last executing test programs: 4.662403857s ago: executing program 0 (id=404): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x8f}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x10, &(0x7f0000000140)=0x3, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000a80)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000280)=[@dead_binder_done, @enter_looper], 0xc2d, 0x0, &(0x7f0000001480)="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"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_MIGRATE(r9, 0x6609) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x6}, {0x20, 0xfe, 0x2, 0xfffff034}, {0x6, 0xfa, 0x0, 0x4}]}, 0x10) write$binfmt_aout(r8, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a40000692b9357c88bd55800", @ANYRES16=r11, @ANYBLOB="10002dbd7000fddbdf254a0000004e00a8002de57d3bb2cff3a588556dceea3d5412f63510246f0f8106b2e390946155e9751792f307fdb0f1b9b47496d53540d7f4075e2bc134495f818f7d0f9f6da982337969300bd7dcc1dde24f000008000300010000000f00a8007365636f6e646e616d6500000e00a80066697273746e616d650000000f00a8007365636f6e646e616d6500000800030001000000", @ANYRES8, @ANYRES8=r7, @ANYRES16=r4], 0xa4}, 0x1, 0x0, 0x0, 0x44000804}, 0x1) 3.834455855s ago: executing program 0 (id=405): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') preadv2(r2, &(0x7f0000000380)=[{&(0x7f0000000300)=""/103, 0x67}, {&(0x7f0000001600)=""/239, 0xef}], 0x2, 0x5, 0x101, 0x1) pidfd_send_signal(r2, 0x18, &(0x7f0000000340)={0x21, 0x5}, 0x0) write$P9_RFSYNC(r2, &(0x7f00000000c0)={0x7, 0x33, 0x1}, 0x7) r3 = dup3(r1, r0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendfile(r5, r4, 0x0, 0x3) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@flat=@weak_binder={0x77622a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r1}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 3.713090246s ago: executing program 0 (id=408): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904"], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x1d5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x202006, &(0x7f0000002140)=ANY=[]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc50c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1fff, 0x71, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x20, 0x5, 0x30, {0x30, 0x11, "17ba2ecbb3ac4fcca68b0d4dd17ea18265cc3288651c16a4887bbf7d2b44b03a1b6c9be06bd2951b98091f3e9afa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@handle={0x73682a85, 0x100}, @flat=@weak_binder={0x77622a85, 0x10a, 0x80000003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2.595666777s ago: executing program 0 (id=419): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2501000000000000000b00002c0014001462"], 0x30}}, 0xc840) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) sendfile(r4, r0, 0x0, 0x7fffeffa) 2.581013879s ago: executing program 0 (id=420): openat(0xffffffffffffff9c, 0x0, 0x20001, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0xe, 0x28, 0x9, 0x7, 0x0, 0x70bd29, 0x25dfdbfe, [@sadb_address={0x5, 0x5, 0xff, 0xa0, 0x0, @in6={0xa, 0x4e23, 0x5, @local}}]}, 0x38}}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000003e00080000400000000000000c0012800800d200", @ANYRES32=0x0, @ANYBLOB="39f57ed6128979e25eb65649bff596062e43da2bb9ee165163c86286363729b14a095d8804cfdfd606eba1d791390cafd26acc8f73072eab8129c0e1e9cf8337b137b95de5418adb318cb863c592c97cc47d2878f036dc6c445a2068ef8e3fb4fa75f346e229a6ba2ec9bc71d084dd88a39c62b3ec16306f351f7a3e9ade503f3d1f03598954e662d8177c51a74eea0890f6894a97cd05312a73510aed22da0a0b265140751c3337383b25a59f4aaa15302337caae7c23e1a22a5974fe67929f04b9df265171eec89181d9c45559dd3af1f6"], 0x1c}], 0x1, 0x0, 0x0, 0x220000d5}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000bc0)={0x8, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth1_vlan\x00', &(0x7f0000000240)=@ethtool_cmd={0x50, 0x2, 0x40, 0x5, 0x1, 0xa4, 0x4, 0x3, 0x0, 0x7, 0x5, 0x3, 0x4, 0x7, 0x8, 0x5, [0x5, 0xd0]}}) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "096679c2"}]}}, 0x0}, 0x0) syz_usb_ep_write(r3, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@register_looper, @free_buffer, @free_buffer, @request_death={0x400c630e, 0x1}, @dead_binder_done, @increfs_done={0x40106308, 0x1}], 0x7c, 0x0, &(0x7f0000000480)="6b3b25ed726334d97b51a589a06db37f5b8dc92a72ad82dddeed3c6c08760941f749c486823bb0a041e135d9245c090644f9765f4f539d34f420aacd3700ec95440f8a2d643e6e4b601c00941de577df1ae58c82be00a7ab6a43716d751cc46e1690263fa70d8c27e6791f75959179aca1b418335b4c8bd635646e3f"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000000)=[@request_death, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) 1.650765935s ago: executing program 3 (id=429): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000080)={0x0, 0x10, 0x2}) r2 = syz_open_procfs(r0, &(0x7f0000000100)='mountinfo\x00') r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r3, r2, 0x0, 0x80000000) 1.631805576s ago: executing program 3 (id=430): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000c80)='@\x81\\\x00', 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r5, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x1b9, 0x1fd}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xffffffffffffffff, r7) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4080, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}, {@directio}, {@afid={'afid', 0x3d, 0x8}}, {@cachetag={'cachetag', 0x3d, '\x00'}}, {@dfltuid={'dfltuid', 0x3d, r7}}, {@mmap}], [{@subj_user={'subj_user', 0x3d, './binderfs/binder1\x00'}}, {@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '8'}}, {@appraise_type}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x64, 0x62, 0x35, 0x33, 0x35, 0x62, 0x33], 0x2d, [0xf8, 0x37, 0x33, 0x65], 0x2d, [0x31, 0x34, 0x66, 0x32], 0x2d, [0x63, 0x30, 0x34, 0x97aa1e1b507236b], 0x2d, [0x30, 0x33, 0x66, 0x63, 0x32, 0x30, 0x36, 0x31]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, './binderfs/binder1\x00'}}]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x68f, 0x58) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000000)={&(0x7f0000000180)=""/90, 0x5a}) 1.493042268s ago: executing program 3 (id=431): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) writev(r1, &(0x7f0000000640)=[{&(0x7f00000000c0)="a6", 0x1}], 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r3 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r3, &(0x7f0000000540)=[{{&(0x7f0000000200)={0x2, 0x4e1e, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f00000002c0)='\b\x00\x00\x00(\x00', 0x6}], 0x1}}], 0x1, 0x4048810) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x3b, &(0x7f0000000680)=""/209, &(0x7f00000000c0)=0xd1) sendmsg$unix(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}], 0x20, 0x50}, 0x40001) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000040)) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in=@dev={0xac, 0x14, 0x14, 0x3f}, @in6=@private2={0xfc, 0x2, '\x00', 0xff}, 0x4e22, 0x2, 0x4e22, 0x3, 0xa, 0x20, 0xa0, 0x8}, {0x7, 0x11, 0x5, 0x8, 0x7102, 0x5, 0x0, 0x7}, {0x2, 0xffffffff7fffffff, 0x3, 0x8}, 0x1, 0x6e6bba, 0x2, 0x0, 0x1, 0x1}, {{@in=@multicast2, 0x4d6, 0x2b}, 0x2, @in6=@remote, 0x0, 0x2, 0x2, 0x9, 0x5, 0x9f5, 0x4}}, 0xe8) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) mount$cgroup2(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000004c0), 0x2080400, &(0x7f0000000780)={[{@pids_localevents}, {@memory_hugetlb_accounting}, {@memory_hugetlb_accounting}, {@pids_localevents}, {@memory_localevents}], [{@smackfsdef={'smackfsdef', 0x3d, './binderfs/binder1\x00'}}]}) pipe2$9p(&(0x7f0000000000), 0x4800) 1.365136468s ago: executing program 3 (id=434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fchdir(r0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000200)) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) setuid(0xee01) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x125d, 0x0) (async) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x404800, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x7, &(0x7f0000000180)=[{0x7, 0x4, 0x2c, 0xaf}, {0x6, 0x9, 0x7, 0x400}, {0x7, 0x3, 0xf4, 0x8}, {0x0, 0x30, 0x7f, 0x8}, {0x3, 0x7f, 0x9}, {0xcbf2, 0x80, 0x2, 0x4}, {0xda01, 0xa, 0x0, 0x5}]}) (async, rerun: 64) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in=@empty, 0x4e24, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x40000003, 0x0, 0x0, 0x4}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x33}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) (async) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xffe0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@handle={0x73682a85, 0x100}, @flat=@weak_binder={0x77622a85, 0x10a, 0x80000003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.296994934s ago: executing program 3 (id=436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback, 0xffffffff}, 0x1c) listen(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000840) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x5a, 0x0, &(0x7f0000000940)=[@enter_looper, @dead_binder_done, @reply_sg={0x40486312, {0xfffffffe, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000800)=""/141, 0x0, 0x1, 0xc}, @fda={0x66646185, 0x0, 0x2, 0x33}, @flat=@handle={0x73682a85, 0x10b, 0x3}}, &(0x7f0000000600)}}], 0x0, 0x0, 0x0}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000000200)=0xffffffff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r3, 0x147a5000) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r9 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)="c0", 0x1}], 0x1, 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, 0x0, 0x0) write$9p(r9, &(0x7f0000000440)="5a25cfe93a2063bcbf75893adc674570c11fa6233667732171d3aa3023c0f12e224781d9281e66f5d9e2a09897b98942965e8c39e99ff0c5534e31b4cc75e91e604479cf11f962f752868f69ff18de793c3727c3b81e441075f08e58509d902da5d00fc4ed107564489c6873372763ed90f0059668c7d33f11706e0353960834d790a0e245d0a8c871fdcd879cf420d90bd42249961e6221ce701f2599ec90c82fa73e8823900292c4726df2778c", 0xae) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 1.175410864s ago: executing program 3 (id=437): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "9ee763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000600)={0x40, 0x2b, 0x4, "8bc9ec88"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000200)={0x40, 0xe, 0x4, "7cad09d4"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x20, 0x16, 0x4, "fc632494"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000280)={0x40, 0x18, 0xf, "60a89da7533e3d09fef05e71d27813"}, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, 0x0, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x5}}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000740)={0x0, 0x22, 0xa1, {0xa1, 0x2d, "53e698404a3c57e7b906dc574095e7893ee684cc472a8123d8d15700db40daaa2a3cd7e428525b8138f5bd7bfffbf407bb3f85adce272865572b03ec2cc5a112e52f478559ca147941236dc2cccb09c8309f6c7817a9cfe40401f82a6126fa2da81e9f7854fc2aba5fe06f4eb8292a18e592b4c9c4fd26a4d6283131e141126cafd955806ea20873dc88f5aaf0e34da9d5312ed651ac5bb3b2bac4cd0035a8"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}, &(0x7f0000000840)={0x0, 0xf, 0xb5, {0x5, 0xf, 0xb5, 0x5, [@generic={0x7b, 0x10, 0xb, "304706c606079360ad3ed3d00b411311ba87738867b4ac4ea1121faa24b141e740afe6248458f371f8e2e5af79eb5442e7596ec128fb3bcd70f6358666a7feb3af727bf73ad9c0d53895c9d7ca7b83bf448e7e263ae6729d2efb14ac0275f52f105d8cda837c4d18a7a966e116a33f5a2a808163b527baf0"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x28, 0xb, 0x0, 0x5, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x14, "e542163081a39ff1f4c872160a7be5ac"}, @wireless={0xb, 0x10, 0x1, 0xa, 0x24, 0x50, 0x3f, 0x2, 0xf}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4e, 0x3, 0x40, 0x1}]}}, &(0x7f00000009c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x8, "05eb3370", "142c7f02"}}, &(0x7f0000000a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x8, 0x3e, 0xb, 0x2, 0x9d1, 0x3ff}}}, &(0x7f0000000f80)={0x84, &(0x7f0000000a80)={0x0, 0x11, 0x5e, "fa56f7f1a6b367dfba96613714656a56e75364ca7e0f4afa28822ef91b37799f47b919cd4bf47b9ba7f7c931da471ecd526e900d5b7914e135460007d47ba31192d5dadf6cc20a67d46ec29a57c5692dddd77995ba418c9fbd7ef6edc2d9"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000c80)={0x20, 0x0, 0x8, {0xc0, 0x20, [0xff]}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0xf57e}, &(0x7f0000000d00)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000d40)={0x40, 0xb, 0x2, "dd83"}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000e00)={0x40, 0x17, 0x6}, &(0x7f0000000e40)={0x40, 0x19, 0x2, "a817"}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0x10}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') 532.967447ms ago: executing program 0 (id=438): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000b, 0x41071, 0xffffffffffffffff, 0x894f000) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) r5 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xbd, 0x60, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x7, 0x1, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x1, 0x5d}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x0, 0x10, 0x40, 0x5}, 0x3a, &(0x7f0000000140)={0x5, 0xf, 0x3a, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xdf, "850fe8a4bf297f3e11a4e43883704555"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x9, 0x400}, @ssp_cap={0x14, 0x10, 0xa, 0x23, 0x2, 0x63, 0xf000, 0xd38, [0x3f60, 0xcf]}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x81a}}, {0x6c, &(0x7f0000000240)=@string={0x6c, 0x3, "f7acf5412d18e0ac4b59a35b876f63547e8b6d1ce00e5eea848ff76a451441afa3442a6e4579fc1558954d440fc69ab2409ce46741745eea3b2b4fc5a3fbe18dfce3703eb3f958b14dd85b88672f6925fd58c94551c66f128b1e341c6d6b064ef1222fffd723272d09df"}}, {0x85, &(0x7f0000000380)=@string={0x85, 0x3, "9a9338cec1ba6dd7a0e385f21112810cc3a7395141e827d2ef3875cbb41cc2e4a8f9d7812622700ed165ff8421dfe4479cd3b4aa21da7c35456adfbfee916957e12af55881060cfb4ca5fe388228b03f7b707acc932587914b7b2ec4740444b3ecc551889881cdc21ce308991097d51fba67230c378e2f5f751d0b0724a781dab63a40"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40e}}]}) syz_usb_control_io$printer(r5, &(0x7f0000000540)={0x14, &(0x7f0000000300)={0x0, 0xa, 0x27, {0x27, 0x21, "bf8ae2ca874646158c77ee7928b4a46893026ba20c1307240f6f308b7b65914225a27fc229"}}, &(0x7f00000004c0)={0x0, 0x3, 0x51, @string={0x51, 0x3, "6b98b49056ab3ccaa05d8c1daa5cbb8a499504ba5833c1a61b0c01b9c4fe765a68404236c7a51810da81c2b9d1ea213439483dfac007c237398d65e99b4dcdbe685d0809f1be9f0c07ab59f48c3a12"}}}, &(0x7f0000000780)={0x34, &(0x7f0000000580)={0x20, 0xb, 0x7e, "e241742cbfd31b333ea5fc0e1fd12012c8e3f2909523ffe1e7cc5e32d7011ebcd859fe70c613d269e0542d59cc501cd6bf49ff0dff212264e22889374263c8506b9e248e9818d6c3f2bdc65b36d243431db4eab1fe73c5395360681882b556fe9ff878c7f17011a0a4cb7d2da313e33f9097653bd23ec70e5a43382c54dc"}, &(0x7f0000000640)={0x0, 0xa, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000006c0)={0x20, 0x0, 0x21, {0x1f, "04ca3278b978eece4fb8cbf8b92207228b7231bbccd5721936f3b6e9cbcb1f"}}, &(0x7f0000000700)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0x9}}) (async) ioctl$HIDIOCGUCODE(r3, 0xc018480d, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 463.225512ms ago: executing program 1 (id=442): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async, rerun: 32) r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async, rerun: 32) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r4 = dup(r3) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000580)={0x50, 0x0, r6, {0x7, 0x28, 0x7fff, 0x200941, 0x0, 0x0, 0x1e0, 0x3, 0x0, 0x0, 0x1, 0xfffffffc}}, 0x50) (async, rerun: 64) write$FUSE_BMAP(r1, &(0x7f0000000140)={0xffffffffffffff44, 0x2815838e5b7ca3fe, r6, {0x7ffffffffffffffe}}, 0x18) (rerun: 64) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB]) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) (async) ioctl$UI_DEV_CREATE(r7, 0x5501) r8 = syz_open_dev$evdev(&(0x7f00000001c0), 0x3f, 0x0) ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000000180)={0x51, 0xfffe, 0x0, {0x7}, {}, @cond=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x2}]}) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) (async) getegid() (async, rerun: 32) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async, rerun: 32) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) r9 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$KVM_CREATE_VM(r9, 0xae01, 0xe) (async) rt_sigaction(0x26, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r10, r0, 0x0, 0x80000000) 409.105477ms ago: executing program 1 (id=443): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x18}}], 0x1, 0x20004874) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xd5dd0001, 0x800b, 0xd, 0xfffffffc, 0x0, [{0xc, 0x9, 0x8, '\x00', 0xb4}, {0xc3, 0x9, 0x4, '\x00', 0x9b}, {0xfd, 0xe, 0x6, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x5}, {0x1, 0x11, 0x8}, {0xe8, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x4a, '\x00', 0x9}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x7}, {0x0, 0x9, 0x24, '\x00', 0x8}, {0x0, 0x4, 0x5, '\x00', 0x7}, {0x1, 0x4, 0x80, '\x00', 0x5}, {0x3, 0xf5, 0x6, '\x00', 0xb2}, {0x7, 0x4, 0x0, '\x00', 0xfd}, {0x7, 0xa, 0x4, '\x00', 0xd}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x3, 0x2, '\x00', 0x3}, {0xf, 0xf8, 0x6, '\x00', 0x1}, {0x9, 0x5, 0x53, '\x00', 0x1}, {0x9, 0x2, 0x7, '\x00', 0x4}, {0x65, 0x40, 0x7, '\x00', 0x6}, {0x1, 0xfd, 0x7, '\x00', 0x2}, {0xac, 0x8, 0xfa, '\x00', 0x1}]}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x10200, 0x4, 0x5000, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x6c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x15}, @flat=@handle={0x73682a85, 0x200, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, 0x0}, 0x400}, @increfs_done={0x40106308, 0x1}, @free_buffer], 0x50, 0x0, &(0x7f0000000540)="ae3f238d87e4ee9205d0842b529db2744ccf6892f6f65ebc4671b63de4ba15bd1a1533502e2a569d6aea8936ab051cf9bfc0d34c0581506339d94a60289c526d8168e83c2efd49c75aa9d82de77714ff"}) 352.678551ms ago: executing program 2 (id=444): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x1002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'gre0\x00', &(0x7f00000000c0)=@ethtool_rxfh_indir={0x38, 0x2, [0x8000, 0x55]}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) modify_ldt$write(0x1, &(0x7f0000000900)={0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "145aa359352e4de0", "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "d80f59276094db31"}, 0x28) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x111000, 0x0) ftruncate(r2, 0x200002) r3 = open(&(0x7f0000000140)='./file0\x00', 0x8800, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r4, r3, 0x0, 0x80001d00c0d0) write$binfmt_aout(r0, 0x0, 0xfdef) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0x11, 0x4008040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close(r7) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffffffffff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r8, &(0x7f0000000440)) 297.841526ms ago: executing program 1 (id=445): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0xffffffff}}]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r3, &(0x7f00000029c0)={0x2020}, 0x2020) 214.472242ms ago: executing program 2 (id=446): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000740)=0x6, 0x4) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/47, 0x2f}, 0x80000001}], 0x1, 0x12040, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000000)={'binder0\x00'}) 214.104673ms ago: executing program 2 (id=447): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000040)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0xffffffffffffffea, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0xfffffffffffffffd, 0xe}, @fda={0x66646185, 0x8, 0x3, 0x3d}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 213.821822ms ago: executing program 2 (id=448): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES16=r2], 0x21c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x1000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) close_range(r0, 0xffffffffffffffff, 0x0) 207.096024ms ago: executing program 1 (id=449): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$cgroup_devices(r1, &(0x7f0000000040)={'c', ' *:* ', 'wm\x00'}, 0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x5c, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@weak_binder={0x77622a85, 0xa}, @flat=@weak_binder={0x77622a85, 0x800, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x2}, @request_death={0x400c630e, 0x3}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) 195.296774ms ago: executing program 1 (id=450): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x1802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x10002, 0x3, 0xdddd0000, 0x1000, &(0x7f0000fa3000/0x1000)=nil}) close_range(r0, r0, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private1, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 1.15466ms ago: executing program 2 (id=451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x78, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x78, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'wg2\x00', &(0x7f0000000280)=@ethtool_gstrings={0x1b, 0x4}}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'wg2\x00', &(0x7f0000000280)=@ethtool_gstrings={0x1b, 0x4}}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000080)=0x8e2ca, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000080)=0x8e2ca, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) close(r4) (async) close(r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x80000003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) 684.6µs ago: executing program 1 (id=452): add_key$fscrypt_v1(0x0, &(0x7f0000000100)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x138) close(0xffffffffffffffff) dup(0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) rt_sigprocmask(0x0, &(0x7f0000000400)={[0xfffff7feffff7ffc]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x12) r2 = gettid() tkill(r2, 0x15) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xd8, 0x0, &(0x7f0000000600)=[@clear_death={0x400c630f, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0xa, 0x2, 0x11}}, 0x0}, 0x40}, @increfs_done={0x40106308, 0x2}, @increfs_done, @request_death], 0x0, 0x0, 0x0}) write$tun(0xffffffffffffffff, 0x0, 0x7a) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c14"]) 0s ago: executing program 2 (id=453): mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x1000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x100000}) fstat(r1, &(0x7f0000000040)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.248' (ED25519) to the list of known hosts. [ 21.299867][ T36] audit: type=1400 audit(1753941908.730:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.301007][ T281] cgroup: Unknown subsys name 'net' [ 21.322532][ T36] audit: type=1400 audit(1753941908.730:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.349807][ T36] audit: type=1400 audit(1753941908.760:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.349950][ T281] cgroup: Unknown subsys name 'devices' [ 21.531795][ T281] cgroup: Unknown subsys name 'hugetlb' [ 21.537438][ T281] cgroup: Unknown subsys name 'rlimit' [ 21.688575][ T36] audit: type=1400 audit(1753941909.110:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.711818][ T36] audit: type=1400 audit(1753941909.110:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.723327][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.736670][ T36] audit: type=1400 audit(1753941909.110:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.768191][ T36] audit: type=1400 audit(1753941909.180:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.770876][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.793588][ T36] audit: type=1400 audit(1753941909.180:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.827874][ T36] audit: type=1400 audit(1753941909.200:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.853568][ T36] audit: type=1400 audit(1753941909.200:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.118179][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.125320][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.132656][ T289] bridge_slave_0: entered allmulticast mode [ 23.138820][ T289] bridge_slave_0: entered promiscuous mode [ 23.146276][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.153341][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.160517][ T289] bridge_slave_1: entered allmulticast mode [ 23.166672][ T289] bridge_slave_1: entered promiscuous mode [ 23.212271][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.219366][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.226440][ T288] bridge_slave_0: entered allmulticast mode [ 23.232763][ T288] bridge_slave_0: entered promiscuous mode [ 23.242501][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.249584][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.256626][ T288] bridge_slave_1: entered allmulticast mode [ 23.262870][ T288] bridge_slave_1: entered promiscuous mode [ 23.298075][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.305161][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.312319][ T290] bridge_slave_0: entered allmulticast mode [ 23.318480][ T290] bridge_slave_0: entered promiscuous mode [ 23.330408][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.337452][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.344546][ T290] bridge_slave_1: entered allmulticast mode [ 23.350844][ T290] bridge_slave_1: entered promiscuous mode [ 23.356866][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.364029][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.371121][ T291] bridge_slave_0: entered allmulticast mode [ 23.377272][ T291] bridge_slave_0: entered promiscuous mode [ 23.396099][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.403214][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.410305][ T291] bridge_slave_1: entered allmulticast mode [ 23.416447][ T291] bridge_slave_1: entered promiscuous mode [ 23.519744][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.526804][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.534155][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.541197][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.558026][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.565101][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.572396][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.579463][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.603369][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.610444][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.617717][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.624762][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.639436][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.646701][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.654337][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.662147][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.669427][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.684000][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.691056][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.734358][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.741431][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.752457][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.759546][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.777224][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.784281][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.791895][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.798917][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.827861][ T288] veth0_vlan: entered promiscuous mode [ 23.849442][ T288] veth1_macvtap: entered promiscuous mode [ 23.860524][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.867571][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.876876][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.883940][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.903767][ T290] veth0_vlan: entered promiscuous mode [ 23.915022][ T289] veth0_vlan: entered promiscuous mode [ 23.939238][ T289] veth1_macvtap: entered promiscuous mode [ 23.954027][ T290] veth1_macvtap: entered promiscuous mode [ 23.961032][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.965870][ T291] veth0_vlan: entered promiscuous mode [ 24.012062][ T291] veth1_macvtap: entered promiscuous mode [ 24.040403][ T335] ======================================================= [ 24.040403][ T335] WARNING: The mand mount option has been deprecated and [ 24.040403][ T335] and is ignored by this kernel. Remove the mand [ 24.040403][ T335] option from the mount to silence this warning. [ 24.040403][ T335] ======================================================= [ 24.101974][ T46] bridge_slave_1: left allmulticast mode [ 24.107981][ T46] bridge_slave_1: left promiscuous mode [ 24.118328][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.132675][ T46] bridge_slave_0: left allmulticast mode [ 24.138347][ T46] bridge_slave_0: left promiscuous mode [ 24.146196][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.238067][ T349] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.303625][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.312380][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.334223][ T351] bridge_slave_0: entered allmulticast mode [ 24.341104][ T351] bridge_slave_0: entered promiscuous mode [ 24.348268][ T46] veth1_macvtap: left promiscuous mode [ 24.354814][ T46] veth0_vlan: left promiscuous mode [ 24.399513][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.406575][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.413685][ T351] bridge_slave_1: entered allmulticast mode [ 24.421871][ T351] bridge_slave_1: entered promiscuous mode [ 24.459242][ T62] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.504916][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.512022][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.519343][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.526395][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.553814][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.561354][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.572941][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.580131][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.589704][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.596744][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.619656][ T62] usb 2-1: Using ep0 maxpacket: 32 [ 24.626960][ T382] rust_binder: Write failure EINVAL in pid:9 [ 24.632374][ T351] veth0_vlan: entered promiscuous mode [ 24.634322][ T62] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 24.658813][ T384] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.668310][ T351] veth1_macvtap: entered promiscuous mode [ 24.670862][ T62] usb 2-1: config 0 has no interface number 0 [ 24.689363][ T387] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 24.707300][ T62] usb 2-1: config 0 interface 184 has no altsetting 0 [ 24.721042][ T62] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 24.730194][ T62] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.748444][ T62] usb 2-1: Product: syz [ 24.753510][ T62] usb 2-1: Manufacturer: syz [ 24.763286][ T62] usb 2-1: SerialNumber: syz [ 24.776264][ T62] usb 2-1: config 0 descriptor?? [ 24.783722][ T62] smsc75xx v1.0.0 [ 24.788460][ T393] random: crng reseeded on system resumption [ 24.804454][ T31] rust_binder: 377: removing orphan mapping 0:1048 [ 24.814860][ T389] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 24.872210][ T10] rust_binder: 388: removing orphan mapping 0:112 [ 24.948038][ T404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.948118][ T404] rust_binder: Read failure Err(EAGAIN) in pid:7 [ 25.007519][ T416] input: syz1 as /devices/virtual/input/input4 [ 25.052895][ T424] netlink: 'syz.3.26': attribute type 4 has an invalid length. [ 25.060648][ T423] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 25.061006][ T424] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.26'. [ 25.349217][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.387070][ T62] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 25.398290][ T62] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 25.479175][ T9] usb 4-1: device descriptor read/64, error -71 [ 25.719226][ T9] usb 4-1: device descriptor read/64, error -71 [ 25.893579][ T437] Zero length message leads to an empty skb [ 25.959171][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.089163][ T9] usb 4-1: device descriptor read/64, error -71 [ 26.189311][ T330] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.209569][ T62] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 26.220674][ T62] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 26.230367][ T62] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 26.239859][ T62] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 26.329188][ T9] usb 4-1: device descriptor read/64, error -71 [ 26.339262][ T330] usb 1-1: Using ep0 maxpacket: 16 [ 26.345507][ T330] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.356599][ T330] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.366011][ T330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 26.374144][ T330] usb 1-1: SerialNumber: syz [ 26.380836][ T330] hub 1-1:1.0: bad descriptor, ignoring hub [ 26.386749][ T330] hub 1-1:1.0: probe with driver hub failed with error -5 [ 26.439582][ T9] usb usb4-port1: attempt power cycle [ 26.520256][ T36] kauditd_printk_skb: 95 callbacks suppressed [ 26.520273][ T36] audit: type=1400 audit(1753941913.950:169): avc: denied { getopt } for pid=458 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.589511][ T36] audit: type=1400 audit(1753941914.010:170): avc: denied { execute } for pid=458 comm="syz.2.37" path=2F6D656D66643A0B656DDA9952406993FE9B232AFF202864656C6574656429 dev="tmpfs" ino=1024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 26.591997][ T461] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 1168, size: 18446744073709551585) [ 26.616405][ T461] rust_binder: Error while translating object. [ 26.628703][ T461] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.634987][ T461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38 [ 26.635672][ T36] audit: type=1400 audit(1753941914.010:171): avc: denied { setopt } for pid=458 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 26.673344][ T36] audit: type=1400 audit(1753941914.020:172): avc: denied { map } for pid=458 comm="syz.2.37" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4971 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 26.697583][ T36] audit: type=1400 audit(1753941914.020:173): avc: denied { read write } for pid=458 comm="syz.2.37" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4971 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 26.779162][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 26.800079][ T9] usb 4-1: device descriptor read/8, error -71 [ 26.849187][ T330] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 26.930123][ T9] usb 4-1: device descriptor read/8, error -71 [ 26.999523][ T330] usb 1-1: device firmware changed [ 27.009274][ T330] usb 1-1: USB disconnect, device number 2 [ 27.087192][ T465] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 27.169174][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 27.190215][ T9] usb 4-1: device descriptor read/8, error -71 [ 27.319221][ T330] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.327756][ T9] usb 4-1: device descriptor read/8, error -71 [ 27.439259][ T9] usb usb4-port1: unable to enumerate USB device [ 27.469247][ T330] usb 1-1: Using ep0 maxpacket: 16 [ 27.475790][ T330] usb 1-1: unable to get BOS descriptor or descriptor too short [ 27.484367][ T330] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 186, changing to 11 [ 27.495749][ T330] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 27.505684][ T330] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 27.517449][ T330] usb 1-1: string descriptor 0 read error: -22 [ 27.523795][ T330] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.532886][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.742560][ T330] cdc_ncm 1-1:1.0: bind() failure [ 27.749737][ T330] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 27.756563][ T330] cdc_ncm 1-1:1.1: bind() failure [ 27.762904][ T330] usb 1-1: USB disconnect, device number 3 [ 27.931327][ T31] usb 2-1: USB disconnect, device number 2 [ 28.004081][ T36] audit: type=1400 audit(1753941915.430:174): avc: denied { mount } for pid=474 comm="syz.2.42" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 28.027799][ T36] audit: type=1400 audit(1753941915.460:175): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 28.059226][ T36] audit: type=1400 audit(1753941915.490:176): avc: denied { create } for pid=476 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.078437][ T36] audit: type=1400 audit(1753941915.490:177): avc: denied { connect } for pid=476 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.097743][ T36] audit: type=1400 audit(1753941915.490:178): avc: denied { write } for pid=476 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.120255][ T12] bridge_slave_1: left allmulticast mode [ 28.142921][ T12] bridge_slave_1: left promiscuous mode [ 28.150038][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.161701][ T12] bridge_slave_0: left allmulticast mode [ 28.167366][ T12] bridge_slave_0: left promiscuous mode [ 28.173261][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.187499][ T482] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 28.247287][ T489] rust_binder: Error while translating object. [ 28.247339][ T489] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 28.254197][ T489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:57 [ 28.294726][ T12] veth1_macvtap: left promiscuous mode [ 28.310175][ T12] veth0_vlan: left promiscuous mode [ 28.366905][ T486] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.374024][ T486] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.381033][ T503] rust_binder: Error while translating object. [ 28.381068][ T503] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.381292][ T486] bridge_slave_0: entered allmulticast mode [ 28.387469][ T503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64 [ 28.407979][ T486] bridge_slave_0: entered promiscuous mode [ 28.423866][ T486] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.431039][ T486] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.438163][ T486] bridge_slave_1: entered allmulticast mode [ 28.444716][ T486] bridge_slave_1: entered promiscuous mode [ 28.486271][ T486] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.493346][ T486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.500721][ T486] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.507759][ T486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.509167][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 28.529777][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.537327][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.548106][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.555211][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.565238][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.572311][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.594572][ T486] veth0_vlan: entered promiscuous mode [ 28.604959][ T486] veth1_macvtap: entered promiscuous mode [ 28.669365][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 28.675784][ T31] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 28.684118][ T31] usb 1-1: config 0 has no interface number 0 [ 28.690300][ T31] usb 1-1: config 0 interface 184 has no altsetting 0 [ 28.698690][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 28.707811][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.715931][ T31] usb 1-1: Product: syz [ 28.720165][ T31] usb 1-1: Manufacturer: syz [ 28.724974][ T31] usb 1-1: SerialNumber: syz [ 28.732144][ T31] usb 1-1: config 0 descriptor?? [ 28.739945][ T31] smsc75xx v1.0.0 [ 28.744376][ T515] rust_binder: Error in use_page_slow: ESRCH [ 28.744390][ T515] rust_binder: use_range failure ESRCH [ 28.750831][ T515] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 28.756405][ T515] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 28.764389][ T515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:4 [ 28.905973][ T522] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 29.044994][ T9] rust_binder: 520: removing orphan mapping 0:112 [ 29.051879][ T9] rust_binder: 0: removing orphan mapping 112:1048 [ 29.315931][ T550] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 29.341910][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 29.352960][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 29.451095][ T563] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.475569][ T565] syz.3.70 uses obsolete (PF_INET,SOCK_PACKET) [ 30.164487][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 30.178358][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 30.199189][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 30.219665][ T31] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 30.411387][ T583] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.474552][ T594] capability: warning: `syz.2.79' uses 32-bit capabilities (legacy support in use) [ 30.729240][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.879185][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 30.879191][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 30.892895][ T31] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 30.901122][ T31] usb 2-1: config 0 has no interface number 0 [ 30.907339][ T31] usb 2-1: config 0 interface 184 has no altsetting 0 [ 30.915781][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 30.924960][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.933025][ T31] usb 2-1: Product: syz [ 30.937223][ T31] usb 2-1: Manufacturer: syz [ 30.941837][ T31] usb 2-1: SerialNumber: syz [ 30.946990][ T31] usb 2-1: config 0 descriptor?? [ 30.952766][ T31] smsc75xx v1.0.0 [ 31.039174][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 31.045505][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.056735][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.066540][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 31.075904][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.084610][ T9] usb 4-1: config 0 descriptor?? [ 31.092346][ T9] hub 4-1:0.0: USB hub found [ 31.158346][ T597] veth1: entered allmulticast mode [ 31.292330][ T9] hub 4-1:0.0: 1 port detected [ 31.564739][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 31.575591][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 31.629192][ T463] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 31.780246][ T463] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 31.789824][ T463] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.798524][ T463] usb 3-1: config 0 descriptor?? [ 31.901808][ T330] usb 4-1: USB disconnect, device number 6 [ 31.908310][ T9] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 32.086133][ T510] usb 1-1: USB disconnect, device number 4 [ 32.160886][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 32.160902][ T36] audit: type=1400 audit(1753941919.590:213): avc: denied { setopt } for pid=613 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 32.219367][ T463] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 32.229557][ T463] asix 3-1:0.0: probe with driver asix failed with error -71 [ 32.237816][ T463] usb 3-1: USB disconnect, device number 2 [ 32.390850][ T36] audit: type=1400 audit(1753941919.820:214): avc: denied { ioctl } for pid=596 comm="syz.1.80" path="socket:[5488]" dev="sockfs" ino=5488 ioctlcmd=0x48e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.409620][ T597] rust_binder: Failed to allocate buffer. len:1152, is_oneway:true [ 32.417475][ T596] veth1: left allmulticast mode [ 32.433086][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 32.444436][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 32.456993][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 32.458142][ T36] audit: type=1400 audit(1753941919.890:215): avc: denied { accept } for pid=628 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 32.466766][ T31] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 32.502264][ T31] usb 2-1: USB disconnect, device number 3 [ 32.509181][ T510] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 32.567348][ T636] 9pnet_fd: Insufficient options for proto=fd [ 32.593610][ T36] audit: type=1400 audit(1753941920.020:216): avc: denied { map } for pid=637 comm="syz.3.94" path="socket:[5560]" dev="sockfs" ino=5560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.618527][ T36] audit: type=1400 audit(1753941920.020:217): avc: denied { read } for pid=637 comm="syz.3.94" path="socket:[5560]" dev="sockfs" ino=5560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.653888][ T36] audit: type=1400 audit(1753941920.080:218): avc: denied { read } for pid=643 comm="syz.3.95" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.674104][ T510] usb 1-1: Using ep0 maxpacket: 16 [ 32.680420][ T510] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 32.689404][ T510] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.699772][ T510] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.709811][ T645] netlink: 'syz.3.95': attribute type 3 has an invalid length. [ 32.717612][ T645] netlink: 944 bytes leftover after parsing attributes in process `syz.3.95'. [ 32.726978][ T510] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 32.736099][ T510] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.737604][ T36] audit: type=1400 audit(1753941920.160:219): avc: denied { bind } for pid=643 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 32.744261][ T510] usb 1-1: Product: syz [ 32.768698][ T510] usb 1-1: Manufacturer: syz [ 32.786653][ T510] usb 1-1: SerialNumber: syz [ 32.982562][ T648] tipc: Started in network mode [ 32.987469][ T648] tipc: Node identity 2af37889665d, cluster identity 4711 [ 32.994836][ T648] tipc: Enabled bearer , priority 0 [ 33.007429][ T649] tipc: Disabling bearer [ 33.027877][ T36] audit: type=1400 audit(1753941920.450:220): avc: denied { connect } for pid=618 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.066312][ T36] audit: type=1400 audit(1753941920.490:221): avc: denied { mounton } for pid=651 comm="syz.2.97" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.105352][ T36] audit: type=1400 audit(1753941920.530:222): avc: denied { setopt } for pid=658 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.109638][ T510] usb 1-1: 0:2 : does not exist [ 33.127070][ T659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.131860][ T659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:108 [ 33.139140][ T510] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 33.146370][ T659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'. [ 33.156167][ T661] capability: warning: `syz.1.100' uses deprecated v2 capabilities in a way that may be insecure [ 33.189269][ T510] usb 1-1: USB disconnect, device number 5 [ 33.231314][ T676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.231341][ T676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.540971][ T696] overlayfs: upper fs does not support tmpfile. [ 33.555567][ T696] overlayfs: upper fs does not support tmpfile. [ 33.570973][ T692] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 33.578187][ T692] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 33.578209][ T692] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 33.586188][ T692] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 33.600105][ T463] rust_binder: 691: removing orphan mapping 0:1024 [ 33.652627][ T708] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 33.693845][ T716] vcan0: entered allmulticast mode [ 33.799187][ T9] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 33.915700][ T734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.119'. [ 33.939177][ T9] usb 4-1: device descriptor read/64, error -71 [ 33.949609][ T734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.119'. [ 33.958875][ T736] rust_binder: inc_ref_done called when no active inc_refs [ 34.050077][ T745] rust_binder: 65: no such ref 0 [ 34.189156][ T9] usb 4-1: device descriptor read/64, error -71 [ 34.229154][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 34.349019][ T747] binder: Bad value for 'stats' [ 34.389199][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 34.395707][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.407238][ T45] usb 3-1: config 0 interface 0 altsetting 182 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 34.420671][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 34.427408][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 34.429392][ T9] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 34.436956][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.456297][ T45] usb 3-1: config 0 descriptor?? [ 34.464696][ T45] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 34.579180][ T9] usb 4-1: device descriptor read/64, error -71 [ 34.629182][ T463] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 34.779169][ T463] usb 2-1: device descriptor read/64, error -71 [ 34.819236][ T9] usb 4-1: device descriptor read/64, error -71 [ 34.929306][ T9] usb usb4-port1: attempt power cycle [ 34.936137][ T753] overlayfs: workdir and upperdir must be separate subtrees [ 35.017458][ T762] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 35.019167][ T463] usb 2-1: device descriptor read/64, error -71 [ 35.269179][ T9] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 35.289230][ T463] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 35.302267][ T9] usb 4-1: device descriptor read/8, error -71 [ 35.320864][ T775] loop8: detected capacity change from 0 to 79 [ 35.349575][ T775] loop8: detected capacity change from 79 to 78 [ 35.370487][ T776] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 35.429256][ T463] usb 2-1: device descriptor read/64, error -71 [ 35.449294][ T9] usb 4-1: device descriptor read/8, error -71 [ 35.689189][ T9] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 35.696865][ T463] usb 2-1: device descriptor read/64, error -71 [ 35.719908][ T795] rust_binder: 111: no such ref 0 [ 35.725209][ T9] usb 4-1: device descriptor read/8, error -71 [ 35.809272][ T463] usb usb2-port1: attempt power cycle [ 35.854951][ T803] overlay: Unknown parameter './file1' [ 35.860215][ T9] usb 4-1: device descriptor read/8, error -71 [ 35.883259][ T807] devpts: called with bogus options [ 35.892543][ T807] Bluetooth: hci0: Frame reassembly failed (-84) [ 35.899168][ T807] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 35.900439][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 35.969258][ T9] usb usb4-port1: unable to enumerate USB device [ 36.149183][ T463] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 36.170393][ T463] usb 2-1: device descriptor read/8, error -71 [ 36.300361][ T463] usb 2-1: device descriptor read/8, error -71 [ 36.539171][ T463] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 36.560358][ T463] usb 2-1: device descriptor read/8, error -71 [ 36.583186][ T811] netlink: 152 bytes leftover after parsing attributes in process `syz.3.142'. [ 36.690289][ T463] usb 2-1: device descriptor read/8, error -71 [ 36.799346][ T463] usb usb2-port1: unable to enumerate USB device [ 36.994980][ T463] usb 3-1: USB disconnect, device number 3 [ 37.016400][ T815] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 37.016423][ T815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:152 [ 37.334183][ T826] binder: Bad value for 'max' [ 37.377925][ T838] netlink: 'syz.2.149': attribute type 4 has an invalid length. [ 37.389249][ T838] netlink: 'syz.2.149': attribute type 4 has an invalid length. [ 37.403585][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 37.403599][ T36] audit: type=1400 audit(1753941924.830:260): avc: denied { append } for pid=837 comm="syz.2.149" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 37.567982][ T855] rust_binder: Error while translating object. [ 37.568019][ T855] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 37.574272][ T855] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:114 [ 37.583874][ T851] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.616050][ T36] audit: type=1400 audit(1753941925.040:261): avc: denied { map } for pid=852 comm="syz.1.155" path="/proc/57/task/59/loginuid" dev="proc" ino=8301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 37.647102][ T36] audit: type=1400 audit(1753941925.040:262): avc: denied { execute } for pid=852 comm="syz.1.155" path="/proc/57/task/59/loginuid" dev="proc" ino=8301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 37.699208][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 37.728867][ T10] rust_binder: 866: removing orphan mapping 0:1048 [ 37.766613][ T875] FAT-fs (rnullb0): bogus number of reserved sectors [ 37.773399][ T875] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 37.859231][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 37.869374][ T9] usb 3-1: config 1 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.873967][ T878] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.879355][ T62] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 37.883500][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 37.888867][ T878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:74 [ 37.898114][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0100, bcdDevice= 0.40 [ 37.921444][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.929701][ T9] usb 3-1: Product: syz [ 37.934951][ T9] usb 3-1: Manufacturer: syz [ 37.940245][ T9] usb 3-1: SerialNumber: syz [ 37.945334][ T36] audit: type=1400 audit(1753941925.370:263): avc: denied { write } for pid=879 comm="syz.1.162" name="file2" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 37.969766][ T808] Bluetooth: hci0: command 0x1003 tx timeout [ 37.972709][ T36] audit: type=1400 audit(1753941925.370:264): avc: denied { open } for pid=879 comm="syz.1.162" path="/23/file2" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 37.976465][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.011413][ T36] audit: type=1400 audit(1753941925.370:265): avc: denied { ioctl } for pid=879 comm="syz.1.162" path="/23/file2" dev="tmpfs" ino=142 ioctlcmd=0x1274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.035869][ T36] audit: type=1400 audit(1753941925.440:266): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 38.073240][ T36] audit: type=1400 audit(1753941925.500:267): avc: denied { read } for pid=883 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.103466][ T62] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.119299][ T62] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.139294][ T62] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 38.148467][ T62] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.157408][ T62] usb 4-1: config 0 descriptor?? [ 38.177113][ T842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.194078][ T842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.211526][ T9] usbhid 3-1:1.0: can't add hid device: -71 [ 38.217621][ T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 38.232125][ T892] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 38.241451][ T9] usb 3-1: USB disconnect, device number 4 [ 38.335241][ T36] audit: type=1400 audit(1753941925.760:268): avc: denied { ioctl } for pid=898 comm="syz.2.167" path="socket:[7344]" dev="sockfs" ino=7344 ioctlcmd=0x942d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.379253][ T899] binder: Bad value for 'defcontext' [ 38.458388][ T901] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.458722][ T901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:191 [ 38.467536][ T882] fuse: Bad value for 'group_id' [ 38.498338][ T882] fuse: Bad value for 'group_id' [ 38.551074][ T882] rust_binder: Failed copying remainder into alloc: EFAULT [ 38.551117][ T882] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 38.558603][ T882] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 38.567261][ T882] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:78 [ 38.601304][ T36] audit: type=1400 audit(1753941926.030:269): avc: denied { read } for pid=906 comm="syz.1.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.899992][ T911] netlink: 32 bytes leftover after parsing attributes in process `syz.0.172'. [ 39.014297][ T924] netlink: 165 bytes leftover after parsing attributes in process `syz.0.175'. [ 39.023864][ T924] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 39.111578][ T931] process 'syz.0.177' launched '/dev/fd/5' with NULL argv: empty string added [ 39.291256][ T62] usbhid 4-1:0.0: can't add hid device: -71 [ 39.299158][ T62] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 39.308001][ T62] usb 4-1: USB disconnect, device number 11 [ 39.325198][ T958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 39.523714][ T973] __vm_enough_memory: pid: 973, comm: syz.3.190, bytes: 18014402804453376 not enough memory for the allocation [ 39.599157][ T463] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.770171][ T463] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 39.782708][ T463] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.793498][ T463] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 39.814768][ T463] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 39.825964][ T463] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.837840][ T463] usb 3-1: config 0 descriptor?? [ 39.845381][ T463] usb-storage 3-1:0.0: USB Mass Storage device detected [ 39.863133][ T463] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 39.888751][ T983] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.893027][ T980] rust_binder: Error in use_page_slow: ESRCH [ 39.899834][ T980] rust_binder: use_range failure ESRCH [ 39.905843][ T980] rust_binder: Failed to allocate buffer. len:4184, is_oneway:false [ 39.911474][ T980] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 39.919609][ T980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:158 [ 40.096172][ T963] kvm: pic: non byte write [ 40.096481][ T994] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=36 [ 40.110306][ T994] rust_binder: Error while translating object. [ 40.111028][ T963] binder: Unknown parameter 'defcontext01777777777777777777777' [ 40.119076][ T994] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.143164][ T994] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:152 [ 40.167258][ T1000] rust_binder: 100: no such ref 3 [ 40.230955][ T510] usb 3-1: USB disconnect, device number 5 [ 40.449202][ T62] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 40.539181][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 40.600345][ T62] usb 4-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.613375][ T62] usb 4-1: config 1 interface 0 has no altsetting 0 [ 40.621697][ T62] usb 4-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.40 [ 40.630801][ T62] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.638792][ T62] usb 4-1: Product: Ⰱ [ 40.642996][ T62] usb 4-1: Manufacturer: 삇ắ㬦瑵곲坏腲넖鶨법ഀ둠錼뫟酱䋟㼺鑊銧皘羆醯ᬨ苛뤕䱁ᘽ൩⫥㢕䝑 [ 40.655962][ T62] usb 4-1: SerialNumber: 䐊 [ 40.699152][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 40.705507][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.716584][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.725711][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 40.734112][ T31] usb 1-1: SerialNumber: syz [ 40.741023][ T31] hub 1-1:1.0: bad descriptor, ignoring hub [ 40.748922][ T31] hub 1-1:1.0: probe with driver hub failed with error -5 [ 40.751851][ T1013] FAULT_INJECTION: forcing a failure. [ 40.751851][ T1013] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.770098][ T1013] CPU: 0 UID: 0 PID: 1013 Comm: syz.2.203 Not tainted 6.12.38-syzkaller-gcab1c944469e #0 734e319b388da58a33232d9455bc96d2bb27a3d9 [ 40.770124][ T1013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 40.770141][ T1013] Call Trace: [ 40.770146][ T1013] [ 40.770152][ T1013] __dump_stack+0x21/0x30 [ 40.770177][ T1013] dump_stack_lvl+0x10c/0x190 [ 40.770195][ T1013] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.770217][ T1013] dump_stack+0x19/0x20 [ 40.770234][ T1013] should_fail_ex+0x3d9/0x530 [ 40.770255][ T1013] should_fail+0xf/0x20 [ 40.770273][ T1013] should_fail_usercopy+0x1e/0x30 [ 40.770294][ T1013] _copy_from_user+0x22/0xb0 [ 40.770308][ T1013] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x491/0xa290 [ 40.770343][ T1013] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 40.770391][ T1013] ? unwind_next_frame+0x3c2/0x750 [ 40.770408][ T1013] ? path_openat+0x2b6c/0x34b0 [ 40.770424][ T1013] ? path_openat+0x2b6c/0x34b0 [ 40.770440][ T1013] ? __kernel_text_address+0x11/0x40 [ 40.770457][ T1013] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 40.770480][ T1013] ? arch_stack_walk+0x12d/0x170 [ 40.770502][ T1013] ? path_openat+0x2b6c/0x34b0 [ 40.770519][ T1013] ? stack_depot_save_flags+0x38/0x800 [ 40.770540][ T1013] ? stack_depot_save+0x12/0x20 [ 40.770565][ T1013] ? save_stack+0x11c/0x1f0 [ 40.770580][ T1013] ? free_contig_range+0x270/0x270 [ 40.770600][ T1013] ? __reset_page_owner+0x450/0x450 [ 40.770617][ T1013] ? post_alloc_hook+0x3b9/0x3f0 [ 40.770632][ T1013] ? prep_new_page+0x1c/0x120 [ 40.770646][ T1013] ? get_page_from_freelist+0x46bb/0x4750 [ 40.770664][ T1013] ? __alloc_pages_noprof+0x30d/0x6c0 [ 40.770680][ T1013] ? get_free_pages_noprof+0x14/0x40 [ 40.770697][ T1013] ? selinux_genfs_get_sid+0x63/0x2d0 [ 40.770724][ T1013] ? is_bpf_text_address+0x17b/0x1a0 [ 40.770741][ T1013] ? kernel_text_address+0xa9/0xe0 [ 40.770769][ T1013] ? is_bpf_text_address+0x17b/0x1a0 [ 40.770784][ T1013] ? kernel_text_address+0xa9/0xe0 [ 40.770801][ T1013] ? __kernel_text_address+0x11/0x40 [ 40.770817][ T1013] ? unwind_get_return_address+0x51/0x90 [ 40.770833][ T1013] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 40.770853][ T1013] ? arch_stack_walk+0x10b/0x170 [ 40.770879][ T1013] ? is_bpf_text_address+0x17b/0x1a0 [ 40.770894][ T1013] ? kernel_text_address+0xa9/0xe0 [ 40.770912][ T1013] ? __kernel_text_address+0x11/0x40 [ 40.770927][ T1013] ? unwind_get_return_address+0x51/0x90 [ 40.770943][ T1013] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 40.770964][ T1013] ? arch_stack_walk+0x10b/0x170 [ 40.770985][ T1013] ? __kasan_check_write+0x18/0x20 [ 40.771005][ T1013] ? _raw_spin_lock+0x8c/0x120 [ 40.771024][ T1013] ? __cfi__raw_spin_lock+0x10/0x10 [ 40.771042][ T1013] ? stack_depot_save_flags+0x38/0x800 [ 40.771063][ T1013] ? _raw_spin_unlock+0x45/0x60 [ 40.771081][ T1013] ? rust_helper_spin_unlock+0x19/0x30 [ 40.771101][ T1013] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 40.771134][ T1013] ? __kasan_slab_alloc+0x73/0x90 [ 40.771159][ T1013] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 40.771179][ T1013] ? security_inode_alloc+0x51/0x200 [ 40.771200][ T1013] ? inode_init_always_gfp+0x756/0x9e0 [ 40.771223][ T1013] ? proc_pid_make_inode+0x25/0x140 [ 40.771245][ T1013] ? proc_pident_instantiate+0x6d/0x2c0 [ 40.771267][ T1013] ? proc_tid_base_lookup+0x2f/0x40 [ 40.771287][ T1013] ? do_filp_open+0x1c6/0x3e0 [ 40.771302][ T1013] ? do_sys_openat2+0x12c/0x1c0 [ 40.771319][ T1013] ? __x64_sys_openat+0x13a/0x170 [ 40.771336][ T1013] ? x64_sys_call+0xe69/0x2ee0 [ 40.771356][ T1013] ? do_syscall_64+0x58/0xf0 [ 40.771374][ T1013] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.771397][ T1013] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 40.771428][ T1013] ? avc_has_perm_noaudit+0x268/0x360 [ 40.771446][ T1013] ? __asan_memcpy+0x5a/0x80 [ 40.771465][ T1013] ? avc_has_perm_noaudit+0x286/0x360 [ 40.771484][ T1013] ? avc_has_perm+0x144/0x220 [ 40.771501][ T1013] ? __cfi_avc_has_perm+0x10/0x10 [ 40.771520][ T1013] ? selinux_file_open+0x457/0x610 [ 40.771537][ T1013] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0 [ 40.771568][ T1013] ? avc_has_extended_perms+0x7c7/0xdd0 [ 40.771586][ T1013] ? __asan_memcpy+0x5a/0x80 [ 40.771604][ T1013] ? avc_has_extended_perms+0x921/0xdd0 [ 40.771623][ T1013] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 40.771652][ T1013] ? do_vfs_ioctl+0xeda/0x1e30 [ 40.771666][ T1013] ? arch_stack_walk+0x10b/0x170 [ 40.771687][ T1013] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 40.771704][ T1013] ? _parse_integer+0x2e/0x40 [ 40.771725][ T1013] ? ioctl_has_perm+0x384/0x4d0 [ 40.771740][ T1013] ? has_cap_mac_admin+0xd0/0xd0 [ 40.771762][ T1013] ? proc_fail_nth_write+0x17e/0x210 [ 40.771780][ T1013] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 40.771798][ T1013] ? selinux_file_ioctl+0x6e0/0x1360 [ 40.771814][ T1013] ? vfs_write+0x8ba/0xe80 [ 40.771833][ T1013] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 40.771849][ T1013] ? __cfi_vfs_write+0x10/0x10 [ 40.771869][ T1013] ? __kasan_check_write+0x18/0x20 [ 40.771887][ T1013] ? mutex_unlock+0x8b/0x240 [ 40.771909][ T1013] ? __cfi_mutex_unlock+0x10/0x10 [ 40.771929][ T1013] ? __fget_files+0x2c5/0x340 [ 40.771969][ T1013] ? __fget_files+0x2c5/0x340 [ 40.771992][ T1013] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 40.772014][ T1013] ? __se_sys_ioctl+0x114/0x1b0 [ 40.772028][ T1013] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 40.772049][ T1013] __se_sys_ioctl+0x132/0x1b0 [ 40.772063][ T1013] __x64_sys_ioctl+0x7f/0xa0 [ 40.772079][ T1013] x64_sys_call+0x1878/0x2ee0 [ 40.772099][ T1013] do_syscall_64+0x58/0xf0 [ 40.772117][ T1013] ? clear_bhb_loop+0x50/0xa0 [ 40.772139][ T1013] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.772160][ T1013] RIP: 0033:0x7fb76f58e9a9 [ 40.772183][ T1013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.772196][ T1013] RSP: 002b:00007fb770407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 40.772222][ T1013] RAX: ffffffffffffffda RBX: 00007fb76f7b5fa0 RCX: 00007fb76f58e9a9 [ 40.772234][ T1013] RDX: 0000200000000540 RSI: 00000000c0306201 RDI: 0000000000000004 [ 40.772245][ T1013] RBP: 00007fb770407090 R08: 0000000000000000 R09: 0000000000000000 [ 40.772256][ T1013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.772266][ T1013] R13: 0000000000000000 R14: 00007fb76f7b5fa0 R15: 00007fff671731e8 [ 40.772279][ T1013] [ 40.785121][ T1015] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 41.209170][ T463] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 41.232028][ T62] usbhid 4-1:1.0: can't add hid device: -71 [ 41.279499][ T463] usb 1-1: device reset changed ep0 maxpacket size! [ 41.319182][ T62] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 41.354136][ T463] usb 1-1: USB disconnect, device number 6 [ 41.390395][ T62] usb 4-1: USB disconnect, device number 12 [ 41.488795][ T1018] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 41.501424][ T1020] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 41.576004][ T1029] loop8: detected capacity change from 0 to 79 [ 41.600505][ T1029] loop8: detected capacity change from 79 to 78 [ 41.759177][ T463] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 41.879160][ T435] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 41.909145][ T463] usb 1-1: Using ep0 maxpacket: 8 [ 41.915878][ T463] usb 1-1: unable to get BOS descriptor or descriptor too short [ 41.924981][ T463] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 41.936654][ T463] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 41.946770][ T463] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 41.959241][ T463] usb 1-1: string descriptor 0 read error: -22 [ 41.965530][ T463] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.974980][ T463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.012528][ T1036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.211'. [ 42.030451][ T435] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.042289][ T435] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.00 [ 42.051931][ T435] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.071406][ T435] usb 2-1: config 0 descriptor?? [ 42.187217][ T463] cdc_ncm 1-1:1.0: bind() failure [ 42.196209][ T463] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 42.209133][ T463] cdc_ncm 1-1:1.1: bind() failure [ 42.222426][ T463] usb 1-1: USB disconnect, device number 7 [ 42.305846][ T1040] FAULT_INJECTION: forcing a failure. [ 42.305846][ T1040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.319151][ T1040] CPU: 0 UID: 0 PID: 1040 Comm: syz.3.213 Not tainted 6.12.38-syzkaller-gcab1c944469e #0 734e319b388da58a33232d9455bc96d2bb27a3d9 [ 42.319184][ T1040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 42.319196][ T1040] Call Trace: [ 42.319203][ T1040] [ 42.319210][ T1040] __dump_stack+0x21/0x30 [ 42.319242][ T1040] dump_stack_lvl+0x10c/0x190 [ 42.319263][ T1040] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.319286][ T1040] ? vsnprintf+0x7b4/0x1aa0 [ 42.319306][ T1040] ? __asan_memcpy+0x5a/0x80 [ 42.319331][ T1040] dump_stack+0x19/0x20 [ 42.319351][ T1040] should_fail_ex+0x3d9/0x530 [ 42.319374][ T1040] should_fail+0xf/0x20 [ 42.319393][ T1040] should_fail_usercopy+0x1e/0x30 [ 42.319414][ T1040] _copy_from_user+0x22/0xb0 [ 42.319431][ T1040] kstrtouint_from_user+0xc2/0x150 [ 42.319452][ T1040] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 42.319472][ T1040] ? selinux_file_permission+0x309/0xb30 [ 42.319493][ T1040] ? __cfi_selinux_file_permission+0x10/0x10 [ 42.319512][ T1040] proc_fail_nth_write+0x89/0x210 [ 42.319533][ T1040] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 42.319554][ T1040] ? bpf_lsm_file_permission+0xd/0x20 [ 42.319587][ T1040] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 42.319607][ T1040] vfs_write+0x3c3/0xe80 [ 42.319632][ T1040] ? __cfi_vfs_write+0x10/0x10 [ 42.319654][ T1040] ? __kasan_check_write+0x18/0x20 [ 42.319677][ T1040] ? mutex_lock+0x92/0x1c0 [ 42.319701][ T1040] ? __cfi_mutex_lock+0x10/0x10 [ 42.319726][ T1040] ? __fget_files+0x2c5/0x340 [ 42.319753][ T1040] ksys_write+0x141/0x250 [ 42.319775][ T1040] ? __cfi_ksys_write+0x10/0x10 [ 42.319797][ T1040] ? fdget+0x189/0x1f0 [ 42.319814][ T1040] ? __kasan_check_read+0x15/0x20 [ 42.319836][ T1040] __x64_sys_write+0x7f/0x90 [ 42.319860][ T1040] x64_sys_call+0x271c/0x2ee0 [ 42.319883][ T1040] do_syscall_64+0x58/0xf0 [ 42.319904][ T1040] ? clear_bhb_loop+0x50/0xa0 [ 42.319931][ T1040] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.319956][ T1040] RIP: 0033:0x7f0945d8d45f [ 42.319973][ T1040] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 42.319988][ T1040] RSP: 002b:00007f0946c05030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 42.320010][ T1040] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0945d8d45f [ 42.320024][ T1040] RDX: 0000000000000001 RSI: 00007f0946c050a0 RDI: 0000000000000003 [ 42.320036][ T1040] RBP: 00007f0946c05090 R08: 0000000000000000 R09: 0000000000000000 [ 42.320049][ T1040] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 42.320061][ T1040] R13: 0000000000000000 R14: 00007f0945fb5fa0 R15: 00007ffdd30d02e8 [ 42.320077][ T1040] [ 42.597875][ T435] wacom 0003:056A:00B9.0001: unknown main item tag 0x4 [ 42.605142][ T435] wacom 0003:056A:00B9.0001: Unknown device_type for 'HID 056a:00b9'. Assuming pen. [ 42.616348][ T435] wacom 0003:056A:00B9.0001: hidraw0: USB HID v0.00 Device [HID 056a:00b9] on usb-dummy_hcd.1-1/input0 [ 42.627940][ T435] input: Wacom Intuos4 6x9 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B9.0001/input/input5 [ 42.767153][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 42.767214][ T36] audit: type=1400 audit(1753941931.191:289): avc: denied { unmount } for pid=351 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 42.778681][ T1064] SELinux: security_context_str_to_sid (wnconfined_u) failed with errno=-22 [ 42.812208][ T1057] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1073741824 [ 42.820342][ T1057] rust_binder: 218: no such ref 1 [ 42.832667][ T36] audit: type=1400 audit(1753941931.261:290): avc: denied { lock } for pid=1030 comm="syz.1.209" path="socket:[9035]" dev="sockfs" ino=9035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 42.917165][ T36] audit: type=1326 audit(1753941931.341:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1067 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27d38e9a9 code=0x7ffc0000 [ 42.940627][ T36] audit: type=1326 audit(1753941931.341:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1067 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27d38e9a9 code=0x7ffc0000 [ 42.964180][ T36] audit: type=1326 audit(1753941931.341:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1067 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fb27d38e9a9 code=0x7ffc0000 [ 42.993378][ T1068] 9pnet_fd: Insufficient options for proto=fd [ 42.996699][ T36] audit: type=1326 audit(1753941931.411:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1067 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27d38e9a9 code=0x7ffc0000 [ 43.023142][ T36] audit: type=1326 audit(1753941931.411:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1067 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27d38e9a9 code=0x7ffc0000 [ 43.046592][ T36] audit: type=1326 audit(1753941931.411:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1067 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fb27d38e9a9 code=0x7ffc0000 [ 43.070331][ T463] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 43.077928][ T36] audit: type=1326 audit(1753941931.411:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1067 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27d38e9a9 code=0x7ffc0000 [ 43.102006][ T36] audit: type=1326 audit(1753941931.411:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1067 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb27d38e9a9 code=0x7ffc0000 [ 43.160544][ T1078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:180 [ 43.178522][ T1086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.178718][ T1087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188 [ 43.194654][ T1087] overlayfs: failed to resolve './file0': -2 [ 43.217654][ T1091] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 43.250198][ T463] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.260344][ T463] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.269167][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 43.277640][ T463] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 43.286767][ T463] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 43.295720][ T463] usb 4-1: SerialNumber: syz [ 43.321289][ T1097] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.420215][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.437834][ T31] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 43.446917][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.455611][ T31] usb 3-1: config 0 descriptor?? [ 43.501977][ T1064] netlink: 124 bytes leftover after parsing attributes in process `syz.3.220'. [ 43.517222][ T463] usb 4-1: USB disconnect, device number 13 [ 43.559195][ T1011] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 43.663458][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 43.670847][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 43.679539][ T31] usb 3-1: USB disconnect, device number 6 [ 43.709300][ T1011] usb 1-1: Using ep0 maxpacket: 32 [ 43.715669][ T1011] usb 1-1: config 30 has an invalid descriptor of length 99, skipping remainder of the config [ 43.726011][ T1011] usb 1-1: config 30 has 0 interfaces, different from the descriptor's value: 1 [ 43.735218][ T1011] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 43.744289][ T1011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.009284][ T1099] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 44.529244][ T463] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 44.633824][ T31] usb 2-1: USB disconnect, device number 8 [ 44.679183][ T463] usb 4-1: Using ep0 maxpacket: 32 [ 44.685844][ T463] usb 4-1: config 0 has an invalid interface number: 96 but max is 0 [ 44.694042][ T463] usb 4-1: config 0 has no interface number 0 [ 44.700209][ T463] usb 4-1: config 0 interface 96 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 44.711533][ T463] usb 4-1: config 0 interface 96 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 44.722833][ T463] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10ad, bcdDevice=b7.e9 [ 44.732029][ T463] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.740058][ T463] usb 4-1: Product: syz [ 44.744216][ T463] usb 4-1: Manufacturer: syz [ 44.748806][ T463] usb 4-1: SerialNumber: syz [ 44.754244][ T463] usb 4-1: config 0 descriptor?? [ 44.759859][ T1108] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 44.767071][ T1108] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 44.989217][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 44.993994][ T1108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.005946][ T1108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.102253][ T463] usb 4-1: USB disconnect, device number 14 [ 45.140229][ T31] usb 2-1: config 0 has an invalid interface number: 160 but max is 0 [ 45.148486][ T31] usb 2-1: config 0 has no interface number 0 [ 45.154884][ T31] usb 2-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 45.167177][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=8506, bcdDevice=9e.4e [ 45.176243][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.184264][ T31] usb 2-1: Product: syz [ 45.188433][ T31] usb 2-1: Manufacturer: syz [ 45.193050][ T31] usb 2-1: SerialNumber: syz [ 45.198215][ T31] usb 2-1: config 0 descriptor?? [ 45.221200][ T1120] kernel profiling enabled (shift: 5) [ 45.406383][ T31] usb 2-1: Found UVC 0.00 device syz (05ac:8506) [ 45.412848][ T31] usb 2-1: No valid video chain found. [ 45.419577][ T31] usb 2-1: USB disconnect, device number 9 [ 45.479197][ T62] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 45.629416][ T62] usb 3-1: Using ep0 maxpacket: 32 [ 45.635643][ T62] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.646904][ T62] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.656686][ T62] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 45.670015][ T62] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 45.679200][ T62] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.687963][ T62] usb 3-1: config 0 descriptor?? [ 45.859168][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 46.009169][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 46.016711][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 46.025261][ T10] usb 4-1: config 3 has an invalid interface number: 141 but max is 1 [ 46.033621][ T10] usb 4-1: config 3 has an invalid interface number: 246 but max is 1 [ 46.049138][ T10] usb 4-1: config 3 has no interface number 0 [ 46.055236][ T10] usb 4-1: config 3 has no interface number 1 [ 46.064936][ T10] usb 4-1: config 3 interface 141 has no altsetting 0 [ 46.071767][ T10] usb 4-1: config 3 interface 246 has no altsetting 0 [ 46.079927][ T10] usb 4-1: Dual-Role OTG device on HNP port [ 46.086031][ T10] usb 4-1: New USB device found, idVendor=0c12, idProduct=e207, bcdDevice=93.85 [ 46.095204][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.103261][ T10] usb 4-1: Product: syz [ 46.105316][ T62] usbhid 3-1:0.0: can't add hid device: -71 [ 46.107424][ T10] usb 4-1: Manufacturer: syz [ 46.107442][ T10] usb 4-1: SerialNumber: syz [ 46.116710][ T62] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 46.131879][ T62] usb 3-1: USB disconnect, device number 7 [ 46.189197][ T463] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 46.337575][ T10] usb 4-1: USB disconnect, device number 15 [ 46.339380][ T1011] usb 1-1: string descriptor 0 read error: -71 [ 46.344338][ T463] usb 2-1: Using ep0 maxpacket: 16 [ 46.359210][ T1011] usb 1-1: USB disconnect, device number 8 [ 46.369515][ T463] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 46.379056][ T463] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.387313][ T463] usb 2-1: Product: syz [ 46.391553][ T463] usb 2-1: Manufacturer: syz [ 46.396151][ T463] usb 2-1: SerialNumber: syz [ 46.403361][ T463] r8152-cfgselector 2-1: Unknown version 0x0000 [ 46.409662][ T463] r8152-cfgselector 2-1: config 0 descriptor?? [ 46.516692][ T1154] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.517242][ T1154] rust_binder: Error in use_page_slow: ESRCH [ 46.523896][ T1154] rust_binder: use_range failure ESRCH [ 46.530286][ T1154] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 46.535785][ T1154] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 46.543697][ T1154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:229 [ 46.560905][ T1157] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.570038][ T1158] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.576770][ T1157] rust_binder: Error in use_page_slow: ESRCH [ 46.583520][ T1157] rust_binder: use_range failure ESRCH [ 46.589550][ T1157] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 46.595566][ T1157] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 46.603455][ T1157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:232 [ 46.619967][ T463] r8152-cfgselector 2-1: Unknown version 0x0c40 [ 46.622936][ T1160] tmpfs: Unknown parameter ':;2SHDOkQ:ۘMck?3\7o+Y;W` zCU\v"I]:sUBr?ISY,8' [ 46.629339][ T463] r8152-cfgselector 2-1: bad CDC descriptors [ 46.637767][ T1160] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.658414][ T1160] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 46.684642][ T1165] fuse: Unknown parameter 'd' [ 46.757772][ T1167] rust_binder: Error while translating object. [ 46.757798][ T1167] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.764115][ T1167] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 46.773572][ T1167] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:236 [ 46.788842][ T463] rust_binder: 1166: removing orphan mapping 0:1048 [ 47.029190][ T31] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 47.159164][ T463] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 47.180216][ T31] usb 3-1: No LPM exit latency info found, disabling LPM. [ 47.188170][ T31] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 24, setting to 8 [ 47.199046][ T31] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x82 is Bulk; changing to Interrupt [ 47.209019][ T31] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x3 is Bulk; changing to Interrupt [ 47.218887][ T31] usb 3-1: config 1 interface 0 has no altsetting 0 [ 47.227873][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.237055][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.245099][ T31] usb 3-1: Product: й [ 47.249193][ T31] usb 3-1: Manufacturer: 討䊶⾭ꭝꚇ䏹拥뭻钼鎍썆΁ހꃖ볖正䣪䔺ꑆᡱ긊ᪧ廵ힸᄅ淩ᳳ䞎槂襾窱書圙횂Ⴤ㌴⩓鳃떍釤ぴ౓확虅徻ᗯ뾷خ﷞Ǫ⏒펴荟엲澴監䉲坡䗳뾶䂧ꥐ띺⌋쟩뗰큏愝咈⿵뤕㆘퇚㓟⣢閠뗐喙儲넃삙炏뙏ꚇ⩻姵䕄汰偡î翎⯃ゟ벤㘮樑닜ꔙ膢￡슟蛤萰睬礱 [ 47.282828][ T31] usb 3-1: SerialNumber: Ⰹ [ 47.288225][ T1171] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 47.295480][ T1171] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 47.302699][ T1171] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 47.319192][ T463] usb 4-1: Using ep0 maxpacket: 16 [ 47.325517][ T463] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.335810][ T463] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.346206][ T463] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 47.355364][ T463] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.363426][ T463] usb 4-1: Product: syz [ 47.367585][ T463] usb 4-1: Manufacturer: syz [ 47.372185][ T463] usb 4-1: SerialNumber: syz [ 47.494050][ T1185] overlay: filesystem on ./bus is read-only [ 47.553681][ T1190] 9pnet_fd: Insufficient options for proto=fd [ 47.584152][ T1175] overlay: ./file0 is not a directory [ 47.671076][ T463] usb 4-1: 0:2 : does not exist [ 47.678604][ T463] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 47.691519][ T463] usb 4-1: USB disconnect, device number 16 [ 47.702305][ T419] udevd[419]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.712500][ T31] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 47.731934][ T31] usb 3-1: USB disconnect, device number 8 [ 48.199710][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 48.199728][ T36] audit: type=1400 audit(1753941936.631:329): avc: denied { bind } for pid=1196 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.227250][ T1197] tipc: Started in network mode [ 48.232283][ T1197] tipc: Node identity 7e48605d3c57, cluster identity 4711 [ 48.239552][ T1197] tipc: Enabled bearer , priority 0 [ 48.246675][ T1197] tipc: Resetting bearer [ 48.257359][ T1197] tipc: Disabling bearer [ 48.490192][ T1234] 9pnet_fd: Insufficient options for proto=fd [ 48.520367][ T1240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.528905][ T1240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.686953][ T376] Bluetooth: hci0: Frame reassembly failed (-84) [ 48.693384][ T376] Bluetooth: hci0: Frame reassembly failed (-84) [ 48.737758][ T36] audit: type=1400 audit(1753941937.161:330): avc: denied { create } for pid=1247 comm="syz.3.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 48.759156][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 48.919200][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 48.932148][ T463] r8152-cfgselector 2-1: USB disconnect, device number 10 [ 48.942675][ T1251] /dev/rnullb0: Can't open blockdev [ 48.948857][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 48.968045][ T10] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.40 [ 48.977301][ T1256] rust_binder: Write failure EFAULT in pid:125 [ 48.981755][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.012645][ T10] usb 1-1: Product: syz [ 49.016912][ T10] usb 1-1: Manufacturer: Я [ 49.021898][ T10] usb 1-1: SerialNumber: syz [ 49.026806][ T1261] netlink: 'syz.2.282': attribute type 6 has an invalid length. [ 49.049380][ T1261] netlink: 6016 bytes leftover after parsing attributes in process `syz.2.282'. [ 49.299415][ T1270] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 49.361263][ T1272] rust_binder: Write failure EFAULT in pid:255 [ 49.438521][ T1240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.453514][ T1241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.463176][ T1241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.472352][ T1240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.483151][ T10] usbhid 1-1:1.0: can't add hid device: -71 [ 49.499208][ T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 49.511482][ T10] usb 1-1: USB disconnect, device number 9 [ 50.015766][ T1276] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.066936][ T1277] rust_binder: Error in use_page_slow: ESRCH [ 50.073541][ T1277] rust_binder: use_range failure ESRCH [ 50.079819][ T1277] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 50.085441][ T1277] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 50.093798][ T1277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:263 [ 50.104089][ T1277] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 50.121772][ T1277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:263 [ 50.246235][ T1011] rust_binder: 1284: removing orphan mapping 0:1048 [ 50.315339][ T1291] rust_binder: 270: no such ref 0 [ 50.340399][ T1293] input: syz0 as /devices/virtual/input/input8 [ 50.417092][ T1298] rust_binder: 277: no such ref 1 [ 50.422237][ T1298] rust_binder: Write failure EINVAL in pid:277 [ 50.422302][ T1298] futex_wake_op: syz.2.293 tries to shift op by 144; fix this program [ 50.437425][ T1298] rust_binder: Write failure EINVAL in pid:277 [ 50.749304][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 50.749389][ T808] Bluetooth: hci0: command 0x1003 tx timeout [ 50.768043][ T1248] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 50.851326][ T36] audit: type=1400 audit(1753941939.281:331): avc: denied { read } for pid=1313 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.950638][ T36] audit: type=1400 audit(1753941939.381:332): avc: denied { mount } for pid=1329 comm="syz.3.301" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 50.972977][ T36] audit: type=1400 audit(1753941939.381:333): avc: denied { remount } for pid=1329 comm="syz.3.301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 51.064285][ T36] audit: type=1400 audit(1753941939.491:334): avc: denied { unmount } for pid=351 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 51.099236][ T1334] random: crng reseeded on system resumption [ 51.117046][ T36] audit: type=1400 audit(1753941939.541:335): avc: denied { ioctl } for pid=1333 comm="syz.3.303" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 51.149998][ T36] audit: type=1400 audit(1753941939.581:336): avc: denied { write } for pid=1335 comm="syz.3.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.350997][ T1340] loop8: detected capacity change from 0 to 79 [ 51.409200][ T1011] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 51.489548][ T1344] loop8: detected capacity change from 79 to 78 [ 51.560514][ T1011] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 51.571694][ T1011] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.581474][ T1011] usb 4-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 51.590606][ T1011] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.599330][ T1011] usb 4-1: config 0 descriptor?? [ 51.667964][ T36] audit: type=1400 audit(1753941940.091:337): avc: denied { setopt } for pid=1349 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.689331][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 51.832394][ T1368] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 51.839673][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 51.845752][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.855862][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.866341][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 51.875728][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.883990][ T31] usb 1-1: Product: syz [ 51.888232][ T31] usb 1-1: Manufacturer: syz [ 51.893248][ T31] usb 1-1: SerialNumber: syz [ 51.911748][ T1371] netlink: 1072 bytes leftover after parsing attributes in process `syz.2.315'. [ 51.920942][ T1371] netlink: 280 bytes leftover after parsing attributes in process `syz.2.315'. [ 51.971099][ T1377] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 4294967295 [ 52.005534][ T1338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.014102][ T1338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.023075][ T1382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.032620][ T1382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.033316][ T1383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.049917][ T1383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.060105][ T1011] usbhid 4-1:0.0: can't add hid device: -71 [ 52.066222][ T1011] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 52.075005][ T1011] usb 4-1: USB disconnect, device number 17 [ 52.105293][ T31] usb 1-1: 0:2 : does not exist [ 52.112339][ T31] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 52.124004][ T31] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 52.133797][ T31] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 52.143568][ T31] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 52.152851][ T31] usb 1-1: USB disconnect, device number 10 [ 52.304918][ T36] audit: type=1400 audit(1753941940.731:338): avc: denied { read } for pid=1384 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.658114][ T1402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.660409][ T1402] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 52.663259][ T1404] bridge0: port 3(veth1_macvtap) entered blocking state [ 52.681856][ T1404] bridge0: port 3(veth1_macvtap) entered disabled state [ 52.688874][ T1404] veth1_macvtap: entered allmulticast mode [ 52.695354][ T1404] veth1_macvtap: left allmulticast mode [ 52.704355][ T1404] input: syz0 as /devices/virtual/input/input9 [ 52.775214][ T1413] input: syz0 as /devices/virtual/input/input10 [ 52.813554][ T1416] tipc: Enabled bearer , priority 0 [ 52.822678][ T1416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1416 comm=syz.3.328 [ 52.835905][ T1415] tipc: Resetting bearer [ 52.846234][ T1415] tipc: Disabling bearer [ 53.169185][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 53.217237][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 53.217324][ T36] audit: type=1400 audit(1753941941.641:343): avc: denied { ioctl } for pid=1422 comm="syz.1.331" path="socket:[10234]" dev="sockfs" ino=10234 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.259168][ T36] audit: type=1400 audit(1753941941.681:344): avc: denied { validate_trans } for pid=1422 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 53.331022][ T10] usb 4-1: config 101 has an invalid interface number: 118 but max is 0 [ 53.339465][ T10] usb 4-1: config 101 has an invalid descriptor of length 10, skipping remainder of the config [ 53.355037][ T10] usb 4-1: config 101 has no interface number 0 [ 53.362175][ T10] usb 4-1: config 101 interface 118 has no altsetting 0 [ 53.373067][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice=76.0c [ 53.382789][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.391129][ T10] usb 4-1: Product: syz [ 53.395450][ T10] usb 4-1: SerialNumber: syz [ 53.405585][ T1426] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 53.481884][ T1428] rust_binder: Write failure EINVAL in pid:145 [ 53.512955][ T36] audit: type=1400 audit(1753941941.941:345): avc: denied { append } for pid=1429 comm="syz.1.335" name="usbmon2" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 53.543473][ T1432] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 53.557901][ T36] audit: type=1400 audit(1753941941.971:346): avc: denied { ioctl } for pid=1429 comm="syz.1.335" path="/dev/usbmon2" dev="devtmpfs" ino=97 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 53.583491][ T1432] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 53.605643][ T1431] syzkaller0: entered promiscuous mode [ 53.611200][ T1431] syzkaller0: entered allmulticast mode [ 53.617876][ T1421] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 53.628013][ T36] audit: type=1400 audit(1753941942.051:347): avc: denied { relabelto } for pid=1420 comm="syz.3.330" name="cgroup" dev="tmpfs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 53.657464][ T36] audit: type=1400 audit(1753941942.081:348): avc: denied { associate } for pid=1420 comm="syz.3.330" name="cgroup" dev="tmpfs" ino=509 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 53.688507][ T10] usb 4-1: USB disconnect, device number 18 [ 53.696759][ T36] audit: type=1400 audit(1753941942.081:349): avc: denied { connect } for pid=1420 comm="syz.3.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 53.740011][ T1437] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.740451][ T1437] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:287 [ 53.999174][ T510] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 54.156364][ T36] audit: type=1400 audit(1753941942.581:350): avc: denied { unlink } for pid=351 comm="syz-executor" name="cgroup" dev="tmpfs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 54.161708][ T510] usb 1-1: Using ep0 maxpacket: 16 [ 54.191277][ T510] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.205111][ T510] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.215111][ T510] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 54.228165][ T510] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 54.237422][ T510] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.246850][ T510] usb 1-1: config 0 descriptor?? [ 54.270076][ T10] rust_binder: 1447: removing orphan mapping 0:1048 [ 54.284923][ T1452] bridge0: entered allmulticast mode [ 54.290594][ T1452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 54.299706][ T1452] bridge_slave_1: left allmulticast mode [ 54.305374][ T1452] bridge_slave_1: left promiscuous mode [ 54.311596][ T1452] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.319467][ T1452] bridge_slave_0: left allmulticast mode [ 54.325341][ T1452] bridge_slave_0: left promiscuous mode [ 54.331277][ T1452] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.340825][ T1452] bridge0 (unregistering): left allmulticast mode [ 54.420279][ T1453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.341'. [ 54.430155][ T1453] overlayfs: failed to resolve '': -2 [ 54.437066][ T1453] rust_binder: Error while translating object. [ 54.437091][ T1453] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 54.443561][ T1453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:336 [ 54.856254][ T510] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 54.872799][ T510] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 54.880032][ T510] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 54.887250][ T510] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 54.894497][ T510] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 54.901747][ T510] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 54.909162][ T510] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 54.918390][ T510] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 54.925739][ T510] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 54.932986][ T510] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 54.942709][ T510] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input11 [ 55.029034][ T510] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 55.110260][ T36] audit: type=1400 audit(1753941943.541:351): avc: denied { name_bind } for pid=1465 comm="syz.3.344" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 55.148023][ T36] audit: type=1400 audit(1753941943.561:352): avc: denied { setopt } for pid=1465 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.364834][ T510] usb 1-1: USB disconnect, device number 11 [ 55.412258][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.622332][ T1492] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 55.629702][ T1492] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 55.629732][ T1492] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 55.637520][ T1492] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 55.655728][ T330] rust_binder: 1491: removing orphan mapping 0:1024 [ 55.819986][ T1500] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 55.886261][ T1503] netlink: 72 bytes leftover after parsing attributes in process `syz.2.357'. [ 55.892943][ T1505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'. [ 56.077106][ T1524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.364'. [ 56.087151][ T1525] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 56.095210][ T1525] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 56.103750][ T1525] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 56.111929][ T1525] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 56.154312][ T1535] netlink: 56 bytes leftover after parsing attributes in process `syz.0.365'. [ 56.163601][ T1535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1535 comm=syz.0.365 [ 56.176407][ T1535] rust_binder: Write failure EINVAL in pid:308 [ 56.379154][ T330] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 56.540318][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.551439][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.562621][ T330] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 56.575567][ T330] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 56.584691][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.593359][ T330] usb 3-1: config 0 descriptor?? [ 56.621112][ T1537] kvm: emulating exchange as write [ 57.007323][ T330] usbhid 3-1:0.0: can't add hid device: -71 [ 57.022000][ T330] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 57.040306][ T330] usb 3-1: USB disconnect, device number 10 [ 57.288633][ T1543] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.296024][ T1543] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.303481][ T1543] bridge_slave_0: entered allmulticast mode [ 57.310219][ T1543] bridge_slave_0: entered promiscuous mode [ 57.317324][ T1543] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.324769][ T1543] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.332074][ T1543] bridge_slave_1: entered allmulticast mode [ 57.338597][ T1543] bridge_slave_1: entered promiscuous mode [ 57.400285][ T1543] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.407522][ T1543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.414863][ T1543] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.422176][ T1543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.441555][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.448917][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.458143][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.465205][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.469234][ T1312] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 57.491327][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.498384][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.526508][ T1543] veth0_vlan: entered promiscuous mode [ 57.535586][ T376] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.552864][ T1543] veth1_macvtap: entered promiscuous mode [ 57.743370][ T1566] mmap: syz.0.375 (1566) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.754381][ T1573] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 57.780793][ T330] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 57.956847][ T330] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 57.960516][ T1584] 9pnet_fd: Insufficient options for proto=fd [ 57.974719][ T330] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 57.977632][ T1584] fuse: Bad value for 'user_id' [ 57.990760][ T1584] fuse: Bad value for 'user_id' [ 57.999870][ T330] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice= 0.06 [ 58.008937][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 58.029861][ T330] usb 2-1: SerialNumber: syz [ 58.249717][ T1556] rust_binder: Error while translating object. [ 58.249778][ T1556] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.256013][ T1556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:155 [ 58.282160][ T330] usb 2-1: USB disconnect, device number 11 [ 58.672123][ T1591] netlink: 'syz.2.383': attribute type 28 has an invalid length. [ 58.795035][ T1600] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 58.852774][ T1607] binder: Bad value for 'defcontext' [ 58.865057][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 58.865074][ T36] audit: type=1400 audit(1753941947.291:370): avc: denied { read write } for pid=1608 comm="syz.1.390" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 58.896642][ T36] audit: type=1400 audit(1753941947.291:371): avc: denied { open } for pid=1608 comm="syz.1.390" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 58.920092][ T1611] syzkaller0: entered promiscuous mode [ 58.923469][ T36] audit: type=1400 audit(1753941947.321:372): avc: denied { ioctl } for pid=1608 comm="syz.1.390" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 58.926809][ T1611] syzkaller0: entered allmulticast mode [ 59.079216][ T510] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 59.180551][ T1625] FAT-fs (rnullb0): bogus number of reserved sectors [ 59.187503][ T1625] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 59.209173][ T510] usb 3-1: device descriptor read/64, error -71 [ 59.291141][ T1631] netlink: 332 bytes leftover after parsing attributes in process `syz.1.395'. [ 59.459221][ T510] usb 3-1: device descriptor read/64, error -71 [ 59.549153][ T1312] Bluetooth: hci0: command 0x1003 tx timeout [ 59.549156][ T809] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.709623][ T510] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 59.849660][ T510] usb 3-1: device descriptor read/64, error -71 [ 59.886358][ T1639] netlink: 'syz.1.396': attribute type 4 has an invalid length. [ 59.928407][ T1643] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:181 [ 60.019391][ T1647] input: syz1 as /devices/virtual/input/input12 [ 60.069189][ T463] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 60.089214][ T510] usb 3-1: device descriptor read/64, error -71 [ 60.199219][ T463] usb 4-1: device descriptor read/64, error -71 [ 60.199370][ T510] usb usb3-port1: attempt power cycle [ 60.449201][ T463] usb 4-1: device descriptor read/64, error -71 [ 60.539240][ T350] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 60.549214][ T510] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 60.570216][ T510] usb 3-1: device descriptor read/8, error -71 [ 60.689181][ T463] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 60.689181][ T350] usb 2-1: Using ep0 maxpacket: 32 [ 60.690308][ T350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.713012][ T350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.722919][ T350] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 60.735850][ T350] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 60.745018][ T350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.753428][ T510] usb 3-1: device descriptor read/8, error -71 [ 60.761188][ T350] usb 2-1: config 0 descriptor?? [ 60.829162][ T463] usb 4-1: device descriptor read/64, error -71 [ 60.999212][ T510] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 61.020507][ T510] usb 3-1: device descriptor read/8, error -71 [ 61.069228][ T463] usb 4-1: device descriptor read/64, error -71 [ 61.150180][ T510] usb 3-1: device descriptor read/8, error -71 [ 61.167379][ T1650] netlink: 'syz.1.403': attribute type 27 has an invalid length. [ 61.179417][ T463] usb usb4-port1: attempt power cycle [ 61.187766][ T350] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0003/input/input13 [ 61.200647][ T350] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0003/input/input14 [ 61.219228][ T350] kye 0003:0458:5011.0003: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 61.259312][ T510] usb usb3-port1: unable to enumerate USB device [ 61.380754][ T1650] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 61.390248][ T510] usb 2-1: USB disconnect, device number 12 [ 61.519218][ T463] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 61.540158][ T463] usb 4-1: device descriptor read/8, error -71 [ 61.670634][ T463] usb 4-1: device descriptor read/8, error -71 [ 61.850415][ T1659] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 1168, size: 18446744073709551585) [ 61.850441][ T1659] rust_binder: Error while translating object. [ 61.850580][ T1660] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.862834][ T1659] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.872646][ T1660] rust_binder: 33: no such ref 0 [ 61.875480][ T1659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:420 [ 61.886647][ T1660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:33 [ 61.909178][ T463] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 61.926896][ T1662] netlink: 'syz.1.407': attribute type 11 has an invalid length. [ 61.934915][ T1662] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.407'. [ 61.945173][ T463] usb 4-1: device descriptor read/8, error -71 [ 61.968633][ T1668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:422 [ 62.072657][ T1674] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:427 [ 62.080251][ T463] usb 4-1: device descriptor read/8, error -71 [ 62.098327][ T1674] rust_binder: Read failure Err(EFAULT) in pid:427 [ 62.108750][ T36] audit: type=1400 audit(1753941950.531:373): avc: denied { read } for pid=1675 comm="syz.2.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.159159][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 62.199283][ T463] usb usb4-port1: unable to enumerate USB device [ 62.209252][ T510] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 62.309218][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 62.315901][ T10] usb 1-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 62.326795][ T10] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 62.335981][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.345838][ T10] hub 1-1:32.0: bad descriptor, ignoring hub [ 62.349280][ T350] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 62.352038][ T10] hub 1-1:32.0: probe with driver hub failed with error -5 [ 62.379177][ T510] usb 2-1: Using ep0 maxpacket: 8 [ 62.385257][ T510] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 62.393540][ T510] usb 2-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 62.403819][ T510] usb 2-1: config 0 has no interface number 0 [ 62.410133][ T510] usb 2-1: config 0 interface 32 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 62.424766][ T510] usb 2-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=ca.55 [ 62.433937][ T510] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 62.442055][ T510] usb 2-1: Product: syz [ 62.446310][ T510] usb 2-1: Manufacturer: syz [ 62.450931][ T510] usb 2-1: SerialNumber: syz [ 62.456743][ T510] usb 2-1: config 0 descriptor?? [ 62.462504][ T510] gl620a 2-1:0.32: probe with driver gl620a failed with error -22 [ 62.499162][ T350] usb 3-1: device descriptor read/64, error -71 [ 62.548016][ T1664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.556570][ T1664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.669285][ T463] usb 1-1: USB disconnect, device number 12 [ 62.710723][ T463] usb 2-1: USB disconnect, device number 13 [ 62.739201][ T350] usb 3-1: device descriptor read/64, error -71 [ 62.896602][ T1678] 9pnet: Could not find request transport: f [ 62.979230][ T350] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 63.026309][ T36] audit: type=1400 audit(1753941951.451:374): avc: denied { map } for pid=1686 comm="syz.3.417" path="socket:[13637]" dev="sockfs" ino=13637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 63.110577][ T350] usb 3-1: device descriptor read/64, error -71 [ 63.288835][ T463] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.308749][ T463] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 63.329171][ T1011] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 63.359190][ T350] usb 3-1: device descriptor read/64, error -71 [ 63.381418][ T1714] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 63.390335][ T1714] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 63.399216][ T1714] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 63.413464][ T1714] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 63.451960][ T1717] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 63.464965][ T1717] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 63.464987][ T1717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:205 [ 63.479296][ T350] usb usb3-port1: attempt power cycle [ 63.510889][ T1011] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.522112][ T1011] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 63.531402][ T1011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.539986][ T1011] usb 1-1: config 0 descriptor?? [ 63.829206][ T350] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 63.850183][ T350] usb 3-1: device descriptor read/8, error -71 [ 63.947177][ T1011] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 63.956652][ T1011] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0005/input/input15 [ 63.980215][ T350] usb 3-1: device descriptor read/8, error -71 [ 64.042951][ T1011] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 64.206088][ T1727] bpf: Bad value for 'mode' [ 64.219248][ T350] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 64.232239][ T1732] rust_binder: 1725 RLIMIT_NICE not set [ 64.243440][ T463] rust_binder: 1724: removing orphan mapping 0:4248 [ 64.260684][ T36] audit: type=1400 audit(1753941952.691:375): avc: denied { read } for pid=1730 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 64.284908][ T350] usb 3-1: device descriptor read/8, error -71 [ 64.292900][ T36] audit: type=1400 audit(1753941952.721:376): avc: denied { read } for pid=1735 comm="syz.3.434" name="file0" dev="tmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.387362][ T1745] tipc: Trying to set illegal importance in message Stopping sshd: [ 64.429895][ T36] audit: type=1400 audit(1753941952.861:377): avc: denied { ioctl } for pid=1675 comm="syz.2.413" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.430775][ T350] usb 3-1: device descriptor read/8, error -71 stopped /usr/sbin/sshd (pid 201) OK [ 64.480725][ T1693] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 64.498590][ T36] audit: type=1400 audit(1753941952.921:378): avc: denied { read write } for pid=1750 comm="syz.3.437" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.523103][ T36] audit: type=1400 audit(1753941952.921:379): avc: denied { open } for pid=1750 comm="syz.3.437" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.547464][ T10] usb 1-1: USB disconnect, device number 13 [ 64.569469][ T350] usb usb3-port1: unable to enumerate USB device Stopping crond: stopped /usr/sbin/crond (pid 193) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 147) [ 64.644965][ T36] audit: type=1400 audit(1753941953.071:380): avc: denied { search } for pid=1759 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping network: [ 64.725695][ T36] audit: type=1400 audit(1753941953.151:381): avc: denied { write } for pid=148 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.749441][ T62] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 64.750312][ T36] audit: type=1400 audit(1753941953.151:382): avc: denied { remove_name } for pid=148 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.779342][ T36] audit: type=1400 audit(1753941953.151:383): avc: denied { unlink } for pid=148 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 64.810685][ T36] audit: type=1400 audit(1753941953.181:384): avc: denied { read write } for pid=1769 comm="ip" path="/dev/console" dev="rootfs" ino=42 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK Stopping iptables: OK Stopping system message bus: [ 64.919182][ T62] usb 4-1: Using ep0 maxpacket: 32 [ 64.925695][ T62] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 64.934075][ T62] usb 4-1: config 0 has no interface number 0 [ 64.940283][ T62] usb 4-1: config 0 interface 184 has no altsetting 0 done [ 64.949433][ T62] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 64.958649][ T62] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.966790][ T62] usb 4-1: Product: syz [ 64.971186][ T62] usb 4-1: Manufacturer: syz [ 64.975859][ T62] usb 4-1: SerialNumber: syz [ 64.984943][ T62] usb 4-1: config 0 descriptor?? [ 64.991608][ T62] smsc75xx v1.0.0 Stopping klogd: OK Stopping acpid: [ 65.230394][ T1797] tipc: Started in network mode [ 65.235403][ T1797] tipc: Node identity 42efd0562ea8, cluster identity 4711 [ 65.242681][ T1797] tipc: Enabled bearer , priority 0 [ 65.249953][ T1797] tipc: Resetting bearer [ 65.262297][ T1797] tipc: Disabling bearer [ 65.359221][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 65.419237][ T1814] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 65.419264][ T1814] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:443 [ 65.438028][ T1817] netlink: 'syz.2.448': attribute type 5 has an invalid length. [ 65.510158][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 65.516909][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.528797][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.538950][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 65.551805][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 65.561281][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.570402][ T10] usb 1-1: config 0 descriptor?? [ 65.593703][ T62] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 65.605095][ T62] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 65.669611][ T1829] binder: Binderfs stats mode cannot be changed during a remount [ 65.699659][ T1827] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 65.700105][ T1828] ------------[ cut here ]------------ [ 65.707122][ T1827] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 65.713181][ T1828] WARNING: CPU: 0 PID: 1828 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 65.713245][ T1827] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 65.721002][ T1828] Modules linked in: [ 65.721036][ T1828] CPU: 0 UID: 0 PID: 1828 Comm: syz.2.453 Not tainted 6.12.38-syzkaller-gcab1c944469e #0 734e319b388da58a33232d9455bc96d2bb27a3d9 [ 65.732645][ T1827] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 65.739747][ T1828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.777363][ T1828] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 65.783374][ T1828] Code: 00 48 8b 5d a0 74 08 48 89 df e8 e2 24 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 65.805411][ T1828] RSP: 0018:ffffc9000a72fc88 EFLAGS: 00010202 [ 65.811965][ T1828] RAX: 1ffffd1ffff85962 RBX: ffffc900083698e8 RCX: ffffffff816daf99 [ 65.821979][ T1828] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc2cb10 [ 65.830092][ T1828] RBP: ffffc9000a72fcf0 R08: ffffe8ffffc2cb17 R09: 1ffffd1ffff85962 [ 65.838168][ T1828] R10: dffffc0000000000 R11: fffff91ffff85963 R12: dffffc0000000000 [ 65.846287][ T1828] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc2cb10 [ 65.854320][ T1828] FS: 0000555584996500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 65.863301][ T1828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.869976][ T1828] CR2: 000000110c258ed0 CR3: 000000013619e000 CR4: 00000000003526b0 [ 65.878054][ T1828] Call Trace: [ 65.881377][ T1828] [ 65.884339][ T1828] kvm_put_kvm+0x1100/0x12b0 [ 65.888963][ T1828] ? __cfi_kvm_vm_release+0x10/0x10 [ 65.894406][ T1828] kvm_vm_release+0x47/0x70 [ 65.899191][ T1828] __fput+0x1fe/0xa00 [ 65.903209][ T1828] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 65.908865][ T1828] ____fput+0x20/0x30 [ 65.912913][ T1828] task_work_run+0x1e0/0x250 [ 65.917525][ T1828] ? __cfi_task_work_run+0x10/0x10 [ 65.922789][ T1828] ? __kasan_check_write+0x18/0x20 [ 65.928229][ T1828] resume_user_mode_work+0x36/0x50 [ 65.933403][ T1828] syscall_exit_to_user_mode+0x64/0xb0 [ 65.938915][ T1828] do_syscall_64+0x64/0xf0 [ 65.943394][ T1828] ? clear_bhb_loop+0x50/0xa0 [ 65.948092][ T1828] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.954017][ T1828] RIP: 0033:0x7fb76f58e9a9 [ 65.958457][ T1828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.978180][ T1828] RSP: 002b:00007fff67173348 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 65.986645][ T1828] RAX: 0000000000000000 RBX: 0000000000010071 RCX: 00007fb76f58e9a9 [ 65.994754][ T1828] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 66.002871][ T1828] RBP: 00007fb76f7b7ba0 R08: 0000000000000001 R09: 000000066717363f [ 66.011176][ T1828] R10: 00007fb76f400000 R11: 0000000000000246 R12: 00007fb76f7b5fac [ 66.019365][ T1828] R13: 00007fb76f7b5fa0 R14: ffffffffffffffff R15: 00007fff67173460 [ 66.027369][ T1828] [ 66.030473][ T1828] ---[ end trace 0000000000000000 ]--- [ 66.046048][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0006/input/input16 [ 66.058663][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0006/input/input17 [ 66.076042][ T10] kye 0003:0458:5011.0006: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 OK Stopping syslogd: stopped /sbin/syslogd (pid 91) OK umount: can't remount debugfs read-only [ 66.240833][ T510] usb 1-1: USB disconnect, device number 14 Connection to 10.128.1.248 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW![ 66.338039][ T62] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 Sent SIGTERM to all processes [ 66.390922][ T62] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 66.435152][ T62] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 66.470743][ T62] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 66.479765][ T62] usb 4-1: USB disconnect, device number 23 [ 66.631040][ T463] rust_binder: 0: removing orphan mapping 0:1024 [ 66.820106][ T12] bridge_slave_1: left allmulticast mode [ 66.825792][ T12] bridge_slave_1: left promiscuous mode [ 66.831466][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.839159][ T12] bridge_slave_0: left allmulticast mode [ 66.844795][ T12] bridge_slave_0: left promiscuous mode [ 66.850478][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.969448][ T12] tipc: Left network mode [ 67.050003][ T12] veth1_macvtap: left promiscuous mode [ 67.055506][ T12] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 67.950024][ T12] bridge_slave_1: left allmulticast mode [ 67.955671][ T12] bridge_slave_1: left promiscuous mode [ 67.961349][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.968869][ T12] bridge_slave_0: left allmulticast mode [ 67.974693][ T12] bridge_slave_0: left promiscuous mode [ 67.980368][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.987914][ T12] bridge_slave_1: left allmulticast mode [ 67.993934][ T12] bridge_slave_1: left promiscuous mode [ 67.999646][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.007678][ T12] bridge_slave_0: left allmulticast mode [ 68.013597][ T12] bridge_slave_0: left promiscuous mode [ 68.019385][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.209469][ T12] tipc: Left network mode [ 68.370322][ T12] veth1_macvtap: left promiscuous mode [ 68.375938][ T12] veth0_vlan: left promiscuous mode [ 68.382291][ T12] veth1_macvtap: left promiscuous mode [ 68.389940][ T12] veth0_vlan: left promiscuous mode [ 68.439716][ T1837] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 68.446920][ T1837] ACPI: PM: Preparing to enter system sleep state S5 [ 68.455308][ T1837] kvm: exiting hardware virtualization [ 68.461075][ T1837] reboot: Power down serialport: VM disconnected.