last executing test programs: 2m6.546907688s ago: executing program 1 (id=1456): mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000040)=ANY=[@ANYBLOB='stats=global)\x00']) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000040)=ANY=[@ANYBLOB='stats=global)\x00']) (async) 2m6.495531928s ago: executing program 1 (id=1457): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r2, 0x0, 0x80, 0x8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) 2m6.425150499s ago: executing program 1 (id=1458): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x801, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000100)={[0x7, 0xa, 0x9, 0x40d6, 0xfe5b, 0x4, 0x6, 0x800, 0x10001, 0x6, 0x401, 0x9, 0x434f99e5, 0x0, 0xfffffffd, 0x2, 0x5, 0x86d7, 0xa, 0x3ff, 0x6, 0x1000, 0x7, 0x3, 0x1, 0x8, 0x7, 0x8, 0x2, 0x5, 0x7, 0x1, 0x6, 0x7, 0x6, 0x1, 0x7, 0xd27e, 0x80, 0xff, 0x6, 0x7ff, 0x1, 0x8, 0x0, 0x1, 0x400, 0x96, 0x8, 0x5f34, 0x10000, 0x80, 0x2, 0x7fffffff, 0x9, 0x3, 0x37, 0x1ff, 0x9, 0x8, 0x6, 0xfffffff9, 0xfffffffb, 0xaba1, 0xd, 0xfffffff3, 0x3, 0x85a0, 0x5, 0xa8, 0x1000, 0xfffffffb, 0x7, 0x800, 0x8000, 0x2, 0x4, 0x1, 0x9, 0x9, 0x3, 0x0, 0x0, 0x7, 0x8000, 0x7, 0x2, 0xc, 0x190c, 0x6, 0xa, 0x1, 0x4, 0x9, 0x9a, 0x3, 0x100, 0xfa, 0x7, 0xe5eb, 0x6, 0x8, 0x2, 0x4, 0x0, 0x9, 0xffff7fff, 0x7, 0x7, 0xffff5988, 0x4, 0xfffffff7, 0x98, 0x3782, 0x9, 0x1, 0x5, 0x5, 0x3, 0x2, 0x7ff, 0x1000, 0x2, 0x2, 0x8, 0xfffffffe, 0x6, 0x9, 0x40, 0x7, 0x7, 0x1, 0x8, 0x0, 0x8001, 0x1, 0x200, 0x3b4, 0x10, 0x6, 0xd2f3, 0x3, 0xe46, 0x6, 0x9, 0x101, 0x4606, 0x9968, 0x9, 0x6, 0x5, 0x400, 0x4, 0x3, 0x4, 0x2, 0x1, 0x4, 0x2, 0x8, 0x7, 0x7, 0x6, 0x2, 0x4, 0x0, 0x51f8c8fa, 0x8, 0x1ff, 0x1, 0x2, 0x81, 0x2f8, 0x0, 0xfffffe00, 0xd, 0x6, 0x7, 0x7, 0x2, 0x4, 0x4, 0x5, 0x9, 0xfffffc01, 0x87, 0x6, 0x8, 0x401, 0x1, 0x1, 0x1000, 0x3, 0x7, 0x3, 0x8001, 0x2, 0x8, 0x88, 0x8001, 0xffff, 0x7, 0x97d, 0x8, 0x461, 0x7, 0x80000000, 0x6, 0x5, 0x1, 0x0, 0x7, 0x3, 0x1, 0xfffffffe, 0x7, 0x2, 0x6, 0x7, 0x12000000, 0x400, 0x40, 0x1, 0x7, 0x7, 0xfffffffc, 0xa110, 0x4, 0x10001, 0x4, 0x8d, 0x9, 0x8000, 0x8, 0x3, 0xd2, 0x9, 0x5, 0x0, 0x4, 0x6, 0x7, 0x9, 0x818, 0x5, 0x7, 0x4, 0x4, 0x10001, 0x1, 0x1, 0x6, 0x4, 0x3, 0x79f7, 0x9, 0x28, 0x2, 0x8, 0x401, 0xe4, 0x6, 0x133, 0xc, 0x80000000, 0x9, 0x4, 0x7, 0x9, 0x4, 0x4, 0xd, 0x20000000, 0x0, 0xc1a, 0x2, 0x9, 0x7, 0xfff, 0x2, 0x5, 0x93, 0xc32, 0x80000000, 0x10006, 0x9, 0xfffffffa, 0x8, 0x8, 0x8, 0x6, 0x9a, 0xb0c4, 0x40, 0x0, 0x8, 0x3, 0x3, 0x170, 0x80000000, 0x9, 0x7fffffff, 0x5, 0x1000, 0x8, 0xff, 0x6, 0x2, 0xfef2, 0x7, 0xdd, 0xe, 0xe000, 0x2, 0x8, 0x3, 0x0, 0x7fffffff, 0x6884, 0x1ff, 0x400, 0x6, 0x2, 0x8000, 0x6, 0x5, 0x6, 0x800, 0xfffffff9, 0x8, 0x3, 0x8001, 0x80000000, 0xfffffff8, 0x3, 0x8, 0xfffffffc, 0x5, 0x2, 0x4, 0x1, 0x180, 0x3, 0x6, 0x4, 0x1, 0x80000000, 0x58, 0x200, 0x3, 0x7, 0x4, 0x8, 0x3, 0x1, 0x5, 0x3, 0xf17, 0x6, 0x2, 0x223f049, 0x5, 0x10, 0xbd16, 0x7, 0x6, 0x200, 0x3, 0x5, 0x8, 0x7, 0x9, 0xd, 0x6, 0x4, 0x839, 0x2e1a, 0x101, 0x1f, 0x6, 0x8, 0x3, 0x8919, 0x7, 0x7, 0x8, 0x6, 0x101, 0x401, 0x400, 0x26, 0x2, 0x781, 0x2, 0x2, 0x7, 0x1, 0x51ca, 0xa25, 0x1, 0xc, 0x0, 0x636, 0xfffffff7, 0x2, 0x4000000, 0xc631, 0x85ef, 0x5, 0x9, 0x0, 0xd8d, 0x96ef, 0xf, 0x7ff, 0x3, 0x2, 0x4, 0x0, 0x8, 0x59, 0xffffffff, 0x6, 0x1, 0xe6b, 0x5, 0xa, 0x9, 0x0, 0xd36, 0x6, 0xffff, 0xff, 0x9, 0x485a, 0x80, 0x8, 0x5, 0x6, 0x10000, 0xc764, 0x401, 0xfffffff2, 0x4, 0x401, 0x3, 0x80000000, 0x9, 0x8, 0x1, 0x6, 0x9, 0x3, 0x2, 0x101, 0x7, 0x3, 0x7, 0x7, 0x4, 0x8, 0x80, 0x5, 0x1, 0x3, 0x9, 0xffffffc0, 0x9, 0xffffffff, 0x0, 0x6, 0x6, 0x8, 0xee, 0xe52, 0xfffffff9, 0xc, 0x1, 0x1, 0x0, 0x6, 0x2, 0x10, 0x40, 0x7, 0xffffffff, 0x9, 0x0, 0x2, 0x7, 0x1ff, 0xfffffeff, 0x7f, 0xc, 0x3, 0x3ff, 0xa, 0x0, 0x5, 0x4, 0x3, 0x5, 0x1, 0x7, 0x5, 0x8062, 0x1, 0x3, 0x10, 0xe, 0x8001, 0x5, 0x0, 0xa, 0xfffffff9, 0x8, 0x3, 0x0, 0x8, 0x7, 0xd4, 0xf, 0x2, 0xcb, 0x401, 0x10, 0x2, 0x259, 0x7fff, 0x3, 0x68, 0x8, 0x8000, 0x2, 0x9, 0x5dbd2e38, 0xdbb, 0x20000007, 0x200, 0xbe7, 0x1, 0x9, 0x401, 0x5, 0x4, 0x9, 0x200, 0x0, 0x1216, 0x5, 0x9b, 0xfffffffc, 0x7f, 0x1, 0xffffffff, 0x2, 0x0, 0x400, 0xf1c, 0xd2f, 0x2, 0x10000, 0xb, 0x4, 0x4, 0x7, 0x208, 0x1, 0xfff, 0xf, 0x9, 0x80000000, 0x5, 0x5f, 0x7, 0x8000, 0x800, 0x4, 0xfffffffb, 0xaa3d, 0x4, 0x99, 0x6, 0x1, 0x3, 0x59, 0x8, 0x4e, 0x0, 0x2, 0xffff, 0xfffffffb, 0x31, 0xd0, 0x2d, 0x8001, 0x1, 0x11a, 0x34, 0x4, 0xffffffff, 0x3, 0x0, 0x5ef, 0x7, 0x6, 0x5, 0x7fffffff, 0x5, 0x8, 0x8000, 0x100, 0x0, 0x3, 0x5, 0x800, 0xfffffff9, 0x7, 0x2, 0x334d, 0x38e640, 0x1, 0x100, 0x1, 0xfffffffe, 0x1000, 0x9, 0x102308ed, 0x8, 0x4, 0x9, 0x9, 0x2, 0xfffffff9, 0x1, 0x708, 0x1c0, 0xd, 0x2, 0x3, 0x80, 0x298b, 0x2, 0x9, 0x7, 0x8, 0xfffffe00, 0x1ff, 0x7, 0x0, 0xed, 0x9, 0x4, 0x5, 0xfffffffd, 0x3, 0xe, 0x80000001, 0x2, 0x1ff, 0x9, 0x2, 0x7, 0x8, 0x1, 0x8, 0x264, 0x10000, 0x8, 0x4, 0x7, 0x8, 0x6, 0x1000, 0x2, 0x4, 0x9, 0x80, 0x7, 0x6, 0x5, 0x81, 0x47, 0x7e, 0x7, 0x3, 0x2, 0x1, 0x5, 0x9, 0x0, 0x9, 0x1, 0x3, 0x1, 0xffffff00, 0x8, 0x2e, 0x3, 0x1, 0x80000001, 0xa45, 0x4, 0x8001, 0x0, 0x250, 0xfff, 0x2a7c, 0xffffffff, 0xc, 0x51b1070d, 0xfffffffd, 0xfff, 0x477b, 0x1ff, 0xffffbfdb, 0x9, 0x0, 0x5, 0xab68, 0x9, 0x8001, 0x3c, 0x4, 0x1526, 0x10001, 0x2, 0x1, 0x4, 0x1000, 0x40, 0x1, 0x7fffffff, 0x3, 0x3, 0x1, 0x6, 0xc, 0xca, 0xb6, 0x80000000, 0x5, 0x9, 0xd, 0xc, 0x8bb, 0x8, 0x2, 0x7, 0x3, 0x9, 0x3, 0x9, 0x4, 0x9, 0xccde, 0xfffffff9, 0x800, 0x4, 0x7, 0x3ff, 0x8000000, 0x3, 0x4, 0x6, 0x0, 0x80000001, 0xff, 0x7, 0x5, 0x2, 0x9, 0x5, 0x2, 0x20000, 0xe, 0x8001, 0xfffffffb, 0x4, 0x1d18, 0x8, 0x7, 0x5, 0x5, 0x5, 0xf, 0x0, 0x0, 0x9, 0x4, 0x5, 0xff, 0x7, 0x702, 0x1ef, 0x65, 0x3, 0x6, 0x9, 0x9, 0x200, 0x2, 0x5, 0x370, 0xfffffffd, 0x8, 0x100, 0x7, 0x5, 0x100, 0x6, 0x0, 0x4, 0x6, 0x0, 0x7, 0x7, 0x10001, 0x7, 0x8, 0x80000000, 0xb, 0x237a, 0x99, 0x3, 0x800, 0x7, 0x84b8, 0x5, 0x5, 0x85, 0x6, 0xfff, 0x2, 0xd0, 0xfffffffd, 0xfe000000, 0x5, 0x9, 0x5, 0x1, 0x6, 0x10000, 0x7ff, 0x9, 0x9, 0x5, 0x4, 0x4, 0x5, 0x2, 0xffffffff, 0x2, 0xea2, 0x7ff, 0x6, 0x2, 0x0, 0x80000001, 0x2, 0x2, 0xaf, 0x9, 0x4, 0x8, 0x5af6, 0x22df4e, 0x8, 0x2, 0xe8, 0xe, 0x6, 0x8, 0x3ff, 0xd, 0x0, 0x3, 0x4, 0xf, 0x3, 0x9, 0x738101a9, 0x9, 0xa3, 0x6, 0x71d, 0x766a, 0xfffffffd, 0x7fffffff, 0x401, 0x5, 0x90, 0x5, 0x9, 0xffffffff, 0x2, 0x0, 0x7, 0x7, 0x1, 0x7, 0x9, 0x4, 0x5c, 0x3, 0x6, 0x166cba4, 0x200, 0x3b8a85c1, 0x10, 0x5, 0x3, 0x80000001, 0xfffffff9, 0x7, 0x98e, 0x9, 0x30, 0x759, 0x8, 0x45, 0x200, 0x1, 0x9, 0x8, 0x9, 0x200, 0x721ca50d, 0x3, 0x0, 0xc, 0x4, 0xffffffff, 0x2, 0xffffffff, 0x80, 0x5, 0xfffffe00, 0x4c3, 0x3, 0x6, 0xfffffff7, 0x4, 0xfffffffa, 0x200, 0x5, 0xd, 0xb7, 0x3800, 0x7, 0x5, 0x4, 0xbf, 0x3, 0x9, 0x10000, 0xb, 0x7a, 0x7, 0x2, 0x342b, 0x4, 0x400, 0x401, 0x5, 0x0, 0x4, 0x3, 0x1, 0x6, 0x20de988b, 0x7ff, 0x8, 0x5, 0x6, 0x7, 0x5, 0x7fffffff, 0xaf, 0x2, 0xfffffffc, 0x3, 0x5, 0xa, 0x6db, 0x10000, 0x4, 0x8, 0x3, 0x401, 0xffff8001, 0xfff, 0x6, 0xfffffffd, 0x300000, 0x8, 0x5, 0x6, 0x1000, 0x6, 0x5, 0x9, 0xfff, 0x1, 0x3, 0x80000000, 0x3, 0x9, 0x5, 0x10000, 0x0, 0x5, 0x10001, 0x9, 0x8000, 0xffff, 0x2, 0x2, 0x77a, 0x8, 0x4, 0xf, 0x2, 0x2]}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2m6.414911609s ago: executing program 1 (id=1459): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d1050120000701020301090212000100001a000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0}) 2m5.902305463s ago: executing program 1 (id=1474): r0 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='^\t*([%\x8e\x00', &(0x7f0000000200)='@!\x00', 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0xffffffffffffffaa, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2m5.886175483s ago: executing program 1 (id=1475): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x120296480, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1502000000ffff0010000008003950323022302e75"], 0x15) r2 = dup(r1) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001100)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x46, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x2}}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x7d, 0x1005, 0x3, 0x6, 0x0, 0x0, 0x0, 0x20003}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c618269643d3078303030303030303030303030303030382c6b"]) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r4, 0x0, 0xffffffff) 1m50.785688395s ago: executing program 32 (id=1475): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x120296480, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1502000000ffff0010000008003950323022302e75"], 0x15) r2 = dup(r1) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001100)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x46, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x2}}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x7d, 0x1005, 0x3, 0x6, 0x0, 0x0, 0x0, 0x20003}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c618269643d3078303030303030303030303030303030382c6b"]) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r4, 0x0, 0xffffffff) 1.835616328s ago: executing program 2 (id=3012): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x48, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f0000000040)={0x1, r4}) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000000)=0x6, 0x4) (async) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) (async) sendto$inet6(r7, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x24004840, 0x0, 0x0) (async) recvmmsg(r7, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000002, 0x0) syz_clone(0x1a103500, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 1.806413138s ago: executing program 2 (id=3013): r0 = socket$key(0xf, 0x3, 0x2) cachestat(r0, &(0x7f0000000100)={0xfffffffffffffffa, 0xd6}, &(0x7f00000003c0), 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, &(0x7f0000000400), 0x4) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x100, 0x3, 0x7, 0x4}, {0x0, 0x8, 0x4, 0x2}, {0x7f, 0x5, 0x81, 0x3}, {0x6, 0x0, 0x7, 0x9}, {0x4, 0x1, 0x6, 0x1}, {0xed, 0x3c, 0x7, 0xdf12}, {0x101, 0x8, 0x4, 0xe}, {0x5, 0x0, 0xce, 0x3}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f00000000c0)) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x7fff, 0x7, 0x1, 0x2b}, {0x7, 0x9, 0xf, 0x5d1, 0x1, 0x882}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 1.744154638s ago: executing program 2 (id=3014): getpgrp(0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) listen(r1, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) mknodat$loop(r2, &(0x7f0000000000)='./file0\x00', 0x20, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.743029629s ago: executing program 2 (id=3016): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) (async) getrandom(&(0x7f0000000080)=""/109, 0x6d, 0x3) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000202505a8a44000010203010902"], &(0x7f00000000c0)={0x0, 0x0, 0x61, &(0x7f00000002c0)=ANY=[@ANYBLOB="050f610088330154418a9f99dde09dda9df3dfe807fb0945c548c8fc1462f0b01f58829161df3e84b9e47f57d0f9c4c60c8bbf2c1b5e935a67"]}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) 1.48237014s ago: executing program 4 (id=3018): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x450}) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x450}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setrlimit(0x2, &(0x7f00000000c0)={0x44, 0x2400004}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) (async) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.45242384s ago: executing program 4 (id=3019): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockopt$inet6_mreq(r2, 0x29, 0x1c, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000006c0), 0x0, 0x220000) r4 = eventfd2(0x1, 0x800) io_setup(0x7f, &(0x7f0000000180)=0x0) io_submit(r5, 0x0, &(0x7f00000004c0)) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x8, 0xfffffff9, 0x7fff, 0x16, "82000000000000000000f7ffffff00"}) r7 = syz_open_pts(r6, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000080)={0x7, 0xffffff45, 0x6, 0x1, 0x0, "c0427e75eefeeac0daee259253ebba690d1ec8", 0x90, 0x614a}) read$FUSE(r8, &(0x7f0000000540)={0x2020}, 0x2020) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r9, 0x800448d2, &(0x7f0000000080)={0x5, &(0x7f00000001c0)=[{@none}, {@fixed}, {@none}, {}, {}]}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r4, @ANYRES32=0xee00, @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x46042}, 0x20006805) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000a80)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/168, 0xa8, 0x0, &(0x7f0000000580)=""/26, 0x1a}, &(0x7f0000000ac0)=0x40) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r11 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000008c0)=ANY=[@ANYBLOB="66696c7465720000783c000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000ce510b25540add68731afdcaa795be537cd49854b9ccfe74b620bbd90630d8d82fc8347afc2e953f3d2d519ae89585f5fd0e56e696981ac381ae2fd32b28b39daabc34d6ce59b0abd5b333202f0eb3a124ed37b9198befb0a4b0983cf1ab6496e3b268d286321e029403d73aa18ccccb20732e2f4ef679046c04bd0dd62a6efff9"], 0x58) ioctl$UDMABUF_CREATE(r11, 0x40187542, &(0x7f0000000280)={r3, 0x1, 0xfffff000, 0x8000}) write$selinux_load(r2, &(0x7f0000000300)={0xf97cff8c, 0x8, 'SE Linux', "86dacc3c749bd75f39cfabe2c5b5748befcd058746ff0f096f0e25e73306f8848a9ce749c40962b4a319d973795b8e395fc080cc638ce5bc"}, 0x48) 1.170650712s ago: executing program 2 (id=3020): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') getrandom(&(0x7f0000000140)=""/205, 0xcd, 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f00003a8000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/241, 0xf1, 0x0, &(0x7f0000000040)=""/17, 0x11}, &(0x7f0000000480)=0x40) lseek(r2, 0x2000, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000004c0)=0x8, 0x4) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 819.305714ms ago: executing program 3 (id=3021): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f00000001c0), 0x8) sendmmsg$sock(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="74b17a07", 0x4}], 0x1, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}}], 0x400000000000240, 0xc4) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x40) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 818.135854ms ago: executing program 3 (id=3022): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$bpf(0x0, 0x0, 0x0, 0x5085040, &(0x7f0000000100)={[{}]}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0xe, {0x2a00, 0x80010000, 0x0, 0x5, 0x6, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab75fc179fd1f8a0e91ddaaca7bd6447a4bde00d9683dda1af1ea09de2b7fb4af956000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5523406c7f0000000000000000000000000000000000000900", [0x4, 0x40000000000000]}}) mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x206e) 738.719205ms ago: executing program 3 (id=3024): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$igmp6(0xa, 0x3, 0x3a) (async) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f000072b000/0x2000)=nil, 0x2000}, 0x1}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}, 0x1c) (async) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000001000000000800040001000000", 0x24) (async) getsockopt$MRT6(r1, 0x3a, 0x1, 0x0, &(0x7f0000000100)) close_range(r0, 0xffffffffffffffff, 0x0) 671.260796ms ago: executing program 0 (id=3025): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000140)='./file0\x00', 0x149fc0, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40480, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) socketpair(0x1e, 0xa, 0x10ae, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000480)={0x8000}) close_range(r5, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) ioctl$LOOP_SET_STATUS64(r9, 0x125d, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x12, 0x1, 0x4, "6a4a42aba98b2f07359d3272d6e8ce294686c732c24a39cc509c79ad4bf6de70b02c91ffbe04916d065f1681d04be078c2e4c1014ec966a8158d76d7aa63c0d9", "ce5862f532d5bff5ff013807abc3406dfe731e87f50cd5bb091fff519936869fd5295ddc045503fe0b01150b5b5ebf1561daa3dc633d717f3f7a3d1f1edac2f2", "c0c045fd3dfd710ca2562c2d8e828bb61dea84761cff87e28f9c8a246fa4f376", [0x8, 0xa]}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r8, 0x5000940e, &(0x7f00000004c0)={{r5}, "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"}) 670.095406ms ago: executing program 3 (id=3026): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) recvmmsg(r1, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0xfffffffd}], 0x1, 0x141, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x2010, 0xffffffffffffffff, 0x88ff8000) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r3, 0x0, &(0x7f0000000100)) (async) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1800000100000101000000000000000008004100e1a17275957a6d526b24c70fa3d26918ce0779fd26ad664f02c1312796ff5e579f8c7dd129c9b45ea273916062a1a1d5bb4721", @ANYRES32=0x0, @ANYBLOB], 0x18}], 0x1}, 0x0) (async) syz_pidfd_open(0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) (async) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x5, 0x84}}, 0x30) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f00000001c0)={0x1d, r7}, 0x10) (async) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000100)=r7) (async) r8 = socket(0x11, 0x3, 0x0) (async) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) sendmmsg(r8, &(0x7f0000000000)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000001c00)="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", 0xfdd}], 0x2}}], 0x1, 0x24044015) (async) close_range(r0, 0xffffffffffffffff, 0x0) 582.882286ms ago: executing program 0 (id=3027): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timerfd_gettime(r1, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb1000000080088484803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = epoll_create(0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_create(0x6) epoll_pwait(r3, &(0x7f0000000280)=[{}], 0x1, 0x8, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0xfffa, 0x8, 0x8, 0x3}, {0x8, 0xca, 0x2, 0x7}, {0x1, 0x4, 0x4, 0x5}, {0x8, 0x8, 0x40}, {0x2, 0x0, 0x2}]}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x206e) 582.000106ms ago: executing program 3 (id=3028): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') (async) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="baea91f60b9ffea4783f72e86f9aed5aabe188c77685497314a7e2a2d4dd770f4889b3608a74cfd39aec0688b159ea2a94a8f0d0657a8665133529bcb37cec12b5991ed4", @ANYRES16=r1, @ANYRES8=r2, @ANYRESOCT=r1], 0x1c}], 0x1}, 0x0) (async) fstat(0xffffffffffffffff, &(0x7f0000000000)) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x40, 0x0, 0x0, 0x0, 0x40}}, 0x50) (async) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000000)=0x1) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000008c0), 0x4, 0x0, &(0x7f0000000100)="1f4e6086"}) (async) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000008c0)={0x8, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) (async) socket$unix(0x1, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000100, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0x0, 0x0}) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) (async) read(r0, 0x0, 0x0) 501.061247ms ago: executing program 3 (id=3029): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000000)=0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x0, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x404000, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000080)={0x0, 0x3, [@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @remote]}) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) sendmsg$can_bcm(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x7, 0x4, 0x1, {0x77359400}, {}, {0x3, 0x0, 0x0, 0x1}, 0x1, @can={{0x1}, 0x1, 0x3, 0x0, 0x0, "afa543eab5373dcb"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x2000) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2) r5 = memfd_create(&(0x7f0000000280)='\xaa\xaa\xaa\xaa\xaa', 0x2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000300)={0xb1, 0xffffff39}) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000340)='wg2\x00', 0x10) sendto$inet(r3, &(0x7f0000000380)="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", 0x1000, 0x20000000, &(0x7f0000001380)={0x2, 0x4e22, @private=0xa010100}, 0x10) r7 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000013c0)={r3, 0x1, 0x4000, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000001400)) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000001440)=""/180, &(0x7f0000001500)=0xb4) sendto$unix(r3, &(0x7f0000001540)="0d96c7c521f57f29ebe109ea214673c63f4e8a0716251d9ed6233f23126002c2439f71684e76f6864badcb3d331b28911d2e447541da1129bb6e091c63b8d99ffd42eafd1c9f8f0c46de531f2a908e98bc0da6d570a526429927fe320780c3659064f5efbd286250989b86b3c0379f10f601487ab0bc783a261fcef2ea33fb4193e58ce334964e17d45349d11a38d35ddf625dab828fca72944c52e62f019af54d298db319d1ecaf92adfe4f22ae140fae2d354a9b816fb41b55fcc5df29e0cb36b0fa4aee48617f856664e252da77c532e07fd62ccdaf36aededab53d09aed3687193d9a7bc908711017d49fc8567273d1b0347700c3a", 0xf7, 0x20000000, &(0x7f0000001640)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000001700)={0x2, &(0x7f00000016c0)=[{0xfffb, 0x9, 0x3, 0x9}, {0x6, 0x81, 0x7, 0xb}]}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001740)={0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r9, 0x10f, 0x82, &(0x7f0000001780), &(0x7f00000017c0)=0x4) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000001800)={0x0, 0x84}, 0x8) poll(&(0x7f0000001840)=[{0xffffffffffffffff, 0x8000}, {r0, 0x82}, {r5, 0x8000}], 0x3, 0x4d1fa7d2) r10 = dup2(r5, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r10, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001980)={&(0x7f00000018c0)={0xb0, 0x3, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x4090}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 419.474527ms ago: executing program 4 (id=3030): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$tipc(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 362.294057ms ago: executing program 4 (id=3031): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r5, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x4, 0x10d}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008075}, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xff, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0xf000, 0x80a0000, 0x10, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xdddd0000, 0xdddd1000, 0x8, 0x3, 0x0, 0x7, 0x4, 0xd, 0x7d, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x3, 0xd, 0x6, 0x3, 0x4f, 0x1}, {0x100000, 0x3000, 0x9, 0x4, 0x3, 0x2, 0x5, 0x6, 0x5, 0x7f, 0x4, 0x4b}, {0xeeef0000, 0x2, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0xc, 0x90, 0x1, 0xfa}, {0x6000, 0x4000, 0x8, 0x9d, 0x3, 0x5, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x7, 0x54, 0x7b, 0x2, 0x7}, {0x100000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x4000, 0x300, 0x5, 0x3000, 0x8000000, [0x0, 0x401, 0x7, 0xc5]}) close_range(r0, 0xffffffffffffffff, 0x0) 283.145478ms ago: executing program 0 (id=3032): socket$tipc(0x1e, 0x5, 0x0) (async) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x3}, 0x10) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x78801, 0x0) pwritev2(r1, &(0x7f0000000480)=[{&(0x7f0000000040)="24bbf8889d5319f2f1c4fbae83b6536d6aa96885fcc38dfdf980c7ab44c30ffb9d8a9fec0f8d42cbe3792bc9335e9da886a5e0681f0a63af4f71a9a7af", 0x3d}, {&(0x7f0000000080)="1ce5ac354e25da83cee6a8e7d3504b5e3d4c233725a1a232027538c560ffcc2d6825caf9115fc987860e6486e07c63544c78c43e9673335da46dc9680e8c6d4e297f823cf0b99378fe1ef39a4f24e06c3524151c9ae36c66daa4a03ff0d670b88eef8dc881002624ee46cda6a70599429a636af329ea4575e3e2028a13594f38a4935e173b6dd636962f15c978af1833788cd44dbef60ec014ead9fc69d4a0783490cc8907943b21b2eff80830ce0fe4b4225f5c44c229608a419cd90df687d0000000000000000000", 0xc9}, {&(0x7f0000000180)="292575c377def04dc819dad28632de319c2e558d432f729ff34542f1f453f317ef49c3fe4d9a9149db1ae5499d6e2e035060f489a18c40cda1deb05d1d5b7b1f4810f09604eff8f0df71c75ae298564105b58c95f72f291fb353cf1b6238fa75253dd145073793de198d6b1210400f36a62bc3ebeae9a092622ad6db23934bf3edbdb8e3ec065f903478a586aca54dfc336b1c7aa8def2ad66f59d251cf09ce19731eb880f76aae7c61d2fd0bf43", 0xae}, {&(0x7f0000000280)="d3b7648a4bc78ff0009a67967cd6dc180cd289ec6a64f2e69b94b4fed72a639ef0a3b3227f8655109bb7251a1ab36b8402da92ff1189a7cd6bdb3950ca78b65a97c4302fd11dec3f5e4c71aa5265bdf70787c52b8e81538a661c9e9f84e93884a05790dc5c1c94a7a0e6fdc84ce3532c5b254b7a9d49a749a1de2e902ff6f1f818ff8f79ebf1f144c3c77811b8c5866799d674005ac54d1551fd779643f863b81edd46d9f75922f63e5fb526e34051c99c29e33f3827386ecfa623a36c5b594e8b3c0a00", 0xce}, {&(0x7f0000000380)="d34a90cb51bf9cc6d9254dcc3bfb493786d4c8993baeb60ffc736d548c204c7fca5ac6cc15174e09279f9a54b5fde0635f53add96fbb4790a4b6de24ca674b312804dc", 0x43}, {&(0x7f0000000400)="03245e3fd460f871047edbdff37d74b18863496736510c295a1e855f99b3a798264e440a26c7c83e1969c277765bc55a0a8adb3d91c920c75bcfcef2592207f7727d509c31279a23fa0831b5422f733566be0d2fab1b2442caef2ac1fd", 0xbc}], 0x6, 0x9, 0x4, 0x1) dup(r3) (async) dup(r3) ioctl$BLKRRPART(r3, 0x125f, 0x0) 219.138638ms ago: executing program 2 (id=3033): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x400940) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000480)={0x8000}) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0xffff, @mcast1, 0x3}, {0xa, 0x4e20, 0x8000000, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x6}, 0x1, {[0xa, 0x6, 0x200, 0x8, 0x5, 0x6, 0x5, 0x5]}}, 0x5c) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, 0x0) ioctl$HIDIOCSUSAGES(r5, 0x501c4814, &(0x7f0000000540)={{0x3, 0x1, 0x8001, 0xc4, 0xc, 0x711e}, 0x2e9, [0x5bb65db4, 0x6, 0x1, 0x2, 0xffff0000, 0x5, 0xf, 0x8, 0xd5, 0x3, 0x4, 0xc8, 0x7, 0x0, 0x343, 0x99cd, 0xe1, 0xab37, 0x2400000, 0x2, 0x8, 0x4603, 0x7, 0x0, 0x6, 0x6, 0x401, 0xffffff7f, 0x2e, 0x4, 0xfffffff9, 0xd, 0x43f, 0x5, 0x2, 0x2, 0x6, 0x21, 0x3, 0x4, 0xff, 0x0, 0x4, 0x8000, 0x0, 0x4, 0x6, 0x0, 0x96, 0x7fffffff, 0x8, 0x8, 0x2, 0x7f, 0xb14, 0xea8, 0x8, 0x8c86, 0x1000, 0x7, 0x7, 0xe, 0x5, 0x98, 0xc20, 0x4, 0x6, 0x8, 0x9, 0xe, 0x7ad3, 0x2, 0x1000, 0x2, 0x0, 0x1, 0xcea1, 0x7, 0xaf597a1, 0xffffff00, 0x10, 0x52, 0xffff, 0x4, 0x5, 0x4, 0xfffffbff, 0x10000, 0x9, 0x6, 0xee, 0xb260, 0x6, 0x8, 0x7, 0x9, 0x1, 0x9, 0x6, 0x907, 0x2, 0x0, 0xfffffffb, 0x3, 0x800, 0x5, 0x2, 0x40, 0x0, 0x2, 0x6, 0x1, 0x9, 0x8, 0x0, 0x8, 0x4, 0x1, 0x9b, 0x6, 0x7fffffff, 0x101, 0x80000000, 0x4, 0x5, 0x7, 0xcbf7, 0xfa, 0x9, 0xffffffff, 0x3855, 0x4, 0x8, 0xf7f, 0x800, 0x5, 0x0, 0x1ff, 0x7, 0x1, 0x3, 0x4, 0x74f891b1, 0x3, 0x9, 0x2, 0x3, 0x3000000, 0x45, 0x9, 0x5, 0x7, 0x10000, 0x2, 0x1000, 0x9b0, 0x1, 0x1, 0x7, 0xf27, 0x4, 0x100, 0x0, 0xab6e, 0x81, 0xd5, 0x7, 0xdb, 0xfffffffc, 0x0, 0x8000, 0x2, 0x9, 0x3, 0xd, 0x9, 0xa, 0x0, 0x8001, 0x1, 0x2, 0x40, 0xa, 0xff, 0x9, 0xffffffff, 0x9, 0x9, 0x1, 0x3, 0x68, 0x0, 0x7, 0x200, 0x2, 0x5, 0x3, 0x1, 0x7, 0x17a, 0x5, 0x3, 0x37c, 0x2, 0xff, 0x200, 0x6, 0x1, 0x7ff, 0x3, 0x0, 0x8001, 0x9, 0x8, 0x7, 0x7, 0x24, 0x4, 0x5, 0xfffff879, 0x7ff, 0x1, 0x18a6, 0x3, 0x6, 0x0, 0x6cd, 0x4, 0x7f, 0xb3b, 0xffffffa0, 0x9, 0x4, 0x5, 0x2, 0xc2, 0x0, 0xf9a, 0x561, 0x9, 0x666, 0x7, 0x5, 0x8, 0x5, 0x0, 0x7, 0x2, 0x3, 0x8, 0x1, 0x10000, 0x2, 0x10001, 0x707c, 0x3, 0x5a6d, 0xfffffffe, 0xc3f, 0x4, 0x4, 0x4, 0x6, 0xfffffff7, 0x5, 0x8, 0x7, 0x8, 0x41, 0x7, 0xc, 0x2a3, 0xffffffff, 0x7, 0x893, 0x8, 0x8, 0x0, 0x3d, 0xfffffff9, 0x3, 0x4bb, 0xffff, 0xfffff801, 0x0, 0x1, 0x3, 0x6, 0x8, 0x2, 0x4, 0x1, 0xaf9, 0x0, 0x10001, 0x8, 0x6, 0xd8d3, 0x7, 0x200, 0x0, 0x400, 0x4, 0xbe8, 0x401, 0x340b, 0x6, 0x3, 0x9, 0x5, 0x2, 0x1ff, 0x5, 0x9, 0x78, 0x6, 0x5, 0xfffff801, 0xa017, 0x4, 0x1, 0x3f, 0x9, 0x5, 0x22, 0x63c, 0x7fff, 0xeb7c, 0x4, 0x0, 0x0, 0x3, 0x3, 0x6, 0x3, 0x7, 0x401, 0x5, 0x0, 0x3, 0x10, 0x3ff, 0x6, 0x8, 0x0, 0x10001, 0xd48, 0x0, 0x5, 0xb221, 0xfffffffa, 0x6, 0x10001, 0x9, 0x4, 0x4, 0x96, 0x78, 0x5, 0x1, 0x0, 0x6, 0xd, 0xffffffff, 0x2fb7, 0x1, 0x9, 0x2c, 0x2, 0x7, 0x3, 0x4, 0x9, 0x7, 0xe2a, 0x8, 0x6, 0x0, 0x8, 0x5, 0x7, 0x8, 0x9, 0x9, 0x6, 0x6, 0x1000, 0xfffffff8, 0x8, 0x0, 0x8001, 0x7f, 0x0, 0xb, 0x9, 0xa4380000, 0x3, 0x1, 0xc, 0x5, 0xfff, 0x7, 0x401, 0x8, 0x214a, 0x52000000, 0x7, 0xa33, 0x9, 0x5242e1a1, 0x1ff, 0x5, 0xcb6, 0x6, 0x3, 0x7, 0xa8, 0x25f, 0x3, 0x2, 0x0, 0x6, 0x6, 0x95, 0x2, 0x56, 0xa, 0x46932165, 0x749, 0x8, 0x4, 0x10, 0x3, 0x9, 0x1, 0x2, 0x3, 0x0, 0x6, 0xf, 0x5, 0x7, 0x2, 0xe10f, 0x3, 0x400, 0x4, 0x8, 0x0, 0x3, 0x10000, 0x3, 0xfe4c, 0x4, 0x4, 0xdce, 0xbe, 0x0, 0x80000001, 0x691, 0x7f, 0x3, 0x3, 0xd, 0xfffffffc, 0x6, 0x4, 0x8, 0x4, 0x4, 0x6, 0x6, 0x6, 0x8, 0x9, 0x4, 0x80, 0x3ff, 0xffffffff, 0x2, 0x200, 0xcd7a251, 0x9, 0xfffffe01, 0xff, 0x7ff, 0x7, 0x6, 0xffffffff, 0x1, 0x4, 0xe92, 0x6, 0x1, 0xb8, 0x4, 0xf9, 0x1, 0x8, 0xffffffff, 0x35f, 0xb, 0xb, 0xb3, 0x9, 0x4, 0x7fff, 0xb, 0x2d, 0x1, 0xfffffff8, 0x80000000, 0x3, 0x1800, 0x8, 0x7, 0x6, 0xc3, 0x2, 0x4, 0x0, 0x7, 0x9, 0x4, 0x4d9, 0x400, 0x400, 0x7f, 0x200, 0x4, 0x3, 0x9, 0x80000001, 0x5, 0x8, 0x3ff, 0xfffffffa, 0x7fff, 0x8001, 0x4, 0x24e0, 0x8, 0x9, 0x2, 0x1, 0x4, 0x7, 0x1, 0x9, 0x9, 0x0, 0x4d2a5479, 0x0, 0x7, 0xa, 0x6, 0x4, 0x1e, 0x101, 0x800, 0x8, 0x0, 0x6, 0x7f, 0x6, 0xfff80000, 0x4, 0x0, 0x5, 0x7fffffff, 0x4c7, 0x2, 0x8, 0x14, 0x1, 0xb46b, 0x12b, 0x0, 0x0, 0xc, 0x4, 0x4, 0xffff, 0xc29, 0xfffff622, 0x9, 0x5, 0x1ff, 0x36, 0x6, 0x2, 0x11a, 0x5, 0xffff, 0x100, 0x6, 0x9, 0x1000, 0x2, 0x5, 0x10, 0x8, 0xa995, 0x3, 0x725295af, 0x401, 0x1ff, 0x4, 0x8, 0x4, 0xb, 0x9, 0x0, 0x3a78ea41, 0x4, 0x4a, 0x44aa, 0x2, 0x5a3, 0x0, 0x9, 0x101, 0x72d, 0x1, 0x5, 0x7, 0xffffff40, 0xb2, 0xb971, 0x7, 0x7fff, 0xe, 0x665, 0x8, 0x6, 0x8, 0x1, 0xfffffff8, 0x2, 0x4, 0x9, 0x0, 0x2b4, 0x3, 0x4, 0x6, 0x0, 0x5, 0x4, 0x9, 0x1, 0xfff, 0x2, 0x3, 0x0, 0x3, 0x9, 0x3, 0x694e927f, 0x9, 0x80000001, 0x800, 0x2, 0x5, 0x9, 0x2, 0x5, 0x0, 0x6, 0x4, 0x2, 0xfffffff9, 0x6, 0x8, 0x7ff, 0x0, 0x401, 0x974, 0x3, 0x101, 0x543dd6b5, 0x7, 0xffffffff, 0x0, 0x8, 0x5, 0x0, 0x3, 0x10000, 0x8, 0x5, 0x6, 0x4, 0x8000, 0x1, 0x400, 0x9, 0x8, 0x5, 0x5, 0x9, 0x61a5, 0xffffffff, 0x2, 0x6c0d4abc, 0x401, 0x1, 0x5000000, 0x400, 0xa2f13131, 0x800, 0x5, 0x1, 0xbf, 0x7ff, 0x2, 0x1, 0x5, 0x5, 0x71e8, 0x8000, 0x3, 0x2, 0x7, 0x10001, 0x2, 0xffffffab, 0x4, 0x4, 0x6, 0x9, 0x2, 0x8, 0x10000, 0x409, 0x61, 0x80000000, 0x5, 0x6, 0x7, 0x5, 0xfffff801, 0xe, 0xffff5fa5, 0xec41, 0x1, 0x7f, 0x7ff, 0x5, 0x3c, 0x480000, 0x7f, 0x6, 0xe84d, 0x8000, 0x4b5, 0x69, 0x8, 0x1ff, 0xfffff279, 0x9, 0x4, 0x2, 0xff, 0x3, 0xa1ca, 0x6, 0x9, 0x7, 0xf2f, 0xc23, 0x2, 0x41, 0x1ff, 0xcf, 0x1, 0x401, 0x4, 0x20000000, 0x8, 0x4, 0x8, 0x0, 0x6ec, 0x81, 0x4, 0x2, 0x6, 0x3ff, 0x6, 0x7747, 0xcb53, 0x8, 0x1, 0x8, 0x200, 0x0, 0x3, 0x1, 0x5, 0x0, 0x8, 0x0, 0x4010000, 0x1, 0x0, 0x8, 0x1, 0x4, 0x92d2, 0x4, 0x4, 0x0, 0x4, 0xd75, 0x2, 0x0, 0x40, 0x792, 0x7, 0x9, 0x0, 0x7, 0x0, 0xff0, 0x6, 0xb4, 0x68a7, 0x9, 0xff, 0x7, 0x8001, 0x1, 0x7ff, 0x7, 0x2, 0x7, 0x0, 0x1, 0x6, 0xffffffff, 0x4, 0x200, 0x7, 0x5, 0x0, 0xfffff3c2, 0xf04db1d, 0x7, 0x9, 0xfff, 0x95ab, 0x2, 0x4, 0x6, 0x8000, 0x9, 0x7f4a, 0x5, 0x0, 0x7, 0x7, 0x0, 0x8, 0x5, 0x1ff, 0x0, 0x5, 0xc, 0x0, 0xc2, 0xff, 0x76c, 0x3, 0x7fffffff, 0x38, 0x5, 0x5, 0x8, 0x40, 0x9, 0x2, 0xf61d, 0x7, 0x80, 0x4, 0x893, 0x4, 0x1000, 0x2, 0x2, 0x5, 0x100, 0x5, 0xb, 0x3, 0x1a, 0x7, 0x5, 0x7, 0xe, 0x7, 0x5, 0x963, 0x8, 0x4, 0x0, 0x10, 0x7fffffff, 0x5, 0x8, 0x56, 0x21, 0x400, 0x4cf, 0x2, 0xffff0aa5, 0x3, 0x200, 0x8, 0xeb6, 0x0, 0x8, 0x6, 0x9, 0x0, 0x4, 0x9, 0xedc0, 0x5, 0x9, 0xfffffff9, 0x8000, 0x1, 0xffff, 0x39, 0xfffffff3, 0xb7, 0x77, 0x65e6ce40, 0x8, 0x7fff, 0xbe53c803, 0x300, 0x5, 0x75c9, 0x7, 0x2, 0x40, 0x72, 0xe, 0x5, 0x1, 0x6, 0x2, 0x114c, 0x8, 0x5, 0x8, 0x0, 0x61, 0x1, 0x9, 0x7fff, 0x5, 0x41f, 0x5, 0x0, 0xfffffff9, 0xe, 0x4, 0xcafa, 0x6, 0x6, 0x9, 0x3, 0x2, 0x8, 0x3, 0x7, 0x9, 0x2, 0x80, 0x8, 0x47f0, 0x6, 0x5, 0xc8e, 0x6, 0x9, 0x6, 0x8, 0x10001, 0x4, 0x8001, 0x305a, 0x0, 0x2, 0xe98, 0x1, 0xc7, 0x1, 0x0, 0x6, 0x8001, 0xffffffb6, 0x7, 0x8, 0x6, 0x4, 0xe177, 0xfff, 0x5, 0x0, 0x4, 0x5, 0x7ff, 0x1, 0xc, 0x6, 0x7, 0x400, 0xee, 0x3]}) close_range(r0, 0xffffffffffffffff, 0x0) 217.970619ms ago: executing program 0 (id=3034): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setown(r1, 0x8, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) 211.053318ms ago: executing program 4 (id=3035): prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0xc02, 0x0) (async) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80) futex(&(0x7f000000cffc)=0x2, 0xa, 0x0, 0x0, 0x0, 0x1000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$RTC_VL_CLR(r1, 0x7014) 145.891069ms ago: executing program 0 (id=3036): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b", 0x15}, {&(0x7f0000000300)="e70bdabd", 0x4}, {&(0x7f0000000340)="b0865e3dde46810d", 0x8}], 0x6, 0x0, 0x0, 0x900}}], 0x1, 0x0) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 63.3329ms ago: executing program 4 (id=3037): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1e) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x4, 0x2, 0x32}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0xa19) 0s ago: executing program 0 (id=3038): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1844682432,\x00']) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capget(&(0x7f0000000240)={0x20071026, r2}, &(0x7f0000000440)={0x54e, 0x2, 0x10, 0xe, 0x2000000, 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, 0x0, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x380, 0x1040000002}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r5, r6, 0xfffffffffffffc01, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x35, [0x1, 0xc95a, 0x6, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x10000, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x202, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xd, 0x3, 0x7ffd, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x2, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0xf30, 0x0, 0x12f, 0x6, 0x10, 0x0, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x104, 0xfb, 0x5, 0x100, 0x5f31, 0x7ff, 0x1, 0x800, 0xffffffff, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x1, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x5, 0x80000001, 0x2, 0x0, 0x40000100, 0x8d2, 0x3, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x40, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800005, 0x200, 0x80, 0x2, 0x100, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x10001, 0xac8, 0xbf, 0x10002, 0x403, 0x7fc, 0x3, 0x0, 0x1, 0xffff, 0xfffffffe, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x21, 0x6, 0x5, 0x2, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1004, 0x1, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0xa74, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x5, 0x100, 0x3, 0x4, 0xa, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x0, 0x1, 0x6c18, 0x0, 0x4, 0x6, 0xb1c, 0x1, 0x1fe, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) fcntl$setlease(r7, 0x400, 0x1) removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_access\x00') write(r0, &(0x7f0000000680)="0d46cfbadf383fab551b3d44155d219f029c952322d74ed04d4c1c66cf897c912b6c165da7d243ea90fed8668b113463dd1b2ff950052216f7da8ccf6121078fb10661298e2efe1425d2c02eac2fab57327f402396319937ae9c4b1de079546d769ed140a28be440bec407256c4f207e930748bcaa1539eeb21e6f1ffc3fa3b0923d2b22b3a2b17226d0e86c319f202017fe7944430e81835f3fe0ad03fe8376b14ead8f6b1c9ebc7fee0682b08a94ac43326d19277a329dec17370167e44aa7074a0198daa42ba7e247542624dfdc5a383519b9564d8387ff77b6a4", 0xdc) ioctl$sock_SIOCBRDELBR(r4, 0x89a3, &(0x7f0000000200)='bridge0\x00') ioctl$X86_IOC_RDMSR_REGS(r5, 0xc02063a0, &(0x7f0000000140)=[0x0, 0x1, 0x6, 0x1ff, 0x2, 0x3, 0x9, 0xff]) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0xc0046209, 0x200000000000000) syz_usb_connect(0x3, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="62fb2021044404001da4bf8834b08c152c9fb7bf880f09048a070035a36e702808390cf61a38803117288de78c20a5bca093785ff68e9cba2662740764a0eb5daf8514c631a6650f3776cfa430a0376d9756aa6d27ca224773444f316820d4d16bc0a9cabce81326585a075a6bded853c2695af63d991f17e7b8213e0ff9ae6b36795dd29ad5a77a0d4d07b8fe0446e00044b7f92885bc0bb3622b0cd414bdee5e28a5d69d0c6b0989c45dea7747d56ee88325410e59370cdedea1cdcddbb325459148f4eefc6374914c9384ee57c5582f65029a4f94074e90b6e574f6"], 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r8, 0x3) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) kernel console output (not intermixed with test programs): in process `syz.4.2084'. [ 153.092714][ T6943] SELinux: Context system_u:object_r:tun_tap_device_t:s0 is not valid (left unmapped). [ 153.102794][ T36] audit: type=1400 audit(1779167201.594:27749): avc: denied { relabelto } for pid=6942 comm="syz.4.2085" name="file0" dev="tmpfs" ino=288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tun_tap_device_t:s0" [ 153.129770][ T36] audit: type=1400 audit(1779167201.594:27750): avc: denied { associate } for pid=6942 comm="syz.4.2085" name="file0" dev="tmpfs" ino=288 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tun_tap_device_t:s0" [ 153.132553][ T6945] rust_binder: 156: no such ref 3 [ 153.157532][ T36] audit: type=1400 audit(1779167201.604:27751): avc: denied { unlink } for pid=5594 comm="syz-executor" name="file0" dev="tmpfs" ino=288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tun_tap_device_t:s0" [ 153.162904][ T6945] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 153.194057][ T425] usb 1-1: USB disconnect, device number 19 [ 153.196758][ T6945] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 153.209419][ T6945] rust_binder: Write failure EFAULT in pid:156 [ 153.226548][ T10] usb 3-1: USB disconnect, device number 6 [ 153.388324][ T36] audit: type=1400 audit(1779167201.884:27752): avc: denied { mounton } for pid=6949 comm="syz.4.2088" path="/55/file0" dev="configfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 153.727456][ T36] audit: type=1400 audit(1779167202.224:27753): avc: denied { accept } for pid=6956 comm="syz.0.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 153.747688][ T36] audit: type=1326 audit(1779167202.234:27754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.2.2091" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd08f8f6c9 code=0x0 [ 153.774341][ T36] audit: type=1326 audit(1779167202.264:27755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6952 comm="syz.3.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6978f6c9 code=0x7ffc0000 [ 153.787401][ T6953] 9pnet_fd: Insufficient options for proto=fd [ 153.798683][ T36] audit: type=1326 audit(1779167202.264:27756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6952 comm="syz.3.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fba6978f6c9 code=0x7ffc0000 [ 153.828628][ T36] audit: type=1326 audit(1779167202.264:27757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6952 comm="syz.3.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6978f6c9 code=0x7ffc0000 [ 153.852271][ T36] audit: type=1326 audit(1779167202.264:27758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6952 comm="syz.3.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6978f6c9 code=0x7ffc0000 [ 153.877442][ T36] audit: type=1326 audit(1779167202.264:27759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6952 comm="syz.3.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fba6978f6c9 code=0x7ffc0000 [ 153.900972][ T36] audit: type=1326 audit(1779167202.274:27760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6952 comm="syz.3.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6978f6c9 code=0x7ffc0000 [ 153.924492][ T36] audit: type=1326 audit(1779167202.274:27761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6952 comm="syz.3.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fba6978f6c9 code=0x7ffc0000 [ 153.947957][ T36] audit: type=1326 audit(1779167202.274:27762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6952 comm="syz.3.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6978f6c9 code=0x7ffc0000 [ 154.156625][ T425] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 154.164164][ T337] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 154.231897][ T6974] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 154.231913][ T6974] rust_binder: Error while translating object. [ 154.244162][ T6974] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 154.250429][ T6974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:164 [ 154.296823][ T337] usb 1-1: device descriptor read/64, error -71 [ 154.324846][ T6978] input: syz0 as /devices/virtual/input/input19 [ 154.326640][ T425] usb 3-1: Using ep0 maxpacket: 8 [ 154.338842][ T425] usb 3-1: unable to get BOS descriptor or descriptor too short [ 154.352779][ T425] usb 3-1: config 6 has an invalid interface number: 254 but max is 0 [ 154.360985][ T425] usb 3-1: config 6 has no interface number 0 [ 154.367184][ T425] usb 3-1: config 6 interface 254 has no altsetting 0 [ 154.376051][ T425] usb 3-1: string descriptor 0 read error: -22 [ 154.382472][ T425] usb 3-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=30.2c [ 154.391654][ T425] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.401893][ T425] usb-storage 3-1:6.254: USB Mass Storage device detected [ 154.413514][ T425] usb-storage 3-1:6.254: Quirks match for vid 054c pid 0069: 1 [ 154.436493][ T6983] cgroup: fork rejected by pids controller in /syz3 [ 154.506778][ T10] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 154.546656][ T337] usb 1-1: device descriptor read/64, error -71 [ 154.603186][ T719] usb 3-1: USB disconnect, device number 7 [ 154.657632][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.667401][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.678893][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 154.689901][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 154.699667][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 154.712631][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=005c, bcdDevice= 0.00 [ 154.721666][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.730136][ T10] usb 5-1: config 0 descriptor?? [ 154.796641][ T337] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 154.926652][ T337] usb 1-1: device descriptor read/64, error -71 [ 154.938900][ T10] hid-generic 0003:046D:005C.0012: hidraw0: USB HID v0.00 Device [HID 046d:005c] on usb-dummy_hcd.4-1/input0 [ 155.141986][ T6976] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 155.145535][ T7119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2102'. [ 155.150988][ T482] usb 5-1: USB disconnect, device number 20 [ 155.176655][ T337] usb 1-1: device descriptor read/64, error -71 [ 155.177928][ T7124] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.286926][ T337] usb usb1-port1: attempt power cycle [ 155.300875][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 155.566722][ T9] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 155.636662][ T337] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 155.657592][ T337] usb 1-1: device descriptor read/8, error -71 [ 155.717645][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 155.725634][ T9] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 155.734760][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.742839][ T9] usb 4-1: Product: syz [ 155.747245][ T9] usb 4-1: Manufacturer: syz [ 155.751988][ T9] usb 4-1: SerialNumber: syz [ 155.797676][ T337] usb 1-1: device descriptor read/8, error -71 [ 155.963655][ T7134] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.963776][ T7134] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.974412][ T9] usb 4-1: USB disconnect, device number 66 [ 156.036637][ T337] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 156.057713][ T337] usb 1-1: device descriptor read/8, error -71 [ 156.207001][ T337] usb 1-1: device descriptor read/8, error -71 [ 156.316757][ T337] usb usb1-port1: unable to enumerate USB device [ 156.487236][ T7142] /dev/md0: Can't lookup blockdev [ 156.506290][ T7144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.588202][ T7146] rust_binder: Error while translating object. [ 156.594726][ T7146] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 156.601214][ T7146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:175 [ 156.667226][ T7155] rust_binder: 1222: no such ref 0 [ 156.684935][ T7155] SELinux: ebitmap: truncated map [ 156.695691][ T7155] SELinux: failed to load policy [ 156.701620][ T7155] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 156.708900][ T7155] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 156.896644][ T337] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 156.957877][ T7168] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 156.957910][ T7168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:87 [ 157.046821][ T337] usb 5-1: Using ep0 maxpacket: 8 [ 157.072058][ T337] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.082466][ T337] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.092935][ T337] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.102167][ T337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.110354][ T337] usb 5-1: Product: ᄲ쀟ã¨è¬·åƒ´íŸ’⎈䳫ᥴ㋋圾ཚ⅙髗ⶇꅔ༾輸ᖬ澃㧙뚹ῧ㼪⋞〈𧻓ቧã…âªá©¸ä”맽ࢶ啕ロ뒽嬈⶧䞋調贋źéˆêž¨á€¾á¨ˆî£½â†çš°ëž¥íˆÚµ [ 157.129014][ T337] usb 5-1: Manufacturer: 붱â„꼵ğ夬좸⵸ê™ëޤå½ë²ï†´ã¯…↷ç°èƒ™à±¸ëŽ¥ë£¼ï­¼è†¨ï‰—í™·èœ´å„žîŠ«éžžáŠ™è‚¹â®¡èŠ¦ä®€î¤¦å½æ´œé¤ç‡å‘â¯³é»»ë™Æœæœ…蘘ê¾ïŸ½ç²Žíªîœ¬ë½­ï…ŠÐ„勤䋠࣯ㅟㅨ藋篥躚㥀⶛իܭ㢫諛孫嶺䲥ë“韵㾕帓ᑼ뭦ꃶ㴊燰⪴㖜ꬦ匠êˆä²µì—魯柇묆 [ 157.157016][ T337] usb 5-1: SerialNumber: syz [ 157.273532][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2122'. [ 157.336637][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 157.336650][ T512] Bluetooth: hci0: command 0x1003 tx timeout [ 157.499440][ T7180] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.499614][ T7180] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 157.566711][ T337] usb 5-1: 0:2 : does not exist [ 157.581242][ T337] usb 5-1: USB disconnect, device number 21 [ 157.589221][ T1823] udevd[1823]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 157.736641][ T425] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 157.803407][ T7188] netlink: 'syz.3.2125': attribute type 1 has an invalid length. [ 157.891342][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2129'. [ 157.896653][ T425] usb 1-1: Using ep0 maxpacket: 32 [ 157.905822][ T425] usb 1-1: no configurations [ 157.910476][ T425] usb 1-1: can't read configurations, error -22 [ 158.021715][ T7208] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.021857][ T7208] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.046667][ T425] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 158.206652][ T425] usb 1-1: Using ep0 maxpacket: 32 [ 158.225315][ T425] usb 1-1: no configurations [ 158.230233][ T425] usb 1-1: can't read configurations, error -22 [ 158.241012][ T425] usb usb1-port1: attempt power cycle [ 158.274079][ T7218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:190 [ 158.416628][ T337] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 158.586638][ T337] usb 3-1: Using ep0 maxpacket: 32 [ 158.591845][ T425] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 158.600612][ T337] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 158.609256][ T337] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 158.618177][ T337] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 158.627368][ T425] usb 1-1: Using ep0 maxpacket: 32 [ 158.632767][ T337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 158.642729][ T425] usb 1-1: no configurations [ 158.647608][ T425] usb 1-1: can't read configurations, error -22 [ 158.653930][ T337] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 158.664088][ T337] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 158.677256][ T337] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 158.686363][ T337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.695636][ T337] usb 3-1: config 0 descriptor?? [ 158.796643][ T425] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 158.817014][ T425] usb 1-1: Using ep0 maxpacket: 32 [ 158.822633][ T425] usb 1-1: no configurations [ 158.827554][ T425] usb 1-1: can't read configurations, error -22 [ 158.834238][ T425] usb usb1-port1: unable to enumerate USB device [ 158.911941][ T337] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 158.923978][ T337] usb 3-1: USB disconnect, device number 8 [ 158.932956][ T337] usblp0: removed [ 159.019784][ T7244] netlink: 'syz.3.2143': attribute type 5 has an invalid length. [ 159.029843][ T7244] netlink: 'syz.3.2143': attribute type 5 has an invalid length. [ 159.037777][ T7244] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2143'. [ 159.346626][ T425] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 159.496652][ T425] usb 3-1: Using ep0 maxpacket: 32 [ 159.503092][ T425] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 159.511709][ T425] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 159.520351][ T425] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 159.529413][ T425] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.539095][ T425] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 159.548791][ T425] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 159.561865][ T425] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 159.572303][ T425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.586823][ T425] usb 3-1: config 0 descriptor?? [ 159.640450][ T7271] binder: Unknown parameter 'mz' [ 159.660702][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 159.660716][ T36] audit: type=1400 audit(1779167208.154:27811): avc: denied { execute } for pid=7272 comm="syz.4.2152" path="/selinux/avc/hash_stats" dev="selinuxfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 159.718936][ T7280] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 159.718967][ T7280] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:223 [ 159.795274][ T7208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.812941][ T425] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 159.813545][ T7208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.951823][ T7285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.994328][ T7290] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 160.035382][ T7296] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 160.035403][ T7296] rust_binder: Error while translating object. [ 160.047084][ T425] usb 3-1: USB disconnect, device number 9 [ 160.048704][ T7296] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 160.059627][ T7296] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:239 [ 160.059785][ T425] usblp0: removed [ 160.244376][ T7306] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.244405][ T7306] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.244623][ T7307] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:243 [ 160.251568][ T7306] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.257482][ T7307] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 160.266834][ T7306] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.279896][ T7306] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.286318][ T7306] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.292758][ T7306] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.311868][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 160.325172][ T36] audit: type=1400 audit(1779167208.804:27812): avc: denied { setattr } for pid=7310 comm="syz.4.2165" name="/" dev="9p" ino=18230837186159307689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 160.626491][ T7319] fuse: Unknown parameter '®_0x0000000000000005' [ 160.956684][ T719] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 161.086656][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 161.108806][ T719] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.118970][ T719] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 161.127980][ T719] usb 1-1: config 1 has no interface number 0 [ 161.134264][ T719] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 161.148791][ T719] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.158194][ T719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.166204][ T719] usb 1-1: Product: syz [ 161.170552][ T719] usb 1-1: Manufacturer: syz [ 161.175155][ T719] usb 1-1: SerialNumber: syz [ 161.181589][ T719] cdc_ncm 1-1:1.1: NCM or ECM functional descriptors missing [ 161.189399][ T719] cdc_ncm 1-1:1.1: bind() failure [ 161.236635][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 161.245483][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.255913][ T10] usb 3-1: config 0 has no interfaces? [ 161.262482][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 161.271712][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 161.279846][ T10] usb 3-1: Manufacturer: syz [ 161.286768][ T10] usb 3-1: config 0 descriptor?? [ 162.186809][ T36] audit: type=1326 audit(1779167210.684:27813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.3.2184" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba6978f6c9 code=0x0 [ 162.376682][ T512] Bluetooth: hci0: command 0x1003 tx timeout [ 162.376729][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 162.425647][ T7378] __vm_enough_memory: pid: 7378, comm: syz.4.2185, bytes: 18014402804453376 not enough memory for the allocation [ 162.622425][ T7387] binder: Bad value for 'stats' [ 162.644554][ T7389] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 162.937406][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 163.107833][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 163.117668][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 163.127614][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.142161][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 163.151447][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.159612][ T10] usb 5-1: Product: syz [ 163.163896][ T10] usb 5-1: Manufacturer: syz [ 163.168693][ T10] usb 5-1: SerialNumber: syz [ 163.174776][ T10] hub 5-1:1.0: bad descriptor, ignoring hub [ 163.181113][ T10] hub 5-1:1.0: probe with driver hub failed with error -5 [ 163.375524][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 163.631996][ T9] usb 1-1: USB disconnect, device number 28 [ 163.682315][ T7407] overlayfs: failed to clone upperpath [ 163.719239][ T7416] 9pnet_fd: Insufficient options for proto=fd [ 163.757183][ T481] usb 3-1: USB disconnect, device number 10 [ 163.783012][ T36] audit: type=1400 audit(1779167212.274:27814): avc: denied { map } for pid=7426 comm="syz.0.2203" path="socket:[30617]" dev="sockfs" ino=30617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 163.812783][ T36] audit: type=1400 audit(1779167212.274:27815): avc: denied { read } for pid=7426 comm="syz.0.2203" path="socket:[30617]" dev="sockfs" ino=30617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 163.840639][ T36] audit: type=1400 audit(1779167212.334:27816): avc: denied { write } for pid=7428 comm="syz.0.2204" path="socket:[30628]" dev="sockfs" ino=30628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 163.936502][ T36] audit: type=1400 audit(1779167212.424:27817): avc: denied { watch_reads } for pid=7439 comm="syz.2.2208" path="/96/bus" dev="tmpfs" ino=544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 163.977816][ T7442] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 163.996660][ T7442] rust_binder: Failed to allocate buffer. len:216, is_oneway:true [ 163.997064][ T7392] usb 5-1: reset high-speed USB device number 22 using dummy_hcd [ 164.017137][ T7392] usb 5-1: device reset changed ep0 maxpacket size! [ 164.024056][ T10] usb 5-1: USB disconnect, device number 22 [ 164.033258][ T10] usblp0: removed [ 164.117641][ T7456] rust_binder: Error while translating object. [ 164.117677][ T7456] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 164.123870][ T7456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:119 [ 164.124043][ T7457] rust_binder: Error while translating object. [ 164.142388][ T7457] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 164.148747][ T7457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:119 [ 164.170582][ T7459] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:122 [ 164.176742][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 164.196456][ T36] audit: type=1400 audit(1779167212.684:27818): avc: denied { setattr } for pid=7458 comm="syz.0.2215" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 164.276650][ T425] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 164.356665][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 164.362855][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.373121][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.383424][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.392480][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.400483][ T10] usb 5-1: Product: syz [ 164.404634][ T10] usb 5-1: Manufacturer: syz [ 164.409248][ T10] usb 5-1: SerialNumber: syz [ 164.436622][ T425] usb 3-1: Using ep0 maxpacket: 16 [ 164.442857][ T425] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.453124][ T425] usb 3-1: config 0 has no interfaces? [ 164.458960][ T7463] binder: Binderfs stats mode cannot be changed during a remount [ 164.459596][ T425] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 164.481663][ T425] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 164.489862][ T425] usb 3-1: Manufacturer: syz [ 164.495285][ T425] usb 3-1: config 0 descriptor?? [ 164.521410][ T7497] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2230'. [ 164.616604][ T7392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.625187][ T7392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.032910][ T36] audit: type=1326 audit(1779167213.524:27819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.0.2234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb04b58f6c9 code=0x0 [ 165.046710][ T7507] overlayfs: failed to clone upperpath [ 165.142927][ T10] usb 5-1: 0:2 : does not exist [ 165.148134][ T10] usb 5-1: unit 9 not found! [ 165.154725][ T7526] binder: Binderfs stats mode cannot be changed during a remount [ 165.157222][ T10] usb 5-1: 4:0: cannot get min/max values for control 1 (id 4) [ 165.174433][ T10] usb 5-1: 4:0: cannot get min/max values for control 2 (id 4) [ 165.200763][ T10] usb 5-1: USB disconnect, device number 23 [ 165.242425][ T7533] binder: Bad value for 'defcontext' [ 165.285305][ T7537] /dev/rnullb0: Can't open blockdev [ 165.310376][ T7542] rust_binder: Write failure EINVAL in pid:286 [ 165.322764][ T7545] rust_binder: Error while translating object. [ 165.329036][ T7545] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 165.333620][ T7521] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2240'. [ 165.335286][ T7545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:290 [ 165.856768][ T36] audit: type=1400 audit(1779167214.354:27820): avc: denied { ioctl } for pid=7559 comm="syz.3.2251" path="socket:[31832]" dev="sockfs" ino=31832 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.356618][ T482] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 166.399418][ T36] audit: type=1400 audit(1779167214.894:27821): avc: denied { validate_trans } for pid=7610 comm="syz.4.2265" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 166.486352][ T7617] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.499486][ T7619] rust_binder: Error while translating object. [ 166.505975][ T7619] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 166.512505][ T7619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:318 [ 166.518080][ T482] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 166.542240][ T482] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 166.552611][ T482] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.560678][ T482] usb 1-1: Product: syz [ 166.564851][ T482] usb 1-1: Manufacturer: syz [ 166.569474][ T482] usb 1-1: SerialNumber: syz [ 166.574616][ T482] usb 1-1: config 0 descriptor?? [ 166.629581][ T7622] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 166.629607][ T7622] rust_binder: Error in use_page_slow: EBUSY [ 166.640001][ T7622] rust_binder: use_range failure EBUSY [ 166.646014][ T7622] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 166.651511][ T7622] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 166.659282][ T7622] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:320 [ 166.986125][ T482] usb 1-1: USB disconnect, device number 29 [ 167.024463][ T719] usb 3-1: USB disconnect, device number 11 [ 167.087132][ T7634] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.087402][ T7634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:315 [ 167.117577][ T7636] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.117928][ T7636] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 167.117939][ T7639] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 167.117956][ T7639] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:317 [ 167.124397][ T7636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:317 [ 167.167008][ T7641] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.228101][ T7642] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 167.234700][ T7642] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 167.242867][ T7642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:320 [ 167.450143][ T36] audit: type=1400 audit(1779167215.944:27822): avc: denied { read } for pid=7653 comm="syz.4.2281" path="socket:[32015]" dev="sockfs" ino=32015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.746619][ T31] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 167.896626][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 167.902883][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.913130][ T31] usb 1-1: config 0 has no interfaces? [ 167.919403][ T31] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 167.928547][ T31] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 167.936542][ T31] usb 1-1: Manufacturer: syz [ 167.941826][ T31] usb 1-1: config 0 descriptor?? [ 168.009742][ T7661] new mount options do not match the existing superblock, will be ignored [ 168.087616][ T7668] vlan1: entered promiscuous mode [ 168.092753][ T7668] vlan1: entered allmulticast mode [ 168.097894][ T7668] veth0_vlan: entered allmulticast mode [ 168.266618][ T31] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 168.322973][ T7681] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 168.446430][ T7666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7666 comm=syz.2.2286 [ 168.461079][ T7666] binder: Bad value for 'stats' [ 168.466209][ T7666] 9pnet: Could not find request transport: xen [ 168.473715][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 168.481865][ T31] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 168.489467][ T31] usb 3-1: can't read configurations, error -71 [ 168.595130][ T36] audit: type=1400 audit(1779167217.084:27823): avc: denied { shutdown } for pid=7694 comm="syz.4.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.916816][ T36] audit: type=1400 audit(1779167217.414:27824): avc: denied { create } for pid=7723 comm="syz.3.2302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 168.995745][ T36] audit: type=1400 audit(1779167217.484:27825): avc: denied { remount } for pid=7725 comm="syz.2.2303" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 169.006641][ T719] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 169.166611][ T719] usb 5-1: Using ep0 maxpacket: 16 [ 169.172762][ T719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.183652][ T719] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 169.196456][ T719] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 169.205505][ T719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.214041][ T719] usb 5-1: config 0 descriptor?? [ 169.316634][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 169.420309][ T7727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.428818][ T7727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.438207][ T7728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.446786][ T7728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.454760][ T7728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.463331][ T7728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.471830][ T7728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.478563][ T31] usb 3-1: config 1 has an invalid descriptor of length 154, skipping remainder of the config [ 169.480974][ T7728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.496755][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.502759][ T7728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.508593][ T31] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 169.516405][ T7728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.527692][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 169.540414][ T31] usb 3-1: SerialNumber: syz [ 169.561105][ T719] usbhid 5-1:0.0: can't add hid device: -71 [ 169.567218][ T719] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 169.576988][ T719] usb 5-1: USB disconnect, device number 24 [ 169.690311][ T7765] Invalid ELF header len 1 [ 169.693520][ T36] audit: type=1400 audit(1779167218.184:27826): avc: denied { module_load } for pid=7763 comm="syz.4.2308" path="/123/file0" dev="tmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 169.752600][ T7726] tmpfs: Unknown parameter '' [ 169.760528][ T31] usb 3-1: 0:2 : does not exist [ 169.766640][ T31] usb 3-1: unit 5 not found! [ 169.771320][ T31] usb 3-1: unit 117 not found! [ 169.778762][ T31] usb 3-1: USB disconnect, device number 13 [ 169.789309][ T1823] udevd[1823]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 169.844560][ T7773] input: syz0 as /devices/virtual/input/input21 [ 169.935961][ T7779] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 169.935986][ T7779] rust_binder: Error while translating object. [ 169.944829][ T7779] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 169.951038][ T7779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:389 [ 170.080955][ T7788] netlink: 'syz.3.2316': attribute type 4 has an invalid length. [ 170.102286][ T7788] 9pnet_fd: Insufficient options for proto=fd [ 170.338250][ T7799] input: syz0 as /devices/virtual/input/input22 [ 170.481565][ T7807] 9pnet_fd: Insufficient options for proto=fd [ 170.525549][ T425] usb 1-1: USB disconnect, device number 30 [ 170.556950][ T36] audit: type=1400 audit(1779167219.044:27827): avc: denied { unmount } for pid=6049 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 170.593357][ T7822] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.607266][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2328'. [ 170.635131][ T7825] erspan0: default FDB implementation only supports local addresses [ 170.653802][ T7824] rust_binder: Error while translating object. [ 170.653845][ T7824] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 170.681955][ T7824] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:167 [ 170.772264][ T36] audit: type=1400 audit(1779167219.264:27828): avc: denied { map } for pid=7838 comm="syz.3.2335" path="socket:[33085]" dev="sockfs" ino=33085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 170.818940][ T36] audit: type=1400 audit(1779167219.264:27829): avc: denied { accept } for pid=7838 comm="syz.3.2335" path="socket:[33085]" dev="sockfs" ino=33085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 170.950527][ T7860] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 170.950552][ T7860] rust_binder: Read failure Err(EFAULT) in pid:176 [ 170.966521][ T7860] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 170.981612][ T337] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 171.116626][ T337] usb 3-1: device descriptor read/64, error -71 [ 171.128829][ T36] audit: type=1400 audit(1779167219.624:27830): avc: granted { setsecparam } for pid=7863 comm="syz.4.2342" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 171.356619][ T337] usb 3-1: device descriptor read/64, error -71 [ 171.366710][ T425] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 171.497641][ T425] usb 5-1: device descriptor read/64, error -71 [ 171.596615][ T337] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 171.726630][ T337] usb 3-1: device descriptor read/64, error -71 [ 171.746616][ T425] usb 5-1: device descriptor read/64, error -71 [ 171.825279][ T7871] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:182 [ 171.966763][ T337] usb 3-1: device descriptor read/64, error -71 [ 171.986686][ T425] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 172.086823][ T337] usb usb3-port1: attempt power cycle [ 172.120027][ T425] usb 5-1: device descriptor read/64, error -71 [ 172.140096][ T36] audit: type=1400 audit(1779167220.634:27831): avc: denied { module_load } for pid=7881 comm="syz.3.2349" path="/bus" dev="ramfs" ino=33120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 172.140236][ T7882] Invalid ELF header magic: != ELF [ 172.204950][ T36] audit: type=1400 audit(1779167220.694:27832): avc: denied { write } for pid=482 comm="kworker/1:4" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33141 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 172.251515][ T36] audit: type=1400 audit(1779167220.744:27833): avc: denied { mount } for pid=7892 comm="syz.3.2353" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 172.336618][ T36] audit: type=1400 audit(1779167220.824:27834): avc: denied { read write } for pid=6595 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.356790][ T425] usb 5-1: device descriptor read/64, error -71 [ 172.364384][ T36] audit: type=1400 audit(1779167220.824:27835): avc: denied { open } for pid=6595 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.391213][ T36] audit: type=1400 audit(1779167220.824:27836): avc: denied { ioctl } for pid=6595 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.436665][ T337] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 172.459503][ T337] usb 3-1: device descriptor read/8, error -71 [ 172.477032][ T425] usb usb5-port1: attempt power cycle [ 172.589302][ T337] usb 3-1: device descriptor read/8, error -71 [ 172.616663][ T482] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 172.766747][ T482] usb 1-1: Using ep0 maxpacket: 16 [ 172.773934][ T482] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.784086][ T482] usb 1-1: config 0 has no interfaces? [ 172.791104][ T482] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 172.800188][ T482] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 172.808184][ T482] usb 1-1: Manufacturer: syz [ 172.814203][ T482] usb 1-1: config 0 descriptor?? [ 172.819257][ T425] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 172.826915][ T337] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 172.849345][ T337] usb 3-1: device descriptor read/8, error -71 [ 172.857930][ T425] usb 5-1: device descriptor read/8, error -71 [ 172.978663][ T337] usb 3-1: device descriptor read/8, error -71 [ 172.989132][ T425] usb 5-1: device descriptor read/8, error -71 [ 173.086732][ T337] usb usb3-port1: unable to enumerate USB device [ 173.226627][ T425] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 173.248693][ T425] usb 5-1: device descriptor read/8, error -71 [ 173.378941][ T425] usb 5-1: device descriptor read/8, error -71 [ 173.486714][ T425] usb usb5-port1: unable to enumerate USB device [ 173.879552][ T7757] Bluetooth: hci0: Frame reassembly failed (-84) [ 173.886101][ T7757] Bluetooth: hci0: Frame reassembly failed (-84) [ 173.897437][ T7927] incfs: Backing dir is not set, filesystem can't be mounted. [ 173.904919][ T7927] incfs: mount failed -2 [ 174.586640][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 174.739016][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.750357][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.760115][ T10] usb 5-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 174.769176][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.779052][ T10] usb 5-1: config 0 descriptor?? [ 174.992528][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 174.993115][ T7929] rust_binder: Error while translating object. [ 174.998587][ T7929] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 175.004863][ T7929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:401 [ 175.008944][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 175.034572][ T10] usb 5-1: USB disconnect, device number 29 [ 175.374587][ T9] usb 1-1: USB disconnect, device number 31 [ 175.637249][ T36] kauditd_printk_skb: 163 callbacks suppressed [ 175.637267][ T36] audit: type=1400 audit(1779167224.134:28000): avc: denied { ioctl } for pid=7930 comm="syz.0.2366" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.707023][ T36] audit: type=1400 audit(1779167224.204:28001): avc: denied { ioctl } for pid=7930 comm="syz.0.2366" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.734219][ T36] audit: type=1400 audit(1779167224.224:28002): avc: denied { create } for pid=7935 comm="syz.3.2368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.755827][ T36] audit: type=1400 audit(1779167224.224:28003): avc: denied { write } for pid=7935 comm="syz.3.2368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.784617][ T36] audit: type=1400 audit(1779167224.244:28004): avc: denied { read } for pid=7935 comm="syz.3.2368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.805030][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 175.813307][ T36] audit: type=1400 audit(1779167224.304:28005): avc: denied { ioctl } for pid=7930 comm="syz.0.2366" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.842232][ T36] audit: type=1400 audit(1779167224.304:28006): avc: denied { read write } for pid=5594 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.880293][ T36] audit: type=1400 audit(1779167224.304:28007): avc: denied { read write open } for pid=5594 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.906667][ T512] Bluetooth: hci0: command 0x1003 tx timeout [ 175.911090][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 175.920720][ T36] audit: type=1400 audit(1779167224.304:28008): avc: denied { ioctl } for pid=5594 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.948640][ T7941] rust_binder: Error while translating object. [ 175.948712][ T7941] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 175.954913][ T7941] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:406 [ 175.966919][ T36] audit: type=1400 audit(1779167224.334:28009): avc: denied { ioctl } for pid=7930 comm="syz.0.2366" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 176.002132][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 176.011306][ T9] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 176.019547][ T9] usb 1-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 176.029746][ T9] usb 1-1: config 0 has no interface number 0 [ 176.036674][ T9] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 176.048374][ T9] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 176.059889][ T9] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 176.070865][ T9] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 26159, setting to 1024 [ 176.086667][ T9] usb 1-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 176.100742][ T9] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 176.123466][ T9] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 176.132570][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.142418][ T9] usb 1-1: config 0 descriptor?? [ 176.149080][ T7931] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 176.157223][ T7931] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 176.373536][ T482] usb 1-1: USB disconnect, device number 32 [ 176.616287][ T7963] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=20480 (40960 ns) > initial count (16384 ns). Using initial count to start timer. [ 176.646637][ T337] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 176.648816][ T7963] kvm: pic: non byte write [ 176.671296][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2379'. [ 176.759240][ T7978] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 176.806619][ T337] usb 5-1: Using ep0 maxpacket: 16 [ 176.819155][ T337] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.831693][ T337] usb 5-1: config 0 has no interfaces? [ 176.846805][ T337] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 176.855866][ T337] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 176.865242][ T337] usb 5-1: Manufacturer: syz [ 176.873143][ T337] usb 5-1: config 0 descriptor?? [ 176.883122][ T7980] overlayfs: failed to clone upperpath [ 177.008871][ T7984] rust_binder: Failed to allocate buffer. len:72, is_oneway:true [ 177.017840][ T7988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 177.027792][ T7986] rust_binder: Failed to allocate buffer. len:72, is_oneway:true [ 177.047269][ T7987] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 177.113802][ T7992] 9pnet_fd: Insufficient options for proto=fd [ 177.276610][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 177.426630][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 177.433928][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 177.444945][ T9] usb 3-1: config 0 has no interface number 0 [ 177.454875][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 177.471089][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.480317][ T9] usb 3-1: Product: syz [ 177.484517][ T9] usb 3-1: Manufacturer: syz [ 177.489158][ T9] usb 3-1: SerialNumber: syz [ 177.496124][ T9] usb 3-1: config 0 descriptor?? [ 177.509204][ T9] smsc95xx v2.0.0 [ 177.906630][ T337] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 178.038101][ T8015] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=28 sclass=netlink_audit_socket pid=8015 comm=syz.3.2394 [ 178.055966][ T8015] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32 sclass=netlink_audit_socket pid=8015 comm=syz.3.2394 [ 178.080423][ T337] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 178.096643][ T337] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 178.107839][ T337] usb 1-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 178.115689][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2385'. [ 178.117967][ T337] usb 1-1: config 220 has no interface number 1 [ 178.128229][ T7988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.133901][ T337] usb 1-1: config 220 interface 0 has no altsetting 0 [ 178.134960][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 178.142264][ T337] usb 1-1: config 220 interface 76 has no altsetting 0 [ 178.156707][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 178.174824][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 178.177263][ T337] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 178.189743][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 178.207609][ T9] usb 3-1: USB disconnect, device number 18 [ 178.226607][ T337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.234637][ T337] usb 1-1: Product: syz [ 178.241681][ T337] usb 1-1: Manufacturer: syz [ 178.254306][ T337] usb 1-1: SerialNumber: syz [ 178.482113][ T8012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=322 sclass=netlink_route_socket pid=8012 comm=syz.0.2393 [ 179.017123][ T337] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 179.036632][ T337] usb 1-1: No valid video chain found. [ 179.051883][ T337] usb 1-1: USB disconnect, device number 33 [ 179.314171][ T8049] rust_binder: Error in use_page_slow: ESRCH [ 179.314196][ T8049] rust_binder: use_range failure ESRCH [ 179.320274][ T8049] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 179.325768][ T8049] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 179.333464][ T8049] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:219 [ 179.345585][ T8049] x_tables: duplicate underflow at hook 1 [ 179.388115][ T10] usb 5-1: USB disconnect, device number 30 [ 179.470078][ T8057] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.471938][ T8057] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 179.478622][ T8057] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 179.486711][ T8057] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:363 [ 179.785598][ T8079] UHID_CREATE from different security context by process 374 (syz.2.2414), this is not allowed. [ 179.890952][ T8085] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.903139][ T8087] rust_binder: Error while translating object. [ 179.909722][ T8087] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 179.924601][ T8087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:228 [ 180.013974][ T8089] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2418'. [ 180.131313][ T8100] rust_binder: Error while translating object. [ 180.131354][ T8100] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 180.140111][ T8100] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:431 [ 180.275522][ T8105] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8105 comm=syz.4.2422 [ 180.298986][ T8105] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 180.299002][ T8105] rust_binder: Error while translating object. [ 180.307824][ T8105] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 180.314070][ T8105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:434 [ 180.476549][ T8107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2423'. [ 180.585386][ T8117] fuse: Bad value for 'fd' [ 180.647387][ T8121] overlayfs: failed to clone upperpath [ 180.674947][ T36] kauditd_printk_skb: 686 callbacks suppressed [ 180.674964][ T36] audit: type=1400 audit(1779167229.164:28696): avc: denied { create } for pid=8120 comm="syz.2.2428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 180.709040][ T36] audit: type=1400 audit(1779167229.174:28697): avc: denied { write } for pid=8120 comm="syz.2.2428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 180.728758][ T36] audit: type=1400 audit(1779167229.174:28698): avc: denied { write } for pid=8120 comm="syz.2.2428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 180.761902][ T36] audit: type=1400 audit(1779167229.254:28699): avc: denied { create } for pid=8122 comm="syz.2.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 180.781652][ T36] audit: type=1400 audit(1779167229.254:28700): avc: denied { ioctl } for pid=8122 comm="syz.2.2429" path="socket:[33776]" dev="sockfs" ino=33776 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 180.808612][ T36] audit: type=1400 audit(1779167229.304:28701): avc: denied { create } for pid=8124 comm="syz.2.2430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 180.829100][ T36] audit: type=1400 audit(1779167229.304:28702): avc: denied { write } for pid=8124 comm="syz.2.2430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 180.858723][ T36] audit: type=1400 audit(1779167229.354:28703): avc: denied { create } for pid=8126 comm="syz.2.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.969088][ T36] audit: type=1400 audit(1779167229.464:28704): avc: denied { read write } for pid=6595 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.996619][ T36] audit: type=1400 audit(1779167229.464:28705): avc: denied { read write open } for pid=6595 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.182715][ T8131] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293 [ 181.190723][ T8131] rust_binder: Write failure EINVAL in pid:437 [ 181.348036][ T7747] Bluetooth: hci0: Frame reassembly failed (-84) [ 181.366971][ T8144] Bluetooth: hci0: Frame reassembly failed (-84) [ 182.131571][ T8169] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 182.131603][ T8169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:443 [ 182.486608][ T337] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 182.636651][ T337] usb 5-1: device descriptor read/64, error -71 [ 182.876634][ T337] usb 5-1: device descriptor read/64, error -71 [ 183.116647][ T337] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 183.256662][ T337] usb 5-1: device descriptor read/64, error -71 [ 183.417527][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 183.417598][ T512] Bluetooth: hci0: command 0x1003 tx timeout [ 183.430832][ T7747] bridge_slave_1: left allmulticast mode [ 183.438940][ T7747] bridge_slave_1: left promiscuous mode [ 183.444637][ T7747] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.452835][ T7747] bridge_slave_0: left allmulticast mode [ 183.466679][ T7747] bridge_slave_0: left promiscuous mode [ 183.472349][ T7747] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.506772][ T337] usb 5-1: device descriptor read/64, error -71 [ 183.637100][ T337] usb usb5-port1: attempt power cycle [ 183.745862][ T8238] netlink: 'syz.3.2467': attribute type 12 has an invalid length. [ 183.986625][ T337] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 184.008821][ T337] usb 5-1: device descriptor read/8, error -71 [ 184.139389][ T337] usb 5-1: device descriptor read/8, error -71 [ 184.387388][ T337] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 184.389420][ T8248] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8248 comm=syz.0.2471 [ 184.409586][ T8248] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8248 comm=syz.0.2471 [ 184.429434][ T337] usb 5-1: device descriptor read/8, error -71 [ 184.527559][ T425] hid (null): unknown global tag 0xe [ 184.532948][ T425] hid (null): unknown global tag 0xd [ 184.538260][ T425] hid (null): unknown global tag 0xe [ 184.543575][ T425] hid (null): unknown global tag 0xd [ 184.550006][ T425] hid-generic FBFF:0008:0007.0013: ignoring exceeding usage max [ 184.560080][ T425] hid-generic FBFF:0008:0007.0013: unknown global tag 0xe [ 184.567286][ T425] hid-generic FBFF:0008:0007.0013: item 0 4 1 14 parsing failed [ 184.575178][ T425] hid-generic FBFF:0008:0007.0013: probe with driver hid-generic failed with error -22 [ 184.586804][ T337] usb 5-1: device descriptor read/8, error -71 [ 184.696935][ T337] usb usb5-port1: unable to enumerate USB device [ 185.270751][ T8261] can0: slcan on ptm1. [ 185.308453][ T8261] can0 (unregistered): slcan off ptm1. [ 185.348263][ T8263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2477'. [ 185.686800][ T36] kauditd_printk_skb: 390 callbacks suppressed [ 185.686818][ T36] audit: type=1400 audit(1779167234.184:29096): avc: denied { read write } for pid=6595 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 185.752187][ T36] audit: type=1400 audit(1779167234.184:29097): avc: denied { read write open } for pid=6595 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 185.777952][ T36] audit: type=1400 audit(1779167234.184:29098): avc: denied { ioctl } for pid=6595 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 185.792749][ T8270] audit: audit_backlog=65 > audit_backlog_limit=64 [ 185.805551][ T36] audit: type=1400 audit(1779167234.204:29099): avc: denied { read write } for pid=8269 comm="syz.0.2480" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.810334][ T8270] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 185.834220][ T36] audit: type=1400 audit(1779167234.204:29100): avc: denied { read write open } for pid=8269 comm="syz.0.2480" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.841240][ T8270] audit: backlog limit exceeded [ 185.866043][ T36] audit: type=1400 audit(1779167234.204:29101): avc: denied { create } for pid=8269 comm="syz.0.2480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 185.872175][ T8270] audit: audit_backlog=65 > audit_backlog_limit=64 [ 186.307598][ T8289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2487'. [ 186.566640][ T337] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 186.716638][ T337] usb 5-1: Using ep0 maxpacket: 32 [ 186.723696][ T337] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 186.731984][ T482] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 186.739680][ T337] usb 5-1: config 0 has no interface number 0 [ 186.745795][ T337] usb 5-1: config 0 interface 184 has no altsetting 0 [ 186.759043][ T337] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 186.772111][ T337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.781045][ T337] usb 5-1: Product: syz [ 186.785221][ T337] usb 5-1: Manufacturer: syz [ 186.789888][ T337] usb 5-1: SerialNumber: syz [ 186.795749][ T337] usb 5-1: config 0 descriptor?? [ 186.807022][ T337] smsc75xx v1.0.0 [ 186.896612][ T482] usb 1-1: Using ep0 maxpacket: 32 [ 186.903924][ T482] usb 1-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.916783][ T482] usb 1-1: config 1 interface 0 has no altsetting 0 [ 186.926260][ T482] usb 1-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 186.935376][ T482] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.943787][ T482] usb 1-1: Product: ÑŒ [ 186.947892][ T482] usb 1-1: Manufacturer: ဠ[ 186.952512][ T482] usb 1-1: SerialNumber: Ц [ 187.012143][ T337] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 187.039711][ T337] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 187.053173][ T337] usb 5-1: USB disconnect, device number 35 [ 187.120877][ T8335] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.308850][ T8341] /dev/rnullb0: Can't open blockdev [ 187.412768][ T8346] veth0_to_batadv: entered allmulticast mode [ 187.427640][ T8346] veth0_to_batadv: left allmulticast mode [ 187.590329][ T8362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2509'. [ 187.599418][ T8362] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2509'. [ 187.608512][ T8362] netlink: 'syz.4.2509': attribute type 3 has an invalid length. [ 187.616343][ T8362] netlink: 'syz.4.2509': attribute type 2 has an invalid length. [ 187.624412][ T8362] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2509'. [ 187.643198][ T8363] rust_binder: Write failure EINVAL in pid:478 [ 187.790809][ T482] usbhid 1-1:1.0: can't add hid device: -71 [ 187.803393][ T482] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 187.821943][ T482] usb 1-1: USB disconnect, device number 34 [ 187.900456][ T8376] SELinux: policydb version -1580900903 does not match my version range 15-33 [ 187.919741][ T8376] SELinux: failed to load policy [ 188.068570][ T8385] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.068911][ T8385] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.134598][ T8395] netlink: 'syz.0.2518': attribute type 1 has an invalid length. [ 188.160357][ T8395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2518'. [ 188.192508][ T8399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:489 [ 188.358282][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2522'. [ 188.384147][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2522'. [ 188.419274][ T8413] tipc: Started in network mode [ 188.434984][ T8416] No source specified [ 188.435969][ T8413] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 188.448192][ T8413] tipc: Enabling of bearer rejected, failed to enable media [ 188.520207][ T8421] rust_binder: Write failure EFAULT in pid:301 [ 188.543357][ T8423] 9pnet_fd: Insufficient options for proto=fd [ 188.666726][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 188.816613][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 188.824016][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 188.833776][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 188.843633][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 188.854739][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.863827][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 188.871892][ T10] usb 5-1: SerialNumber: syz [ 188.884365][ T8406] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 188.893524][ T10] cdc_acm 5-1:1.0: skipping garbage [ 188.901166][ T10] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 189.107966][ T337] usb 5-1: USB disconnect, device number 36 [ 189.367729][ T8443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8443 comm=syz.2.2537 [ 189.383075][ T8443] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2537'. [ 189.659567][ T8456] netlink: 'syz.3.2542': attribute type 64 has an invalid length. [ 189.670353][ T8457] rust_binder: validate_parent_fixup: fixup_min_offset=45, parent_offset=35 [ 189.670370][ T8457] rust_binder: Error while translating object. [ 189.696662][ T8457] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 189.702845][ T8457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:494 [ 189.749247][ T8457] fuseblk: Bad value for 'rootmode' [ 189.780810][ T8461] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.086640][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 190.129316][ T8486] 9pnet_fd: Insufficient options for proto=fd [ 190.236620][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 190.245300][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 190.256751][ T10] usb 1-1: config 6 has an invalid interface number: 194 but max is 0 [ 190.265556][ T10] usb 1-1: config 6 has no interface number 0 [ 190.272587][ T10] usb 1-1: config 6 interface 194 has no altsetting 0 [ 190.283535][ T10] usb 1-1: New USB device found, idVendor=0403, idProduct=d578, bcdDevice=32.00 [ 190.293619][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.302348][ T10] usb 1-1: Product: syz [ 190.307261][ T10] usb 1-1: Manufacturer: syz [ 190.311925][ T10] usb 1-1: SerialNumber: syz [ 190.437693][ T8491] overlayfs: failed to clone upperpath [ 190.550611][ T10] ftdi_sio 1-1:6.194: FTDI USB Serial Device converter detected [ 190.562125][ T10] usb 1-1: Detected FT233HP [ 190.570525][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 190.578049][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 190.586063][ T10] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 190.595561][ T10] usb 1-1: USB disconnect, device number 35 [ 190.603082][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 190.613082][ T10] ftdi_sio 1-1:6.194: device disconnected [ 190.710929][ T36] kauditd_printk_skb: 893 callbacks suppressed [ 190.710945][ T36] audit: type=1400 audit(1779167239.204:29993): avc: denied { create } for pid=8497 comm="syz.4.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.720634][ T8498] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 190.768778][ T36] audit: type=1400 audit(1779167239.204:29994): avc: denied { create } for pid=8497 comm="syz.4.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.802124][ T36] audit: type=1400 audit(1779167239.204:29995): avc: denied { write } for pid=8497 comm="syz.4.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.823174][ T36] audit: type=1400 audit(1779167239.204:29996): avc: denied { read } for pid=8497 comm="syz.4.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.837101][ T8499] fuse: Bad value for 'group_id' [ 190.844454][ T36] audit: type=1400 audit(1779167239.204:29997): avc: denied { read } for pid=8497 comm="syz.4.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.861468][ T8499] fuse: Bad value for 'group_id' [ 190.869965][ T36] audit: type=1400 audit(1779167239.204:29998): avc: denied { write } for pid=8497 comm="syz.4.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.897622][ T36] audit: type=1400 audit(1779167239.204:29999): avc: denied { write } for pid=8497 comm="syz.4.2555" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 190.921084][ T36] audit: type=1400 audit(1779167239.204:30000): avc: denied { write } for pid=8497 comm="syz.4.2555" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 190.946075][ T36] audit: type=1400 audit(1779167239.214:30001): avc: denied { map } for pid=8497 comm="syz.4.2555" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 190.970882][ T36] audit: type=1400 audit(1779167239.244:30002): avc: denied { read write } for pid=8497 comm="syz.4.2555" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 191.643978][ T8547] rust_binder: Error while translating object. [ 191.644017][ T8547] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 191.656610][ T8547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:521 [ 191.716359][ T8552] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 191.725609][ T8552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:524 [ 191.735078][ T482] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 191.906643][ T482] usb 1-1: Using ep0 maxpacket: 32 [ 191.914600][ T482] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.925984][ T482] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 191.935545][ T482] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 191.954307][ T482] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.964386][ T482] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.973522][ T482] usb 1-1: Product: syz [ 191.978482][ T482] usb 1-1: Manufacturer: syz [ 191.983085][ T482] usb 1-1: SerialNumber: syz [ 191.992329][ T482] cdc_ncm 1-1:1.0: invalid descriptor buffer length [ 191.997556][ T719] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 192.000327][ T482] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 192.014343][ T482] cdc_ncm 1-1:1.0: bind() failure [ 192.189175][ T719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.200613][ T719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.208555][ T482] usb 1-1: USB disconnect, device number 36 [ 192.211494][ T719] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 192.230168][ T719] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 192.244375][ T719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.274885][ T719] usb 5-1: config 0 descriptor?? [ 192.342530][ T8595] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2588'. [ 192.375738][ T8600] 9pnet_fd: Insufficient options for proto=fd [ 192.488186][ T8552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.496731][ T8552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.714798][ T719] usbhid 5-1:0.0: can't add hid device: -71 [ 192.720826][ T719] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 192.731547][ T719] usb 5-1: USB disconnect, device number 37 [ 192.767477][ T8606] rust_binder: Write failure EFAULT in pid:327 [ 192.769160][ T8606] rust_binder: Write failure EFAULT in pid:327 [ 192.938134][ T8613] cannot load conntrack support for proto=3 [ 193.306647][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 193.464068][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 193.471968][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 193.506612][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 193.535255][ T10] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 193.544358][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.564995][ T10] usb 1-1: config 0 descriptor?? [ 193.589504][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 193.645764][ T8634] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 193.752442][ T8638] GUP no longer grows the stack in syz.2.2603 (8638): 200000001000-200000c01000 (200000000000) [ 193.762849][ T8638] CPU: 0 UID: 0 PID: 8638 Comm: syz.2.2603 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 193.762871][ T8638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 193.762880][ T8638] Call Trace: [ 193.762884][ T8638] [ 193.762890][ T8638] __dump_stack+0x21/0x30 [ 193.762920][ T8638] dump_stack_lvl+0x10c/0x190 [ 193.762938][ T8638] ? __cfi_dump_stack_lvl+0x10/0x10 [ 193.762957][ T8638] ? find_vma+0xcd/0x110 [ 193.762971][ T8638] dump_stack+0x19/0x20 [ 193.762988][ T8638] __get_user_pages+0x1e34/0x22d0 [ 193.763006][ T8638] ? __kasan_check_write+0x18/0x20 [ 193.763029][ T8638] ? down_read_killable+0x79/0xf0 [ 193.763044][ T8638] ? populate_vma_page_range+0x230/0x230 [ 193.763061][ T8638] ? kernel_text_address+0xa9/0xe0 [ 193.763078][ T8638] ? unwind_get_return_address+0x51/0x90 [ 193.763095][ T8638] __gup_longterm_locked+0xcb1/0x1580 [ 193.763115][ T8638] ? stack_depot_save_flags+0x38/0x800 [ 193.763131][ T8638] gup_fast_fallback+0x12ae/0x14a0 [ 193.763150][ T8638] ? kasan_save_track+0x3e/0x80 [ 193.763164][ T8638] ? __kmalloc_cache_noprof+0x24c/0x490 [ 193.763177][ T8638] ? futex_lock_pi+0x77a/0xa10 [ 193.763196][ T8638] ? get_user_pages_fast_only+0xc0/0xc0 [ 193.763216][ T8638] get_user_pages_fast+0x73/0xb0 [ 193.763234][ T8638] get_futex_key+0x24d/0x930 [ 193.763246][ T8638] ? __cfi_get_futex_key+0x10/0x10 [ 193.763259][ T8638] ? futex_lock_pi+0x77a/0xa10 [ 193.763274][ T8638] ? futex_setup_timer+0xb4/0xd0 [ 193.763287][ T8638] futex_lock_pi+0x1c0/0xa10 [ 193.763301][ T8638] ? futex_unqueue+0x136/0x160 [ 193.763315][ T8638] ? __cfi_futex_lock_pi+0x10/0x10 [ 193.763331][ T8638] ? __cfi_futex_wake_mark+0x10/0x10 [ 193.763348][ T8638] ? futex_setup_timer+0xb4/0xd0 [ 193.763361][ T8638] ? __cfi_futex_wake_mark+0x10/0x10 [ 193.763378][ T8638] ? __seccomp_filter+0x433/0x1a70 [ 193.763391][ T8638] do_futex+0x25c/0x500 [ 193.763405][ T8638] ? __cfi_do_futex+0x10/0x10 [ 193.763418][ T8638] ? vm_mmap_pgoff+0x145/0x4e0 [ 193.763430][ T8638] __se_sys_futex+0x28f/0x300 [ 193.763463][ T8638] ? __x64_sys_futex+0x110/0x110 [ 193.763479][ T8638] __x64_sys_futex+0xe9/0x110 [ 193.763494][ T8638] x64_sys_call+0x227f/0x2ee0 [ 193.763516][ T8638] do_syscall_64+0x58/0xf0 [ 193.763534][ T8638] ? clear_bhb_loop+0x50/0xa0 [ 193.763551][ T8638] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 193.763566][ T8638] RIP: 0033:0x7efd08f8f6c9 [ 193.763579][ T8638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.763592][ T8638] RSP: 002b:00007efd09e99038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 193.763608][ T8638] RAX: ffffffffffffffda RBX: 00007efd091e5fa0 RCX: 00007efd08f8f6c9 [ 193.763620][ T8638] RDX: 0000000000000001 RSI: 000000000000000d RDI: 0000200000000b00 [ 193.763630][ T8638] RBP: 00007efd09011f91 R08: 0000000000000000 R09: 0000000000000002 [ 193.763640][ T8638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.763649][ T8638] R13: 00007efd091e6038 R14: 00007efd091e5fa0 R15: 00007fff09b0e988 [ 193.763662][ T8638] [ 193.814386][ T8640] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 193.936333][ T8647] rust_binder: Write failure EINVAL in pid:536 [ 194.079555][ T482] usb 1-1: USB disconnect, device number 37 [ 194.079847][ T8656] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2608'. [ 194.895132][ T8690] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.895668][ T8690] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.920968][ T8692] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 194.921002][ T8692] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:344 [ 195.233427][ T8715] random: crng reseeded on system resumption [ 195.276626][ T719] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 195.277193][ T8719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2631'. [ 195.386100][ T8719] overlayfs: failed to clone upperpath [ 195.426603][ T719] usb 1-1: Using ep0 maxpacket: 16 [ 195.442354][ T719] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.466592][ T719] usb 1-1: config 0 has no interfaces? [ 195.474384][ T719] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 195.491331][ T719] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 195.499466][ T719] usb 1-1: Manufacturer: syz [ 195.505893][ T719] usb 1-1: config 0 descriptor?? [ 195.722606][ T36] kauditd_printk_skb: 659 callbacks suppressed [ 195.722623][ T36] audit: type=1400 audit(1779167244.214:30662): avc: denied { ioctl } for pid=8699 comm="syz.0.2624" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 195.765581][ T36] audit: type=1400 audit(1779167244.254:30663): avc: denied { create } for pid=8735 comm="syz.3.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 195.786201][ T36] audit: type=1400 audit(1779167244.274:30664): avc: denied { setopt } for pid=8735 comm="syz.3.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 195.884762][ T8740] netlink: 'syz.3.2638': attribute type 10 has an invalid length. [ 195.918033][ T36] audit: type=1400 audit(1779167244.414:30665): avc: denied { create } for pid=8741 comm="syz.3.2639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 195.938097][ T36] audit: type=1400 audit(1779167244.414:30666): avc: denied { bind } for pid=8741 comm="syz.3.2639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 195.959236][ T36] audit: type=1400 audit(1779167244.414:30667): avc: denied { name_bind } for pid=8741 comm="syz.3.2639" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 195.980941][ T36] audit: type=1400 audit(1779167244.414:30668): avc: denied { node_bind } for pid=8741 comm="syz.3.2639" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 196.005023][ T36] audit: type=1400 audit(1779167244.414:30669): avc: denied { connect } for pid=8741 comm="syz.3.2639" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 196.027707][ T36] audit: type=1400 audit(1779167244.414:30670): avc: denied { write } for pid=8741 comm="syz.3.2639" path="socket:[36451]" dev="sockfs" ino=36451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 196.051243][ T36] audit: type=1400 audit(1779167244.414:30671): avc: denied { write } for pid=8741 comm="syz.3.2639" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 198.034869][ T719] usb 1-1: USB disconnect, device number 38 [ 212.869783][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 212.869802][ T36] audit: type=1400 audit(1779167261.364:30680): avc: denied { read write } for pid=8747 comm="syz.0.2641" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 212.896269][ T8753] netlink: 'syz.3.2644': attribute type 12 has an invalid length. [ 212.903916][ T36] audit: type=1400 audit(1779167261.364:30681): avc: denied { read write open } for pid=8747 comm="syz.0.2641" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 212.933056][ T36] audit: type=1400 audit(1779167261.364:30682): avc: denied { create } for pid=8748 comm="syz.4.2642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 212.963218][ T36] audit: type=1400 audit(1779167261.364:30683): avc: denied { ioctl } for pid=8748 comm="syz.4.2642" path="socket:[36476]" dev="sockfs" ino=36476 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 213.026596][ T36] audit: type=1400 audit(1779167261.399:30684): avc: denied { read write } for pid=5594 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.116665][ T36] audit: type=1400 audit(1779167261.399:30685): avc: denied { read write open } for pid=5594 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.145602][ T36] audit: type=1400 audit(1779167261.399:30686): avc: denied { ioctl } for pid=5594 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.175949][ T36] audit: type=1400 audit(1779167261.479:30687): avc: denied { create } for pid=8760 comm="syz.3.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 213.203450][ T36] audit: type=1400 audit(1779167261.479:30688): avc: denied { write } for pid=8760 comm="syz.3.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 213.224673][ T36] audit: type=1400 audit(1779167261.479:30689): avc: denied { read } for pid=8760 comm="syz.3.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 213.734206][ T8810] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 213.742475][ T8810] rust_binder: Write failure EINVAL in pid:353 [ 213.826633][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 213.996590][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 214.009546][ T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 214.021782][ T9] usb 5-1: config 0 has no interface number 0 [ 214.038657][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 214.054566][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.063575][ T9] usb 5-1: Product: syz [ 214.068526][ T9] usb 5-1: Manufacturer: syz [ 214.073236][ T9] usb 5-1: SerialNumber: syz [ 214.081646][ T9] usb 5-1: config 0 descriptor?? [ 214.095997][ T9] smsc95xx v2.0.0 [ 214.302302][ T8859] netlink: 'syz.2.2677': attribute type 33 has an invalid length. [ 214.312841][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2677'. [ 214.320981][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 214.361593][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 214.374323][ T8867] /dev/rnullb0: Can't open blockdev [ 214.386847][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 214.399017][ T8871] /dev/rnullb0: Can't open blockdev [ 214.405299][ T9] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 214.434697][ T9] usb 5-1: USB disconnect, device number 38 [ 214.736611][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 214.898715][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 214.912103][ T10] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 214.921708][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.929759][ T10] usb 1-1: Product: syz [ 214.934034][ T10] usb 1-1: Manufacturer: syz [ 214.938674][ T10] usb 1-1: SerialNumber: syz [ 214.945699][ T10] usb 1-1: config 0 descriptor?? [ 214.953157][ T10] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 214.963398][ T10] usb 1-1: Detected FT-X [ 215.156451][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 215.321684][ T8911] rust_binder: 585: no such ref 1 [ 215.378658][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 215.398566][ T10] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 215.412950][ T10] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 215.425853][ T10] usb 1-1: USB disconnect, device number 39 [ 215.444935][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 215.464177][ T8913] loop2: detected capacity change from 0 to 8388607 [ 215.476789][ T10] ftdi_sio 1-1:0.0: device disconnected [ 215.598886][ T8918] batadv_slave_0: mtu less than device minimum [ 215.966389][ T8950] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2707'. [ 215.983631][ T8950] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2707'. [ 215.999314][ T8950] netlink: 'syz.3.2707': attribute type 6 has an invalid length. [ 216.007942][ T8950] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2707'. [ 216.207997][ T8958] rust_binder: 383: no such ref 0 [ 216.223988][ T8958] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 216.236588][ T8958] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 216.301419][ T8961] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 216.301442][ T8961] rust_binder: Error while translating object. [ 216.310167][ T8961] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 216.316363][ T8961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:386 [ 216.391124][ T8965] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 216.401461][ T8965] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:388 [ 216.443267][ T8967] netlink: 'syz.2.2714': attribute type 27 has an invalid length. [ 216.866608][ T482] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 217.016609][ T482] usb 5-1: device descriptor read/64, error -71 [ 217.256674][ T482] usb 5-1: device descriptor read/64, error -71 [ 217.392880][ T9021] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 217.411927][ T9020] rust_binder: 394: no such ref 0 [ 217.417692][ T9020] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 217.417711][ T9020] rust_binder: Read failure Err(EFAULT) in pid:394 [ 217.497124][ T9026] __vm_enough_memory: pid: 9026, comm: syz.0.2734, bytes: 18014402804453376 not enough memory for the allocation [ 217.497139][ T482] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 217.666605][ T482] usb 5-1: device descriptor read/64, error -71 [ 217.888790][ T36] kauditd_printk_skb: 881 callbacks suppressed [ 217.888810][ T36] audit: type=1400 audit(1779167266.379:31571): avc: denied { read } for pid=9051 comm="syz.0.2743" name="binder1" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 217.916635][ T482] usb 5-1: device descriptor read/64, error -71 [ 217.919702][ T36] audit: type=1400 audit(1779167266.379:31572): avc: denied { read open } for pid=9051 comm="syz.0.2743" path="/dev/binderfs/binder1" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 217.948660][ T36] audit: type=1400 audit(1779167266.379:31573): avc: denied { ioctl } for pid=9051 comm="syz.0.2743" path="/dev/binderfs/binder1" dev="binder" ino=25 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 218.037003][ T36] audit: type=1400 audit(1779167266.529:31574): avc: denied { ioctl } for pid=8975 comm="syz.4.2716" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 218.037016][ T482] usb usb5-port1: attempt power cycle [ 218.067562][ T36] audit: type=1400 audit(1779167266.529:31575): avc: denied { ioctl } for pid=8975 comm="syz.4.2716" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 218.092535][ T36] audit: type=1400 audit(1779167266.529:31576): avc: denied { ioctl } for pid=8975 comm="syz.4.2716" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 218.133757][ T36] audit: type=1400 audit(1779167266.619:31577): avc: denied { ioctl } for pid=8975 comm="syz.4.2716" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 218.159311][ T36] audit: type=1400 audit(1779167266.619:31578): avc: denied { ioctl } for pid=8975 comm="syz.4.2716" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 218.192643][ T36] audit: type=1400 audit(1779167266.619:31579): avc: denied { read write } for pid=6595 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.227028][ T36] audit: type=1400 audit(1779167266.619:31580): avc: denied { read write open } for pid=6595 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.278554][ T9062] netlink: 'syz.3.2746': attribute type 27 has an invalid length. [ 218.400916][ T482] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 218.468710][ T482] usb 5-1: device descriptor read/8, error -71 [ 218.517282][ T9081] @: renamed from vlan0 (while UP) [ 218.606014][ T482] usb 5-1: device descriptor read/8, error -71 [ 218.642321][ T9088] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.649498][ T9088] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.657304][ T9088] bridge_slave_0: entered allmulticast mode [ 218.663604][ T9088] bridge_slave_0: entered promiscuous mode [ 218.671515][ T9088] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.679304][ T9088] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.686413][ T9088] bridge_slave_1: entered allmulticast mode [ 218.693575][ T9088] bridge_slave_1: entered promiscuous mode [ 218.780098][ T9088] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.787261][ T9088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.794570][ T9088] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.801638][ T9088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.846770][ T482] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 218.854898][ T7757] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.862257][ T7757] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.871805][ T7757] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.878874][ T7757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.891102][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.892902][ T482] usb 5-1: device descriptor read/8, error -71 [ 218.898183][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.976635][ T9088] veth0_vlan: entered promiscuous mode [ 219.009349][ T9088] veth1_macvtap: entered promiscuous mode [ 219.030299][ T482] usb 5-1: device descriptor read/8, error -71 [ 219.127964][ T9107] rust_binder: 9106 RLIMIT_NICE not set [ 219.128048][ T9107] rust_binder: inc_ref_done called when no active inc_refs [ 219.133673][ T9107] rust_binder: inc_ref_done called when no active inc_refs [ 219.152297][ T482] usb usb5-port1: unable to enumerate USB device [ 219.346645][ T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 219.496588][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 219.503968][ T9] usb 4-1: unable to get BOS descriptor set [ 219.511503][ T9] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 219.521465][ T9] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 64 [ 219.531279][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 219.549855][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.559544][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.568341][ T9] usb 4-1: Product: syz [ 219.572596][ T9] usb 4-1: Manufacturer: syz [ 219.577780][ T9] usb 4-1: SerialNumber: syz [ 219.585909][ T9103] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 219.613219][ T9103] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 219.644359][ T9113] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 219.867067][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 219.868531][ T9122] rust_binder: Write failure EINVAL in pid:609 [ 219.879916][ T9] usb 4-1: USB disconnect, device number 67 [ 220.220070][ T9139] netlink: 'syz.2.2766': attribute type 4 has an invalid length. [ 220.780703][ T9187] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.008350][ T9199] binder: Unknown parameter 'contextÌðÔð[7’' [ 221.176720][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 221.341581][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 221.360454][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 221.374041][ T9] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 221.384332][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.398580][ T9] usb 1-1: Product: syz [ 221.402767][ T9] usb 1-1: Manufacturer: syz [ 221.407421][ T9] usb 1-1: SerialNumber: syz [ 221.423279][ T9] usb 1-1: config 0 descriptor?? [ 221.434177][ T9] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 221.504638][ T9236] overlayfs: failed to clone upperpath [ 221.506634][ T482] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 221.611307][ T9249] netlink: 'syz.3.2798': attribute type 4 has an invalid length. [ 221.619100][ T9249] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2798'. [ 221.622785][ T9251] overlayfs: failed to clone upperpath [ 221.637319][ T9251] overlayfs: failed to clone lowerpath [ 221.685117][ T482] usb 5-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 221.706604][ T482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.715845][ T482] usb 5-1: Product: syz [ 221.721114][ T482] usb 5-1: Manufacturer: syz [ 221.731676][ T482] usb 5-1: SerialNumber: syz [ 221.948196][ T482] usb 5-1: USB disconnect, device number 43 [ 222.504919][ T9268] fuse: Bad value for 'fd' [ 222.675503][ T9292] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 222.841454][ T9300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:41 [ 222.902773][ T36] kauditd_printk_skb: 876 callbacks suppressed [ 222.902793][ T36] audit: type=1400 audit(1779167271.389:32457): avc: denied { read write } for pid=9301 comm="syz.3.2816" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 223.008626][ T36] audit: type=1400 audit(1779167271.389:32458): avc: denied { read write open } for pid=9301 comm="syz.3.2816" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 223.066589][ T36] audit: type=1400 audit(1779167271.389:32459): avc: denied { read } for pid=9301 comm="syz.3.2816" dev="nsfs" ino=4026532493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 223.126589][ T36] audit: type=1400 audit(1779167271.389:32460): avc: denied { read open } for pid=9301 comm="syz.3.2816" path="net:[4026532493]" dev="nsfs" ino=4026532493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 223.157286][ T9317] 9pnet_fd: Insufficient options for proto=fd [ 223.216642][ T36] audit: type=1400 audit(1779167271.389:32461): avc: denied { create } for pid=9301 comm="syz.3.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 223.301355][ T36] audit: type=1400 audit(1779167271.389:32462): avc: denied { read } for pid=9301 comm="syz.3.2816" dev="nsfs" ino=4026532493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 223.314010][ T9324] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.329223][ T9324] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 223.337016][ T9324] audit: backlog limit exceeded [ 223.344276][ T9325] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.743604][ T482] usb 1-1: USB disconnect, device number 40 [ 223.872490][ T9358] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.236618][ T482] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 224.396649][ T482] usb 1-1: Using ep0 maxpacket: 8 [ 224.418526][ T482] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 224.437020][ T482] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.445041][ T482] usb 1-1: Product: syz [ 224.454860][ T482] usb 1-1: Manufacturer: syz [ 224.460252][ T482] usb 1-1: SerialNumber: syz [ 224.524150][ T9372] 9pnet_fd: Insufficient options for proto=fd [ 224.698798][ T482] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 224.772202][ T9391] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.772343][ T9392] netlink: 'syz.3.2841': attribute type 1 has an invalid length. [ 224.890241][ T9401] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.893831][ T31] usb 1-1: USB disconnect, device number 41 [ 224.893863][ T9401] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 224.909307][ T31] usblp0: removed [ 225.045297][ T9410] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 225.046785][ T9410] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 225.083971][ T9416] SELinux: security_context_str_to_sid () failed with errno=-22 [ 225.966605][ T31] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 226.023311][ T9438] netlink: 'syz.3.2854': attribute type 27 has an invalid length. [ 226.023726][ T9439] rust_binder: Write failure EFAULT in pid:87 [ 226.116593][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 226.130238][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.141216][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 226.156375][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 226.165474][ T31] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 226.173820][ T31] usb 5-1: Product: syz [ 226.178016][ T31] usb 5-1: Manufacturer: syz [ 226.185678][ T31] usb 5-1: bad CDC descriptors [ 226.296845][ T10] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 226.391344][ T481] usb 5-1: USB disconnect, device number 44 [ 226.449447][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 226.458777][ T10] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.471732][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 226.480909][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0340, bcdDevice= 0.40 [ 226.490046][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.498070][ T10] usb 4-1: Product: syz [ 226.502270][ T10] usb 4-1: Manufacturer: syz [ 226.506894][ T10] usb 4-1: SerialNumber: syz [ 226.876608][ T337] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 226.938158][ T10] usbhid 4-1:1.0: can't add hid device: -71 [ 226.966545][ T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 226.989317][ T10] usb 4-1: USB disconnect, device number 68 [ 227.015256][ T9461] can0: slcan on ptm0. [ 227.042362][ T337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.080352][ T337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.090179][ T9460] can0 (unregistered): slcan off ptm0. [ 227.118956][ T337] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.161029][ T337] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.186614][ T337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.218017][ T337] usb 1-1: config 0 descriptor?? [ 227.298841][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2868'. [ 227.491618][ T337] usbhid 1-1:0.0: can't add hid device: -71 [ 227.501354][ T337] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 227.511228][ T337] usb 1-1: USB disconnect, device number 42 [ 227.561975][ T9505] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 227.634936][ T9518] netlink: 'syz.3.2878': attribute type 15 has an invalid length. [ 227.922467][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2885'. [ 227.931799][ T36] kauditd_printk_skb: 787 callbacks suppressed [ 227.931814][ T36] audit: type=1400 audit(1779167276.429:33194): avc: denied { create } for pid=9537 comm="syz.3.2884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 227.958752][ T36] audit: type=1400 audit(1779167276.429:33195): avc: denied { write } for pid=9539 comm="syz.2.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 227.959909][ T9542] binder: Unknown parameter '°' [ 227.979248][ T36] audit: type=1400 audit(1779167276.429:33196): avc: denied { create } for pid=9539 comm="syz.2.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 227.979277][ T36] audit: type=1400 audit(1779167276.429:33197): avc: denied { write } for pid=9539 comm="syz.2.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 227.979300][ T36] audit: type=1400 audit(1779167276.449:33198): avc: denied { mounton } for pid=9541 comm="syz.4.2886" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.130808][ T9538] rust_binder: Failed to allocate buffer. len:72, is_oneway:true [ 228.181586][ T36] audit: type=1400 audit(1779167276.469:33199): avc: denied { read } for pid=9539 comm="syz.2.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 228.262502][ T36] audit: type=1400 audit(1779167276.469:33200): avc: denied { read write } for pid=6595 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 228.299043][ T36] audit: type=1400 audit(1779167276.469:33201): avc: denied { read write open } for pid=6595 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 228.379279][ T36] audit: type=1400 audit(1779167276.469:33202): avc: denied { ioctl } for pid=6595 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 228.466586][ T36] audit: type=1400 audit(1779167276.519:33203): avc: denied { write } for pid=9537 comm="syz.3.2884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 228.557390][ T9580] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 228.564555][ T9580] rust_binder: Write failure EINVAL in pid:485 [ 228.716637][ T9597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9597 comm=syz.2.2900 [ 228.736590][ T9601] rust_binder: 122: no such ref 1 [ 228.882457][ T9614] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000003 not found [ 228.890762][ T9614] rust_binder: Write failure EINVAL in pid:492 [ 229.067838][ T9622] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 229.075822][ T9622] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 229.326615][ T425] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 229.354151][ T9634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:507 [ 229.355783][ T9635] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 229.366058][ T9635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:507 [ 229.486587][ T425] usb 5-1: Using ep0 maxpacket: 32 [ 229.504922][ T425] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 229.514866][ T425] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 229.524251][ T425] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 229.533987][ T425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 229.545645][ T425] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 229.556649][ T425] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 229.570171][ T425] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 229.581705][ T425] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.631784][ T425] usb 5-1: config 0 descriptor?? [ 229.821384][ T9676] rust_binder: Error while translating object. [ 229.821422][ T9676] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 229.828462][ T9676] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:523 [ 229.844054][ T425] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 229.884186][ T425] usb 5-1: USB disconnect, device number 45 [ 229.899371][ T425] usblp0: removed [ 229.903954][ T8764] udevd[8764]: setting mode of /dev/usb/lp0 to 020660 failed: No such file or directory [ 229.915876][ T8764] udevd[8764]: setting owner of /dev/usb/lp0 to uid=0, gid=7 failed: No such file or directory [ 230.046603][ T31] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 230.209116][ T31] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 230.217428][ T31] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 230.227589][ T31] usb 4-1: config 8 has no interface number 0 [ 230.233686][ T31] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 230.249534][ T31] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 230.258648][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.266616][ T481] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 230.274194][ T31] usb 4-1: Product: syz [ 230.278547][ T31] usb 4-1: Manufacturer: syz [ 230.283142][ T31] usb 4-1: SerialNumber: syz [ 230.336629][ T425] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 230.419251][ T481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 230.430282][ T481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.440055][ T481] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 230.449120][ T481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.459423][ T481] usb 1-1: config 0 descriptor?? [ 230.466863][ T481] hub 1-1:0.0: USB hub found [ 230.486585][ T425] usb 5-1: Using ep0 maxpacket: 32 [ 230.502053][ T425] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 230.511282][ T9674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.525223][ T425] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 230.525353][ T9674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.541461][ T425] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 230.552284][ T425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 230.576669][ T31] usb 4-1: USB disconnect, device number 69 [ 230.591649][ T425] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 230.603502][ T425] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 230.618456][ T425] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 230.628514][ T425] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.656817][ T425] usb 5-1: config 0 descriptor?? [ 230.686357][ T481] hub 1-1:0.0: 7 ports detected [ 230.692761][ T481] hub 1-1:0.0: insufficient power available to use all downstream ports [ 230.872412][ T9622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.880935][ T425] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 230.899550][ T9622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.958155][ T7749] tipc: Subscription rejected, illegal request [ 231.009765][ T9683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.028045][ T9683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.737455][ T481] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 231.743837][ T481] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 231.752932][ T481] usbhid 1-1:0.0: can't add hid device: -32 [ 231.758912][ T481] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 232.260539][ T9732] tmpfs: Bad value for 'nr_blocks' [ 232.269804][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2940'. [ 232.278728][ T9732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2940'. [ 232.279394][ T31] usb 5-1: USB disconnect, device number 46 [ 232.319180][ T31] usblp0: removed [ 232.332922][ T9736] binder: Bad value for 'max' [ 232.389007][ T9738] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 232.389575][ T9738] rust_binder: Write failure EINVAL in pid:758 [ 232.550437][ T9748] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 232.564667][ T9748] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 232.573254][ T9748] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 232.581204][ T9748] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 233.046581][ T36] kauditd_printk_skb: 687 callbacks suppressed [ 233.046598][ T36] audit: type=1400 audit(1779167281.529:33891): avc: denied { read write } for pid=6595 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 233.085471][ T36] audit: type=1400 audit(1779167281.529:33892): avc: denied { read write open } for pid=6595 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 233.113700][ T36] audit: type=1400 audit(1779167281.529:33893): avc: denied { ioctl } for pid=6595 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 233.140059][ T31] usb 1-1: USB disconnect, device number 43 [ 233.147940][ T36] audit: type=1400 audit(1779167281.599:33894): avc: denied { create } for pid=9754 comm="syz.0.2947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 233.189736][ T36] audit: type=1400 audit(1779167281.599:33895): avc: denied { ioctl } for pid=9754 comm="syz.0.2947" path="socket:[41460]" dev="sockfs" ino=41460 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 233.219648][ T36] audit: type=1400 audit(1779167281.599:33896): avc: denied { ioctl } for pid=9754 comm="syz.0.2947" path="socket:[41460]" dev="sockfs" ino=41460 ioctlcmd=0xf50e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 233.246738][ T36] audit: type=1400 audit(1779167281.599:33897): avc: denied { create } for pid=9754 comm="syz.0.2947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 233.268071][ T36] audit: type=1400 audit(1779167281.599:33898): avc: denied { write } for pid=9754 comm="syz.0.2947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 233.289822][ T36] audit: type=1400 audit(1779167281.599:33899): avc: denied { read } for pid=9754 comm="syz.0.2947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 233.311133][ T36] audit: type=1400 audit(1779167281.629:33900): avc: denied { write } for pid=9754 comm="syz.0.2947" name="nf_conntrack" dev="proc" ino=4026533138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 233.458644][ T9779] overlayfs: failed to clone upperpath [ 233.776934][ T9799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.777724][ T9799] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 233.784286][ T481] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 233.808880][ T9802] rust_binder: Error in use_page_slow: ESRCH [ 233.808897][ T9802] rust_binder: use_range failure ESRCH [ 233.817684][ T9802] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 233.829821][ T9802] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 233.855234][ T9802] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:143 [ 234.018328][ T481] usb 1-1: Using ep0 maxpacket: 32 [ 234.049357][ T481] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 234.059764][ T481] usb 1-1: config 1 interface 0 has no altsetting 0 [ 234.070691][ T481] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.080198][ T481] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.090774][ T481] usb 1-1: Product: 帒櫱혧䕘य騊ͮ龰 [ 234.098295][ T481] usb 1-1: Manufacturer: Ђ [ 234.102879][ T481] usb 1-1: SerialNumber: Ђ [ 234.123172][ T9783] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 234.246596][ T425] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 234.356869][ T481] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 234.387213][ T481] usb 1-1: USB disconnect, device number 44 [ 234.409908][ T425] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 234.422847][ T9850] rust_binder: 162: no such ref 2 [ 234.428685][ T425] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 234.439023][ T9850] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 234.446060][ T9850] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 234.456820][ T425] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 234.486586][ T425] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.500823][ T425] usb 5-1: Product: syz [ 234.512466][ T425] usb 5-1: Manufacturer: syz [ 234.517180][ T425] usb 5-1: SerialNumber: syz [ 234.529553][ T425] usb 5-1: config 0 descriptor?? [ 234.535245][ T9854] FAT-fs (rnullb0): bogus number of reserved sectors [ 234.542089][ T9854] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 234.550091][ T9813] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 234.578522][ T9813] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 234.707060][ T9869] rust_binder: Error while translating object. [ 234.707109][ T9869] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 234.713346][ T9869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:168 [ 234.753514][ T9876] tmpfs: Bad value for 'nr_blocks' [ 234.805524][ T9813] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 234.817809][ T9813] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 235.033600][ T9894] TCP: TCP_TX_DELAY enabled [ 235.146591][ T719] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 235.328450][ T719] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 235.346579][ T719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.354616][ T719] usb 1-1: Product: syz [ 235.376618][ T719] usb 1-1: Manufacturer: syz [ 235.381316][ T719] usb 1-1: SerialNumber: syz [ 235.448454][ T425] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 235.684509][ T9931] netlink: 'syz.3.3008': attribute type 1 has an invalid length. [ 235.692325][ T9931] netlink: 'syz.3.3008': attribute type 3 has an invalid length. [ 235.700082][ T9931] netlink: 296 bytes leftover after parsing attributes in process `syz.3.3008'. [ 235.807269][ T9937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.815881][ T9937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.067341][ T9939] netlink: 'syz.2.3010': attribute type 12 has an invalid length. [ 236.128480][ T9940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3010'. [ 236.826595][ T719] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 236.975034][ T31] usb 5-1: USB disconnect, device number 47 [ 236.976629][ T719] usb 4-1: Using ep0 maxpacket: 16 [ 237.015179][ T719] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 237.026616][ T719] usb 4-1: config 1 has an invalid interface number: 255 but max is 2 [ 237.034818][ T719] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.048722][ T719] usb 4-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 237.059079][ T719] usb 4-1: config 1 has no interface number 3 [ 237.066085][ T719] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 237.076672][ T719] usb 4-1: config 1 interface 255 has no altsetting 0 [ 237.092426][ T719] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.102107][ T719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.119365][ T719] usb 4-1: Product: syz [ 237.123676][ T719] usb 4-1: Manufacturer: syz [ 237.136911][ T719] usb 4-1: SerialNumber: syz [ 237.356841][ T9942] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 237.364109][ T9942] rust_binder: Write failure EINVAL in pid:188 [ 237.375466][ T719] usb 4-1: USB disconnect, device number 70 [ 237.448338][ T8888] udevd[8888]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 237.904528][ T9974] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 237.904550][ T9974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:190 [ 237.927280][ T31] usb 1-1: USB disconnect, device number 45 [ 237.975006][ T9976] Invalid logical block size (14) [ 238.071598][ T36] kauditd_printk_skb: 658 callbacks suppressed [ 238.071614][ T36] audit: type=1400 audit(1779167286.559:34559): avc: denied { read write } for pid=9088 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.103607][ T36] audit: type=1400 audit(1779167286.559:34560): avc: denied { read write open } for pid=9088 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.129335][ T36] audit: type=1400 audit(1779167286.559:34561): avc: denied { ioctl } for pid=9088 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.158344][ T36] audit: type=1400 audit(1779167286.599:34562): avc: denied { read write } for pid=9986 comm="syz.3.3026" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 238.187079][ T36] audit: type=1400 audit(1779167286.599:34563): avc: denied { read write open } for pid=9986 comm="syz.3.3026" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 238.215288][ T36] audit: type=1400 audit(1779167286.599:34564): avc: denied { mounton } for pid=9984 comm="syz.0.3025" path="/185/file0" dev="tmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 238.246659][ T36] audit: type=1400 audit(1779167286.609:34565): avc: denied { mount } for pid=9984 comm="syz.0.3025" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 238.283080][ T36] audit: type=1400 audit(1779167286.619:34566): avc: denied { read write } for pid=9984 comm="syz.0.3025" name="binder1" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 238.306656][ T36] audit: type=1400 audit(1779167286.619:34567): avc: denied { read write open } for pid=9984 comm="syz.0.3025" path="/dev/binderfs/binder1" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 238.357905][ T36] audit: type=1400 audit(1779167286.619:34568): avc: denied { read append } for pid=9984 comm="syz.0.3025" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 238.770588][T10025] ------------[ cut here ]------------ [ 238.776202][T10025] WARNING: CPU: 1 PID: 10025 at mm/page_alloc.c:5234 __alloc_pages_noprof+0xe8/0x7b0 [ 238.785749][T10025] Modules linked in: [ 238.789680][T10025] CPU: 1 UID: 0 PID: 10025 Comm: syz.0.3038 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 238.801354][T10025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 238.811424][T10025] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 238.817388][T10025] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 32 0f ee 05 00 0f 85 be 00 00 00 c6 05 25 0f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 238.837055][T10025] RSP: 0018:ffffc9000143f860 EFLAGS: 00010246 [ 238.843217][T10025] RAX: 0000000000000000 RBX: 000000000000001f RCX: 0000000000000000 [ 238.851232][T10025] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000143f918 [ 238.859238][T10025] RBP: ffffc9000143f988 R08: ffffc9000143f917 R09: 0000000000000000 [ 238.867234][T10025] R10: ffffc9000143f900 R11: fffff52000287f23 R12: ffffc9000143f8a0 [ 238.875223][T10025] R13: dffffc0000000000 R14: 1ffff92000287f10 R15: 0000000000000000 [ 238.883257][T10025] FS: 00007fb04c4f76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 238.892291][T10025] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.898947][T10025] CR2: 0000200000001000 CR3: 0000000107aa4000 CR4: 00000000003526b0 [ 238.906976][T10025] Call Trace: [ 238.910263][T10025] [ 238.913200][T10025] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 238.919315][T10025] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 238.925066][T10025] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 238.930751][T10025] ___kmalloc_large_node+0x81/0x220 [ 238.935971][T10025] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 238.941650][T10025] __kmalloc_large_node_noprof+0x1e/0xe0 [ 238.947340][T10025] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 238.953025][T10025] __kmalloc_noprof+0x336/0x530 [ 238.957929][T10025] ? __cfi_lockref_get+0x10/0x10 [ 238.962903][T10025] incfs_realloc_mount_info+0xa7/0x4d0 [ 238.968403][T10025] ? incfs_add_sysfs_node+0x118/0x240 [ 238.973817][T10025] incfs_alloc_mount_info+0x479/0x600 [ 238.979217][T10025] incfs_mount_fs+0x3ca/0x960 [ 238.983913][T10025] ? __cfi_incfs_mount_fs+0x10/0x10 [ 238.989133][T10025] ? vfs_parse_fs_string+0x102/0x170 [ 238.994432][T10025] ? selinux_capable+0x38/0x50 [ 238.999233][T10025] legacy_get_tree+0x106/0x1b0 [ 239.004045][T10025] ? __cfi_incfs_mount_fs+0x10/0x10 [ 239.009274][T10025] vfs_get_tree+0x9e/0x290 [ 239.013709][T10025] do_new_mount+0x251/0xb40 [ 239.018243][T10025] ? security_capable+0xcf/0xf0 [ 239.023126][T10025] path_mount+0x688/0x1050 [ 239.027568][T10025] ? putname+0x113/0x150 [ 239.031835][T10025] __se_sys_mount+0x2bd/0x480 [ 239.036501][T10025] ? __x64_sys_mount+0xf0/0xf0 [ 239.041300][T10025] ? __kasan_check_write+0x18/0x20 [ 239.046438][T10025] ? fpregs_restore_userregs+0x11d/0x260 [ 239.052092][T10025] __x64_sys_mount+0xc3/0xf0 [ 239.056727][T10025] x64_sys_call+0x2021/0x2ee0 [ 239.061441][T10025] do_syscall_64+0x58/0xf0 [ 239.065887][T10025] ? clear_bhb_loop+0x50/0xa0 [ 239.070616][T10025] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 239.076581][T10025] RIP: 0033:0x7fb04b58f6c9 [ 239.081012][T10025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.100704][T10025] RSP: 002b:00007fb04c4f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 239.109161][T10025] RAX: ffffffffffffffda RBX: 00007fb04b7e5fa0 RCX: 00007fb04b58f6c9 [ 239.117180][T10025] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 239.125159][T10025] RBP: 00007fb04b611f91 R08: 0000200000000280 R09: 0000000000000000 [ 239.133156][T10025] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000 [ 239.141159][T10025] R13: 00007fb04b7e6038 R14: 00007fb04b7e5fa0 R15: 00007ffd3cad0e88 [ 239.149165][T10025] [ 239.152194][T10025] ---[ end trace 0000000000000000 ]--- [ 239.157928][T10025] incfs: Error allocating mount info. -12 [ 239.163688][T10025] incfs: mount failed -12 [ 239.166606][ T719] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 239.306583][ T719] usb 1-1: device descriptor read/64, error -71 [ 239.546600][ T719] usb 1-1: device descriptor read/64, error -71 [ 239.796579][ T719] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 239.936589][ T719] usb 1-1: device descriptor read/64, error -71 [ 240.176586][ T719] usb 1-1: device descriptor read/64, error -71 [ 240.286662][ T719] usb usb1-port1: attempt power cycle [ 240.626594][ T719] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 240.648945][ T719] usb 1-1: device descriptor read/8, error -71 [ 240.778801][ T719] usb 1-1: device descriptor read/8, error -71 [ 241.016706][ T719] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 241.038735][ T719] usb 1-1: device descriptor read/8, error -71 [ 241.168762][ T719] usb 1-1: device descriptor read/8, error -71 [ 241.276650][ T719] usb usb1-port1: unable to enumerate USB device