510 [ 41.308545][ T956] path_setxattr+0x364/0x560 [ 41.308573][ T956] ? simple_xattrs_free+0x180/0x180 [ 41.308605][ T956] ? __cfi_ksys_write+0x10/0x10 [ 41.308632][ T956] __x64_sys_lsetxattr+0xc6/0xe0 [ 41.308657][ T956] x64_sys_call+0x2db8/0x2ee0 [ 41.308682][ T956] do_syscall_64+0x58/0xf0 [ 41.308704][ T956] ? clear_bhb_loop+0x50/0xa0 [ 41.308733][ T956] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.308759][ T956] RIP: 0033:0x7fb21498e9a9 [ 41.308775][ T956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.308791][ T956] RSP: 002b:00007fb215822038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 41.308812][ T956] RAX: ffffffffffffffda RBX: 00007fb214bb5fa0 RCX: 00007fb21498e9a9 [ 41.308827][ T956] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 41.308840][ T956] RBP: 00007fb215822090 R08: 0000000000000000 R09: 0000000000000000 [ 41.308853][ T956] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000001 [ 41.308865][ T956] R13: 0000000000000000 R14: 00007fb214bb5fa0 R15: 00007ffd6c81c488 [ 41.308880][ T956] [ 41.682120][ T36] audit: type=1400 audit(1753529276.680:284): avc: denied { read write } for pid=964 comm="syz.0.204" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 41.714213][ T36] audit: type=1400 audit(1753529276.680:285): avc: denied { open } for pid=964 comm="syz.0.204" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 41.745600][ T36] audit: type=1400 audit(1753529276.710:286): avc: denied { mount } for pid=966 comm="syz.2.205" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 41.780154][ T980] rust_binder: 137: no such ref 3 [ 41.791409][ T982] rust_binder: 216: no such ref 0 [ 41.791831][ T980] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 41.796930][ T982] rust_binder: 216: no such ref 3 [ 41.809012][ T982] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 41.824272][ T984] FAULT_INJECTION: forcing a failure. [ 41.824272][ T984] name failslab, interval 1, probability 0, space 0, times 0 [ 41.838970][ T984] CPU: 0 UID: 0 PID: 984 Comm: syz.3.210 Not tainted 6.12.38-syzkaller-g21fbbe6cf817 #0 3699ea59a0ce13608b0d0a890a5baf062d2929f8 [ 41.839006][ T984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 41.839019][ T984] Call Trace: [ 41.839026][ T984] [ 41.839034][ T984] __dump_stack+0x21/0x30 [ 41.839067][ T984] dump_stack_lvl+0x10c/0x190 [ 41.839093][ T984] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.839121][ T984] dump_stack+0x19/0x20 [ 41.839146][ T984] should_fail_ex+0x3d9/0x530 [ 41.839173][ T984] should_failslab+0xac/0x100 [ 41.839206][ T984] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 41.839237][ T984] ? security_context_to_sid_core+0xc8/0x590 [ 41.839268][ T984] kmemdup_nul+0x5a/0x1a0 [ 41.839296][ T984] security_context_to_sid_core+0xc8/0x590 [ 41.839326][ T984] ? cred_has_capability+0x281/0x380 [ 41.839347][ T984] ? security_context_to_sid+0x60/0x60 [ 41.839380][ T984] security_context_to_sid_force+0x37/0x50 [ 41.839426][ T984] selinux_inode_setxattr+0x6b6/0xaf0 [ 41.839460][ T984] ? putname+0x113/0x150 [ 41.839490][ T984] ? user_path_at+0x4c/0x60 [ 41.839509][ T984] ? path_setxattr+0x276/0x560 [ 41.839542][ T984] ? __cfi_selinux_inode_setxattr+0x10/0x10 [ 41.839580][ T984] security_inode_setxattr+0x1d1/0x290 [ 41.839612][ T984] __vfs_setxattr_locked+0x9e/0x240 [ 41.839640][ T984] vfs_setxattr+0x16c/0x2f0 [ 41.839667][ T984] ? __cfi_vfs_setxattr+0x10/0x10 [ 41.839693][ T984] ? mnt_want_write+0x321/0x510 [ 41.839716][ T984] path_setxattr+0x364/0x560 [ 41.839749][ T984] ? simple_xattrs_free+0x180/0x180 [ 41.839785][ T984] ? __cfi_ksys_write+0x10/0x10 [ 41.839817][ T984] __x64_sys_lsetxattr+0xc6/0xe0 [ 41.839845][ T984] x64_sys_call+0x2db8/0x2ee0 [ 41.839874][ T984] do_syscall_64+0x58/0xf0 [ 41.839899][ T984] ? clear_bhb_loop+0x50/0xa0 [ 41.839931][ T984] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.839961][ T984] RIP: 0033:0x7f7f1ff8e9a9 [ 41.839980][ T984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.839998][ T984] RSP: 002b:00007f7f20e43038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 41.840021][ T984] RAX: ffffffffffffffda RBX: 00007f7f201b5fa0 RCX: 00007f7f1ff8e9a9 [ 41.840036][ T984] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 41.840050][ T984] RBP: 00007f7f20e43090 R08: 0000000000000000 R09: 0000000000000000 [ 41.840063][ T984] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000001 [ 41.840076][ T984] R13: 0000000000000000 R14: 00007f7f201b5fa0 R15: 00007ffc9556aca8 [ 41.840093][ T984] [ 41.841422][ T986] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 41.849066][ T988] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 41.870634][ T986] rust_binder: Write failure EINVAL in pid:137 [ 41.871461][ T988] rust_binder: Write failure EINVAL in pid:216 [ 41.910158][ T990] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.149093][ T995] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.156219][ T995] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 42.196940][ T36] audit: type=1400 audit(1753529277.200:287): avc: denied { create } for pid=998 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.304933][ T1001] /dev/rnullb0: Can't open blockdev [ 42.661961][ T1013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:142 [ 42.668436][ T1015] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:221 [ 42.714536][ T1022] rust_binder: Write failure EFAULT in pid:146 [ 42.734584][ T1023] rust_binder: Error while translating object. [ 42.740947][ T1023] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 42.747569][ T1023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:221 [ 43.016074][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 43.076050][ T750] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 43.176042][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 43.182698][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.190999][ T1028] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.194471][ T1028] rust_binder: 158: no such ref 3 [ 43.200750][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.201301][ T1028] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 43.206161][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 43.216109][ T750] usb 2-1: device descriptor read/64, error -71 [ 43.223434][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 43.245678][ T1029] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 43.251309][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.258803][ T1029] rust_binder: Write failure EINVAL in pid:158 [ 43.268663][ T10] usb 3-1: config 0 descriptor?? [ 43.466083][ T750] usb 2-1: device descriptor read/64, error -71 [ 43.600541][ T1033] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227 [ 43.682737][ T10] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 43.699279][ T10] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 43.708936][ T10] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 43.716108][ T750] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 43.717381][ T10] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 43.731122][ T10] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 43.738402][ T10] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 43.745667][ T10] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 43.752970][ T10] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 43.760258][ T10] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 43.767541][ T10] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 43.774790][ T10] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 43.782140][ T10] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 43.791296][ T10] ================================================================== [ 43.799399][ T10] BUG: KASAN: slab-out-of-bounds in mon_bin_event+0x12c1/0x23e0 [ 43.807048][ T10] Read of size 2624 at addr ffff88810f715b41 by task kworker/0:1/10 [ 43.815049][ T10] [ 43.817376][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.12.38-syzkaller-g21fbbe6cf817 #0 3699ea59a0ce13608b0d0a890a5baf062d2929f8 [ 43.817399][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 43.817411][ T10] Workqueue: usb_hub_wq hub_event [ 43.817440][ T10] Call Trace: [ 43.817446][ T10] [ 43.817454][ T10] __dump_stack+0x21/0x30 [ 43.817481][ T10] dump_stack_lvl+0x10c/0x190 [ 43.817501][ T10] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.817521][ T10] ? __cfi__printk+0x10/0x10 [ 43.817545][ T10] print_address_description+0x71/0x220 [ 43.817562][ T10] print_report+0x4a/0x70 [ 43.817576][ T10] kasan_report+0x163/0x1a0 [ 43.817592][ T10] ? mon_bin_event+0x12c1/0x23e0 [ 43.817614][ T10] ? mon_bin_event+0x12c1/0x23e0 [ 43.817635][ T10] kasan_check_range+0x299/0x2a0 [ 43.817650][ T10] ? mon_bin_event+0x12c1/0x23e0 [ 43.817671][ T10] __asan_memcpy+0x31/0x80 [ 43.817692][ T10] mon_bin_event+0x12c1/0x23e0 [ 43.817715][ T10] ? mon_bin_complete+0x50/0x50 [ 43.817736][ T10] ? __kmalloc_noprof+0x1b1/0x450 [ 43.817757][ T10] ? __hid_request+0x1e5/0x410 [ 43.817778][ T10] ? hid_connect+0x49a/0x1a20 [ 43.817800][ T10] ? hid_hw_start+0xcb/0x160 [ 43.817822][ T10] ? ms_probe+0x194/0x460 [ 43.817842][ T10] ? __cfi_mon_bin_submit+0x10/0x10 [ 43.817863][ T10] mon_bin_submit+0x2b/0x40 [ 43.817883][ T10] mon_submit+0x1b9/0x230 [ 43.817901][ T10] usb_hcd_submit_urb+0x12d/0x1a20 [ 43.817918][ T10] ? bus_probe_device+0x18b/0x270 [ 43.817955][ T10] ? usb_probe_device+0x1d4/0x380 [ 43.817969][ T10] ? really_probe+0x2d6/0x890 [ 43.817983][ T10] ? __driver_probe_device+0x198/0x280 [ 43.818007][ T10] ? driver_probe_device+0x54/0x3f0 [ 43.818022][ T10] ? __device_attach_driver+0x2f1/0x4b0 [ 43.818037][ T10] usb_submit_urb+0x111b/0x1800 [ 43.818058][ T10] usb_start_wait_urb+0x11b/0x2f0 [ 43.818080][ T10] ? usb_api_blocking_completion+0xd0/0xd0 [ 43.818104][ T10] ? __kasan_kmalloc+0x96/0xb0 [ 43.818130][ T10] ? __kasan_check_write+0x18/0x20 [ 43.818150][ T10] ? usb_alloc_urb+0x9b/0x200 [ 43.818169][ T10] usb_control_msg+0x25a/0x490 [ 43.818191][ T10] usbhid_raw_request+0x457/0x590 [ 43.818212][ T10] __hid_request+0x1e5/0x410 [ 43.818234][ T10] hidinput_connect+0x241b/0x3340 [ 43.818253][ T10] hid_connect+0x49a/0x1a20 [ 43.818277][ T10] ? usbhid_start+0x1a67/0x2530 [ 43.818296][ T10] ? __cfi_hid_connect+0x10/0x10 [ 43.818320][ T10] hid_hw_start+0xcb/0x160 [ 43.818343][ T10] ms_probe+0x194/0x460 [ 43.818363][ T10] hid_device_probe+0x2c4/0x5d0 [ 43.818387][ T10] ? __cfi_hid_device_probe+0x10/0x10 [ 43.818411][ T10] really_probe+0x2d6/0x890 [ 43.818426][ T10] __driver_probe_device+0x198/0x280 [ 43.818451][ T10] driver_probe_device+0x54/0x3f0 [ 43.818466][ T10] ? __device_attach_driver+0x2db/0x4b0 [ 43.818489][ T10] __device_attach_driver+0x2f1/0x4b0 [ 43.818504][ T10] bus_for_each_drv+0x260/0x2f0 [ 43.818523][ T10] ? __cfi___device_attach_driver+0x10/0x10 [ 43.818538][ T10] ? __cfi_bus_for_each_drv+0x10/0x10 [ 43.818558][ T10] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 43.818579][ T10] __device_attach+0x2bd/0x3a0 [ 43.818603][ T10] ? device_attach+0x40/0x40 [ 43.818625][ T10] ? _raw_spin_lock+0x8c/0x120 [ 43.818643][ T10] ? __cfi__raw_spin_lock+0x10/0x10 [ 43.818662][ T10] device_initial_probe+0x1e/0x30 [ 43.818685][ T10] bus_probe_device+0x18b/0x270 [ 43.818705][ T10] device_add+0x80c/0xc00 [ 43.818729][ T10] hid_add_device+0x39b/0x560 [ 43.818753][ T10] usbhid_probe+0xde3/0x12b0 [ 43.818774][ T10] usb_probe_interface+0x696/0xc00 [ 43.818790][ T10] ? __cfi_usb_probe_interface+0x10/0x10 [ 43.818805][ T10] really_probe+0x2d6/0x890 [ 43.818819][ T10] __driver_probe_device+0x198/0x280 [ 43.818844][ T10] driver_probe_device+0x54/0x3f0 [ 43.818858][ T10] ? __device_attach_driver+0x2db/0x4b0 [ 43.818873][ T10] __device_attach_driver+0x2f1/0x4b0 [ 43.818889][ T10] bus_for_each_drv+0x260/0x2f0 [ 43.818908][ T10] ? __cfi___device_attach_driver+0x10/0x10 [ 43.818923][ T10] ? __cfi_bus_for_each_drv+0x10/0x10 [ 43.818942][ T10] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 43.818962][ T10] __device_attach+0x2bd/0x3a0 [ 43.818986][ T10] ? device_attach+0x40/0x40 [ 43.819009][ T10] ? _raw_spin_lock+0x8c/0x120 [ 43.819026][ T10] ? __cfi__raw_spin_lock+0x10/0x10 [ 43.819045][ T10] device_initial_probe+0x1e/0x30 [ 43.819069][ T10] bus_probe_device+0x18b/0x270 [ 43.819089][ T10] device_add+0x80c/0xc00 [ 43.819112][ T10] usb_set_configuration+0x1ad4/0x20b0 [ 43.819140][ T10] usb_generic_driver_probe+0x95/0x160 [ 43.819161][ T10] usb_probe_device+0x1d4/0x380 [ 43.819174][ T10] ? __cfi_usb_probe_device+0x10/0x10 [ 43.819188][ T10] really_probe+0x2d6/0x890 [ 43.819203][ T10] __driver_probe_device+0x198/0x280 [ 43.819229][ T10] driver_probe_device+0x54/0x3f0 [ 43.819243][ T10] ? __device_attach_driver+0x2db/0x4b0 [ 43.819258][ T10] __device_attach_driver+0x2f1/0x4b0 [ 43.819274][ T10] bus_for_each_drv+0x260/0x2f0 [ 43.819293][ T10] ? __cfi___device_attach_driver+0x10/0x10 [ 43.819308][ T10] ? __cfi_bus_for_each_drv+0x10/0x10 [ 43.819327][ T10] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 43.819347][ T10] __device_attach+0x2bd/0x3a0 [ 43.819371][ T10] ? device_attach+0x40/0x40 [ 43.819394][ T10] ? _raw_spin_lock+0x8c/0x120 [ 43.819411][ T10] ? __cfi__raw_spin_lock+0x10/0x10 [ 43.819430][ T10] device_initial_probe+0x1e/0x30 [ 43.819454][ T10] bus_probe_device+0x18b/0x270 [ 43.819479][ T10] device_add+0x80c/0xc00 [ 43.819503][ T10] usb_new_device+0x9ed/0x1590 [ 43.819527][ T10] ? __cfi_usb_new_device+0x10/0x10 [ 43.819550][ T10] hub_event+0x2c81/0x4270 [ 43.819582][ T10] ? __cfi_hub_event+0x10/0x10 [ 43.819606][ T10] ? __kasan_check_write+0x18/0x20 [ 43.819627][ T10] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 43.819650][ T10] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 43.819669][ T10] ? kick_pool+0xb9/0x550 [ 43.819684][ T10] process_scheduled_works+0x7d2/0x1020 [ 43.819710][ T10] worker_thread+0xc58/0x1250 [ 43.819736][ T10] kthread+0x2ca/0x370 [ 43.819750][ T10] ? __cfi_worker_thread+0x10/0x10 [ 43.819772][ T10] ? __cfi_kthread+0x10/0x10 [ 43.819786][ T10] ret_from_fork+0x67/0xa0 [ 43.819806][ T10] ? __cfi_kthread+0x10/0x10 [ 43.819819][ T10] ret_from_fork_asm+0x1a/0x30 [ 43.819843][ T10] [ 43.819849][ T10] [ 44.444037][ T10] Allocated by task 10: [ 44.448189][ T10] kasan_save_track+0x3e/0x80 [ 44.452879][ T10] kasan_save_alloc_info+0x40/0x50 [ 44.457992][ T10] __kasan_kmalloc+0x96/0xb0 [ 44.463032][ T10] __kmalloc_noprof+0x1b1/0x450 [ 44.467891][ T10] __hid_request+0xa9/0x410 [ 44.472427][ T10] hidinput_connect+0x241b/0x3340 [ 44.477473][ T10] hid_connect+0x49a/0x1a20 [ 44.481987][ T10] hid_hw_start+0xcb/0x160 [ 44.486413][ T10] ms_probe+0x194/0x460 [ 44.490572][ T10] hid_device_probe+0x2c4/0x5d0 [ 44.495431][ T10] really_probe+0x2d6/0x890 [ 44.499936][ T10] __driver_probe_device+0x198/0x280 [ 44.505231][ T10] driver_probe_device+0x54/0x3f0 [ 44.510264][ T10] __device_attach_driver+0x2f1/0x4b0 [ 44.515637][ T10] bus_for_each_drv+0x260/0x2f0 [ 44.520492][ T10] __device_attach+0x2bd/0x3a0 [ 44.525268][ T10] device_initial_probe+0x1e/0x30 [ 44.530303][ T10] bus_probe_device+0x18b/0x270 [ 44.535175][ T10] device_add+0x80c/0xc00 [ 44.539512][ T10] hid_add_device+0x39b/0x560 [ 44.544203][ T10] usbhid_probe+0xde3/0x12b0 [ 44.548813][ T10] usb_probe_interface+0x696/0xc00 [ 44.553931][ T10] really_probe+0x2d6/0x890 [ 44.558439][ T10] __driver_probe_device+0x198/0x280 [ 44.563735][ T10] driver_probe_device+0x54/0x3f0 [ 44.568760][ T10] __device_attach_driver+0x2f1/0x4b0 [ 44.574151][ T10] bus_for_each_drv+0x260/0x2f0 [ 44.579013][ T10] __device_attach+0x2bd/0x3a0 [ 44.583789][ T10] device_initial_probe+0x1e/0x30 [ 44.588833][ T10] bus_probe_device+0x18b/0x270 [ 44.593688][ T10] device_add+0x80c/0xc00 [ 44.598459][ T10] usb_set_configuration+0x1ad4/0x20b0 [ 44.603935][ T10] usb_generic_driver_probe+0x95/0x160 [ 44.609400][ T10] usb_probe_device+0x1d4/0x380 [ 44.614255][ T10] really_probe+0x2d6/0x890 [ 44.618759][ T10] __driver_probe_device+0x198/0x280 [ 44.624140][ T10] driver_probe_device+0x54/0x3f0 [ 44.629192][ T10] __device_attach_driver+0x2f1/0x4b0 [ 44.634570][ T10] bus_for_each_drv+0x260/0x2f0 [ 44.639424][ T10] __device_attach+0x2bd/0x3a0 [ 44.644220][ T10] device_initial_probe+0x1e/0x30 [ 44.649264][ T10] bus_probe_device+0x18b/0x270 [ 44.654124][ T10] device_add+0x80c/0xc00 [ 44.658463][ T10] usb_new_device+0x9ed/0x1590 [ 44.663233][ T10] hub_event+0x2c81/0x4270 [ 44.667666][ T10] process_scheduled_works+0x7d2/0x1020 [ 44.673226][ T10] worker_thread+0xc58/0x1250 [ 44.677918][ T10] kthread+0x2ca/0x370 [ 44.681987][ T10] ret_from_fork+0x67/0xa0 [ 44.686583][ T10] ret_from_fork_asm+0x1a/0x30 [ 44.691359][ T10] [ 44.693683][ T10] The buggy address belongs to the object at ffff88810f715b40 [ 44.693683][ T10] which belongs to the cache kmalloc-8 of size 8 [ 44.707387][ T10] The buggy address is located 1 bytes inside of [ 44.707387][ T10] allocated 7-byte region [ffff88810f715b40, ffff88810f715b47) [ 44.721272][ T10] [ 44.723600][ T10] The buggy address belongs to the physical page: [ 44.730024][ T10] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f715 [ 44.738872][ T10] flags: 0x4000000000000000(zone=1) [ 44.744076][ T10] page_type: f5(slab) [ 44.748077][ T10] raw: 4000000000000000 ffff888100041500 dead000000000100 dead000000000122 [ 44.756769][ T10] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000 [ 44.765346][ T10] page dumped because: kasan: bad access detected [ 44.771762][ T10] page_owner tracks the page as allocated [ 44.777470][ T10] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 111, tgid 111 (udevadm), ts 6380241371, free_ts 6380205123 [ 44.795991][ T10] post_alloc_hook+0x3b9/0x3f0 [ 44.800766][ T10] prep_new_page+0x1c/0x120 [ 44.805289][ T10] get_page_from_freelist+0x46bb/0x4750 [ 44.810865][ T10] __alloc_pages_noprof+0x30d/0x6c0 [ 44.816071][ T10] alloc_slab_page+0x6b/0x1f0 [ 44.820778][ T10] allocate_slab+0x69/0x440 [ 44.825297][ T10] ___slab_alloc+0x59a/0x8b0 [ 44.829906][ T10] __kmalloc_noprof+0x243/0x450 [ 44.834764][ T10] kernfs_fop_write_iter+0x16f/0x4d0 [ 44.840055][ T10] vfs_write+0x694/0xe80 [ 44.844304][ T10] ksys_write+0x141/0x250 [ 44.848638][ T10] __x64_sys_write+0x7f/0x90 [ 44.853235][ T10] x64_sys_call+0x271c/0x2ee0 [ 44.857918][ T10] do_syscall_64+0x58/0xf0 [ 44.862336][ T10] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.868239][ T10] page last free pid 111 tgid 111 stack trace: [ 44.874384][ T10] free_unref_page+0xae5/0xdd0 [ 44.879153][ T10] __free_pages+0x6b/0x3b0 [ 44.883568][ T10] free_pages+0x86/0x90 [ 44.887723][ T10] selinux_genfs_get_sid+0x209/0x2d0 [ 44.893013][ T10] inode_doinit_with_dentry+0x7f0/0xdd0 [ 44.898561][ T10] selinux_d_instantiate+0x2b/0x40 [ 44.903676][ T10] security_d_instantiate+0xb5/0xf0 [ 44.908879][ T10] d_splice_alias+0x71/0x3a0 [ 44.913473][ T10] kernfs_iop_lookup+0x2c6/0x320 [ 44.918406][ T10] path_openat+0x12fe/0x34b0 [ 44.922995][ T10] do_filp_open+0x1c6/0x3e0 [ 44.927501][ T10] do_sys_openat2+0x12c/0x1c0 [ 44.932187][ T10] __x64_sys_openat+0x13a/0x170 [ 44.937046][ T10] x64_sys_call+0xe69/0x2ee0 [ 44.941642][ T10] do_syscall_64+0x58/0xf0 [ 44.946057][ T10] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.951953][ T10] [ 44.954277][ T10] Memory state around the buggy address: [ 44.959989][ T10] ffff88810f715a00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 44.968046][ T10] ffff88810f715a80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 44.976103][ T10] >ffff88810f715b00: fa fc fc fc fa fc fc fc 07 fc fc fc fa fc fc fc [ 44.984154][ T10] ^ [ 44.990304][ T10] ffff88810f715b80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 44.998361][ T10] ffff88810f715c00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 45.006423][ T10] ================================================================== [ 45.014491][ T10] Disabling lock debugging due to kernel taint [ 45.026366][ T10] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 45.038437][ T10] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 45.054551][ T10] microsoft 0003:045E:07DA.0003: no inputs found [ 45.062058][ T10] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 45.076044][ T750] usb 2-1: device descriptor read/64, error -71 [ 45.082381][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 45.216066][ T45] usb 1-1: device descriptor read/64, error -71 [ 45.316059][ T750] usb 2-1: device descriptor read/64, error -71 [ 45.426147][ T750] usb usb2-port1: attempt power cycle [ 45.456109][ T45] usb 1-1: device descriptor read/64, error -71 [ 45.696037][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 45.766173][ T750] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 45.787149][ T750] usb 2-1: device descriptor read/8, error -71 [ 45.826036][ T45] usb 1-1: device descriptor read/64, error -71 [ 45.916618][ T750] usb 2-1: device descriptor read/8, error -71 [ 46.042393][ T10] usb 3-1: USB disconnect, device number 4 [ 46.066204][ T45] usb 1-1: device descriptor read/64, error -71 [ 46.176268][ T45] usb usb1-port1: attempt power cycle [ 46.516033][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 46.537141][ T45] usb 1-1: device descriptor read/8, error -71 [ 46.676714][ T45] usb 1-1: device descriptor read/8, error -71