last executing test programs:

1m28.045243573s ago: executing program 1 (id=692):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x1})
unshare(0x60000600)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x800007}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001180)=""/4056, 0xfd8}, {&(0x7f0000000540)=""/190, 0xbe}, {&(0x7f0000000000)=""/265, 0x109}, {&(0x7f0000000b40)=""/161, 0xa1}, {&(0x7f0000000780)=""/234, 0xea}, {&(0x7f0000000440)=""/97, 0x61}, {&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/124, 0x7c}, {&(0x7f00000003c0)=""/78, 0x4e}], 0x9}, 0x120b}], 0x3, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000140)=[@decrefs], 0x50, 0x0, &(0x7f0000000680)="46277d4c1d99824cf457998c39ba94f1730394382b65ea6e16e982037689b95865af045f9bf1858cd12f4a76fc241a57f2a794d3a61a31fa5a1b10b5c386f5c08f71ec12146f8200761ef6651a03dc38"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x1200, 0x2}, @flat=@weak_binder={0x77622a85, 0x100, 0x1}, @fda={0x66646185, 0x400003, 0x1, 0x1e}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

1m27.951108828s ago: executing program 1 (id=695):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @ra={0x94, 0x4, 0x1100}]}}}], 0x18}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
accept(0xffffffffffffffff, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000380)=0x80)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x36, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x4, 0x8, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x1000, 0x2, 0x9, 0x7c25, 0x6, 0xfffffffd, 0x2, 0x6, 0x7, 0x8, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x7, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x40, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0x4000a8a9, 0x2000006f, 0x8e, 0xd50, 0x9, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x2000, 0x400, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0xfffffffc, 0xfffffff8, 0x0, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000002, 0x3, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x7, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0xfff, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xb834, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x7, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x7, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afc, 0x40bfc, 0x8, 0x5, 0x7f, 0x2, 0x43, 0xff, 0x1005, 0x5, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x5, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0xfffffffd, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xe, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0x8, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000004082054c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240a0001ff23000c24030207030004000700810904740000010220000904010101010220"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00')
ioctl$NS_GET_NSTYPE(r7, 0x8004b709, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="140200001800010014bd7000fbdbdf251d000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4044800)

1m24.832491387s ago: executing program 1 (id=709):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)="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")
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x60, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r6) (async)
r7 = dup(r6)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r1, &(0x7f0000000280)={@val={0xa, 0x7}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @remote, [{0x4, 0x1, "f678b43915fc"}]}}}}}}}, 0x6a)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070900be0083000000000b09007a150b598c3dda"], 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') (async)
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') (async)
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002e80c1e10e80401a148040102031109021200011c0780fe0904"], 0xfffffffffffffffe)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10)
syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0)
ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000002c0)={[0xc, 0x404, 0xc, 0xdc, 0xfffffffffffffff7, 0x8000000800000001, 0x50, 0x10001, 0xb1d, 0x4000000000000008, 0xffff, 0x1081, 0x3, 0x986, 0xe5, 0x8], 0x10000, 0x3837c2}) (async)
ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000002c0)={[0xc, 0x404, 0xc, 0xdc, 0xfffffffffffffff7, 0x8000000800000001, 0x50, 0x10001, 0xb1d, 0x4000000000000008, 0xffff, 0x1081, 0x3, 0x986, 0xe5, 0x8], 0x10000, 0x3837c2})
ioctl$KVM_RUN(r10, 0xae80, 0x0)

1m22.562662035s ago: executing program 1 (id=721):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000140)=0x10000)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000010c0)=ANY=[@ANYBLOB="7c010000190001000000000000000000fe880000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000ffffffffffffffff0000000000000000000a0000000000000000000000804000000000000000000800000000000000000100020000000000c4000500ac1414bb000000000000000000000000000004d5330000000a00000000000000000000000000ffffe00000020000000000020700000000000000008001020000ff010000000000000000000000000001000004d46c0000000a0000000a0101000000000000000000000000000135000009"], 0x17c}}, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
syz_usb_connect$uac3(0x3, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000406307312040000102030109026e000301018005080b0001010130040904000000ff0130000a2401060a00060000000904010000010230000904010101010230000905010908000610040a25250000000007599f090402000001023000090402010101023000090582"], 0x0)
write$FUSE_INIT(r1, &(0x7f0000001dc0)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) (async)
write$FUSE_INIT(r1, &(0x7f0000001dc0)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50)
statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) (async)
statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0)
syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7fc, {0x3, 0x0, 0xea, 0x57e, 0x8, 0x6, {0x4, 0x4000000, 0xbffffffffffffff8, 0x8, 0x3, 0x80, 0xfffffffe, 0x5b, 0x1, 0x8000, 0x4, r4, r5, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0)

1m19.605403299s ago: executing program 1 (id=735):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2})
r2 = getpid()
write$cgroup_pid(r1, &(0x7f0000000080)=r2, 0x12)

1m19.47766354s ago: executing program 1 (id=736):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf8, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xf7c9d43b, @mcast1, 0x81}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa8}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9ea}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000200)=0x3) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', <r3=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg2\x00', <r4=>0x0}) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={<r6=>0x0, @multicast1, @local}, &(0x7f0000000400)=0xc) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r7=>0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', <r8=>0x0, 0x2f, 0xa, 0x2, 0x6e, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1, 0x7, 0x8, 0x8, 0x2}})
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x158, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf2fbfc3b0fc46d53}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x200000c0}, 0x44110) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r9, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=@newtclass={0x60, 0x28, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xd, 0xd}, {0xfff1, 0x5}, {0x5, 0x5}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x3}}}, @c_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x7, 0x1, 0x15, 0x0, 0x4, 0xfffffff8, 0x2, 0x61a}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(r10, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x68a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER={0x8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c8c5}, 0x40041) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000009c0)={'gre0\x00', <r11=>0x0}) (async)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r12, 0x300, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040805}, 0x4000015) (async)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r13, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x5) (async)
r14 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_RUN(r14, 0xae80, 0x0) (async)
r15 = accept$packet(0xffffffffffffffff, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000cc0)=0x14)
setsockopt$packet_add_memb(r15, 0x107, 0x1, &(0x7f0000000d00)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x10)
r16 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e40)={'syztnl0\x00', &(0x7f0000000d40)={'tunl0\x00', <r17=>r5, 0x7, 0x8000, 0x1, 0xffff45a0, {{0x30, 0x4, 0x3, 0x5, 0xc0, 0x66, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@timestamp={0x44, 0x20, 0xe0, 0x0, 0x3, [0x2, 0x200, 0x80000001, 0xffffffff, 0x4a, 0x4c2ace8b, 0xee14]}, @cipso={0x86, 0x34, 0x1, [{0x2, 0xe, "71e22770d386fd2f65d42b79"}, {0x6, 0x5, "434cef"}, {0x1, 0xe, "c849be72f993c8581ac713db"}, {0x2, 0xd, "e1e895512a6e3f3a761460"}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x13, 0x3, 0x5, [{@multicast1, 0x170}]}, @timestamp_addr={0x44, 0x1c, 0xbc, 0x1, 0x9, [{@local, 0x9}, {@remote, 0xcd0}, {@broadcast, 0x7}]}, @ssrr={0x89, 0x1f, 0x41, [@multicast2, @loopback, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xb, 0xf2, [@empty, @multicast1]}]}}}}})
ioctl$sock_inet6_SIOCADDRT(r16, 0x890b, &(0x7f0000000e80)={@private0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5, 0x6, 0xfff, 0x80, 0x8, 0x200000, r17}) (async)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f0000000f00)={0x7, 0x6, 0x5, 0x4}, 0x10)
setsockopt$packet_add_memb(r14, 0x107, 0x1, &(0x7f0000000f40)={r11, 0x1, 0x6}, 0x10)

1m19.439512166s ago: executing program 32 (id=736):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf8, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xf7c9d43b, @mcast1, 0x81}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa8}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9ea}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000200)=0x3) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', <r3=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg2\x00', <r4=>0x0}) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={<r6=>0x0, @multicast1, @local}, &(0x7f0000000400)=0xc) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r7=>0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', <r8=>0x0, 0x2f, 0xa, 0x2, 0x6e, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1, 0x7, 0x8, 0x8, 0x2}})
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x158, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf2fbfc3b0fc46d53}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x200000c0}, 0x44110) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r9, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=@newtclass={0x60, 0x28, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xd, 0xd}, {0xfff1, 0x5}, {0x5, 0x5}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x3}}}, @c_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x7, 0x1, 0x15, 0x0, 0x4, 0xfffffff8, 0x2, 0x61a}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(r10, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x68a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER={0x8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c8c5}, 0x40041) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000009c0)={'gre0\x00', <r11=>0x0}) (async)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r12, 0x300, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040805}, 0x4000015) (async)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r13, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x5) (async)
r14 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_RUN(r14, 0xae80, 0x0) (async)
r15 = accept$packet(0xffffffffffffffff, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000cc0)=0x14)
setsockopt$packet_add_memb(r15, 0x107, 0x1, &(0x7f0000000d00)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x10)
r16 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e40)={'syztnl0\x00', &(0x7f0000000d40)={'tunl0\x00', <r17=>r5, 0x7, 0x8000, 0x1, 0xffff45a0, {{0x30, 0x4, 0x3, 0x5, 0xc0, 0x66, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@timestamp={0x44, 0x20, 0xe0, 0x0, 0x3, [0x2, 0x200, 0x80000001, 0xffffffff, 0x4a, 0x4c2ace8b, 0xee14]}, @cipso={0x86, 0x34, 0x1, [{0x2, 0xe, "71e22770d386fd2f65d42b79"}, {0x6, 0x5, "434cef"}, {0x1, 0xe, "c849be72f993c8581ac713db"}, {0x2, 0xd, "e1e895512a6e3f3a761460"}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x13, 0x3, 0x5, [{@multicast1, 0x170}]}, @timestamp_addr={0x44, 0x1c, 0xbc, 0x1, 0x9, [{@local, 0x9}, {@remote, 0xcd0}, {@broadcast, 0x7}]}, @ssrr={0x89, 0x1f, 0x41, [@multicast2, @loopback, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xb, 0xf2, [@empty, @multicast1]}]}}}}})
ioctl$sock_inet6_SIOCADDRT(r16, 0x890b, &(0x7f0000000e80)={@private0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5, 0x6, 0xfff, 0x80, 0x8, 0x200000, r17}) (async)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f0000000f00)={0x7, 0x6, 0x5, 0x4}, 0x10)
setsockopt$packet_add_memb(r14, 0x107, 0x1, &(0x7f0000000f40)={r11, 0x1, 0x6}, 0x10)

5.34156845s ago: executing program 0 (id=1309):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0xfffffff8, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

5.28058047s ago: executing program 0 (id=1310):
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000600)='tasks\x00', 0x2, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0x0, 0x0)
r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000000000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_vmload={0x182, 0x18, 0x1}]})
ioctl$KVM_RUN(r6, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000000000000c0000000c00018008000100", @ANYRES32=r9, @ANYBLOB="3b4003801c000380276564766176655f310000000000"], 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x20000050)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r10, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c)
setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000})
openat(0xffffffffffffff9c, 0x0, 0x42, 0x85)
read$FUSE(r0, 0x0, 0xfffffffffffffcd0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @private2, 0xfffffffc}}, 0x0, 0x0, 0x3f, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="bc0000003f42c30100dfb737847072cfb661d8353434ff61a232fccf851ed23492dc963ba850a5cbebb295a3a0ed7ebad814c727a999bfcdeebff16530aa6ce06dff9d31b66498f3b975f507470f576014525eb47f577793af116c58e297314a4677e9d3f760246e6a74f228dd1563fbc8df6376fad44040ee0000000000000000000000f9c8c9e33aba5e10d9935ca31c454362c80dd4f1222c02e5b7a834de7fa6625492785c4860d36007f5267ea5e2083c704f6d686fa3a9bad13e78aa14e71efd15445fd13aafb6a89bc26f80598dec92ad404c3838ec572f00", @ANYRES16=r8, @ANYRES64=r2, @ANYRESOCT=r7, @ANYBLOB="1400020070696d7265671400020076657468315f746f5f626174616476001400020069705f76746930004915ad280fc208c78a5c5c070000000000000000080003000200000008000300070000002000018008000300010000001400020068737230000000000000000000000000050002000400"], 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x14)
sendto$inet6(r10, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x4e21, 0x4a15f, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={<r11=>0xffffffffffffffff, 0x1})
close_range(r11, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r12, 0x107, 0xa, 0x0, 0x0)
getpid()

5.266355172s ago: executing program 0 (id=1311):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x4a)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31070000380000000e0001"], 0x3c}, 0x1, 0x2, 0x0, 0x1bb5818a4d175af}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x4a) (async)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31070000380000000e0001"], 0x3c}, 0x1, 0x2, 0x0, 0x1bb5818a4d175af}, 0x40) (async)

5.253100295s ago: executing program 0 (id=1312):
unshare(0x62040200)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000014000100000000000000fe00020000000400000014000900ff01000600000000000000000000000115000280bf"], 0x44}}, 0x0)

5.168370898s ago: executing program 0 (id=1313):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e0009"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x1, 0x92, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x2, 0x1, 0x6, 0x0, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "a28cf492"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0x1, 0x9}, {0x6, 0x24, 0x1a, 0x3, 0x2}, [@acm={0x4, 0x24, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0xf8c5, 0x4, 0x41ba}, @acm={0x4}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x3ff, 0x0, 0xff, 0x1, 0x7}, @acm={0x4, 0x24, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x8a, 0x6, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x86, 0x1, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0x9, 0xb2}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x200, 0xf0, 0x5, 0x7f, 0xff, 0x8}, 0x41, &(0x7f0000000680)={0x5, 0xf, 0x41, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x953, 0xf000, 0x6, [0xff30]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x11}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2a, "d160ba3e09c2d618778f53d7b22fb58f"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x12, 0xa9, 0x7, 0x6, 0xfa}]}, 0x1, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0c}}]})
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)
syz_usb_control_io$uac3(r1, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x20, 0x4, 0xa2, {0xa2, 0x24, "44372c7f6a67901836ff9ac1ee062e8147324afd895ba86c8ad6d9ddfd5ee7990cd2681238f2f7622a728a10dc90b01818af2964324b173e417d28c10573bdd22eb7ec3d508dabaade3a3feb63230d7955c0a1e57e0f52b350e19569ba5c64ee176ecedc4ed100db090757e728f7f78f7ee3deb2bad930699feafb60430eac2c7b720ffe35962f6b7916b892f13253310bb38194cff37934b2cbce734e7a9ddc"}}, 0x0}, 0x0)
r6 = syz_usb_connect$cdc_ecm(0x2, 0x90, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x1, 0x1, 0x9, 0x20, 0x1, "", [{{0x9, 0x4, 0x0, 0xe2, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x9, 0x24, 0x6, 0x0, 0x0, "caa7aa45"}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x5}, [@mdlm={0x15}, @ncm={0x6, 0x24, 0x1a, 0x6, 0x3}, @country_functional={0x10, 0x24, 0x7, 0xc, 0x7, [0x7, 0x7, 0x9, 0x0, 0x6]}, @ncm={0x6, 0x24, 0x1a, 0xfff7}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xf}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x6, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x7f, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7f, 0x7}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x1, 0x6, 0x40, 0xff, 0x71}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5, 0xb8, 0x1b04}]}, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2001}}, {0x9, &(0x7f00000002c0)=@string={0x9, 0x3, "67198adc1dc61c"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2801}}, {0xae, &(0x7f0000000380)=@string={0xae, 0x3, "3eb0007e621fc4e541dafc0c0f99a92d16cc9271a644d794addeaefe9419299f77297aece9f7f74efc0ab3282d279c84b0a734d13eef33a18e6e51b79c22bf6e504c87b7c71b4e9ce07bb3c5bf920811154c2e05574210159a208fe0c4ca8dbeab36879c4a05bc25dc4dbc98b866beb830683925a17fcec3ec7d6bfa08cb7e02803f2b288d142a7642430eabe6da885321021440c1ea575871ae179b076cc4972384575ad2c91bc56b5f2fc7"}}]})
syz_usb_disconnect(r6)

2.180343967s ago: executing program 0 (id=1338):
msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xf5e8d0b131c6a560) (async)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001500)=ANY=[@ANYBLOB="12010000000000407d1ef62c0000000000010902240001000000000904000001038dc30009210000000122070009058103"], 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x180, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x31}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x84, 0xbe, "e35e2fb4db72fb313de4844297782bb0d5e0bc1690fc8e20bea4b74122d0a476a098f644290e0c852a9faa3c162cd8542fb17d45205686a113285dc2083a1f73844eae922f4350f1d0ce7d3a43cfdda35d049eab90107facb1508bb3136b2fd471ea95c766c998f3ce81c233b3a6946e2ca9af02c8cfaa62ca6f3494318dcccb"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x2f0d]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x9a, 0xbe, "413f7134a6fc2fd57dc6b85ca81068051edc850d7c94972294c4775b1bcb49ebed68a3c1ceb876bb430054c12072c4f4a72de13acf686208e45ff75312122170e3e6ec1fdff23e1f2fdc785f9ea5c4cd2b29212bac4c2ca62003d60c69d3140ba653890aeff813c1d02b3060afdaada46f3502d102ff8345a36c29b036a37fa37aaf393d8c8cff9df7d612c3cb87101d8433b93181ae"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x952d}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x3ca}]}, 0x180}, 0x1, 0x0, 0x0, 0x10}, 0x44011)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='@!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0)

1.933524688s ago: executing program 3 (id=1344):
openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/20, 0x14}, {&(0x7f0000000000)=""/56, 0x9}, {&(0x7f0000001500)=""/250, 0xfa}, {&(0x7f0000000100)=""/97, 0x61}, {&(0x7f0000000200)=""/272, 0xf7}], 0x6}, 0xbe5a}], 0x1, 0x7ffead40, 0x0)
close(0x3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
userfaultfd(0x80001)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)

1.86032699s ago: executing program 3 (id=1346):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590)
r1 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x3, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x1d, 0x0, 0x1, {0x22, 0x2a}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x83, 0x6e, 0xc5}}}}}]}}]}}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100096000d0c100000000000224e0000", 0x58}], 0x1)
ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000600), 0x3)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "850100", "daf9af4a", "747aaaaf941f267e"}, 0x28)
unshare(0x6020400)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x4, &(0x7f0000000240)=@gcm_256={{0x303}, "f03c46d1a5685510", "24f186288f5204f09ad91a4ab8efe97e1fc8676fd442490a59d92512920f7812", "4dca9bcc", "d4f489db88efb71a"}, 0x1)
syz_open_procfs(r2, &(0x7f00000000c0)='net/rt_acct\x00')
keyctl$set_reqkey_keyring(0xe, 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
setuid(0xee01)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)=0x20)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

1.374314011s ago: executing program 3 (id=1357):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000080)=[@rdmsr={0x66, 0x18, {0x28f}}], 0x18})
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28})
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f00000001c0)=0x8000000000000000)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000640)=@vmx={0x9, 0x0, 0x2080, {0x4000, 0x3000, {}, 0x1, 0x6}, {"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", "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"}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.26463277s ago: executing program 4 (id=1359):
r0 = syz_usb_connect$hid(0x0, 0xffffffffffffffed, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201010200000020a71e070900000000000109020600000000000000040081090300010009210000000122240009058103ff03200aff"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd600000001090224000100000000090400000103000100092101010001"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001e40), 0x802, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, 0x0)
r4 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
dup3(r1, 0xffffffffffffffff, 0x0)
r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40})
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x7fffffffffffffff, 0xb, 0x3, 0x20000ceb, 0x4, 0x9, 0x10, 0x7, 0x8000000000000000, 0x77, 0xffffffffffdf986a, 0x3, 0x5, 0x2, 0x40000], 0x0, 0x2})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

1.26396519s ago: executing program 3 (id=1360):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd})
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0xa5, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000600)='tasks\x00', 0x2, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f00000000c0)={{0xd000, 0x7000, 0x10, 0x1, 0x0, 0x8, 0x4, 0x6, 0x9, 0x4c, 0x6, 0x2}, {0x7000, 0xfec00000, 0x3, 0x0, 0x27, 0x8, 0x6, 0x2, 0x9, 0xa, 0x6, 0x4}, {0x2000, 0x200000, 0x4, 0x6, 0x5, 0x10, 0x2, 0xd, 0x9, 0x50, 0x7, 0x80}, {0xeeee0000, 0x200000, 0x8, 0x9, 0xbe, 0x6, 0x9, 0x8e, 0x4, 0x3, 0x10, 0x8}, {0x58000, 0xffffffff, 0x0, 0xfb, 0x1, 0xd0, 0x7, 0xf2, 0x6, 0x7, 0x8, 0x5}, {0x1, 0x200000, 0x4, 0x7, 0xe, 0x7f, 0x9, 0x8, 0x6, 0x70, 0x4, 0x6a}, {0x100000, 0x25000, 0xf, 0x3, 0x4, 0x9, 0x5, 0x0, 0x1, 0x3, 0x4, 0xe}, {0x8000000, 0x2000, 0x0, 0x99, 0x3, 0x6, 0xe6, 0xd, 0xa, 0x10, 0x5, 0xb7}, {0x8080000, 0xfffd}, {0x200000}, 0x40000, 0x0, 0x40000, 0x84, 0x2, 0x2c00, 0x6000, 0x0, [0x2, 0xbac, 0x4, 0x8]})
r4 = getpid()
write$cgroup_pid(r2, &(0x7f0000000080)=r4, 0x12)

1.20329558s ago: executing program 3 (id=1361):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
syz_usb_connect$uac1(0x5, 0x9d, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3042, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x6, 0x28, 0xb2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xd, 0x1, 0xba, 0xec, "8a737efb"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x5, 0x59, 0x8, "b0533f", "8127"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xfff7, 0x0, 0x3, "7435c422034642a181"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1, 0x64, 0x7, {0x7, 0x25, 0x1, 0x0, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xf7, 0x51, 0x1, {0x7, 0x25, 0x1, 0x4, 0x8, 0x9}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x2c, 0x5, 0x0, 0x20, 0xe}, 0x2d, &(0x7f00000002c0)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "bce94f8374c388e998b85b6ba9238c30"}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "61a1428f2476dda10c32aca58de4401f"}]}, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x420}}]})

487.700399ms ago: executing program 2 (id=1362):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001200010101000000000000000000000008000000", @ANYRES32, @ANYBLOB="0c000080080031001caff8c2"], 0x28}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x58, 0x1, 0x2, 0x701, 0x0, 0x0, {0x5}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000044}, 0x24040881)

352.777601ms ago: executing program 2 (id=1363):
unshare(0x62040200)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001400010000000000000a0000020000000400000014000900ff01000600000000000000000000000115000280bf"], 0x44}}, 0x0)

240.55415ms ago: executing program 2 (id=1364):
openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/20, 0x14}, {&(0x7f0000000000)=""/56, 0x9}, {&(0x7f0000001500)=""/250, 0xfa}, {&(0x7f0000000100)=""/97, 0x61}, {&(0x7f0000000200)=""/272, 0xf7}], 0x6}, 0xbe5a}], 0x1, 0x7ffead40, 0x0)
close(0x3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
userfaultfd(0x80001)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)

238.651491ms ago: executing program 2 (id=1365):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x2000c8c0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000005000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="f20f11bb0b0036f20f1aaf070066b8010000000f01d966b8628900000f23d80f21f86635c00000300f23f86766c7442400000000006766c7442402d587dda56766c744240600000000670f0114240f080fa90f015c08f30f1c810600b8b0000f00d8", 0x62}], 0x1, 0xc, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

217.322224ms ago: executing program 2 (id=1366):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x4000, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x1200, 0x2}, @flat=@weak_binder={0x77622a85, 0x100, 0x1}, @fda={0x66646185, 0x400003, 0x1, 0x1e}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

201.492306ms ago: executing program 2 (id=1367):
syz_usb_connect$cdc_ncm(0x5, 0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102020000082505a1a4400001020304090286000201df40010904000001020d00000524"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0})

120.41369ms ago: executing program 4 (id=1368):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000080)=[@rdmsr={0x66, 0x18, {0x28f}}], 0x18})
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28})
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f00000001c0)=0x8000000000000000)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000640)=@vmx={0x9, 0x0, 0x2080, {0x4000, 0x3000, {}, 0x1, 0x6}, {"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", "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"}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

72.672348ms ago: executing program 4 (id=1369):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) (async)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r2, &(0x7f00000016c0)=[{{&(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=[@rthdr_2292={{0x28, 0x29, 0x39, {0xff, 0x2, 0x2, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @rthdr={{0x18, 0x29, 0x39, {0x33212f25b1bd33bf, 0x0, 0x2, 0x7}}}], 0x40}}], 0x1, 0x4040084) (async)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f00000004c0)=0x2)

60.25306ms ago: executing program 4 (id=1370):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x200000000000000, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

615.52µs ago: executing program 4 (id=1371):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2})
r2 = getpid()
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x7fffffffffffffff, 0x1fd})
write$cgroup_pid(r1, &(0x7f0000000080)=r2, 0x12)

314.74µs ago: executing program 4 (id=1372):
mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x7ff)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
sendto$inet(r1, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x3)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x12, r0, 0xe849000)
ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000080)={'macvlan0\x00', {0x2, 0x0, @multicast2}})
madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
open(&(0x7f0000000100)='./bus\x00', 0x143143, 0x0)

0s ago: executing program 3 (id=1373):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
r4 = dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000500)=[@clear_death={0x40106308}], 0x0, 0x0, 0x0})
r5 = socket(0x10, 0xa, 0x9)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600010a000000000000000003000000040000000c000a002f53e6386c2a8200"], 0x24}}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x200, 0x2}, @flat=@weak_binder={0x77622a85, 0x100, 0x1}, @fda={0x66646185, 0x400003, 0x1, 0x1e}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

rface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  192.599388][ T3490] netlink: 'syz.0.1115': attribute type 2 has an invalid length.
[  192.610763][  T454] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  192.620925][   T10] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  192.632413][  T454] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  192.641726][  T454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.649834][  T454] usb 5-1: Product: syz
[  192.654467][  T454] usb 5-1: Manufacturer: syz
[  192.659150][  T454] usb 5-1: SerialNumber: syz
[  192.673084][  T454] usb 5-1: config 0 descriptor??
[  192.678439][ T3471] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  192.691624][ T3471] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  192.718495][ T3495] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  192.752918][   T10] usb 4-1: device descriptor read/64, error -71
[  192.827881][   T36] audit: type=1400 audit(1776236805.394:652): avc:  denied  { accept } for  pid=3501 comm="syz.0.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  192.900553][ T3471] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  192.907943][ T3471] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  193.002786][   T10] usb 4-1: device descriptor read/64, error -71
[  193.117287][  T454] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  193.127695][  T454] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  193.137490][  T454] asix 5-1:0.251: probe with driver asix failed with error -5
[  193.149377][  T454] usb 5-1: USB disconnect, device number 23
[  193.242832][   T10] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[  193.282353][ T3507] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1121'.
[  193.282358][   T36] audit: type=1400 audit(1776236805.844:653): avc:  denied  { nlmsg_read } for  pid=3506 comm="syz.2.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  193.317108][   T36] audit: type=1400 audit(1776236805.884:654): avc:  denied  { ioctl } for  pid=3506 comm="syz.2.1121" path="socket:[34530]" dev="sockfs" ino=34530 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  193.372819][   T10] usb 4-1: device descriptor read/64, error -71
[  193.422005][ T3510] kvm_intel: kvm [3509]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x2
[  193.432005][   T36] audit: type=1400 audit(1776236805.994:655): avc:  denied  { create } for  pid=3509 comm="syz.2.1122" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[  193.486906][ T3513] sock: sock_set_timeout: `syz.2.1123' (pid 3513) tries to set negative timeout
[  193.496921][   T36] audit: type=1400 audit(1776236806.064:656): avc:  denied  { read write } for  pid=3512 comm="syz.2.1123" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  193.521680][   T36] audit: type=1400 audit(1776236806.064:657): avc:  denied  { open } for  pid=3512 comm="syz.2.1123" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  193.567030][ T3517] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3517 comm=syz.2.1125
[  193.614297][   T10] usb 4-1: device descriptor read/64, error -71
[  193.722907][   T10] usb usb4-port1: attempt power cycle
[  194.072862][   T10] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[  194.094025][   T10] usb 4-1: device descriptor read/8, error -71
[  194.175763][ T3531] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  194.224274][   T10] usb 4-1: device descriptor read/8, error -71
[  194.240880][ T3534] rust_binder: Error in use_page_slow: ESRCH
[  194.240961][ T3534] rust_binder: use_range failure ESRCH
[  194.247332][ T3534] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false
[  194.253206][ T3534] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  194.261428][ T3534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:365
[  194.294137][ T3536] SELinux: ebitmap: truncated map
[  194.308591][ T3536] SELinux: failed to load policy
[  194.314069][ T3536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1133'.
[  194.400976][ T3541] FAULT_INJECTION: forcing a failure.
[  194.400976][ T3541] name failslab, interval 1, probability 0, space 0, times 0
[  194.414121][ T3541] CPU: 0 UID: 0 PID: 3541 Comm: syz.2.1135 Not tainted syzkaller #0 6519e46a2ad0e7da7eb9d1859c66c62b15485067
[  194.414154][ T3541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  194.414168][ T3541] Call Trace:
[  194.414175][ T3541]  <TASK>
[  194.414185][ T3541]  __dump_stack+0x21/0x30
[  194.414221][ T3541]  dump_stack_lvl+0x140/0x1c0
[  194.414253][ T3541]  ? __cfi_dump_stack_lvl+0x10/0x10
[  194.414276][ T3541]  dump_stack+0x19/0x20
[  194.414295][ T3541]  should_fail_ex+0x3d7/0x530
[  194.414317][ T3541]  should_failslab+0xac/0x100
[  194.414333][ T3541]  __kmalloc_node_track_caller_noprof+0x68/0x4f0
[  194.414364][ T3541]  ? __kasan_check_write+0x18/0x20
[  194.414389][ T3541]  ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x84c/0x1d80
[  194.414420][ T3541]  krealloc_noprof+0x8d/0x130
[  194.414444][ T3541]  _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x84c/0x1d80
[  194.414472][ T3541]  ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10
[  194.414502][ T3541]  ? avc_has_perm_noaudit+0x26c/0x360
[  194.414526][ T3541]  ? __asan_memcpy+0x5a/0x80
[  194.414548][ T3541]  ? __kasan_check_write+0x18/0x20
[  194.414569][ T3541]  ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x155/0x4a0
[  194.414612][ T3541]  ? is_bpf_text_address+0x17b/0x1a0
[  194.414635][ T3541]  ? kernel_text_address+0xa9/0xe0
[  194.414655][ T3541]  ? __kernel_text_address+0x11/0x40
[  194.414675][ T3541]  ? unwind_get_return_address+0x51/0x90
[  194.414695][ T3541]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  194.414712][ T3541]  ? arch_stack_walk+0x10a/0x170
[  194.414738][ T3541]  ? stack_trace_save+0xaa/0x100
[  194.414754][ T3541]  ? stack_depot_save_flags+0x38/0x800
[  194.414777][ T3541]  ? kasan_save_stack+0x4d/0x60
[  194.414800][ T3541]  ? kasan_save_stack+0x3e/0x60
[  194.414824][ T3541]  ? __kasan_record_aux_stack+0xb2/0xd0
[  194.414844][ T3541]  ? kasan_record_aux_stack_noalloc+0xf/0x20
[  194.414865][ T3541]  _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x3e3/0x5c20
[  194.414886][ T3541]  ? _raw_spin_trylock+0xb5/0x140
[  194.414910][ T3541]  ? __cfi__raw_spin_trylock+0x10/0x10
[  194.414934][ T3541]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  194.414961][ T3541]  ? _raw_spin_unlock+0x45/0x60
[  194.414984][ T3541]  ? call_rcu_nocb+0x6d7/0xc80
[  194.415005][ T3541]  ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10
[  194.415027][ T3541]  ? swake_up_one_online_ipi+0x30/0x30
[  194.415049][ T3541]  ? __cfi_mt_free_rcu+0x10/0x10
[  194.415075][ T3541]  ? is_bpf_text_address+0x17b/0x1a0
[  194.415098][ T3541]  ? kernel_text_address+0xa9/0xe0
[  194.415118][ T3541]  ? __kernel_text_address+0x11/0x40
[  194.415137][ T3541]  ? unwind_get_return_address+0x51/0x90
[  194.415160][ T3541]  ? is_bpf_text_address+0x17b/0x1a0
[  194.415181][ T3541]  ? kernel_text_address+0xa9/0xe0
[  194.415201][ T3541]  ? __kernel_text_address+0x11/0x40
[  194.415220][ T3541]  ? unwind_get_return_address+0x51/0x90
[  194.415239][ T3541]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  194.415256][ T3541]  ? arch_stack_walk+0x10a/0x170
[  194.415283][ T3541]  ? is_bpf_text_address+0x17b/0x1a0
[  194.415305][ T3541]  ? kernel_text_address+0xa9/0xe0
[  194.415325][ T3541]  ? __kernel_text_address+0x11/0x40
[  194.415350][ T3541]  ? unwind_get_return_address+0x51/0x90
[  194.415368][ T3541]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  194.415385][ T3541]  ? arch_stack_walk+0x10a/0x170
[  194.415411][ T3541]  ? stack_depot_save_flags+0x38/0x800
[  194.415432][ T3541]  ? stack_trace_save+0xaa/0x100
[  194.415449][ T3541]  ? kasan_save_track+0x4f/0x80
[  194.415472][ T3541]  ? kasan_save_track+0x3e/0x80
[  194.415496][ T3541]  ? kasan_save_alloc_info+0x40/0x50
[  194.415516][ T3541]  ? __kasan_slab_alloc+0x73/0x90
[  194.415530][ T3541]  ? kmem_cache_alloc_noprof+0x1bf/0x410
[  194.415553][ T3541]  ? security_inode_alloc+0x51/0x230
[  194.415577][ T3541]  ? inode_init_always_gfp+0x756/0x9e0
[  194.415592][ T3541]  ? alloc_inode+0xc5/0x270
[  194.415608][ T3541]  ? new_inode+0x25/0x1e0
[  194.415623][ T3541]  ? proc_pid_make_inode+0x25/0x140
[  194.415647][ T3541]  ? proc_pident_instantiate+0x6d/0x2c0
[  194.415662][ T3541]  ? proc_pident_lookup+0x1c7/0x270
[  194.415677][ T3541]  ? proc_tid_base_lookup+0x2f/0x40
[  194.415696][ T3541]  ? path_openat+0x1315/0x34f0
[  194.415713][ T3541]  ? do_filp_open+0x1f5/0x440
[  194.415729][ T3541]  ? do_sys_openat2+0x134/0x1d0
[  194.415747][ T3541]  ? __x64_sys_openat+0x13a/0x170
[  194.415765][ T3541]  ? x64_sys_call+0xe69/0x2ee0
[  194.415788][ T3541]  ? do_syscall_64+0x57/0xf0
[  194.415812][ T3541]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  194.415839][ T3541]  ? avc_has_perm_noaudit+0x26c/0x360
[  194.415862][ T3541]  ? __asan_memcpy+0x5a/0x80
[  194.415884][ T3541]  ? avc_has_perm_noaudit+0x28a/0x360
[  194.415909][ T3541]  ? avc_has_perm+0x155/0x240
[  194.415932][ T3541]  ? __cfi_avc_has_perm+0x10/0x10
[  194.415955][ T3541]  ? kasan_save_alloc_info+0x40/0x50
[  194.415977][ T3541]  ? selinux_file_open+0x46c/0x630
[  194.415998][ T3541]  ? __cfi_selinux_file_open+0x10/0x10
[  194.416021][ T3541]  ? avc_has_extended_perms+0x80b/0xe70
[  194.416045][ T3541]  ? __asan_memcpy+0x5a/0x80
[  194.416066][ T3541]  ? avc_has_extended_perms+0x969/0xe70
[  194.416092][ T3541]  ? __asan_set_shadow_00+0x12/0x20
[  194.416112][ T3541]  ? do_vfs_ioctl+0x182d/0x2010
[  194.416128][ T3541]  ? arch_stack_walk+0x10a/0x170
[  194.416151][ T3541]  ? __ia32_compat_sys_ioctl+0x920/0x920
[  194.416169][ T3541]  ? _parse_integer+0x2e/0x40
[  194.416191][ T3541]  ? ioctl_has_perm+0x39a/0x500
[  194.416212][ T3541]  ? has_cap_mac_admin+0xd0/0xd0
[  194.416233][ T3541]  ? proc_fail_nth_write+0x184/0x220
[  194.416252][ T3541]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  194.416272][ T3541]  ? selinux_file_ioctl+0x732/0x1480
[  194.416292][ T3541]  ? vfs_write+0x9a4/0xf90
[  194.416314][ T3541]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  194.416335][ T3541]  ? __cfi_vfs_write+0x10/0x10
[  194.416360][ T3541]  ? __kasan_check_write+0x18/0x20
[  194.416382][ T3541]  ? mutex_unlock+0x90/0x240
[  194.416399][ T3541]  ? __cfi_mutex_unlock+0x10/0x10
[  194.416417][ T3541]  ? __fget_files+0x2c5/0x340
[  194.416433][ T3541]  ? __fget_files+0x2c5/0x340
[  194.416448][ T3541]  ? bpf_lsm_file_ioctl+0xd/0x20
[  194.416466][ T3541]  ? security_file_ioctl+0x3e/0x110
[  194.416485][ T3541]  ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10
[  194.416506][ T3541]  __se_sys_ioctl+0x132/0x1b0
[  194.416521][ T3541]  __x64_sys_ioctl+0x7f/0xa0
[  194.416536][ T3541]  x64_sys_call+0x1878/0x2ee0
[  194.416559][ T3541]  do_syscall_64+0x57/0xf0
[  194.416583][ T3541]  ? clear_bhb_loop+0x50/0xa0
[  194.416599][ T3541]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  194.416624][ T3541] RIP: 0033:0x7fd07759c819
[  194.416639][ T3541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  194.416653][ T3541] RSP: 002b:00007fd0783ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  194.416671][ T3541] RAX: ffffffffffffffda RBX: 00007fd077815fa0 RCX: 00007fd07759c819
[  194.416685][ T3541] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000004
[  194.416696][ T3541] RBP: 00007fd0783ff090 R08: 0000000000000000 R09: 0000000000000000
[  194.416707][ T3541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  194.416717][ T3541] R13: 00007fd077816038 R14: 00007fd077815fa0 R15: 00007ffce2da2438
[  194.416731][ T3541]  </TASK>
[  195.154063][   T10] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[  195.185798][   T36] audit: type=1400 audit(1776236807.754:658): avc:  denied  { map } for  pid=3542 comm="syz.2.1136" path="socket:[35597]" dev="sockfs" ino=35597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  195.229322][ T3547] netlink: 'syz.4.1138': attribute type 9 has an invalid length.
[  195.237180][ T3547] netlink: 'syz.4.1138': attribute type 2 has an invalid length.
[  195.338532][ T3556] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  195.472984][  T475] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  195.572806][   T10] usb 4-1: device not accepting address 104, error -71
[  195.579991][   T10] usb usb4-port1: unable to enumerate USB device
[  195.612821][  T475] usb 3-1: device descriptor read/64, error -71
[  195.698545][ T3567] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  195.699180][ T3567] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  195.713263][ T3567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:383
[  195.837930][ T3573] FAULT_INJECTION: forcing a failure.
[  195.837930][ T3573] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  195.860616][ T3573] CPU: 0 UID: 0 PID: 3573 Comm: syz.0.1148 Not tainted syzkaller #0 6519e46a2ad0e7da7eb9d1859c66c62b15485067
[  195.860641][  T475] usb 3-1: device descriptor read/64, error -71
[  195.860652][ T3573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  195.860668][ T3573] Call Trace:
[  195.860677][ T3573]  <TASK>
[  195.860715][ T3573]  __dump_stack+0x21/0x30
[  195.860822][ T3573]  dump_stack_lvl+0x140/0x1c0
[  195.860915][ T3573]  ? __cfi_dump_stack_lvl+0x10/0x10
[  195.861008][ T3573]  ? stack_trace_save+0xaa/0x100
[  195.861029][ T3573]  dump_stack+0x19/0x20
[  195.861053][ T3573]  should_fail_ex+0x3d7/0x530
[  195.861079][ T3573]  should_fail+0xf/0x20
[  195.861149][ T3573]  should_fail_usercopy+0x1e/0x30
[  195.861237][ T3573]  _copy_from_user+0x20/0xa0
[  195.861294][ T3573]  _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0xa67/0x5c20
[  195.861386][ T3573]  ? _raw_spin_trylock+0xb5/0x140
[  195.861483][ T3573]  ? _raw_spin_unlock+0x45/0x60
[  195.861571][ T3573]  ? call_rcu_nocb+0x6d7/0xc80
[  195.861648][ T3573]  ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10
[  195.861733][ T3573]  ? swake_up_one_online_ipi+0x30/0x30
[  195.861812][ T3573]  ? __cfi_mt_free_rcu+0x10/0x10
[  195.861910][ T3573]  ? is_bpf_text_address+0x17b/0x1a0
[  195.861996][ T3573]  ? kernel_text_address+0xa9/0xe0
[  195.862060][ T3573]  ? __kernel_text_address+0x11/0x40
[  195.862134][ T3573]  ? unwind_get_return_address+0x51/0x90
[  195.862252][ T3573]  ? is_bpf_text_address+0x17b/0x1a0
[  195.862352][ T3573]  ? kernel_text_address+0xa9/0xe0
[  195.862429][ T3573]  ? __kernel_text_address+0x11/0x40
[  195.862505][ T3573]  ? unwind_get_return_address+0x51/0x90
[  195.862573][ T3573]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  195.862638][ T3573]  ? arch_stack_walk+0x10a/0x170
[  195.862740][ T3573]  ? is_bpf_text_address+0x17b/0x1a0
[  195.862818][ T3573]  ? kernel_text_address+0xa9/0xe0
[  195.862895][ T3573]  ? __kernel_text_address+0x11/0x40
[  195.862971][ T3573]  ? unwind_get_return_address+0x51/0x90
[  195.863039][ T3573]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  195.863104][ T3573]  ? arch_stack_walk+0x10a/0x170
[  195.863201][ T3573]  ? stack_depot_save_flags+0x38/0x800
[  195.863289][ T3573]  ? stack_trace_save+0xaa/0x100
[  195.863355][ T3573]  ? kasan_save_track+0x4f/0x80
[  195.863444][ T3573]  ? kasan_save_track+0x3e/0x80
[  195.863533][ T3573]  ? kasan_save_alloc_info+0x40/0x50
[  195.863623][ T3573]  ? __kasan_slab_alloc+0x73/0x90
[  195.863699][ T3573]  ? kmem_cache_alloc_noprof+0x1bf/0x410
[  195.863786][ T3573]  ? security_inode_alloc+0x51/0x230
[  195.863874][ T3573]  ? inode_init_always_gfp+0x756/0x9e0
[  195.863938][ T3573]  ? alloc_inode+0xc5/0x270
[  195.864002][ T3573]  ? new_inode+0x25/0x1e0
[  195.864064][ T3573]  ? proc_pid_make_inode+0x25/0x140
[  195.864153][ T3573]  ? proc_pident_instantiate+0x6d/0x2c0
[  195.864217][ T3573]  ? proc_pident_lookup+0x1c7/0x270
[  195.864282][ T3573]  ? proc_tid_base_lookup+0x2f/0x40
[  195.864357][ T3573]  ? path_openat+0x1315/0x34f0
[  195.864424][ T3573]  ? do_filp_open+0x1f5/0x440
[  195.864483][ T3573]  ? do_sys_openat2+0x134/0x1d0
[  195.864576][ T3573]  ? __x64_sys_openat+0x13a/0x170
[  195.864653][ T3573]  ? x64_sys_call+0xe69/0x2ee0
[  195.864780][ T3573]  ? do_syscall_64+0x57/0xf0
[  195.864870][ T3573]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  195.864990][ T3573]  ? avc_has_perm_noaudit+0x26c/0x360
[  195.865096][ T3573]  ? __asan_memcpy+0x5a/0x80
[  195.865182][ T3573]  ? avc_has_perm_noaudit+0x28a/0x360
[  195.865288][ T3573]  ? avc_has_perm+0x155/0x240
[  195.865370][ T3573]  ? __cfi_avc_has_perm+0x10/0x10
[  195.865459][ T3573]  ? kasan_save_alloc_info+0x40/0x50
[  195.865544][ T3573]  ? selinux_file_open+0x46c/0x630
[  195.865624][ T3573]  ? __cfi_selinux_file_open+0x10/0x10
[  195.865707][ T3573]  ? avc_has_extended_perms+0x80b/0xe70
[  195.865797][ T3573]  ? __asan_memcpy+0x5a/0x80
[  195.865881][ T3573]  ? avc_has_extended_perms+0x969/0xe70
[  195.865978][ T3573]  ? __asan_set_shadow_00+0x12/0x20
[  195.866066][ T3573]  ? do_vfs_ioctl+0x182d/0x2010
[  195.866122][ T3573]  ? arch_stack_walk+0x10a/0x170
[  195.866207][ T3573]  ? __ia32_compat_sys_ioctl+0x920/0x920
[  195.866284][ T3573]  ? _parse_integer+0x2e/0x40
[  195.866384][ T3573]  ? ioctl_has_perm+0x39a/0x500
[  195.866486][ T3573]  ? has_cap_mac_admin+0xd0/0xd0
[  195.866574][ T3573]  ? proc_fail_nth_write+0x184/0x220
[  195.866640][ T3573]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  195.866718][ T3573]  ? selinux_file_ioctl+0x732/0x1480
[  195.866798][ T3573]  ? vfs_write+0x9a4/0xf90
[  195.866881][ T3573]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  195.866960][ T3573]  ? __cfi_vfs_write+0x10/0x10
[  195.867047][ T3573]  ? __kasan_check_write+0x18/0x20
[  195.867132][ T3573]  ? mutex_unlock+0x90/0x240
[  195.867200][ T3573]  ? __cfi_mutex_unlock+0x10/0x10
[  195.867274][ T3573]  ? __fget_files+0x2c5/0x340
[  195.867332][ T3573]  ? __fget_files+0x2c5/0x340
[  195.867393][ T3573]  ? bpf_lsm_file_ioctl+0xd/0x20
[  195.867452][ T3573]  ? security_file_ioctl+0x3e/0x110
[  195.867527][ T3573]  ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10
[  195.867611][ T3573]  __se_sys_ioctl+0x132/0x1b0
[  195.867667][ T3573]  __x64_sys_ioctl+0x7f/0xa0
[  195.867737][ T3573]  x64_sys_call+0x1878/0x2ee0
[  195.867843][ T3573]  do_syscall_64+0x57/0xf0
[  195.867930][ T3573]  ? clear_bhb_loop+0x50/0xa0
[  195.868019][ T3573]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  195.868111][ T3573] RIP: 0033:0x7fa4d3d9c819
[  195.868175][ T3573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  195.868224][ T3573] RSP: 002b:00007fa4d4d08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  195.868307][ T3573] RAX: ffffffffffffffda RBX: 00007fa4d4015fa0 RCX: 00007fa4d3d9c819
[  195.868352][ T3573] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000004
[  195.868396][ T3573] RBP: 00007fa4d4d08090 R08: 0000000000000000 R09: 0000000000000000
[  195.868439][ T3573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  195.868481][ T3573] R13: 00007fa4d4016038 R14: 00007fa4d4015fa0 R15: 00007ffcbc5fb3b8
[  195.868537][ T3573]  </TASK>
[  196.162926][ T3580] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  196.233037][   T31] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  196.413361][  T475] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  196.493176][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  196.504676][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.514767][   T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  196.527771][   T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  196.536917][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.546330][   T31] usb 5-1: config 0 descriptor??
[  196.598983][ T3593] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1155'.
[  196.612864][  T475] usb 3-1: device descriptor read/64, error -71
[  196.619380][ T3593] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  196.628071][ T3593] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22
[  196.639257][ T3593] rust_binder: Error in use_page_slow: ESRCH
[  196.639285][ T3593] rust_binder: use_range failure ESRCH
[  196.645889][ T3593] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false
[  196.651582][ T3593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  196.659943][ T3593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:800
[  196.852842][  T475] usb 3-1: device descriptor read/64, error -71
[  196.973073][  T475] usb usb3-port1: attempt power cycle
[  197.156470][   T31] usbhid 5-1:0.0: can't add hid device: -71
[  197.162639][   T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  197.172525][   T31] usb 5-1: USB disconnect, device number 24
[  197.247502][ T3601] FAULT_INJECTION: forcing a failure.
[  197.247502][ T3601] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  197.260949][ T3601] CPU: 1 UID: 0 PID: 3601 Comm: syz.3.1159 Not tainted syzkaller #0 6519e46a2ad0e7da7eb9d1859c66c62b15485067
[  197.260989][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  197.261004][ T3601] Call Trace:
[  197.261013][ T3601]  <TASK>
[  197.261024][ T3601]  __dump_stack+0x21/0x30
[  197.261060][ T3601]  dump_stack_lvl+0x140/0x1c0
[  197.261089][ T3601]  ? __cfi_dump_stack_lvl+0x10/0x10
[  197.261121][ T3601]  dump_stack+0x19/0x20
[  197.261149][ T3601]  should_fail_ex+0x3d7/0x530
[  197.261178][ T3601]  should_fail+0xf/0x20
[  197.261223][ T3601]  should_fail_usercopy+0x1e/0x30
[  197.261252][ T3601]  _copy_from_user+0x20/0xa0
[  197.261270][ T3601]  _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x8ba/0xaf80
[  197.261323][ T3601]  ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10
[  197.261421][ T3601]  ? is_bpf_text_address+0x17b/0x1a0
[  197.261451][ T3601]  ? kernel_text_address+0xa9/0xe0
[  197.261478][ T3601]  ? __kernel_text_address+0x11/0x40
[  197.261502][ T3601]  ? unwind_get_return_address+0x51/0x90
[  197.261527][ T3601]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  197.261549][ T3601]  ? arch_stack_walk+0x10a/0x170
[  197.261589][ T3601]  ? is_bpf_text_address+0x17b/0x1a0
[  197.261618][ T3601]  ? kernel_text_address+0xa9/0xe0
[  197.261644][ T3601]  ? __kernel_text_address+0x11/0x40
[  197.261671][ T3601]  ? unwind_get_return_address+0x51/0x90
[  197.261696][ T3601]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  197.261719][ T3601]  ? arch_stack_walk+0x10a/0x170
[  197.261754][ T3601]  ? stack_depot_save_flags+0x38/0x800
[  197.261786][ T3601]  ? kasan_save_track+0x4f/0x80
[  197.261818][ T3601]  ? kasan_save_track+0x3e/0x80
[  197.261849][ T3601]  ? kasan_save_alloc_info+0x40/0x50
[  197.261876][ T3601]  ? __kasan_kmalloc+0x96/0xb0
[  197.261896][ T3601]  ? __kmalloc_node_track_caller_noprof+0x251/0x4f0
[  197.261928][ T3601]  ? krealloc_noprof+0x8d/0x130
[  197.261959][ T3601]  ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x84c/0x1d80
[  197.261994][ T3601]  ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x3e3/0x5c20
[  197.262022][ T3601]  ? __se_sys_ioctl+0x132/0x1b0
[  197.262042][ T3601]  ? __x64_sys_ioctl+0x7f/0xa0
[  197.262062][ T3601]  ? x64_sys_call+0x1878/0x2ee0
[  197.262092][ T3601]  ? do_syscall_64+0x57/0xf0
[  197.262124][ T3601]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  197.262164][ T3601]  ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x416/0x580
[  197.262216][ T3601]  ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x10/0x10
[  197.262258][ T3601]  ? __kasan_check_write+0x18/0x20
[  197.262286][ T3601]  ? _raw_spin_lock+0x92/0x120
[  197.262318][ T3601]  ? __cfi__raw_spin_lock+0x10/0x10
[  197.262351][ T3601]  ? _raw_spin_unlock+0x45/0x60
[  197.262383][ T3601]  ? __asan_set_shadow_00+0x12/0x20
[  197.262401][ T3601]  ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x102f/0x1d80
[  197.262429][ T3601]  ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10
[  197.262458][ T3601]  ? avc_has_perm_noaudit+0x26c/0x360
[  197.262483][ T3601]  ? __asan_memcpy+0x5a/0x80
[  197.262504][ T3601]  ? __kasan_check_write+0x18/0x20
[  197.262525][ T3601]  ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x155/0x4a0
[  197.262567][ T3601]  ? is_bpf_text_address+0x17b/0x1a0
[  197.262589][ T3601]  ? kernel_text_address+0xa9/0xe0
[  197.262615][ T3601]  ? __kernel_text_address+0x11/0x40
[  197.262636][ T3601]  ? unwind_get_return_address+0x51/0x90
[  197.262655][ T3601]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  197.262673][ T3601]  ? arch_stack_walk+0x10a/0x170
[  197.262707][ T3601]  ? stack_trace_save+0xaa/0x100
[  197.262724][ T3601]  ? stack_depot_save_flags+0x38/0x800
[  197.262748][ T3601]  ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x113c/0x5c20
[  197.262769][ T3601]  ? __asan_memcpy+0x5a/0x80
[  197.262790][ T3601]  _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20
[  197.262811][ T3601]  ? _raw_spin_trylock+0xb5/0x140
[  197.262836][ T3601]  ? _raw_spin_unlock+0x45/0x60
[  197.262859][ T3601]  ? call_rcu_nocb+0x6d7/0xc80
[  197.262880][ T3601]  ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10
[  197.262902][ T3601]  ? swake_up_one_online_ipi+0x30/0x30
[  197.262923][ T3601]  ? __cfi_mt_free_rcu+0x10/0x10
[  197.262950][ T3601]  ? is_bpf_text_address+0x17b/0x1a0
[  197.262971][ T3601]  ? kernel_text_address+0xa9/0xe0
[  197.262991][ T3601]  ? __kernel_text_address+0x11/0x40
[  197.263010][ T3601]  ? unwind_get_return_address+0x51/0x90
[  197.263033][ T3601]  ? is_bpf_text_address+0x17b/0x1a0
[  197.263054][ T3601]  ? kernel_text_address+0xa9/0xe0
[  197.263074][ T3601]  ? __kernel_text_address+0x11/0x40
[  197.263093][ T3601]  ? unwind_get_return_address+0x51/0x90
[  197.263113][ T3601]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  197.263130][ T3601]  ? arch_stack_walk+0x10a/0x170
[  197.263158][ T3601]  ? is_bpf_text_address+0x17b/0x1a0
[  197.263180][ T3601]  ? kernel_text_address+0xa9/0xe0
[  197.263205][ T3601]  ? __kernel_text_address+0x11/0x40
[  197.263225][ T3601]  ? unwind_get_return_address+0x51/0x90
[  197.263243][ T3601]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  197.263263][ T3601]  ? stack_depot_save_flags+0x38/0x800
[  197.263284][ T3601]  ? stack_trace_save+0xaa/0x100
[  197.263300][ T3601]  ? kasan_save_track+0x4f/0x80
[  197.263324][ T3601]  ? kasan_save_track+0x3e/0x80
[  197.263347][ T3601]  ? kasan_save_alloc_info+0x40/0x50
[  197.263367][ T3601]  ? __kasan_slab_alloc+0x73/0x90
[  197.263382][ T3601]  ? kmem_cache_alloc_noprof+0x1bf/0x410
[  197.263404][ T3601]  ? security_inode_alloc+0x51/0x230
[  197.263429][ T3601]  ? inode_init_always_gfp+0x756/0x9e0
[  197.263443][ T3601]  ? alloc_inode+0xc5/0x270
[  197.263459][ T3601]  ? new_inode+0x25/0x1e0
[  197.263474][ T3601]  ? proc_pid_make_inode+0x25/0x140
[  197.263498][ T3601]  ? proc_pident_instantiate+0x6d/0x2c0
[  197.263513][ T3601]  ? proc_pident_lookup+0x1c7/0x270
[  197.263528][ T3601]  ? proc_tid_base_lookup+0x2f/0x40
[  197.263547][ T3601]  ? do_filp_open+0x1f5/0x440
[  197.263567][ T3601]  ? avc_has_perm_noaudit+0x26c/0x360
[  197.263591][ T3601]  ? __asan_memcpy+0x5a/0x80
[  197.263617][ T3601]  ? avc_has_perm_noaudit+0x28a/0x360
[  197.263641][ T3601]  ? avc_has_perm+0x155/0x240
[  197.263665][ T3601]  ? __cfi_avc_has_perm+0x10/0x10
[  197.263688][ T3601]  ? kasan_save_alloc_info+0x40/0x50
[  197.263710][ T3601]  ? selinux_file_open+0x46c/0x630
[  197.263731][ T3601]  ? __cfi_selinux_file_open+0x10/0x10
[  197.263754][ T3601]  ? avc_has_extended_perms+0x80b/0xe70
[  197.263778][ T3601]  ? __asan_memcpy+0x5a/0x80
[  197.263799][ T3601]  ? avc_has_extended_perms+0x969/0xe70
[  197.263825][ T3601]  ? __asan_set_shadow_00+0x12/0x20
[  197.263843][ T3601]  ? do_vfs_ioctl+0x182d/0x2010
[  197.263858][ T3601]  ? arch_stack_walk+0x10a/0x170
[  197.263882][ T3601]  ? __ia32_compat_sys_ioctl+0x920/0x920
[  197.263899][ T3601]  ? _parse_integer+0x2e/0x40
[  197.263921][ T3601]  ? ioctl_has_perm+0x39a/0x500
[  197.263946][ T3601]  ? has_cap_mac_admin+0xd0/0xd0
[  197.263967][ T3601]  ? proc_fail_nth_write+0x184/0x220
[  197.263986][ T3601]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  197.264006][ T3601]  ? selinux_file_ioctl+0x732/0x1480
[  197.264026][ T3601]  ? vfs_write+0x9a4/0xf90
[  197.264048][ T3601]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  197.264069][ T3601]  ? __cfi_vfs_write+0x10/0x10
[  197.264091][ T3601]  ? __kasan_check_write+0x18/0x20
[  197.264112][ T3601]  ? mutex_unlock+0x90/0x240
[  197.264131][ T3601]  ? __cfi_mutex_unlock+0x10/0x10
[  197.264148][ T3601]  ? __fget_files+0x2c5/0x340
[  197.264164][ T3601]  ? __fget_files+0x2c5/0x340
[  197.264179][ T3601]  ? bpf_lsm_file_ioctl+0xd/0x20
[  197.264202][ T3601]  ? security_file_ioctl+0x3e/0x110
[  197.264222][ T3601]  ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10
[  197.264243][ T3601]  __se_sys_ioctl+0x132/0x1b0
[  197.264258][ T3601]  __x64_sys_ioctl+0x7f/0xa0
[  197.264273][ T3601]  x64_sys_call+0x1878/0x2ee0
[  197.264297][ T3601]  do_syscall_64+0x57/0xf0
[  197.264320][ T3601]  ? clear_bhb_loop+0x50/0xa0
[  197.264336][ T3601]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  197.264361][ T3601] RIP: 0033:0x7f229499c819
[  197.264377][ T3601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  197.264391][ T3601] RSP: 002b:00007f229586a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  197.264410][ T3601] RAX: ffffffffffffffda RBX: 00007f2294c15fa0 RCX: 00007f229499c819
[  197.264423][ T3601] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000004
[  197.264434][ T3601] RBP: 00007f229586a090 R08: 0000000000000000 R09: 0000000000000000
[  197.264445][ T3601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  197.264455][ T3601] R13: 00007f2294c16038 R14: 00007f2294c15fa0 R15: 00007ffe54524968
[  197.264470][ T3601]  </TASK>
[  198.158939][ T3601] rust_binder: Write failure EFAULT in pid:806
[  198.171079][ T3603] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  198.178174][ T3603] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  198.184917][ T3603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:389
[  198.202788][  T475] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  198.244089][  T475] usb 3-1: device descriptor read/8, error -71
[  198.261176][ T3610] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 144, limit: 144, size: 18446744073709551524)
[  198.261210][ T3610] rust_binder: Error while translating object.
[  198.273632][ T3610] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  198.280089][ T3610] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:908
[  198.361605][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  198.361627][   T36] audit: type=1400 audit(1776236810.924:660): avc:  denied  { read } for  pid=3612 comm="syz.4.1165" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  198.400564][   T36] audit: type=1400 audit(1776236810.924:661): avc:  denied  { open } for  pid=3612 comm="syz.4.1165" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  198.403992][ T3615] netlink: 'syz.3.1164': attribute type 9 has an invalid length.
[  198.424205][   T36] audit: type=1400 audit(1776236810.934:662): avc:  denied  { ioctl } for  pid=3612 comm="syz.4.1165" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  198.424450][  T475] usb 3-1: device descriptor read/8, error -71
[  198.463043][ T3615] netlink: 'syz.3.1164': attribute type 2 has an invalid length.
[  198.798121][ T3632] netlink: 'syz.4.1170': attribute type 4 has an invalid length.
[  198.827490][   T36] audit: type=1400 audit(1776236811.374:663): avc:  denied  { create } for  pid=3631 comm="syz.4.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  198.865987][ T3636] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  198.866212][ T3636] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  198.873076][ T3636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:911
[  199.037880][ T3644] netlink: 'syz.2.1175': attribute type 9 has an invalid length.
[  199.055166][ T3644] netlink: 'syz.2.1175': attribute type 2 has an invalid length.
[  199.089003][ T1171] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  199.167624][   T36] audit: type=1400 audit(1776236811.734:664): avc:  denied  { map } for  pid=3651 comm="syz.3.1178" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  199.222944][ T1171] usb 5-1: device descriptor read/64, error -71
[  199.305403][   T36] audit: type=1400 audit(1776236811.874:665): avc:  denied  { read write } for  pid=3654 comm="syz.3.1179" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  199.331136][   T36] audit: type=1400 audit(1776236811.874:666): avc:  denied  { open } for  pid=3654 comm="syz.3.1179" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  199.355788][   T36] audit: type=1400 audit(1776236811.874:667): avc:  denied  { map } for  pid=3654 comm="syz.3.1179" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  199.379504][   T36] audit: type=1400 audit(1776236811.874:668): avc:  denied  { execute } for  pid=3654 comm="syz.3.1179" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  199.412835][  T475] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  199.426531][ T3658] netlink: 'syz.3.1180': attribute type 1 has an invalid length.
[  199.437432][  T475] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40
[  199.446958][  T475] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.455171][  T475] usb 3-1: Product: syz
[  199.459482][  T475] usb 3-1: Manufacturer: syz
[  199.464843][  T475] usb 3-1: SerialNumber: syz
[  199.532784][ T1171] usb 5-1: device descriptor read/64, error -71
[  199.596884][ T3665] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  199.597089][ T3665] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  199.603958][ T3665] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:834
[  199.658880][ T3669] netlink: 'syz.0.1185': attribute type 9 has an invalid length.
[  199.676071][ T3669] netlink: 'syz.0.1185': attribute type 2 has an invalid length.
[  199.698679][  T475] usb 3-1: USB disconnect, device number 93
[  199.782821][ T1171] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  199.812797][ T3675] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3675 comm=syz.3.1187
[  199.841948][ T3681] rust_binder: Error in use_page_slow: ESRCH
[  199.841972][ T3681] rust_binder: use_range failure ESRCH
[  199.848206][ T3681] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false
[  199.853795][ T3681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  199.861910][ T3681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:844
[  199.932832][ T1171] usb 5-1: device descriptor read/64, error -71
[  199.975649][ T3693] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  200.015909][ T3697] netlink: 'syz.3.1194': attribute type 9 has an invalid length.
[  200.030784][ T3697] netlink: 'syz.3.1194': attribute type 2 has an invalid length.
[  200.183091][ T1171] usb 5-1: device descriptor read/64, error -71
[  200.235768][ T3704] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3704 comm=syz.2.1197
[  200.267841][ T3708] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1198'.
[  200.278065][ T3708] rust_binder: Error in use_page_slow: ESRCH
[  200.278096][ T3708] rust_binder: use_range failure ESRCH
[  200.284522][ T3708] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false
[  200.290048][ T3708] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  200.298646][ T3708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:934
[  200.308489][ T1171] usb usb5-port1: attempt power cycle
[  200.330855][ T3710] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1199'.
[  200.346005][   T36] audit: type=1400 audit(1776236812.914:669): avc:  denied  { block_suspend } for  pid=3709 comm="syz.0.1199" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  200.403286][ T3716] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  200.672813][   T31] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  200.687821][ T1171] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  200.714477][ T1171] usb 5-1: device descriptor read/8, error -71
[  200.842889][   T31] usb 3-1: Using ep0 maxpacket: 16
[  200.850286][ T1171] usb 5-1: device descriptor read/8, error -71
[  200.856829][   T31] usb 3-1: config 0 has an invalid interface number: 34 but max is 0
[  200.865110][   T31] usb 3-1: config 0 has no interface number 0
[  200.871400][   T31] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  200.881461][   T31] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  200.893704][   T31] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  200.904018][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.913021][   T31] usb 3-1: Product: syz
[  200.917951][   T31] usb 3-1: Manufacturer: syz
[  200.923222][   T31] usb 3-1: SerialNumber: syz
[  200.929489][   T31] usb 3-1: config 0 descriptor??
[  200.935123][ T3721] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  200.942924][ T3721] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  201.102869][ T1171] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  201.123928][ T1171] usb 5-1: device descriptor read/8, error -71
[  201.151511][ T3721] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  201.159004][ T3721] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  201.254197][ T1171] usb 5-1: device descriptor read/8, error -71
[  201.362931][ T1171] usb usb5-port1: unable to enumerate USB device
[  201.369951][   T31] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  201.380595][   T31] asix 3-1:0.34: probe with driver asix failed with error -71
[  201.390172][   T31] usb 3-1: USB disconnect, device number 94
[  201.868148][ T3739] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  202.282931][   T31] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  202.422873][   T31] usb 5-1: device descriptor read/64, error -71
[  202.548847][ T3763] rust_binder: Error in use_page_slow: ESRCH
[  202.548868][ T3763] rust_binder: use_range failure ESRCH
[  202.555198][ T3763] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false
[  202.560808][ T3763] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  202.569085][ T3763] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:950
[  202.606144][ T3767] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  202.615805][ T3767] FAULT_INJECTION: forcing a failure.
[  202.615805][ T3767] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  202.635992][ T3767] CPU: 1 UID: 0 PID: 3767 Comm: syz.2.1223 Not tainted syzkaller #0 6519e46a2ad0e7da7eb9d1859c66c62b15485067
[  202.636026][ T3767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  202.636040][ T3767] Call Trace:
[  202.636049][ T3767]  <TASK>
[  202.636058][ T3767]  __dump_stack+0x21/0x30
[  202.636094][ T3767]  dump_stack_lvl+0x140/0x1c0
[  202.636123][ T3767]  ? __cfi_dump_stack_lvl+0x10/0x10
[  202.636166][ T3767]  ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x10/0x10
[  202.636206][ T3767]  ? stack_trace_save+0xaa/0x100
[  202.636230][ T3767]  dump_stack+0x19/0x20
[  202.636258][ T3767]  should_fail_ex+0x3d7/0x530
[  202.636287][ T3767]  should_fail+0xf/0x20
[  202.636312][ T3767]  should_fail_usercopy+0x1e/0x30
[  202.636341][ T3767]  _copy_from_user+0x20/0xa0
[  202.636361][ T3767]  _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0xa67/0x5c20
[  202.636391][ T3767]  ? _raw_spin_trylock+0xb5/0x140
[  202.636426][ T3767]  ? _raw_spin_unlock+0x45/0x60
[  202.636459][ T3767]  ? call_rcu_nocb+0x6d7/0xc80
[  202.636496][ T3767]  ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10
[  202.636526][ T3767]  ? swake_up_one_online_ipi+0x30/0x30
[  202.636556][ T3767]  ? __cfi_mt_free_rcu+0x10/0x10
[  202.636594][ T3767]  ? is_bpf_text_address+0x17b/0x1a0
[  202.636629][ T3767]  ? is_bpf_text_address+0x17b/0x1a0
[  202.636660][ T3767]  ? kernel_text_address+0xa9/0xe0
[  202.636688][ T3767]  ? __kernel_text_address+0x11/0x40
[  202.636716][ T3767]  ? unwind_get_return_address+0x51/0x90
[  202.636743][ T3767]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  202.636773][ T3767]  ? arch_stack_walk+0x10a/0x170
[  202.636803][ T3767]  ? is_bpf_text_address+0x17b/0x1a0
[  202.636825][ T3767]  ? kernel_text_address+0xa9/0xe0
[  202.636845][ T3767]  ? __kernel_text_address+0x11/0x40
[  202.636865][ T3767]  ? unwind_get_return_address+0x51/0x90
[  202.636883][ T3767]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  202.636901][ T3767]  ? arch_stack_walk+0x10a/0x170
[  202.636926][ T3767]  ? stack_depot_save_flags+0x38/0x800
[  202.636949][ T3767]  ? stack_trace_save+0xaa/0x100
[  202.636966][ T3767]  ? kasan_save_track+0x4f/0x80
[  202.636990][ T3767]  ? kasan_save_track+0x3e/0x80
[  202.637013][ T3767]  ? kasan_save_alloc_info+0x40/0x50
[  202.637033][ T3767]  ? __kasan_slab_alloc+0x73/0x90
[  202.637049][ T3767]  ? kmem_cache_alloc_noprof+0x1bf/0x410
[  202.637071][ T3767]  ? security_inode_alloc+0x51/0x230
[  202.637097][ T3767]  ? inode_init_always_gfp+0x756/0x9e0
[  202.637112][ T3767]  ? alloc_inode+0xc5/0x270
[  202.637127][ T3767]  ? new_inode+0x25/0x1e0
[  202.637142][ T3767]  ? proc_pid_make_inode+0x25/0x140
[  202.637166][ T3767]  ? proc_pident_instantiate+0x6d/0x2c0
[  202.637181][ T3767]  ? proc_pident_lookup+0x1c7/0x270
[  202.637196][ T3767]  ? proc_tid_base_lookup+0x2f/0x40
[  202.637215][ T3767]  ? path_openat+0x1315/0x34f0
[  202.637231][ T3767]  ? do_filp_open+0x1f5/0x440
[  202.637247][ T3767]  ? do_sys_openat2+0x134/0x1d0
[  202.637266][ T3767]  ? __x64_sys_openat+0x13a/0x170
[  202.637284][ T3767]  ? x64_sys_call+0xe69/0x2ee0
[  202.637308][ T3767]  ? do_syscall_64+0x57/0xf0
[  202.637332][ T3767]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  202.637359][ T3767]  ? avc_has_perm_noaudit+0x26c/0x360
[  202.637384][ T3767]  ? __asan_memcpy+0x5a/0x80
[  202.637405][ T3767]  ? avc_has_perm_noaudit+0x28a/0x360
[  202.637430][ T3767]  ? avc_has_perm+0x155/0x240
[  202.637454][ T3767]  ? __cfi_avc_has_perm+0x10/0x10
[  202.637482][ T3767]  ? kasan_save_alloc_info+0x40/0x50
[  202.637504][ T3767]  ? selinux_file_open+0x46c/0x630
[  202.637526][ T3767]  ? __cfi_selinux_file_open+0x10/0x10
[  202.637550][ T3767]  ? avc_has_extended_perms+0x80b/0xe70
[  202.637574][ T3767]  ? __asan_memcpy+0x5a/0x80
[  202.637595][ T3767]  ? avc_has_extended_perms+0x969/0xe70
[  202.637621][ T3767]  ? __asan_set_shadow_00+0x12/0x20
[  202.637639][ T3767]  ? do_vfs_ioctl+0x182d/0x2010
[  202.637655][ T3767]  ? arch_stack_walk+0x10a/0x170
[  202.637680][ T3767]  ? __ia32_compat_sys_ioctl+0x920/0x920
[  202.637699][ T3767]  ? _parse_integer+0x2e/0x40
[  202.637723][ T3767]  ? ioctl_has_perm+0x39a/0x500
[  202.637744][ T3767]  ? has_cap_mac_admin+0xd0/0xd0
[  202.637795][ T3767]  ? proc_fail_nth_write+0x184/0x220
[  202.637823][ T3767]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  202.637858][ T3767]  ? selinux_file_ioctl+0x732/0x1480
[  202.637879][ T3767]  ? vfs_write+0x9a4/0xf90
[  202.637900][ T3767]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  202.637922][ T3767]  ? __cfi_vfs_write+0x10/0x10
[  202.637944][ T3767]  ? __kasan_check_write+0x18/0x20
[  202.637965][ T3767]  ? mutex_unlock+0x90/0x240
[  202.637984][ T3767]  ? __cfi_mutex_unlock+0x10/0x10
[  202.638001][ T3767]  ? __fget_files+0x2c5/0x340
[  202.638017][ T3767]  ? __fget_files+0x2c5/0x340
[  202.638032][ T3767]  ? bpf_lsm_file_ioctl+0xd/0x20
[  202.638049][ T3767]  ? security_file_ioctl+0x3e/0x110
[  202.638069][ T3767]  ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10
[  202.638090][ T3767]  __se_sys_ioctl+0x132/0x1b0
[  202.638105][ T3767]  __x64_sys_ioctl+0x7f/0xa0
[  202.638120][ T3767]  x64_sys_call+0x1878/0x2ee0
[  202.638143][ T3767]  do_syscall_64+0x57/0xf0
[  202.638167][ T3767]  ? clear_bhb_loop+0x50/0xa0
[  202.638182][ T3767]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  202.638208][ T3767] RIP: 0033:0x7fd07759c819
[  202.638223][ T3767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  202.638238][ T3767] RSP: 002b:00007fd0783ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  202.638256][ T3767] RAX: ffffffffffffffda RBX: 00007fd077815fa0 RCX: 00007fd07759c819
[  202.638269][ T3767] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000004
[  202.638280][ T3767] RBP: 00007fd0783ff090 R08: 0000000000000000 R09: 0000000000000000
[  202.638291][ T3767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  202.638301][ T3767] R13: 00007fd077816038 R14: 00007fd077815fa0 R15: 00007ffce2da2438
[  202.638335][ T3767]  </TASK>
[  202.721648][ T3769] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  202.727925][   T31] usb 5-1: device descriptor read/64, error -71
[  202.739864][ T3769] rust_binder: Error while translating object.
[  203.002977][   T31] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  203.006933][ T3769] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  203.142902][   T31] usb 5-1: device descriptor read/64, error -71
[  203.148681][ T3769] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:956
[  203.392834][   T31] usb 5-1: device descriptor read/64, error -71
[  203.512895][   T31] usb usb5-port1: attempt power cycle
[  203.534755][ T3779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:594
[  203.682830][  T472] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  203.842788][  T472] usb 3-1: Using ep0 maxpacket: 32
[  203.849517][  T472] usb 3-1: unable to get BOS descriptor or descriptor too short
[  203.858259][  T472] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 195, changing to 7
[  203.863088][   T31] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  203.873635][  T472] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  203.886588][  T472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.895417][  T472] usb 3-1: Product: syz
[  203.895448][   T31] usb 5-1: device descriptor read/8, error -71
[  203.899659][  T472] usb 3-1: Manufacturer: syz
[  203.899679][  T472] usb 3-1: SerialNumber: syz
[  204.044174][   T31] usb 5-1: device descriptor read/8, error -71
[  204.120105][  T472] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  204.127310][  T472] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  204.139927][  T472] usb 3-1: USB disconnect, device number 95
[  204.151604][  T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  204.212323][ T3787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1231'.
[  204.263313][ T3791] validate_nla: 5 callbacks suppressed
[  204.263372][ T3791] netlink: 'syz.0.1233': attribute type 9 has an invalid length.
[  204.277164][ T3791] netlink: 'syz.0.1233': attribute type 2 has an invalid length.
[  204.292827][   T31] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  204.314162][   T31] usb 5-1: device descriptor read/8, error -71
[  204.444645][   T31] usb 5-1: device descriptor read/8, error -71
[  204.541744][ T3804] rust_binder: Error in use_page_slow: ESRCH
[  204.541770][ T3804] rust_binder: use_range failure ESRCH
[  204.548043][ T3804] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false
[  204.554092][ T3804] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  204.554905][   T31] usb usb5-port1: unable to enumerate USB device
[  204.562854][ T3804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:619
[  204.597539][ T3808] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  204.610158][ T3808] FAULT_INJECTION: forcing a failure.
[  204.610158][ T3808] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  204.630245][ T3808] CPU: 1 UID: 0 PID: 3808 Comm: syz.0.1238 Not tainted syzkaller #0 6519e46a2ad0e7da7eb9d1859c66c62b15485067
[  204.630284][ T3808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  204.630309][ T3808] Call Trace:
[  204.630321][ T3808]  <TASK>
[  204.630331][ T3808]  __dump_stack+0x21/0x30
[  204.630373][ T3808]  dump_stack_lvl+0x140/0x1c0
[  204.630429][ T3808]  ? __cfi_dump_stack_lvl+0x10/0x10
[  204.630489][ T3808]  dump_stack+0x19/0x20
[  204.630537][ T3808]  should_fail_ex+0x3d7/0x530
[  204.630586][ T3808]  should_fail+0xf/0x20
[  204.630630][ T3808]  should_fail_usercopy+0x1e/0x30
[  204.630683][ T3808]  _copy_from_user+0x20/0xa0
[  204.630713][ T3808]  _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x8ba/0xaf80
[  204.630804][ T3808]  ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10
[  204.630965][ T3808]  ? put_dec_trunc8+0x229/0x380
[  204.631025][ T3808]  ? put_dec+0xd7/0xf0
[  204.631078][ T3808]  ? __asan_memset+0x39/0x50
[  204.631127][ T3808]  ? move_right+0x8e/0xb0
[  204.631182][ T3808]  ? format_decode+0x1bb/0x1610
[  204.631243][ T3808]  ? vsnprintf+0x7b4/0x1ad0
[  204.631297][ T3808]  ? __asan_memcpy+0x5a/0x80
[  204.631347][ T3808]  ? vsnprintf+0x19ef/0x1ad0
[  204.631399][ T3808]  ? desc_read+0x202/0x3e0
[  204.631438][ T3808]  ? __kasan_check_write+0x18/0x20
[  204.631478][ T3808]  ? desc_read+0x1ab/0x3e0
[  204.631517][ T3808]  ? prb_first_seq+0x109/0x1d0
[  204.631558][ T3808]  ? __cfi_prb_first_seq+0x10/0x10
[  204.631596][ T3808]  ? __kasan_check_write+0x18/0x20
[  204.631646][ T3808]  ? desc_read+0x1ab/0x3e0
[  204.631676][ T3808]  ? __kasan_check_read+0x15/0x20
[  204.631725][ T3808]  ? this_cpu_in_panic+0x56/0x90
[  204.631767][ T3808]  ? _prb_read_valid+0x9f3/0xa80
[  204.631807][ T3808]  ? record_print_text+0x290/0x450
[  204.631857][ T3808]  ? prb_read_valid+0x80/0x80
[  204.631896][ T3808]  ? _raw_spin_lock_irqsave+0x31/0x160
[  204.631952][ T3808]  ? xfd_validate_state+0x68/0x140
[  204.632002][ T3808]  ? __kasan_check_read+0x15/0x20
[  204.632053][ T3808]  ? __perf_event_task_sched_in+0x1190/0x1370
[  204.632094][ T3808]  ? __kasan_check_write+0x18/0x20
[  204.632145][ T3808]  ? __switch_to+0xc4f/0x1300
[  204.632196][ T3808]  ? __perf_event_task_sched_out+0x1d9/0xb90
[  204.632259][ T3808]  ? __cfi___perf_event_task_sched_in+0x10/0x10
[  204.632292][ T3808]  ? __cfi___switch_to+0x10/0x10
[  204.632342][ T3808]  ? __cfi___perf_event_task_sched_out+0x10/0x10
[  204.632383][ T3808]  ? psi_task_switch+0xad/0xa10
[  204.632429][ T3808]  ? _raw_spin_unlock+0x45/0x60
[  204.632482][ T3808]  ? finish_task_switch+0x139/0x760
[  204.632509][ T3808]  ? __switch_to_asm+0x3d/0x70
[  204.632546][ T3808]  ? __schedule+0x13a1/0x1fa0
[  204.632588][ T3808]  ? __kasan_check_write+0x18/0x20
[  204.632638][ T3808]  ? _raw_spin_lock+0x92/0x120
[  204.632692][ T3808]  ? __cfi__raw_spin_lock+0x10/0x10
[  204.632740][ T3808]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  204.632780][ T3808]  ? _raw_spin_unlock+0x45/0x60
[  204.632818][ T3808]  ? __asan_set_shadow_00+0x12/0x20
[  204.632850][ T3808]  ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x102f/0x1d80
[  204.632903][ T3808]  ? llist_add_batch+0x10f/0x1f0
[  204.632933][ T3808]  ? prb_read_valid+0x41/0x80
[  204.632959][ T3808]  ? __cfi_llist_add_batch+0x10/0x10
[  204.632990][ T3808]  ? preempt_schedule_common+0x2d/0x60
[  204.633017][ T3808]  ? preempt_schedule+0xc5/0xe0
[  204.633044][ T3808]  ? __cfi_preempt_schedule+0x10/0x10
[  204.633071][ T3808]  ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10
[  204.633114][ T3808]  ? tick_nohz_tick_stopped+0x4c/0x60
[  204.633147][ T3808]  ? __irq_work_queue_local+0xc4/0x260
[  204.633182][ T3808]  ? irq_work_queue+0xc2/0x160
[  204.633214][ T3808]  ? vprintk_emit+0x3e3/0x650
[  204.633253][ T3808]  ? __cfi_vprintk_emit+0x10/0x10
[  204.633283][ T3808]  ? __asan_memcpy+0x5a/0x80
[  204.633318][ T3808]  ? __kasan_check_write+0x18/0x20
[  204.633352][ T3808]  ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x155/0x4a0
[  204.633412][ T3808]  ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x41a/0x8e0
[  204.633451][ T3808]  ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x10/0x10
[  204.633510][ T3808]  ? vprintk+0x93/0xa0
[  204.633543][ T3808]  ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x10/0x10
[  204.633584][ T3808]  ? _printk+0xde/0x140
[  204.633612][ T3808]  ? __kasan_check_write+0x18/0x20
[  204.633645][ T3808]  ? _raw_spin_lock+0x92/0x120
[  204.633682][ T3808]  ? __cfi__raw_spin_lock+0x10/0x10
[  204.633722][ T3808]  ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x7b2/0x1030
[  204.633761][ T3808]  ? __kernel_text_address+0x11/0x40
[  204.633793][ T3808]  ? unwind_get_return_address+0x51/0x90
[  204.633823][ T3808]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  204.633854][ T3808]  ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x10/0x10
[  204.633894][ T3808]  ? stack_trace_save+0xaa/0x100
[  204.633920][ T3808]  ? stack_depot_save_flags+0x38/0x800
[  204.633956][ T3808]  ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x113c/0x5c20
[  204.633989][ T3808]  ? __asan_memcpy+0x5a/0x80
[  204.634024][ T3808]  _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20
[  204.634057][ T3808]  ? _raw_spin_trylock+0xb5/0x140
[  204.634097][ T3808]  ? _raw_spin_unlock+0x45/0x60
[  204.634135][ T3808]  ? call_rcu_nocb+0x6d7/0xc80
[  204.634167][ T3808]  ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10
[  204.634203][ T3808]  ? swake_up_one_online_ipi+0x30/0x30
[  204.634347][ T3808]  ? __cfi_mt_free_rcu+0x10/0x10
[  204.634392][ T3808]  ? is_bpf_text_address+0x17b/0x1a0
[  204.634432][ T3808]  ? is_bpf_text_address+0x17b/0x1a0
[  204.634466][ T3808]  ? kernel_text_address+0xa9/0xe0
[  204.634498][ T3808]  ? __kernel_text_address+0x11/0x40
[  204.634529][ T3808]  ? unwind_get_return_address+0x51/0x90
[  204.634559][ T3808]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  204.634586][ T3808]  ? arch_stack_walk+0x10a/0x170
[  204.634631][ T3808]  ? is_bpf_text_address+0x17b/0x1a0
[  204.634666][ T3808]  ? kernel_text_address+0xa9/0xe0
[  204.634697][ T3808]  ? __kernel_text_address+0x11/0x40
[  204.634728][ T3808]  ? unwind_get_return_address+0x51/0x90
[  204.634756][ T3808]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  204.634788][ T3808]  ? stack_depot_save_flags+0x38/0x800
[  204.634822][ T3808]  ? stack_trace_save+0xaa/0x100
[  204.634849][ T3808]  ? kasan_save_track+0x4f/0x80
[  204.634885][ T3808]  ? kasan_save_track+0x3e/0x80
[  204.634922][ T3808]  ? kasan_save_alloc_info+0x40/0x50
[  204.634952][ T3808]  ? __kasan_slab_alloc+0x73/0x90
[  204.634975][ T3808]  ? kmem_cache_alloc_noprof+0x1bf/0x410
[  204.635010][ T3808]  ? security_inode_alloc+0x51/0x230
[  204.635047][ T3808]  ? inode_init_always_gfp+0x756/0x9e0
[  204.635072][ T3808]  ? alloc_inode+0xc5/0x270
[  204.635095][ T3808]  ? new_inode+0x25/0x1e0
[  204.635119][ T3808]  ? proc_pid_make_inode+0x25/0x140
[  204.635156][ T3808]  ? proc_pident_instantiate+0x6d/0x2c0
[  204.635180][ T3808]  ? proc_pident_lookup+0x1c7/0x270
[  204.635204][ T3808]  ? proc_tid_base_lookup+0x2f/0x40
[  204.635243][ T3808]  ? do_filp_open+0x1f5/0x440
[  204.635273][ T3808]  ? avc_has_perm_noaudit+0x26c/0x360
[  204.635310][ T3808]  ? __asan_memcpy+0x5a/0x80
[  204.635344][ T3808]  ? avc_has_perm_noaudit+0x28a/0x360
[  204.635383][ T3808]  ? avc_has_perm+0x155/0x240
[  204.635420][ T3808]  ? __cfi_avc_has_perm+0x10/0x10
[  204.635457][ T3808]  ? kasan_save_alloc_info+0x40/0x50
[  204.635492][ T3808]  ? selinux_file_open+0x46c/0x630
[  204.635524][ T3808]  ? __cfi_selinux_file_open+0x10/0x10
[  204.635562][ T3808]  ? avc_has_extended_perms+0x80b/0xe70
[  204.635599][ T3808]  ? __asan_memcpy+0x5a/0x80
[  204.635633][ T3808]  ? avc_has_extended_perms+0x969/0xe70
[  204.635672][ T3808]  ? __asan_set_shadow_00+0x12/0x20
[  204.635702][ T3808]  ? do_vfs_ioctl+0x182d/0x2010
[  204.635725][ T3808]  ? arch_stack_walk+0x10a/0x170
[  204.635761][ T3808]  ? __ia32_compat_sys_ioctl+0x920/0x920
[  204.635789][ T3808]  ? _parse_integer+0x2e/0x40
[  204.635822][ T3808]  ? ioctl_has_perm+0x39a/0x500
[  204.635855][ T3808]  ? has_cap_mac_admin+0xd0/0xd0
[  204.635888][ T3808]  ? proc_fail_nth_write+0x184/0x220
[  204.635917][ T3808]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  204.635949][ T3808]  ? selinux_file_ioctl+0x732/0x1480
[  204.635980][ T3808]  ? vfs_write+0x9a4/0xf90
[  204.636014][ T3808]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  204.636048][ T3808]  ? __cfi_vfs_write+0x10/0x10
[  204.636082][ T3808]  ? __kasan_check_write+0x18/0x20
[  204.636115][ T3808]  ? mutex_unlock+0x90/0x240
[  204.636143][ T3808]  ? __cfi_mutex_unlock+0x10/0x10
[  204.636180][ T3808]  ? __fget_files+0x2c5/0x340
[  204.636202][ T3808]  ? __fget_files+0x2c5/0x340
[  204.636223][ T3808]  ? bpf_lsm_file_ioctl+0xd/0x20
[  204.636253][ T3808]  ? security_file_ioctl+0x3e/0x110
[  204.636280][ T3808]  ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10
[  204.636309][ T3808]  __se_sys_ioctl+0x132/0x1b0
[  204.636331][ T3808]  __x64_sys_ioctl+0x7f/0xa0
[  204.636353][ T3808]  x64_sys_call+0x1878/0x2ee0
[  204.636386][ T3808]  do_syscall_64+0x57/0xf0
[  204.636420][ T3808]  ? clear_bhb_loop+0x50/0xa0
[  204.636442][ T3808]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  204.636477][ T3808] RIP: 0033:0x7fa4d3d9c819
[  204.636498][ T3808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  204.636519][ T3808] RSP: 002b:00007fa4d4d08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  204.636552][ T3808] RAX: ffffffffffffffda RBX: 00007fa4d4015fa0 RCX: 00007fa4d3d9c819
[  204.636569][ T3808] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000004
[  204.636584][ T3808] RBP: 00007fa4d4d08090 R08: 0000000000000000 R09: 0000000000000000
[  204.636599][ T3808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  204.636612][ T3808] R13: 00007fa4d4016038 R14: 00007fa4d4015fa0 R15: 00007ffcbc5fb3b8
[  204.636633][ T3808]  </TASK>
[  204.755085][   T36] kauditd_printk_skb: 3 callbacks suppressed
[  204.755140][   T36] audit: type=1400 audit(1776236817.314:673): avc:  denied  { lock } for  pid=3811 comm="syz.2.1240" path="socket:[38215]" dev="sockfs" ino=38215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  204.762189][ T3808] rust_binder: Write failure EFAULT in pid:621
[  205.174712][ T3814] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  205.336564][ T3816] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  205.523133][ T3817] rust_binder: Error while translating object.
[  205.637832][ T3819] rust_binder: Error while translating object.
[  205.640865][ T3817] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  205.667684][ T3819] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  205.674852][ T3817] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:423
[  205.702915][ T3819] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:623
[  205.941785][ T3837] netlink: 'syz.2.1250': attribute type 9 has an invalid length.
[  205.959116][ T3837] netlink: 'syz.2.1250': attribute type 2 has an invalid length.
[  206.082136][   T36] audit: type=1400 audit(1776236818.644:674): avc:  denied  { mounton } for  pid=3840 comm="syz.2.1252" path="/351/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  206.162792][  T472] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  206.257713][ T3846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  206.257979][ T3846] FAULT_INJECTION: forcing a failure.
[  206.257979][ T3846] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  206.278129][ T3846] CPU: 0 UID: 0 PID: 3846 Comm: syz.3.1253 Not tainted syzkaller #0 6519e46a2ad0e7da7eb9d1859c66c62b15485067
[  206.278183][ T3846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  206.278205][ T3846] Call Trace:
[  206.278216][ T3846]  <TASK>
[  206.278228][ T3846]  __dump_stack+0x21/0x30
[  206.278279][ T3846]  dump_stack_lvl+0x140/0x1c0
[  206.278324][ T3846]  ? __cfi_dump_stack_lvl+0x10/0x10
[  206.278368][ T3846]  dump_stack+0x19/0x20
[  206.278411][ T3846]  should_fail_ex+0x3d7/0x530
[  206.278455][ T3846]  should_fail+0xf/0x20
[  206.278494][ T3846]  should_fail_usercopy+0x1e/0x30
[  206.278541][ T3846]  _copy_from_user+0x20/0xa0
[  206.278569][ T3846]  _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x151a/0xaf80
[  206.278651][ T3846]  ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10
[  206.278797][ T3846]  ? is_bpf_text_address+0x17b/0x1a0
[  206.278843][ T3846]  ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0
[  206.278910][ T3846]  ? __asan_memcpy+0x5a/0x80
[  206.278956][ T3846]  ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0
[  206.279017][ T3846]  ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10
[  206.279084][ T3846]  ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0
[  206.279144][ T3846]  ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10
[  206.279215][ T3846]  ? desc_read+0x202/0x3e0
[  206.279245][ T3846]  ? __kasan_check_write+0x18/0x20
[  206.279290][ T3846]  ? desc_read+0x1ab/0x3e0
[  206.279321][ T3846]  ? prb_first_seq+0x109/0x1d0
[  206.279357][ T3846]  ? __cfi_prb_first_seq+0x10/0x10
[  206.279387][ T3846]  ? __kasan_check_write+0x18/0x20
[  206.279430][ T3846]  ? desc_read+0x1ab/0x3e0
[  206.279459][ T3846]  ? __kasan_check_read+0x15/0x20
[  206.279503][ T3846]  ? this_cpu_in_panic+0x56/0x90
[  206.279534][ T3846]  ? _prb_read_valid+0x9f3/0xa80
[  206.279571][ T3846]  ? __asan_memcpy+0x5a/0x80
[  206.279612][ T3846]  ? prb_read_valid+0x80/0x80
[  206.279648][ T3846]  ? data_alloc+0x4d0/0x7e0
[  206.279676][ T3846]  ? desc_read+0x202/0x3e0
[  206.279708][ T3846]  ? __kasan_check_write+0x18/0x20
[  206.279748][ T3846]  ? desc_read+0x1ab/0x3e0
[  206.279782][ T3846]  ? prb_first_seq+0x109/0x1d0
[  206.279813][ T3846]  ? __cfi_prb_first_seq+0x10/0x10
[  206.279847][ T3846]  ? __kasan_check_write+0x18/0x20
[  206.279887][ T3846]  ? desc_read+0x1ab/0x3e0
[  206.279921][ T3846]  ? __kasan_check_read+0x15/0x20
[  206.279961][ T3846]  ? this_cpu_in_panic+0x56/0x90
[  206.279997][ T3846]  ? _prb_read_valid+0x9f3/0xa80
[  206.280028][ T3846]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  206.280087][ T3846]  ? __kasan_check_write+0x18/0x20
[  206.280130][ T3846]  ? _raw_spin_lock+0x92/0x120
[  206.280184][ T3846]  ? __cfi__raw_spin_lock+0x10/0x10
[  206.280228][ T3846]  ? prb_read_valid+0x80/0x80
[  206.280264][ T3846]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  206.280312][ T3846]  ? _raw_spin_unlock+0x45/0x60
[  206.280357][ T3846]  ? __asan_set_shadow_00+0x12/0x20
[  206.280398][ T3846]  ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x102f/0x1d80
[  206.280449][ T3846]  ? llist_add_batch+0x10f/0x1f0
[  206.280486][ T3846]  ? prb_read_valid+0x41/0x80
[  206.280518][ T3846]  ? __cfi_llist_add_batch+0x10/0x10
[  206.280555][ T3846]  ? console_unlock+0x247/0x2c0
[  206.280593][ T3846]  ? __cfi_console_unlock+0x10/0x10
[  206.280629][ T3846]  ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10
[  206.280682][ T3846]  ? tick_nohz_tick_stopped+0x4c/0x60
[  206.280724][ T3846]  ? __irq_work_queue_local+0xc4/0x260
[  206.280763][ T3846]  ? irq_work_queue+0xc2/0x160
[  206.280805][ T3846]  ? vprintk_emit+0x3e3/0x650
[  206.280840][ T3846]  ? __cfi_vprintk_emit+0x10/0x10
[  206.280878][ T3846]  ? __asan_memcpy+0x5a/0x80
[  206.280922][ T3846]  ? __kasan_check_write+0x18/0x20
[  206.280962][ T3846]  ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x155/0x4a0
[  206.281034][ T3846]  ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x41a/0x8e0
[  206.281086][ T3846]  ? vprintk+0x93/0xa0
[  206.281131][ T3846]  ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x10/0x10
[  206.281191][ T3846]  ? _printk+0xde/0x140
[  206.281225][ T3846]  ? __kasan_check_write+0x18/0x20
[  206.281270][ T3846]  ? _raw_spin_lock+0x92/0x120
[  206.281317][ T3846]  ? __cfi__raw_spin_lock+0x10/0x10
[  206.281363][ T3846]  ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x7b2/0x1030
[  206.281414][ T3846]  ? __kernel_text_address+0x11/0x40
[  206.281451][ T3846]  ? unwind_get_return_address+0x51/0x90
[  206.281491][ T3846]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  206.281530][ T3846]  ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x10/0x10
[  206.281581][ T3846]  ? stack_trace_save+0xaa/0x100
[  206.281617][ T3846]  ? stack_depot_save_flags+0x38/0x800
[  206.281663][ T3846]  ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x113c/0x5c20
[  206.281699][ T3846]  ? __asan_memcpy+0x5a/0x80
[  206.281739][ T3846]  _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20
[  206.281783][ T3846]  ? _raw_spin_trylock+0xb5/0x140
[  206.281834][ T3846]  ? _raw_spin_unlock+0x45/0x60
[  206.281880][ T3846]  ? call_rcu_nocb+0x6d7/0xc80
[  206.281923][ T3846]  ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10
[  206.281968][ T3846]  ? swake_up_one_online_ipi+0x30/0x30
[  206.282009][ T3846]  ? __cfi_mt_free_rcu+0x10/0x10
[  206.282066][ T3846]  ? is_bpf_text_address+0x17b/0x1a0
[  206.282116][ T3846]  ? is_bpf_text_address+0x17b/0x1a0
[  206.282170][ T3846]  ? kernel_text_address+0xa9/0xe0
[  206.282208][ T3846]  ? __kernel_text_address+0x11/0x40
[  206.282250][ T3846]  ? unwind_get_return_address+0x51/0x90
[  206.282285][ T3846]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  206.282323][ T3846]  ? arch_stack_walk+0x10a/0x170
[  206.282380][ T3846]  ? is_bpf_text_address+0x17b/0x1a0
[  206.282420][ T3846]  ? kernel_text_address+0xa9/0xe0
[  206.282463][ T3846]  ? __kernel_text_address+0x11/0x40
[  206.282504][ T3846]  ? unwind_get_return_address+0x51/0x90
[  206.282540][ T3846]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  206.282582][ T3846]  ? stack_depot_save_flags+0x38/0x800
[  206.282623][ T3846]  ? stack_trace_save+0xaa/0x100
[  206.282659][ T3846]  ? kasan_save_track+0x4f/0x80
[  206.282707][ T3846]  ? kasan_save_track+0x3e/0x80
[  206.282745][ T3846]  ? kasan_save_alloc_info+0x40/0x50
[  206.282781][ T3846]  ? __kasan_slab_alloc+0x73/0x90
[  206.282813][ T3846]  ? kmem_cache_alloc_noprof+0x1bf/0x410
[  206.282856][ T3846]  ? security_inode_alloc+0x51/0x230
[  206.282905][ T3846]  ? inode_init_always_gfp+0x756/0x9e0
[  206.282935][ T3846]  ? alloc_inode+0xc5/0x270
[  206.282968][ T3846]  ? new_inode+0x25/0x1e0
[  206.282996][ T3846]  ? proc_pid_make_inode+0x25/0x140
[  206.283045][ T3846]  ? proc_pident_instantiate+0x6d/0x2c0
[  206.283079][ T3846]  ? proc_pident_lookup+0x1c7/0x270
[  206.283108][ T3846]  ? proc_tid_base_lookup+0x2f/0x40
[  206.283155][ T3846]  ? do_filp_open+0x1f5/0x440
[  206.283193][ T3846]  ? avc_has_perm_noaudit+0x26c/0x360
[  206.283243][ T3846]  ? __asan_memcpy+0x5a/0x80
[  206.283288][ T3846]  ? avc_has_perm_noaudit+0x28a/0x360
[  206.283334][ T3846]  ? avc_has_perm+0x155/0x240
[  206.283383][ T3846]  ? __cfi_avc_has_perm+0x10/0x10
[  206.283430][ T3846]  ? kasan_save_alloc_info+0x40/0x50
[  206.283471][ T3846]  ? selinux_file_open+0x46c/0x630
[  206.283515][ T3846]  ? __cfi_selinux_file_open+0x10/0x10
[  206.283563][ T3846]  ? avc_has_extended_perms+0x80b/0xe70
[  206.283608][ T3846]  ? __asan_memcpy+0x5a/0x80
[  206.283653][ T3846]  ? avc_has_extended_perms+0x969/0xe70
[  206.283704][ T3846]  ? __asan_set_shadow_00+0x12/0x20
[  206.283738][ T3846]  ? do_vfs_ioctl+0x182d/0x2010
[  206.283772][ T3846]  ? arch_stack_walk+0x10a/0x170
[  206.283819][ T3846]  ? __ia32_compat_sys_ioctl+0x920/0x920
[  206.283855][ T3846]  ? _parse_integer+0x2e/0x40
[  206.283900][ T3846]  ? ioctl_has_perm+0x39a/0x500
[  206.283937][ T3846]  ? has_cap_mac_admin+0xd0/0xd0
[  206.283983][ T3846]  ? proc_fail_nth_write+0x184/0x220
[  206.284020][ T3846]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  206.284060][ T3846]  ? selinux_file_ioctl+0x732/0x1480
[  206.284103][ T3846]  ? vfs_write+0x9a4/0xf90
[  206.284153][ T3846]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  206.284194][ T3846]  ? __cfi_vfs_write+0x10/0x10
[  206.284240][ T3846]  ? __kasan_check_write+0x18/0x20
[  206.284283][ T3846]  ? mutex_unlock+0x90/0x240
[  206.284318][ T3846]  ? __cfi_mutex_unlock+0x10/0x10
[  206.284356][ T3846]  ? __fget_files+0x2c5/0x340
[  206.284388][ T3846]  ? __fget_files+0x2c5/0x340
[  206.284419][ T3846]  ? bpf_lsm_file_ioctl+0xd/0x20
[  206.284453][ T3846]  ? security_file_ioctl+0x3e/0x110
[  206.284495][ T3846]  ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10
[  206.284534][ T3846]  __se_sys_ioctl+0x132/0x1b0
[  206.284570][ T3846]  __x64_sys_ioctl+0x7f/0xa0
[  206.284599][ T3846]  x64_sys_call+0x1878/0x2ee0
[  206.284647][ T3846]  do_syscall_64+0x57/0xf0
[  206.284695][ T3846]  ? clear_bhb_loop+0x50/0xa0
[  206.284728][ T3846]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  206.284778][ T3846] RIP: 0033:0x7f229499c819
[  206.284805][ T3846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  206.284837][ T3846] RSP: 002b:00007f229586a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  206.284870][ T3846] RAX: ffffffffffffffda RBX: 00007f2294c15fa0 RCX: 00007f229499c819
[  206.284901][ T3846] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000004
[  206.284923][ T3846] RBP: 00007f229586a090 R08: 0000000000000000 R09: 0000000000000000
[  206.284946][ T3846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  206.284970][ T3846] R13: 00007f2294c16038 R14: 00007f2294c15fa0 R15: 00007ffe54524968
[  206.284997][ T3846]  </TASK>
[  207.283809][ T3846] rust_binder: Write failure EFAULT in pid:881
[  207.303904][  T472] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.321293][  T472] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.332191][  T472] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  207.341390][  T472] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  207.349749][  T472] usb 5-1: Manufacturer: syz
[  207.355645][  T472] usb 5-1: config 0 descriptor??
[  207.464087][ T3852] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  207.468617][ T3852] rust_binder: Error while translating object.
[  207.482870][ T3852] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  207.491041][ T3852] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:886
[  207.527487][   T36] audit: type=1400 audit(1776236820.094:675): avc:  denied  { accept } for  pid=3857 comm="syz.3.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  207.529973][ T3858] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  207.558051][ T3858] rust_binder: Error while translating object.
[  207.565700][ T3858] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  207.572367][ T3858] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:888
[  208.375470][   T36] audit: type=1400 audit(1776236820.944:676): avc:  denied  { write } for  pid=3863 comm="syz.2.1260" path="socket:[39068]" dev="sockfs" ino=39068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  208.506802][  T472] uclogic 0003:256C:006D.001C: failed retrieving Huion firmware version: -71
[  208.521757][  T472] uclogic 0003:256C:006D.001C: failed probing parameters: -71
[  208.535323][  T472] uclogic 0003:256C:006D.001C: probe with driver uclogic failed with error -71
[  208.559505][  T472] usb 5-1: USB disconnect, device number 33
[  208.590067][ T3876] netlink: 'syz.2.1263': attribute type 9 has an invalid length.
[  208.599745][ T3876] netlink: 'syz.2.1263': attribute type 2 has an invalid length.
[  208.666785][ T3885] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  208.666997][ T3885] FAULT_INJECTION: forcing a failure.
[  208.666997][ T3885] name failslab, interval 1, probability 0, space 0, times 0
[  208.686800][ T3885] CPU: 1 UID: 0 PID: 3885 Comm: syz.4.1267 Not tainted syzkaller #0 6519e46a2ad0e7da7eb9d1859c66c62b15485067
[  208.686835][ T3885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  208.686848][ T3885] Call Trace:
[  208.686856][ T3885]  <TASK>
[  208.686865][ T3885]  __dump_stack+0x21/0x30
[  208.686901][ T3885]  dump_stack_lvl+0x140/0x1c0
[  208.686929][ T3885]  ? __cfi_dump_stack_lvl+0x10/0x10
[  208.686961][ T3885]  dump_stack+0x19/0x20
[  208.686988][ T3885]  should_fail_ex+0x3d7/0x530
[  208.687018][ T3885]  should_failslab+0xac/0x100
[  208.687040][ T3885]  __kmalloc_node_track_caller_noprof+0x68/0x4f0
[  208.687074][ T3885]  ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x124/0x850
[  208.687142][ T3885]  krealloc_noprof+0x8d/0x130
[  208.687174][ T3885]  _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x124/0x850
[  208.687251][ T3885]  ? __cfi__raw_spin_lock+0x10/0x10
[  208.687285][ T3885]  ? __cfi__RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x10/0x10
[  208.687350][ T3885]  ? __kasan_check_write+0x18/0x20
[  208.687379][ T3885]  ? avc_has_perm_noaudit+0x26c/0x360
[  208.687413][ T3885]  ? __asan_memcpy+0x5a/0x80
[  208.687443][ T3885]  ? avc_has_perm_noaudit+0x28a/0x360
[  208.687491][ T3885]  ? avc_has_perm+0x155/0x240
[  208.687523][ T3885]  ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0
[  208.687553][ T3885]  ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10
[  208.687590][ T3885]  ? __kasan_check_write+0x18/0x20
[  208.687620][ T3885]  ? _raw_spin_lock+0x92/0x120
[  208.687651][ T3885]  ? __cfi__raw_spin_lock+0x10/0x10
[  208.687685][ T3885]  ? selinux_binder_transaction+0x165/0x1d0
[  208.687707][ T3885]  ? bpf_lsm_binder_transaction+0xd/0x20
[  208.687735][ T3885]  _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xa2f/0x1290
[  208.687780][ T3885]  ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x10/0x10
[  208.687828][ T3885]  ? __kasan_check_write+0x18/0x20
[  208.687858][ T3885]  ? _raw_spin_lock+0x92/0x120
[  208.687890][ T3885]  ? __cfi__raw_spin_lock+0x10/0x10
[  208.687923][ T3885]  ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x155c/0xaf80
[  208.687959][ T3885]  ? __asan_memcpy+0x5a/0x80
[  208.687988][ T3885]  _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x15b0/0xaf80
[  208.688047][ T3885]  ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10
[  208.688147][ T3885]  ? is_bpf_text_address+0x17b/0x1a0
[  208.688178][ T3885]  ? kernel_text_address+0xa9/0xe0
[  208.688206][ T3885]  ? __kernel_text_address+0x11/0x40
[  208.688238][ T3885]  ? unwind_get_return_address+0x51/0x90
[  208.688268][ T3885]  ? is_bpf_text_address+0x17b/0x1a0
[  208.688296][ T3885]  ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0
[  208.688336][ T3885]  ? __asan_memcpy+0x5a/0x80
[  208.688364][ T3885]  ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0
[  208.688403][ T3885]  ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10
[  208.688443][ T3885]  ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0
[  208.688483][ T3885]  ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10
[  208.688523][ T3885]  ? desc_read+0x202/0x3e0
[  208.688543][ T3885]  ? __kasan_check_write+0x18/0x20
[  208.688573][ T3885]  ? desc_read+0x1ab/0x3e0
[  208.688594][ T3885]  ? prb_first_seq+0x109/0x1d0
[  208.688616][ T3885]  ? __cfi_prb_first_seq+0x10/0x10
[  208.688637][ T3885]  ? __kasan_check_write+0x18/0x20
[  208.688667][ T3885]  ? desc_read+0x1ab/0x3e0
[  208.688688][ T3885]  ? __kasan_check_read+0x15/0x20
[  208.688718][ T3885]  ? this_cpu_in_panic+0x56/0x90
[  208.688741][ T3885]  ? _prb_read_valid+0x9f3/0xa80
[  208.688764][ T3885]  ? __asan_memcpy+0x5a/0x80
[  208.688795][ T3885]  ? prb_read_valid+0x80/0x80
[  208.688817][ T3885]  ? data_alloc+0x4d0/0x7e0
[  208.688839][ T3885]  ? desc_read+0x202/0x3e0
[  208.688861][ T3885]  ? __kasan_check_write+0x18/0x20
[  208.688891][ T3885]  ? desc_read+0x1ab/0x3e0
[  208.688913][ T3885]  ? prb_first_seq+0x109/0x1d0
[  208.688935][ T3885]  ? __cfi_prb_first_seq+0x10/0x10
[  208.688956][ T3885]  ? __kasan_check_write+0x18/0x20
[  208.688987][ T3885]  ? desc_read+0x1ab/0x3e0
[  208.689007][ T3885]  ? __kasan_check_read+0x15/0x20
[  208.689037][ T3885]  ? this_cpu_in_panic+0x56/0x90
[  208.689059][ T3885]  ? _prb_read_valid+0x9f3/0xa80
[  208.689080][ T3885]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  208.689113][ T3885]  ? __kasan_check_write+0x18/0x20
[  208.689143][ T3885]  ? _raw_spin_lock+0x92/0x120
[  208.689174][ T3885]  ? __cfi__raw_spin_lock+0x10/0x10
[  208.689208][ T3885]  ? prb_read_valid+0x80/0x80
[  208.689240][ T3885]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  208.689277][ T3885]  ? _raw_spin_unlock+0x45/0x60
[  208.689311][ T3885]  ? __asan_set_shadow_00+0x12/0x20
[  208.689339][ T3885]  ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x102f/0x1d80
[  208.689378][ T3885]  ? llist_add_batch+0x10f/0x1f0
[  208.689405][ T3885]  ? prb_read_valid+0x41/0x80
[  208.689427][ T3885]  ? __cfi_llist_add_batch+0x10/0x10
[  208.689454][ T3885]  ? console_unlock+0x247/0x2c0
[  208.689481][ T3885]  ? __cfi_console_unlock+0x10/0x10
[  208.689507][ T3885]  ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10
[  208.689544][ T3885]  ? tick_nohz_tick_stopped+0x4c/0x60
[  208.689574][ T3885]  ? __irq_work_queue_local+0xc4/0x260
[  208.689603][ T3885]  ? irq_work_queue+0xc2/0x160
[  208.689630][ T3885]  ? vprintk_emit+0x3e3/0x650
[  208.689658][ T3885]  ? __kasan_check_write+0x18/0x20
[  208.689689][ T3885]  ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x155/0x4a0
[  208.689744][ T3885]  ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x41a/0x8e0
[  208.689782][ T3885]  ? vprintk+0x93/0xa0
[  208.689814][ T3885]  ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x10/0x10
[  208.689849][ T3885]  ? _printk+0xde/0x140
[  208.689874][ T3885]  ? __kasan_check_write+0x18/0x20
[  208.689905][ T3885]  ? _raw_spin_lock+0x92/0x120
[  208.689938][ T3885]  ? __cfi__raw_spin_lock+0x10/0x10
[  208.689975][ T3885]  ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x7b2/0x1030
[  208.690011][ T3885]  ? __kernel_text_address+0x11/0x40
[  208.690041][ T3885]  ? unwind_get_return_address+0x51/0x90
[  208.690068][ T3885]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  208.690096][ T3885]  ? stack_trace_save+0xaa/0x100
[  208.690120][ T3885]  ? stack_depot_save_flags+0x38/0x800
[  208.690154][ T3885]  ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x113c/0x5c20
[  208.690184][ T3885]  ? __asan_memcpy+0x5a/0x80
[  208.690216][ T3885]  _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20
[  208.690253][ T3885]  ? _raw_spin_trylock+0xb5/0x140
[  208.690289][ T3885]  ? _raw_spin_unlock+0x45/0x60
[  208.690324][ T3885]  ? call_rcu_nocb+0x6d7/0xc80
[  208.690354][ T3885]  ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10
[  208.690385][ T3885]  ? swake_up_one_online_ipi+0x30/0x30
[  208.690416][ T3885]  ? __cfi_mt_free_rcu+0x10/0x10
[  208.690457][ T3885]  ? is_bpf_text_address+0x17b/0x1a0
[  208.690493][ T3885]  ? is_bpf_text_address+0x17b/0x1a0
[  208.690525][ T3885]  ? kernel_text_address+0xa9/0xe0
[  208.690554][ T3885]  ? __kernel_text_address+0x11/0x40
[  208.690582][ T3885]  ? unwind_get_return_address+0x51/0x90
[  208.690609][ T3885]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  208.690633][ T3885]  ? arch_stack_walk+0x10a/0x170
[  208.690675][ T3885]  ? is_bpf_text_address+0x17b/0x1a0
[  208.690706][ T3885]  ? kernel_text_address+0xa9/0xe0
[  208.690734][ T3885]  ? __kernel_text_address+0x11/0x40
[  208.690762][ T3885]  ? unwind_get_return_address+0x51/0x90
[  208.690789][ T3885]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  208.690817][ T3885]  ? stack_depot_save_flags+0x38/0x800
[  208.690848][ T3885]  ? stack_trace_save+0xaa/0x100
[  208.690873][ T3885]  ? kasan_save_track+0x4f/0x80
[  208.690907][ T3885]  ? kasan_save_track+0x3e/0x80
[  208.690941][ T3885]  ? kasan_save_alloc_info+0x40/0x50
[  208.690970][ T3885]  ? __kasan_slab_alloc+0x73/0x90
[  208.690992][ T3885]  ? kmem_cache_alloc_noprof+0x1bf/0x410
[  208.691025][ T3885]  ? security_inode_alloc+0x51/0x230
[  208.691061][ T3885]  ? inode_init_always_gfp+0x756/0x9e0
[  208.691084][ T3885]  ? alloc_inode+0xc5/0x270
[  208.691105][ T3885]  ? new_inode+0x25/0x1e0
[  208.691128][ T3885]  ? proc_pid_make_inode+0x25/0x140
[  208.691163][ T3885]  ? proc_pident_instantiate+0x6d/0x2c0
[  208.691186][ T3885]  ? proc_pident_lookup+0x1c7/0x270
[  208.691207][ T3885]  ? proc_tid_base_lookup+0x2f/0x40
[  208.691243][ T3885]  ? do_filp_open+0x1f5/0x440
[  208.691271][ T3885]  ? avc_has_perm_noaudit+0x26c/0x360
[  208.691306][ T3885]  ? __asan_memcpy+0x5a/0x80
[  208.691338][ T3885]  ? avc_has_perm_noaudit+0x28a/0x360
[  208.691374][ T3885]  ? avc_has_perm+0x155/0x240
[  208.691408][ T3885]  ? __cfi_avc_has_perm+0x10/0x10
[  208.691441][ T3885]  ? kasan_save_alloc_info+0x40/0x50
[  208.691473][ T3885]  ? selinux_file_open+0x46c/0x630
[  208.691504][ T3885]  ? __cfi_selinux_file_open+0x10/0x10
[  208.691567][ T3885]  ? avc_has_extended_perms+0x80b/0xe70
[  208.691612][ T3885]  ? __asan_memcpy+0x5a/0x80
[  208.691644][ T3885]  ? avc_has_extended_perms+0x969/0xe70
[  208.691681][ T3885]  ? __asan_set_shadow_00+0x12/0x20
[  208.691717][ T3885]  ? do_vfs_ioctl+0x182d/0x2010
[  208.691745][ T3885]  ? arch_stack_walk+0x10a/0x170
[  208.691784][ T3885]  ? __ia32_compat_sys_ioctl+0x920/0x920
[  208.691810][ T3885]  ? _parse_integer+0x2e/0x40
[  208.691842][ T3885]  ? ioctl_has_perm+0x39a/0x500
[  208.691892][ T3885]  ? has_cap_mac_admin+0xd0/0xd0
[  208.691923][ T3885]  ? proc_fail_nth_write+0x184/0x220
[  208.691951][ T3885]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  208.691979][ T3885]  ? selinux_file_ioctl+0x732/0x1480
[  208.692008][ T3885]  ? vfs_write+0x9a4/0xf90
[  208.692039][ T3885]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  208.692070][ T3885]  ? __cfi_vfs_write+0x10/0x10
[  208.692101][ T3885]  ? __kasan_check_write+0x18/0x20
[  208.692133][ T3885]  ? mutex_unlock+0x90/0x240
[  208.692158][ T3885]  ? __cfi_mutex_unlock+0x10/0x10
[  208.692184][ T3885]  ? __fget_files+0x2c5/0x340
[  208.692206][ T3885]  ? __fget_files+0x2c5/0x340
[  208.692237][ T3885]  ? bpf_lsm_file_ioctl+0xd/0x20
[  208.692262][ T3885]  ? security_file_ioctl+0x3e/0x110
[  208.692291][ T3885]  ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10
[  208.692321][ T3885]  __se_sys_ioctl+0x132/0x1b0
[  208.692343][ T3885]  __x64_sys_ioctl+0x7f/0xa0
[  208.692365][ T3885]  x64_sys_call+0x1878/0x2ee0
[  208.692399][ T3885]  do_syscall_64+0x57/0xf0
[  208.692434][ T3885]  ? clear_bhb_loop+0x50/0xa0
[  208.692458][ T3885]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  208.692494][ T3885] RIP: 0033:0x7f45e379c819
[  208.692516][ T3885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  208.692538][ T3885] RSP: 002b:00007f45e45a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  208.692564][ T3885] RAX: ffffffffffffffda RBX: 00007f45e3a15fa0 RCX: 00007f45e379c819
[  208.692582][ T3885] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000004
[  208.692605][ T3885] RBP: 00007f45e45a3090 R08: 0000000000000000 R09: 0000000000000000
[  208.692620][ T3885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  208.692634][ T3885] R13: 00007f45e3a16038 R14: 00007f45e3a15fa0 R15: 00007ffc83aa3c68
[  208.692663][ T3885]  </TASK>
[  208.723132][ T3885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:442
[  208.920433][ T3886] rust_binder: Error in use_page_slow: ESRCH
[  209.294636][ T3896] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  209.295294][ T3896] rust_binder: Write failure EINVAL in pid:897
[  209.310159][ T3886] rust_binder: use_range failure ESRCH
[  209.377492][ T3898] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  209.397642][ T3886] rust_binder: Failed to allocate buffer. len:112, is_oneway:true
[  209.439431][   T36] audit: type=1400 audit(1776236822.004:677): avc:  denied  { mounton } for  pid=3897 comm="syz.3.1271" path="/324/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  209.440782][ T3886] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  209.447984][ T3898] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  209.450816][ T3886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:989
[  209.464305][ T3898] rust_binder: Error while translating object.
[  210.011964][ T3898] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  210.033025][ T3898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:899
[  210.113417][ T3924] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  210.123439][ T3924] FAULT_INJECTION: forcing a failure.
[  210.123439][ T3924] name failslab, interval 1, probability 0, space 0, times 0
[  210.143517][ T3924] CPU: 0 UID: 0 PID: 3924 Comm: syz.0.1280 Not tainted syzkaller #0 6519e46a2ad0e7da7eb9d1859c66c62b15485067
[  210.143554][ T3924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  210.143569][ T3924] Call Trace:
[  210.143577][ T3924]  <TASK>
[  210.143587][ T3924]  __dump_stack+0x21/0x30
[  210.143623][ T3924]  dump_stack_lvl+0x140/0x1c0
[  210.143654][ T3924]  ? __cfi_dump_stack_lvl+0x10/0x10
[  210.143687][ T3924]  dump_stack+0x19/0x20
[  210.143716][ T3924]  should_fail_ex+0x3d7/0x530
[  210.143747][ T3924]  should_failslab+0xac/0x100
[  210.143784][ T3924]  __kmalloc_node_track_caller_noprof+0x68/0x4f0
[  210.143825][ T3924]  ? __kasan_check_write+0x18/0x20
[  210.143857][ T3924]  ? _raw_spin_lock+0x92/0x120
[  210.143892][ T3924]  ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x15b0/0x9130
[  210.143935][ T3924]  ? __cfi__raw_spin_lock+0x10/0x10
[  210.143971][ T3924]  krealloc_noprof+0x8d/0x130
[  210.144005][ T3924]  _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x15b0/0x9130
[  210.144062][ T3924]  ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x10/0x10
[  210.144209][ T3924]  ? is_bpf_text_address+0x17b/0x1a0
[  210.144243][ T3924]  ? kernel_text_address+0xa9/0xe0
[  210.144273][ T3924]  ? core_kernel_text+0x20/0xa0
[  210.144300][ T3924]  ? unwind_get_return_address+0x51/0x90
[  210.144328][ T3924]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  210.144357][ T3924]  ? stack_depot_save_flags+0x38/0x800
[  210.144392][ T3924]  _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810
[  210.144425][ T3924]  ? krealloc_noprof+0x8d/0x130
[  210.144458][ T3924]  ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x124/0x850
[  210.144525][ T3924]  ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xa2f/0x1290
[  210.144575][ T3924]  ? __cfi__RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x10/0x10
[  210.144610][ T3924]  ? kasan_save_alloc_info+0x40/0x50
[  210.144641][ T3924]  ? __kasan_kmalloc+0x96/0xb0
[  210.144664][ T3924]  ? __kmalloc_node_track_caller_noprof+0x251/0x4f0
[  210.144699][ T3924]  ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x124/0x850
[  210.144778][ T3924]  ? __asan_memset+0x39/0x50
[  210.144810][ T3924]  ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x2ff/0x850
[  210.144878][ T3924]  ? __cfi__raw_spin_lock+0x10/0x10
[  210.144913][ T3924]  ? __cfi__RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x10/0x10
[  210.144981][ T3924]  ? __kasan_check_write+0x18/0x20
[  210.145012][ T3924]  ? avc_has_perm_noaudit+0x26c/0x360
[  210.145048][ T3924]  ? __asan_memcpy+0x5a/0x80
[  210.145079][ T3924]  ? avc_has_perm_noaudit+0x28a/0x360
[  210.145116][ T3924]  ? avc_has_perm+0x155/0x240
[  210.145150][ T3924]  ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0
[  210.145182][ T3924]  ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10
[  210.145213][ T3924]  ? __kasan_check_write+0x18/0x20
[  210.145244][ T3924]  ? _raw_spin_lock+0x92/0x120
[  210.145278][ T3924]  ? selinux_binder_transaction+0x165/0x1d0
[  210.145302][ T3924]  _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xb22/0x1290
[  210.145351][ T3924]  ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x10/0x10
[  210.145400][ T3924]  ? __kasan_check_write+0x18/0x20
[  210.145431][ T3924]  ? _raw_spin_lock+0x92/0x120
[  210.145465][ T3924]  ? __cfi__raw_spin_lock+0x10/0x10
[  210.145500][ T3924]  ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x155c/0xaf80
[  210.145538][ T3924]  ? __asan_memcpy+0x5a/0x80
[  210.145568][ T3924]  _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x15b0/0xaf80
[  210.145620][ T3924]  ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10
[  210.145710][ T3924]  ? put_dec_trunc8+0x229/0x380
[  210.145738][ T3924]  ? put_dec+0xd7/0xf0
[  210.145770][ T3924]  ? __asan_memset+0x39/0x50
[  210.145795][ T3924]  ? move_right+0x8e/0xb0
[  210.145822][ T3924]  ? format_decode+0x1bb/0x1610
[  210.145848][ T3924]  ? vsnprintf+0x7b4/0x1ad0
[  210.145874][ T3924]  ? __asan_memcpy+0x5a/0x80
[  210.145899][ T3924]  ? vsnprintf+0x19ef/0x1ad0
[  210.145925][ T3924]  ? desc_read+0x202/0x3e0
[  210.145945][ T3924]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  210.145969][ T3924]  ? update_curr+0xf8/0x9e0
[  210.145997][ T3924]  ? prb_first_seq+0x109/0x1d0
[  210.146017][ T3924]  ? __dequeue_entity+0x59/0xd00
[  210.146040][ T3924]  ? update_entity_lag+0x28f/0x2c0
[  210.146069][ T3924]  ? dequeue_entity+0x809/0x1380
[  210.146090][ T3924]  ? record_print_text+0x290/0x450
[  210.146116][ T3924]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  210.146140][ T3924]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  210.146165][ T3924]  ? xfd_validate_state+0x68/0x140
[  210.146190][ T3924]  ? __kasan_check_read+0x15/0x20
[  210.146215][ T3924]  ? __perf_event_task_sched_in+0x1190/0x1370
[  210.146235][ T3924]  ? __kasan_check_write+0x18/0x20
[  210.146260][ T3924]  ? __switch_to+0xc4f/0x1300
[  210.146286][ T3924]  ? __perf_event_task_sched_out+0x1d9/0xb90
[  210.146304][ T3924]  ? __cfi___perf_event_task_sched_in+0x10/0x10
[  210.146323][ T3924]  ? __cfi___switch_to+0x10/0x10
[  210.146348][ T3924]  ? __cfi___perf_event_task_sched_out+0x10/0x10
[  210.146366][ T3924]  ? psi_task_switch+0xad/0xa10
[  210.146389][ T3924]  ? _raw_spin_unlock+0x45/0x60
[  210.146416][ T3924]  ? finish_task_switch+0x139/0x760
[  210.146438][ T3924]  ? __switch_to_asm+0x3d/0x70
[  210.146465][ T3924]  ? __schedule+0x13a1/0x1fa0
[  210.146485][ T3924]  ? __kasan_check_write+0x18/0x20
[  210.146510][ T3924]  ? _raw_spin_lock+0x92/0x120
[  210.146538][ T3924]  ? __cfi__raw_spin_lock+0x10/0x10
[  210.146566][ T3924]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  210.146595][ T3924]  ? _raw_spin_unlock+0x45/0x60
[  210.146623][ T3924]  ? __asan_set_shadow_00+0x12/0x20
[  210.146645][ T3924]  ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x102f/0x1d80
[  210.146676][ T3924]  ? llist_add_batch+0x10f/0x1f0
[  210.146697][ T3924]  ? prb_read_valid+0x41/0x80
[  210.146714][ T3924]  ? __cfi_llist_add_batch+0x10/0x10
[  210.146735][ T3924]  ? preempt_schedule_common+0x2d/0x60
[  210.146754][ T3924]  ? preempt_schedule+0xc5/0xe0
[  210.146777][ T3924]  ? __cfi_preempt_schedule+0x10/0x10
[  210.146796][ T3924]  ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10
[  210.146826][ T3924]  ? tick_nohz_tick_stopped+0x4c/0x60
[  210.146849][ T3924]  ? __irq_work_queue_local+0xc4/0x260
[  210.146873][ T3924]  ? irq_work_queue+0xc2/0x160
[  210.146895][ T3924]  ? vprintk_emit+0x3e3/0x650
[  210.146917][ T3924]  ? __kasan_check_write+0x18/0x20
[  210.146942][ T3924]  ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x155/0x4a0
[  210.146987][ T3924]  ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x41a/0x8e0
[  210.147018][ T3924]  ? vprintk+0x93/0xa0
[  210.147044][ T3924]  ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x10/0x10
[  210.147072][ T3924]  ? _printk+0xde/0x140
[  210.147093][ T3924]  ? __kasan_check_write+0x18/0x20
[  210.147117][ T3924]  ? _raw_spin_lock+0x92/0x120
[  210.147144][ T3924]  ? __cfi__raw_spin_lock+0x10/0x10
[  210.147173][ T3924]  ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x7b2/0x1030
[  210.147204][ T3924]  ? __kernel_text_address+0x11/0x40
[  210.147227][ T3924]  ? unwind_get_return_address+0x51/0x90
[  210.147250][ T3924]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  210.147272][ T3924]  ? stack_trace_save+0xaa/0x100
[  210.147291][ T3924]  ? stack_depot_save_flags+0x38/0x800
[  210.147318][ T3924]  ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x113c/0x5c20
[  210.147342][ T3924]  ? __asan_memcpy+0x5a/0x80
[  210.147367][ T3924]  _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20
[  210.147391][ T3924]  ? _raw_spin_trylock+0xb5/0x140
[  210.147420][ T3924]  ? _raw_spin_unlock+0x45/0x60
[  210.147447][ T3924]  ? call_rcu_nocb+0x6d7/0xc80
[  210.147472][ T3924]  ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10
[  210.147497][ T3924]  ? swake_up_one_online_ipi+0x30/0x30
[  210.147523][ T3924]  ? __cfi_mt_free_rcu+0x10/0x10
[  210.147556][ T3924]  ? is_bpf_text_address+0x17b/0x1a0
[  210.147586][ T3924]  ? is_bpf_text_address+0x17b/0x1a0
[  210.147611][ T3924]  ? kernel_text_address+0xa9/0xe0
[  210.147634][ T3924]  ? __kernel_text_address+0x11/0x40
[  210.147656][ T3924]  ? unwind_get_return_address+0x51/0x90
[  210.147678][ T3924]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  210.147699][ T3924]  ? arch_stack_walk+0x10a/0x170
[  210.147732][ T3924]  ? is_bpf_text_address+0x17b/0x1a0
[  210.147763][ T3924]  ? kernel_text_address+0xa9/0xe0
[  210.147785][ T3924]  ? __kernel_text_address+0x11/0x40
[  210.147808][ T3924]  ? unwind_get_return_address+0x51/0x90
[  210.147829][ T3924]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  210.147852][ T3924]  ? stack_depot_save_flags+0x38/0x800
[  210.147878][ T3924]  ? stack_trace_save+0xaa/0x100
[  210.147897][ T3924]  ? kasan_save_track+0x4f/0x80
[  210.147925][ T3924]  ? kasan_save_track+0x3e/0x80
[  210.147952][ T3924]  ? kasan_save_alloc_info+0x40/0x50
[  210.147976][ T3924]  ? __kasan_slab_alloc+0x73/0x90
[  210.147993][ T3924]  ? kmem_cache_alloc_noprof+0x1bf/0x410
[  210.148020][ T3924]  ? security_inode_alloc+0x51/0x230
[  210.148049][ T3924]  ? inode_init_always_gfp+0x756/0x9e0
[  210.148067][ T3924]  ? alloc_inode+0xc5/0x270
[  210.148085][ T3924]  ? new_inode+0x25/0x1e0
[  210.148102][ T3924]  ? proc_pid_make_inode+0x25/0x140
[  210.148131][ T3924]  ? proc_pident_instantiate+0x6d/0x2c0
[  210.148149][ T3924]  ? proc_pident_lookup+0x1c7/0x270
[  210.148166][ T3924]  ? proc_tid_base_lookup+0x2f/0x40
[  210.148189][ T3924]  ? do_filp_open+0x1f5/0x440
[  210.148213][ T3924]  ? avc_has_perm_noaudit+0x26c/0x360
[  210.148241][ T3924]  ? __asan_memcpy+0x5a/0x80
[  210.148267][ T3924]  ? avc_has_perm_noaudit+0x28a/0x360
[  210.148296][ T3924]  ? avc_has_perm+0x155/0x240
[  210.148323][ T3924]  ? __cfi_avc_has_perm+0x10/0x10
[  210.148349][ T3924]  ? kasan_save_alloc_info+0x40/0x50
[  210.148376][ T3924]  ? selinux_file_open+0x46c/0x630
[  210.148400][ T3924]  ? __cfi_selinux_file_open+0x10/0x10
[  210.148430][ T3924]  ? avc_has_extended_perms+0x80b/0xe70
[  210.148457][ T3924]  ? __asan_memcpy+0x5a/0x80
[  210.148482][ T3924]  ? avc_has_extended_perms+0x969/0xe70
[  210.148512][ T3924]  ? __asan_set_shadow_00+0x12/0x20
[  210.148534][ T3924]  ? do_vfs_ioctl+0x182d/0x2010
[  210.148552][ T3924]  ? arch_stack_walk+0x10a/0x170
[  210.148580][ T3924]  ? __ia32_compat_sys_ioctl+0x920/0x920
[  210.148600][ T3924]  ? _parse_integer+0x2e/0x40
[  210.148643][ T3924]  ? ioctl_has_perm+0x39a/0x500
[  210.148667][ T3924]  ? has_cap_mac_admin+0xd0/0xd0
[  210.148691][ T3924]  ? proc_fail_nth_write+0x184/0x220
[  210.148712][ T3924]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  210.148735][ T3924]  ? selinux_file_ioctl+0x732/0x1480
[  210.148763][ T3924]  ? vfs_write+0x9a4/0xf90
[  210.148788][ T3924]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  210.148813][ T3924]  ? __cfi_vfs_write+0x10/0x10
[  210.148838][ T3924]  ? __kasan_check_write+0x18/0x20
[  210.148863][ T3924]  ? mutex_unlock+0x90/0x240
[  210.148883][ T3924]  ? __cfi_mutex_unlock+0x10/0x10
[  210.148904][ T3924]  ? __fget_files+0x2c5/0x340
[  210.148922][ T3924]  ? __fget_files+0x2c5/0x340
[  210.148941][ T3924]  ? bpf_lsm_file_ioctl+0xd/0x20
[  210.148962][ T3924]  ? security_file_ioctl+0x3e/0x110
[  210.148985][ T3924]  ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10
[  210.149013][ T3924]  __se_sys_ioctl+0x132/0x1b0
[  210.149032][ T3924]  __x64_sys_ioctl+0x7f/0xa0
[  210.149049][ T3924]  x64_sys_call+0x1878/0x2ee0
[  210.149076][ T3924]  do_syscall_64+0x57/0xf0
[  210.149104][ T3924]  ? clear_bhb_loop+0x50/0xa0
[  210.149123][ T3924]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  210.149153][ T3924] RIP: 0033:0x7fa4d3d9c819
[  210.149171][ T3924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  210.149189][ T3924] RSP: 002b:00007fa4d4d08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  210.149210][ T3924] RAX: ffffffffffffffda RBX: 00007fa4d4015fa0 RCX: 00007fa4d3d9c819
[  210.149224][ T3924] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000004
[  210.149239][ T3924] RBP: 00007fa4d4d08090 R08: 0000000000000000 R09: 0000000000000000
[  210.149251][ T3924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  210.149263][ T3924] R13: 00007fa4d4016038 R14: 00007fa4d4015fa0 R15: 00007ffcbc5fb3b8
[  210.149280][ T3924]  </TASK>
[  210.149322][ T3924] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false
[  210.204593][ T3922] netlink: 'syz.3.1279': attribute type 9 has an invalid length.
[  210.210350][ T3924] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  210.216627][ T3922] netlink: 'syz.3.1279': attribute type 2 has an invalid length.
[  210.220942][ T3924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:644
[  211.558101][ T3930] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  211.592830][  T454] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  211.722904][  T454] usb 5-1: device descriptor read/64, error -71
[  211.822931][  T472] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[  211.962794][  T454] usb 5-1: device descriptor read/64, error -71
[  211.972987][  T472] usb 4-1: Using ep0 maxpacket: 16
[  211.979913][  T472] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  211.990198][  T472] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  212.001193][  T472] usb 4-1: New USB device found, idVendor=1235, idProduct=821a, bcdDevice= 0.40
[  212.010543][  T472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.018822][  T472] usb 4-1: Product: syz
[  212.023151][  T472] usb 4-1: Manufacturer: syz
[  212.028045][  T472] usb 4-1: SerialNumber: syz
[  212.202766][  T454] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  212.234847][ T3932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.244035][ T3932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.256354][  T472] usb 4-1: 0:1 : does not exist
[  212.261400][  T472] usb 4-1: Focusrite Scarlett Gen 4 Mixer Driver enabled (pid=0x821a); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  212.277003][  T472] usb 4-1: Error initialising Scarlett Gen 4 Mixer Driver: -22
[  212.286707][  T472] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  212.297222][  T472] usb 4-1: USB disconnect, device number 105
[  212.307771][  T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  212.323975][   T46] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  212.332761][  T454] usb 5-1: device descriptor read/64, error -71
[  212.472797][   T46] usb 3-1: Using ep0 maxpacket: 32
[  212.479979][   T46] usb 3-1: unable to get BOS descriptor or descriptor too short
[  212.488950][   T46] usb 3-1: config 87 has an invalid descriptor of length 0, skipping remainder of the config
[  212.501233][   T46] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=c8.f0
[  212.510551][   T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.518872][   T46] usb 3-1: Product: 猧㳱먬岪蕴톄䔌骒ἤ鴁㹅㮔䆆쾝劸괓ᙥ䀖蓸㒮Կ钌㙢핤걊階讕녧윿枠㼏䪱ᱽ
[  212.532256][   T46] usb 3-1: Manufacturer: э
[  212.537044][   T46] usb 3-1: SerialNumber: Ў
[  212.572817][  T454] usb 5-1: device descriptor read/64, error -71
[  212.682939][  T454] usb usb5-port1: attempt power cycle
[  212.750510][   T46] usb_ehset_test 3-1:87.0: probe with driver usb_ehset_test failed with error -32
[  212.762406][   T46] usb 3-1: USB disconnect, device number 96
[  212.797972][   T36] audit: type=1400 audit(1776236825.364:678): avc:  denied  { map } for  pid=3944 comm="syz.3.1290" path="socket:[38713]" dev="sockfs" ino=38713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  212.910467][ T3948] netlink: 'syz.3.1291': attribute type 9 has an invalid length.
[  212.918508][ T3948] netlink: 'syz.3.1291': attribute type 2 has an invalid length.
[  212.939261][   T36] audit: type=1400 audit(1776236825.504:679): avc:  denied  { create } for  pid=3949 comm="syz.3.1292" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  212.961287][   T36] audit: type=1400 audit(1776236825.514:680): avc:  denied  { write } for  pid=3949 comm="syz.3.1292" name="file0" dev="tmpfs" ino=1833 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  212.985101][   T36] audit: type=1400 audit(1776236825.514:681): avc:  denied  { open } for  pid=3949 comm="syz.3.1292" path="/333/file0" dev="tmpfs" ino=1833 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  213.072836][  T454] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  213.093778][  T454] usb 5-1: device descriptor read/8, error -71
[  213.183089][   T46] usb 4-1: new full-speed USB device number 106 using dummy_hcd
[  213.223587][  T454] usb 5-1: device descriptor read/8, error -71
[  213.276940][ T3956] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  213.344711][   T46] usb 4-1: unable to get BOS descriptor or descriptor too short
[  213.359493][   T46] usb 4-1: not running at top speed; connect to a high speed hub
[  213.369207][   T46] usb 4-1: config 9 has an invalid interface number: 67 but max is 0
[  213.377830][   T46] usb 4-1: config 9 has no interface number 0
[  213.384234][   T46] usb 4-1: config 9 interface 67 has no altsetting 0
[  213.394191][   T46] usb 4-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=69.d4
[  213.403545][   T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.411691][   T46] usb 4-1: Product: syz
[  213.416336][   T46] usb 4-1: Manufacturer: syz
[  213.420998][   T46] usb 4-1: SerialNumber: syz
[  213.465621][   T36] audit: type=1326 audit(1776236826.034:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3964 comm="syz.2.1298" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd07759c819 code=0x0
[  213.678214][ T3969] futex_wake_op: syz.4.1299 tries to shift op by 144; fix this program
[  214.129975][   T46] usb-storage 4-1:9.67: USB Mass Storage device detected
[  214.139787][   T46] usb-storage 4-1:9.67: Quirks match for vid 054c pid 0069: 1
[  214.148373][   T36] audit: type=1400 audit(1776236826.714:683): avc:  denied  { unlink } for  pid=291 comm="syz-executor" name="file0" dev="tmpfs" ino=1833 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  214.171477][  T454] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  214.180328][   T36] audit: type=1400 audit(1776236826.744:684): avc:  denied  { name_bind } for  pid=3972 comm="syz.3.1300" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  214.194994][  T454] usb 5-1: device descriptor read/8, error -71
[  214.210120][   T36] audit: type=1400 audit(1776236826.774:685): avc:  denied  { setopt } for  pid=3972 comm="syz.3.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  214.232529][   T46] usb 4-1: USB disconnect, device number 106
[  214.334767][  T454] usb 5-1: device descriptor read/8, error -71
[  214.429571][ T3979] netlink: 'syz.2.1303': attribute type 9 has an invalid length.
[  214.437650][ T3979] netlink: 'syz.2.1303': attribute type 2 has an invalid length.
[  214.452928][  T454] usb usb5-port1: unable to enumerate USB device
[  214.566082][ T3986] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  214.583139][   T46] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[  214.732811][   T46] usb 4-1: device descriptor read/64, error -71
[  214.972870][   T46] usb 4-1: device descriptor read/64, error -71
[  215.212839][   T46] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[  215.342858][   T46] usb 4-1: device descriptor read/64, error -71
[  215.435848][  T472] usb 3-1: new full-speed USB device number 97 using dummy_hcd
[  215.540076][ T4001] netlink: 'syz.0.1312': attribute type 9 has an invalid length.
[  215.548083][ T4001] netlink: 'syz.0.1312': attribute type 2 has an invalid length.
[  215.592904][   T46] usb 4-1: device descriptor read/64, error -71
[  215.594755][  T472] usb 3-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config
[  215.609773][  T472] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  215.620420][  T472] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  215.629698][  T472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.637913][  T472] usb 3-1: Product: syz
[  215.642112][  T472] usb 3-1: Manufacturer: syz
[  215.646837][  T472] usb 3-1: SerialNumber: syz
[  215.703075][   T46] usb usb4-port1: attempt power cycle
[  215.854947][   T36] audit: type=1400 audit(1776236828.424:686): avc:  denied  { setopt } for  pid=3990 comm="syz.2.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  215.883836][  T472] usb 3-1: 0:2 : does not exist
[  215.892607][  T472] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  215.904623][  T472] usb 3-1: USB disconnect, device number 97
[  215.917532][  T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  216.042897][   T46] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[  216.064105][   T46] usb 4-1: device descriptor read/8, error -71
[  216.194167][   T46] usb 4-1: device descriptor read/8, error -71
[  216.432863][   T46] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[  216.456888][   T46] usb 4-1: device descriptor read/8, error -71
[  216.535717][ T4010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1316'.
[  216.593927][   T46] usb 4-1: device descriptor read/8, error -71
[  216.699755][ T4015] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  216.702928][   T46] usb usb4-port1: unable to enumerate USB device
[  216.724312][ T4017] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  216.725483][ T4017] rust_binder: Error while translating object.
[  216.731997][ T4017] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  216.738400][ T4017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:460
[  216.763194][ T4019] loop4: detected capacity change from 0 to 8
[  216.803791][ T4019] loop4: detected capacity change from 8 to 7
[  216.810482][    C1] blk_print_req_error: 6 callbacks suppressed
[  216.810502][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  216.826593][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  216.835915][    C0] buffer_io_error: 6 callbacks suppressed
[  216.835932][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  216.851733][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  216.852686][   T36] audit: type=1400 audit(1776236829.414:687): avc:  denied  { map } for  pid=4018 comm="syz.4.1320" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  216.861044][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  216.892853][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  216.902076][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  216.910352][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  216.920111][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  216.928341][ T4019]  loop4: unable to read partition table
[  216.934420][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  216.943716][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  216.952428][ T4019] loop_reread_partitions: partition scan of loop4 (��[{Bѷ���Mܾ`*��Z��5��]�z(�Ť�4+hG�pX����gm
[  216.952428][ T4019] ������.B�L_se�) failed (rc=-5)
[  216.952945][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  216.977667][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  216.986047][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  216.995421][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  217.006822][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  217.016331][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  217.024685][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  217.033935][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  217.052453][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  217.296241][ T4036] netlink: 'syz.4.1326': attribute type 9 has an invalid length.
[  217.304208][ T4036] netlink: 'syz.4.1326': attribute type 2 has an invalid length.
[  217.322290][ T4042] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  217.433687][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  217.440584][ T4044] rust_binder: Error while translating object.
[  217.447666][ T4044] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  217.454066][ T4044] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:478
[  217.572872][  T472] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  217.653046][  T717] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[  217.732833][  T472] usb 3-1: Using ep0 maxpacket: 8
[  217.740603][  T472] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  217.751012][  T472] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  217.762310][  T472] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40
[  217.771450][  T472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.779509][  T472] usb 3-1: Product: syz
[  217.783897][  T472] usb 3-1: Manufacturer: syz
[  217.788791][  T472] usb 3-1: SerialNumber: syz
[  217.802759][  T717] usb 4-1: Using ep0 maxpacket: 32
[  217.809251][  T717] usb 4-1: unable to get BOS descriptor or descriptor too short
[  217.818227][  T717] usb 4-1: config 1 interface 0 has no altsetting 0
[  217.826552][  T717] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40
[  217.835728][  T717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.844053][  T717] usb 4-1: Product: syz
[  217.848435][  T717] usb 4-1: Manufacturer: syz
[  217.853310][  T717] usb 4-1: SerialNumber: syz
[  218.004628][  T472] usb 3-1: USB disconnect, device number 98
[  218.017615][  T716] udevd[716]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  218.083219][ T4038] kvm: user requested TSC rate below hardware speed
[  218.091035][ T4038] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  218.113380][ T4038] rust_binder: Error in use_page_slow: ESRCH
[  218.113410][ T4038] rust_binder: use_range failure ESRCH
[  218.119466][ T4038] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false
[  218.125267][ T4038] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  218.133486][ T4038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:926
[  218.178688][  T717] usbhid 4-1:1.0: can't add hid device: -71
[  218.194895][  T717] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  218.204010][  T717] usb 4-1: USB disconnect, device number 111
[  218.382793][   T46] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  218.532762][   T46] usb 5-1: Using ep0 maxpacket: 8
[  218.540397][   T46] usb 5-1: unable to get BOS descriptor or descriptor too short
[  218.548969][   T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  218.559253][   T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  218.569190][   T46] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  218.595491][   T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  218.608359][   T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  218.618471][   T46] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  218.632499][   T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  218.642754][   T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  218.651845][   T46] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  218.665718][   T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  218.675960][   T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  218.687219][ T4066] netlink: 'syz.2.1339': attribute type 9 has an invalid length.
[  218.688813][   T46] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  218.696455][ T4066] netlink: 'syz.2.1339': attribute type 2 has an invalid length.
[  218.719939][   T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  218.731178][   T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.739797][   T46] usb 5-1: Product: syz
[  218.744263][   T46] usb 5-1: Manufacturer: syz
[  218.749241][   T46] usb 5-1: SerialNumber: syz
[  218.755898][ T4069] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  218.781787][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  218.781810][   T36] audit: type=1400 audit(1776236831.344:689): avc:  denied  { listen } for  pid=4072 comm="syz.3.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  218.821258][ T4073] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  218.821287][ T4073] rust_binder: Read failure Err(EFAULT) in pid:930
[  218.960521][   T46] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  218.974815][   T46] cdc_ncm 5-1:1.0: bind() failure
[  218.983774][   T46] usb 5-1: USB disconnect, device number 38
[  219.101087][ T4097] netlink: 'syz.2.1351': attribute type 9 has an invalid length.
[  219.109059][ T4097] netlink: 'syz.2.1351': attribute type 2 has an invalid length.
[  219.133256][ T4099] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  219.155407][   T36] audit: type=1400 audit(1776236837.719:690): avc:  denied  { connect } for  pid=4100 comm="syz.2.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  219.469233][ T4113] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  219.469429][ T4113] rust_binder: Error while translating object.
[  219.482828][ T4113] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  219.495783][ T4113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1089
[  219.530622][ T4121] rust_binder: Error in use_page_slow: ESRCH
[  219.539894][ T4121] rust_binder: use_range failure ESRCH
[  219.546061][ T4121] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false
[  219.551730][ T4121] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  219.559947][ T4121] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:942
[  219.752836][   T31] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  219.802826][   T46] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[  219.912806][   T31] usb 5-1: Using ep0 maxpacket: 32
[  219.920545][ T4117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  219.929385][ T4117] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  219.952803][   T46] usb 4-1: Using ep0 maxpacket: 8
[  219.960488][   T46] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 247, changing to 7
[  219.974171][   T46] usb 4-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40
[  219.983614][   T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.992087][   T46] usb 4-1: Product: Р
[  219.997231][   T46] usb 4-1: Manufacturer: 
[  220.002264][   T46] usb 4-1: SerialNumber: syz
[  220.055785][   T31] usb 5-1: unable to get BOS descriptor or descriptor too short
[  220.064753][   T31] usb 5-1: unable to read config index 0 descriptor/start: -71
[  220.072536][   T31] usb 5-1: can't read configurations, error -71
[  220.199322][   T36] audit: type=1326 audit(1776236838.759:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4108 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07759c819 code=0x7fc00000
[  220.223563][   T36] audit: type=1326 audit(1776236838.759:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4108 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd07759c819 code=0x7fc00000
[  220.231141][   T46] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  220.252335][   T36] audit: type=1326 audit(1776236838.759:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4108 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07759c819 code=0x7fc00000
[  220.275815][   T46] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  220.285036][   T36] audit: type=1326 audit(1776236838.759:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4108 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07759c819 code=0x7fc00000
[  220.312778][   T36] audit: type=1326 audit(1776236838.759:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4108 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07759c819 code=0x7fc00000
[  220.316681][   T46] usb 4-1: USB disconnect, device number 112
[  220.356771][   T36] audit: type=1326 audit(1776236838.759:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4108 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07759c819 code=0x7fc00000
[  220.393609][   T36] audit: type=1326 audit(1776236838.759:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4108 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07759c819 code=0x7fc00000
[  220.431823][   T36] audit: type=1326 audit(1776236838.759:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4108 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07759c819 code=0x7fc00000
[  220.465778][ T4126] netlink: 'syz.2.1363': attribute type 9 has an invalid length.
[  220.474344][ T4126] netlink: 'syz.2.1363': attribute type 2 has an invalid length.
[  220.564542][ T4133] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  220.764654][ T4148] rust_binder: Write failure EFAULT in pid:944
[  220.773515][ T4148] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  220.780780][ T4148] rust_binder: Error while translating object.
[  220.787770][    C0] BUG: TASK stack guard page was hit at ffffc9000306ff58 (stack is ffffc90003070000..ffffc90003078000)
[  220.787817][    C0] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI
[  220.787844][    C0] CPU: 0 UID: 0 PID: 4148 Comm: syz.3.1373 Not tainted syzkaller #0 6519e46a2ad0e7da7eb9d1859c66c62b15485067
[  220.787871][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  220.787885][    C0] RIP: 0010:get_page_from_freelist+0x8e/0x4a20
[  220.787920][    C0] Code: 81 48 8d 8c 24 e0 01 00 00 48 c1 e9 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 21 48 b8 f8 f2 f8 f2 f8 f2 f8 f2 4a 89 44 21 08 <48> 89 4c 24 38 42 c7 44 21 10 f8 f3 f3 f3 49 8d 7f 10 4d 8d 77 1c
[  220.788018][    C0] RSP: 0018:ffffc9000306ff60 EFLAGS: 00010a06
[  220.788038][    C0] RAX: f2f8f2f8f2f8f2f8 RBX: 0000000000000002 RCX: 1ffff9200060e028
[  220.788056][    C0] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000
[  220.788070][    C0] RBP: ffffc90003070230 R08: ffffffff876aade3 R09: 1ffffffff0ed55bc
[  220.788087][    C0] R10: dffffc0000000000 R11: fffffbfff0ed55bd R12: dffffc0000000000
[  220.788104][    C0] R13: dffffc0000000000 R14: 1ffff9200060e04c R15: ffffc900030702d0
[  220.788121][    C0] FS:  00007f229586a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  220.788141][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  220.788156][    C0] CR2: ffffc9000306ff58 CR3: 0000000113bb6000 CR4: 00000000003526b0
[  220.788190][    C0] Call Trace:
[  220.788209][    C0]  <TASK>
[  220.788223][    C0]  ? __alloc_pages_noprof+0x7e0/0x7e0
[  220.788261][    C0]  ? static_key_count+0x45/0x70
[  220.788289][    C0]  ? gfp_to_alloc_flags_cma+0x96/0x1c0
[  220.788319][    C0]  ? __cfi_gfp_zone+0x10/0x10
[  220.788351][    C0]  ? __alloc_pages_noprof+0x35f/0x7e0
[  220.788375][    C0]  ? unwind_next_frame+0x3c1/0x750
[  220.788400][    C0]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  220.788425][    C0]  ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810
[  220.788457][    C0]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  220.788482][    C0]  ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810
[  220.788513][    C0]  ? stack_depot_save_flags+0x672/0x800
[  220.788543][    C0]  ? stack_depot_save+0x12/0x20
[  220.788580][    C0]  ? save_stack+0x133/0x240
[  220.788604][    C0]  ? free_contig_range+0x260/0x260
[  220.788635][    C0]  ? __reset_page_owner+0x450/0x450
[  220.788657][    C0]  ? zone_page_state_add+0x43/0x90
[  220.788684][    C0]  ? post_alloc_hook+0x3b8/0x3f0
[  220.788705][    C0]  ? prep_new_page+0x20/0x120
[  220.788726][    C0]  ? get_page_from_freelist+0x496e/0x4a20
[  220.788752][    C0]  ? __alloc_pages_noprof+0x35f/0x7e0
[  220.788777][    C0]  ? stack_depot_save_flags+0x672/0x800
[  220.788807][    C0]  ? kasan_save_track+0x4f/0x80
[  220.788839][    C0]  ? kasan_save_free_info+0x4a/0x60
[  220.788866][    C0]  ? __kasan_slab_free+0x5f/0x80
[  220.788886][    C0]  ? kfree+0x158/0x440
[  220.788912][    C0]  ? krealloc_noprof+0xfa/0x130
[  220.788944][    C0]  ? _RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x594/0x850
[  220.789001][    C0]  ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x1706/0x2660
[  220.789041][    C0]  ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60
[  220.789082][    C0]  ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0
[  220.789129][    C0]  ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130
[  220.789176][    C0]  ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810
[  220.789205][    C0]  ? kvm_sched_clock_read+0x15/0x30
[  220.789224][    C0]  ? sched_clock_noinstr+0xd/0x30
[  220.789241][    C0]  ? __set_page_owner+0x8e/0x600
[  220.789256][    C0]  ? __zone_watermark_ok+0x134/0x630
[  220.789274][    C0]  ? __cfi___set_page_owner+0x10/0x10
[  220.789290][    C0]  ? kasan_unpoison+0x4a/0x70
[  220.789312][    C0]  ? post_alloc_hook+0x3b8/0x3f0
[  220.789328][    C0]  ? __cfi_post_alloc_hook+0x10/0x10
[  220.789344][    C0]  ? gfp_to_alloc_flags_cma+0x1c0/0x1c0
[  220.789366][    C0]  ? _raw_spin_trylock+0xb5/0x140
[  220.789388][    C0]  ? __cfi__raw_spin_trylock+0x10/0x10
[  220.789411][    C0]  ? prep_new_page+0x20/0x120
[  220.789427][    C0]  ? get_page_from_freelist+0x496e/0x4a20
[  220.789452][    C0]  ? __alloc_pages_noprof+0x7e0/0x7e0
[  220.789470][    C0]  ? static_key_count+0x45/0x70
[  220.789485][    C0]  ? gfp_to_alloc_flags_cma+0x96/0x1c0
[  220.789507][    C0]  ? lruvec_init+0x1b1/0x280
[  220.789530][    C0]  ? __alloc_pages_noprof+0x35f/0x7e0
[  220.789548][    C0]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  220.789566][    C0]  ? unwind_get_return_address+0x51/0x90
[  220.789584][    C0]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  220.789601][    C0]  ? arch_stack_walk+0x10a/0x170
[  220.789625][    C0]  ? stack_trace_save+0xaa/0x100
[  220.789640][    C0]  ? stack_depot_save_flags+0x672/0x800
[  220.789662][    C0]  ? kasan_save_track+0x4f/0x80
[  220.789684][    C0]  ? kasan_save_track+0x3e/0x80
[  220.789706][    C0]  ? kasan_save_free_info+0x4a/0x60
[  220.789725][    C0]  ? __kasan_slab_free+0x5f/0x80
[  220.789739][    C0]  ? kfree+0x158/0x440
[  220.789758][    C0]  ? krealloc_noprof+0xfa/0x130
[  220.789779][    C0]  ? _RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x594/0x850
[  220.789819][    C0]  ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x1706/0x2660
[  220.789848][    C0]  ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60
[  220.789878][    C0]  ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0
[  220.789910][    C0]  ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130
[  220.789939][    C0]  ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810
[  220.789960][    C0]  ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x323/0xd40
[  220.789991][    C0]  ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1a01/0xaf80
[  220.790023][    C0]  ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20
[  220.790046][    C0]  ? __se_sys_ioctl+0x132/0x1b0
[  220.790060][    C0]  ? __x64_sys_ioctl+0x7f/0xa0
[  220.790074][    C0]  ? x64_sys_call+0x1878/0x2ee0
[  220.790096][    C0]  ? do_syscall_64+0x57/0xf0
[  220.790119][    C0]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  220.790149][    C0]  ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180
[  220.790180][    C0]  ? kasan_save_free_info+0x4a/0x60
[  220.790200][    C0]  ? __kasan_slab_free+0x5f/0x80
[  220.790214][    C0]  ? kfree+0x158/0x440
[  220.790233][    C0]  ? krealloc_noprof+0xfa/0x130
[  220.790256][    C0]  ? krealloc_noprof+0xfa/0x130
[  220.790284][    C0]  ? _RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x594/0x850
[  220.790324][    C0]  ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20
[  220.790346][    C0]  ? __cfi__RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x10/0x10
[  220.790386][    C0]  ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580
[  220.790433][    C0]  ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10
[  220.790475][    C0]  ? __kasan_check_write+0x18/0x20
[  220.790495][    C0]  ? _raw_spin_lock+0x92/0x120
[  220.790517][    C0]  ? __cfi__raw_spin_lock+0x10/0x10
[  220.790541][    C0]  ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x1706/0x2660
[  220.790572][    C0]  ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x10/0x10
[  220.790609][    C0]  ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0
[  220.790640][    C0]  ? __asan_memcpy+0x5a/0x80
[  220.790661][    C0]  ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0
[  220.790689][    C0]  ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10
[  220.790719][    C0]  ? __kasan_check_write+0x18/0x20
[  220.790739][    C0]  ? _raw_spin_lock+0x92/0x120
[  220.790761][    C0]  ? __cfi__raw_spin_lock+0x10/0x10
[  220.790783][    C0]  ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6a9/0xc70
[  220.790833][    C0]  ? __asan_memcpy+0x5a/0x80
[  220.790854][    C0]  ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x5f4/0xc70
[  220.790887][    C0]  ? __cfi__RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10
[  220.790922][    C0]  ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0
[  220.790949][    C0]  ? __asan_memcpy+0x5a/0x80
[  220.790970][    C0]  ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0
[  220.790998][    C0]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  220.791015][    C0]  ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10
[  220.791044][    C0]  ? __kasan_check_write+0x18/0x20
[  220.791064][    C0]  ? __cfi__raw_spin_lock+0x10/0x10
[  220.791087][    C0]  ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x308/0x5c60
[  220.791118][    C0]  ? __asan_memcpy+0x5a/0x80
[  220.791139][    C0]  ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60
[  220.791181][    C0]  ? __cfi__RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0x10/0x10
[  220.791210][    C0]  ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node16insert_node_info+0x3e0/0x500
[  220.791239][    C0]  ? __cfi__RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10
[  220.791269][    C0]  ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10
[  220.791310][    C0]  ? __kasan_check_write+0x18/0x20
[  220.791331][    C0]  ? mutex_unlock+0x90/0x240
[  220.791347][    C0]  ? __cfi_mutex_unlock+0x10/0x10
[  220.791365][    C0]  ? __asan_set_shadow_00+0x12/0x20
[  220.791383][    C0]  ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x1930/0x32e0
[  220.791416][    C0]  ? put_dec_trunc8+0x229/0x380
[  220.791438][    C0]  ? put_dec+0xd7/0xf0
[  220.791459][    C0]  ? __asan_memset+0x39/0x50
[  220.791478][    C0]  ? move_right+0x8e/0xb0
[  220.791500][    C0]  ? format_decode+0x1bb/0x1610
[  220.791522][    C0]  ? vsnprintf+0x7b4/0x1ad0
[  220.791542][    C0]  ? __asan_memcpy+0x5a/0x80
[  220.791562][    C0]  ? vsnprintf+0x19ef/0x1ad0
[  220.791584][    C0]  ? desc_read+0x202/0x3e0
[  220.791598][    C0]  ? __kasan_check_write+0x18/0x20
[  220.791619][    C0]  ? desc_read+0x1ab/0x3e0
[  220.791634][    C0]  ? prb_first_seq+0x109/0x1d0
[  220.791649][    C0]  ? __cfi_prb_first_seq+0x10/0x10
[  220.791663][    C0]  ? __kasan_check_write+0x18/0x20
[  220.791684][    C0]  ? desc_read+0x1ab/0x3e0
[  220.791698][    C0]  ? __kasan_check_read+0x15/0x20
[  220.791718][    C0]  ? this_cpu_in_panic+0x56/0x90
[  220.791734][    C0]  ? _prb_read_valid+0x9f3/0xa80
[  220.791748][    C0]  ? record_print_text+0x290/0x450
[  220.791769][    C0]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  220.791789][    C0]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  220.791808][    C0]  ? update_curr+0xf8/0x9e0
[  220.791832][    C0]  ? __kasan_check_read+0x15/0x20
[  220.791852][    C0]  ? __perf_event_task_sched_in+0x1190/0x1370
[  220.791868][    C0]  ? __kasan_check_write+0x18/0x20
[  220.791888][    C0]  ? __switch_to+0xc4f/0x1300
[  220.791917][    C0]  ? __perf_event_task_sched_out+0x1d9/0xb90
[  220.792113][    C0]  ? __cfi___perf_event_task_sched_in+0x10/0x10
[  220.792129][    C0]  ? __cfi___switch_to+0x10/0x10
[  220.792150][    C0]  ? __cfi___perf_event_task_sched_out+0x10/0x10
[  220.792166][    C0]  ? psi_task_switch+0xad/0xa10
[  220.792185][    C0]  ? __kasan_check_write+0x18/0x20
[  220.792213][    C0]  ? finish_task_switch+0x1d9/0x760
[  220.792230][    C0]  ? __switch_to_asm+0x3d/0x70
[  220.792253][    C0]  ? __schedule+0x13a1/0x1fa0
[  220.792273][    C0]  ? __sched_text_start+0x10/0x10
[  220.792288][    C0]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  220.792312][    C0]  ? up+0x10a/0x1b0
[  220.792329][    C0]  ? __cfi_up+0x10/0x10
[  220.792348][    C0]  ? __kasan_check_read+0x15/0x20
[  220.792374][    C0]  ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180
[  220.792400][    C0]  ? __cfi__RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x10/0x10
[  220.792424][    C0]  ? preempt_schedule_common+0x2d/0x60
[  220.792441][    C0]  ? preempt_schedule+0xc5/0xe0
[  220.792457][    C0]  ? __cfi_preempt_schedule+0x10/0x10
[  220.792481][    C0]  ? krealloc_noprof+0xfa/0x130
[  220.792509][    C0]  ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20
[  220.792531][    C0]  ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x396/0x820
[  220.792572][    C0]  ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x10/0x10
[  220.792607][    C0]  ? vprintk_emit+0x3e3/0x650
[  220.792625][    C0]  ? __cfi_vprintk_emit+0x10/0x10
[  220.792642][    C0]  ? _RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x47c/0x760
[  220.792672][    C0]  ? __cfi__RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x10/0x10
[  220.792703][    C0]  ? vprintk_default+0x2a/0x40
[  220.792720][    C0]  ? vprintk+0x93/0xa0
[  220.792741][    C0]  ? _printk+0xde/0x140
[  220.792757][    C0]  ? __cfi___check_object_size+0x10/0x10
[  220.792780][    C0]  ? __cfi__printk+0x10/0x10
[  220.792797][    C0]  ? _copy_from_user+0x87/0xa0
[  220.792823][    C0]  ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0
[  220.792856][    C0]  ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a48/0x9130
[  220.792886][    C0]  ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130
[  220.792927][    C0]  ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x10/0x10
[  220.793037][    C0]  ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810
[  220.793066][    C0]  ? __cfi__RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x10/0x10
[  220.793097][    C0]  ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x41a/0x8e0
[  220.793130][    C0]  ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x10/0x10
[  220.793160][    C0]  ? __kasan_check_write+0x18/0x20
[  220.793182][    C0]  ? _raw_spin_lock+0x92/0x120
[  220.793205][    C0]  ? __cfi__raw_spin_lock+0x10/0x10
[  220.793228][    C0]  ? __kasan_check_write+0x18/0x20
[  220.793249][    C0]  ? avc_has_perm_noaudit+0x26c/0x360
[  220.793273][    C0]  ? __asan_memcpy+0x5a/0x80
[  220.793294][    C0]  ? avc_has_perm_noaudit+0x28a/0x360
[  220.793318][    C0]  ? avc_has_perm+0x155/0x240
[  220.793359][    C0]  ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0
[  220.793380][    C0]  ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10
[  220.793402][    C0]  ? selinux_binder_transaction+0x165/0x1d0
[  220.793418][    C0]  ? bpf_lsm_binder_transaction+0xd/0x20
[  220.793444][    C0]  ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x323/0xd40
[  220.793476][    C0]  ? __kasan_check_write+0x18/0x20
[  220.793497][    C0]  ? _copy_from_user+0x87/0xa0
[  220.793513][    C0]  ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x10/0x10
[  220.793547][    C0]  ? __kasan_check_write+0x18/0x20
[  220.793569][    C0]  ? _raw_spin_lock+0x92/0x120
[  220.793592][    C0]  ? __cfi__raw_spin_lock+0x10/0x10
[  220.793617][    C0]  ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x155c/0xaf80
[  220.793642][    C0]  ? __asan_memcpy+0x5a/0x80
[  220.793670][    C0]  ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1a01/0xaf80
[  220.793708][    C0]  ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10
[  220.793785][    C0]  ? put_dec_trunc8+0x229/0x380
[  220.793809][    C0]  ? put_dec+0xd7/0xf0
[  220.793837][    C0]  ? __asan_memset+0x39/0x50
[  220.793858][    C0]  ? move_right+0x8e/0xb0
[  220.793881][    C0]  ? format_decode+0x1bb/0x1610
[  220.793903][    C0]  ? vsnprintf+0x7b4/0x1ad0
[  220.793924][    C0]  ? __asan_memcpy+0x5a/0x80
[  220.793946][    C0]  ? vsnprintf+0x19ef/0x1ad0
[  220.793968][    C0]  ? desc_read+0x202/0x3e0
[  220.793983][    C0]  ? __kasan_check_write+0x18/0x20
[  220.794005][    C0]  ? desc_read+0x1ab/0x3e0
[  220.794020][    C0]  ? prb_first_seq+0x109/0x1d0
[  220.794035][    C0]  ? __cfi_prb_first_seq+0x10/0x10
[  220.794051][    C0]  ? __kasan_check_write+0x18/0x20
[  220.794073][    C0]  ? desc_read+0x1ab/0x3e0
[  220.794093][    C0]  ? __kasan_check_read+0x15/0x20
[  220.794114][    C0]  ? this_cpu_in_panic+0x56/0x90
[  220.794131][    C0]  ? _prb_read_valid+0x9f3/0xa80
[  220.794146][    C0]  ? record_print_text+0x290/0x450
[  220.794167][    C0]  ? prb_read_valid+0x80/0x80
[  220.794183][    C0]  ? __kasan_check_write+0x18/0x20
[  220.794205][    C0]  ? _raw_spin_lock_irqsave+0xc1/0x160
[  220.794230][    C0]  ? desc_read+0x202/0x3e0
[  220.794245][    C0]  ? __kasan_check_write+0x18/0x20
[  220.794266][    C0]  ? desc_read+0x1ab/0x3e0
[  220.794281][    C0]  ? prb_first_seq+0x109/0x1d0
[  220.794296][    C0]  ? __cfi_prb_first_seq+0x10/0x10
[  220.794311][    C0]  ? __kasan_check_write+0x18/0x20
[  220.794331][    C0]  ? desc_read+0x1ab/0x3e0
[  220.794346][    C0]  ? __kasan_check_read+0x15/0x20
[  220.794366][    C0]  ? this_cpu_in_panic+0x56/0x90
[  220.794382][    C0]  ? _prb_read_valid+0x9f3/0xa80
[  220.794397][    C0]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  220.794421][    C0]  ? __kasan_check_write+0x18/0x20
[  220.794442][    C0]  ? _raw_spin_lock+0x92/0x120
[  220.794464][    C0]  ? __cfi__raw_spin_lock+0x10/0x10
[  220.794487][    C0]  ? prb_read_valid+0x80/0x80
[  220.794501][    C0]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  220.794526][    C0]  ? _raw_spin_unlock+0x45/0x60
[  220.794548][    C0]  ? __asan_set_shadow_00+0x12/0x20
[  220.794567][    C0]  ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x102f/0x1d80
[  220.794593][    C0]  ? llist_add_batch+0x10f/0x1f0
[  220.794611][    C0]  ? prb_read_valid+0x41/0x80
[  220.794625][    C0]  ? __cfi_llist_add_batch+0x10/0x10
[  220.794642][    C0]  ? console_unlock+0x247/0x2c0
[  220.794660][    C0]  ? __cfi_console_unlock+0x10/0x10
[  220.794677][    C0]  ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10
[  220.794703][    C0]  ? tick_nohz_tick_stopped+0x4c/0x60
[  220.794722][    C0]  ? __irq_work_queue_local+0xc4/0x260
[  220.794742][    C0]  ? irq_work_queue+0xc2/0x160
[  220.794760][    C0]  ? vprintk_emit+0x3e3/0x650
[  220.794779][    C0]  ? __kasan_check_write+0x18/0x20
[  220.794800][    C0]  ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x155/0x4a0
[  220.794857][    C0]  ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x41a/0x8e0
[  220.794882][    C0]  ? vprintk+0x93/0xa0
[  220.794903][    C0]  ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x10/0x10
[  220.794930][    C0]  ? _printk+0xde/0x140
[  220.794947][    C0]  ? __kasan_check_write+0x18/0x20
[  220.794967][    C0]  ? _raw_spin_lock+0x92/0x120
[  220.794991][    C0]  ? __cfi__raw_spin_lock+0x10/0x10
[  220.795015][    C0]  ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x7b2/0x1030
[  220.795040][    C0]  ? __kernel_text_address+0x11/0x40
[  220.795060][    C0]  ? unwind_get_return_address+0x51/0x90
[  220.795081][    C0]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  220.795101][    C0]  ? stack_trace_save+0xaa/0x100
[  220.795127][    C0]  ? stack_depot_save_flags+0x38/0x800
[  220.795151][    C0]  ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x113c/0x5c20
[  220.795172][    C0]  ? __asan_memcpy+0x5a/0x80
[  220.795192][    C0]  ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20
[  220.795213][    C0]  ? _raw_spin_trylock+0xb5/0x140
[  220.795238][    C0]  ? _raw_spin_unlock+0x45/0x60
[  220.795261][    C0]  ? call_rcu_nocb+0x6d7/0xc80
[  220.795282][    C0]  ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10
[  220.795302][    C0]  ? swake_up_one_online_ipi+0x30/0x30
[  220.795324][    C0]  ? __cfi_mt_free_rcu+0x10/0x10
[  220.795352][    C0]  ? kvm_sched_clock_read+0x15/0x30
[  220.795371][    C0]  ? sched_clock_noinstr+0xd/0x30
[  220.795388][    C0]  ? sched_clock+0x44/0x60
[  220.795406][    C0]  ? sched_clock_cpu+0x75/0x400
[  220.795426][    C0]  ? __kernel_text_address+0x11/0x40
[  220.795445][    C0]  ? unwind_get_return_address+0x51/0x90
[  220.795463][    C0]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  220.795479][    C0]  ? __cfi_sched_clock_cpu+0x10/0x10
[  220.795499][    C0]  ? kvm_steal_clock+0x137/0x170
[  220.795521][    C0]  ? __kasan_check_read+0x15/0x20
[  220.795541][    C0]  ? can_migrate_task+0x358/0xf20
[  220.795557][    C0]  ? __pick_eevdf+0x950/0x950
[  220.795572][    C0]  ? __asan_set_shadow_00+0x12/0x20
[  220.795589][    C0]  ? sched_balance_rq+0x4636/0x4ce0
[  220.795603][    C0]  ? x64_sys_call+0xe69/0x2ee0
[  220.795626][    C0]  ? do_syscall_64+0x57/0xf0
[  220.795654][    C0]  ? sched_balance_update_blocked_averages+0x1360/0x1360
[  220.795670][    C0]  ? sched_clock_cpu+0x75/0x400
[  220.795691][    C0]  ? update_curr+0x630/0x9e0
[  220.795715][    C0]  ? sched_clock+0x44/0x60
[  220.795732][    C0]  ? sched_clock_cpu+0x75/0x400
[  220.795755][    C0]  ? sched_clock_noinstr+0xd/0x30
[  220.795772][    C0]  ? sched_clock+0x44/0x60
[  220.795790][    C0]  ? __kasan_check_write+0x18/0x20
[  220.795810][    C0]  ? _raw_spin_lock+0x92/0x120
[  220.795855][    C0]  ? __cfi__raw_spin_lock+0x10/0x10
[  220.795877][    C0]  ? dequeue_entities+0x1d7/0x1400
[  220.795899][    C0]  ? raw_spin_rq_lock_nested+0x14/0x30
[  220.795920][    C0]  ? sched_balance_newidle+0x800/0xab0
[  220.795940][    C0]  ? __kasan_check_read+0x15/0x20
[  220.795960][    C0]  ? __perf_event_task_sched_in+0x1190/0x1370
[  220.795977][    C0]  ? __kasan_check_write+0x18/0x20
[  220.795997][    C0]  ? __switch_to+0xc4f/0x1300
[  220.796018][    C0]  ? __perf_event_task_sched_out+0x1d9/0xb90
[  220.796033][    C0]  ? __cfi___perf_event_task_sched_in+0x10/0x10
[  220.796048][    C0]  ? __cfi___switch_to+0x10/0x10
[  220.796071][    C0]  ? __cfi___perf_event_task_sched_out+0x10/0x10
[  220.796087][    C0]  ? psi_task_switch+0x4f2/0xa10
[  220.796106][    C0]  ? __kasan_check_write+0x18/0x20
[  220.796126][    C0]  ? finish_task_switch+0x1d9/0x760
[  220.796143][    C0]  ? __switch_to_asm+0x3d/0x70
[  220.796166][    C0]  ? __schedule+0x13a1/0x1fa0
[  220.796181][    C0]  ? avc_has_extended_perms+0x80b/0xe70
[  220.796204][    C0]  ? __asan_memcpy+0x5a/0x80
[  220.796225][    C0]  ? avc_has_extended_perms+0x969/0xe70
[  220.796249][    C0]  ? __asan_set_shadow_00+0x12/0x20
[  220.796267][    C0]  ? do_vfs_ioctl+0x182d/0x2010
[  220.796282][    C0]  ? __ia32_compat_sys_ioctl+0x920/0x920
[  220.796298][    C0]  ? schedule+0xc5/0x240
[  220.796313][    C0]  ? futex_unqueue+0x136/0x160
[  220.796334][    C0]  ? ioctl_has_perm+0x39a/0x500
[  220.796354][    C0]  ? has_cap_mac_admin+0xd0/0xd0
[  220.796380][    C0]  ? futex_wait+0x2ac/0x7b0
[  220.796401][    C0]  ? __cfi_futex_wait+0x10/0x10
[  220.796423][    C0]  ? selinux_file_ioctl+0x732/0x1480
[  220.796442][    C0]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  220.796462][    C0]  ? do_futex+0x32a/0x510
[  220.796480][    C0]  ? __cfi_do_futex+0x10/0x10
[  220.796500][    C0]  ? __fget_files+0x2c5/0x340
[  220.796514][    C0]  ? bpf_lsm_file_ioctl+0xd/0x20
[  220.796530][    C0]  ? security_file_ioctl+0x3e/0x110
[  220.796549][    C0]  ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10
[  220.796569][    C0]  ? __se_sys_ioctl+0x132/0x1b0
[  220.796583][    C0]  ? __x64_sys_ioctl+0x7f/0xa0
[  220.796597][    C0]  ? x64_sys_call+0x1878/0x2ee0
[  220.796619][    C0]  ? do_syscall_64+0x57/0xf0
[  220.796641][    C0]  ? clear_bhb_loop+0x50/0xa0
[  220.796657][    C0]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  220.796684][    C0]  </TASK>
[  220.796690][    C0] Modules linked in:
[  220.796715][    C0] ---[ end trace 0000000000000000 ]---
[  220.796725][    C0] RIP: 0010:get_page_from_freelist+0x8e/0x4a20
[  220.796747][    C0] Code: 81 48 8d 8c 24 e0 01 00 00 48 c1 e9 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 21 48 b8 f8 f2 f8 f2 f8 f2 f8 f2 4a 89 44 21 08 <48> 89 4c 24 38 42 c7 44 21 10 f8 f3 f3 f3 49 8d 7f 10 4d 8d 77 1c
[  220.796762][    C0] RSP: 0018:ffffc9000306ff60 EFLAGS: 00010a06
[  220.796775][    C0] RAX: f2f8f2f8f2f8f2f8 RBX: 0000000000000002 RCX: 1ffff9200060e028
[  220.796787][    C0] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000
[  220.796797][    C0] RBP: ffffc90003070230 R08: ffffffff876aade3 R09: 1ffffffff0ed55bc
[  220.796809][    C0] R10: dffffc0000000000 R11: fffffbfff0ed55bd R12: dffffc0000000000
[  220.796826][    C0] R13: dffffc0000000000 R14: 1ffff9200060e04c R15: ffffc900030702d0
[  220.796839][    C0] FS:  00007f229586a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  220.796853][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  220.796864][    C0] CR2: ffffc9000306ff58 CR3: 0000000113bb6000 CR4: 00000000003526b0
[  220.796885][    C0] Kernel panic - not syncing: Fatal exception in interrupt
[  220.797527][    C0] Kernel Offset: disabled