last executing test programs: 1.419633065s ago: executing program 1 (id=354): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000940), 0x2000, 0x0) ioctl$TIOCEXCL(r1, 0x540c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x0, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000080)=@ethtool_wolinfo={0x1, 0xb, 0xe0, "51756fa0d073"}}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYRESOCT=0x0, @ANYRES32=r5, @ANYBLOB="0500020080000000"], 0x28}}, 0x20000010) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000000000073fa004000000000b7"]) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x3fb, 0x1}, 0x14) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x2000}, {r2, 0x1}, {r4, 0x4}], 0x3, &(0x7f0000000280)={r8, r9+60000000}, &(0x7f00000002c0)={[0x1]}, 0x8) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x80000000000016) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000000000b00000"]) capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000080)={0x0, 0x203}) r13 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$PTP_ENABLE_PPS(r13, 0x40043d04, 0x1) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0xc3ff}}, 0x0) mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x800, 0x0) 1.415372485s ago: executing program 1 (id=355): syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="e3", 0x1}], 0x1, 0x8) fcntl$setpipe(r3, 0x407, 0x176) vmsplice(r4, &(0x7f0000001080)=[{&(0x7f0000000a40)='5', 0x1}], 0x1, 0x8) vmsplice(r3, &(0x7f0000002a80)=[{&(0x7f0000000580)='I', 0x1}], 0x1, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/227, 0xe3, 0x2, 0x6}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x3e}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1.257385108s ago: executing program 0 (id=356): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f00000000c0)={0x5, 0x5, 0x12, 0xffeffffe, 0x0, "0da2010002020800007dabf3a531962e0345ce", 0x2, 0x101}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x76, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[]) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xc}, @flat=@handle={0x73682a85, 0x101}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 1.135659138s ago: executing program 1 (id=357): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000700)=[@text32={0x20, &(0x7f0000000140)="f30f0926640f01cbb9090200000f3265360fc7717e660f3815e966b8da000f00d8c4e11f5d3bb9a40a00000f322e260ffbfcc4e259b803", 0x37}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r6, 0x0, 0x25a5, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1.124775348s ago: executing program 0 (id=358): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x19, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x27) socket$inet(0x2, 0x4, 0x800002) (async, rerun: 64) r3 = syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) (async, rerun: 64) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008d}], 0x1) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async, rerun: 64) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x33c) (async, rerun: 64) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) sendto(r4, 0x0, 0x0, 0x4041, 0x0, 0x0) (async, rerun: 64) r10 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_int(r10, 0x29, 0x48, &(0x7f0000000080)=0x6, 0x4) (async) r11 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x0) (async) fstat(r8, &(0x7f00000022c0)) setreuid(r9, r9) (async) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r12}}, 0x58) (async, rerun: 32) syz_open_procfs(r3, &(0x7f0000000100)='pagemap\x00') (async, rerun: 32) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100124e09f40994c344143f2d98c2c0109021b0001040000020904560301902d2349090506034000fd0108"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.085588122s ago: executing program 0 (id=359): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000040)=0x1) r2 = dup3(r1, r0, 0x80000) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000000)=0x1) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x11}, @private=0xa010102, 0xb, 0x5}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x12, 0x0, 0x4}}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001840)={0x84, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001880)={@fd={0x66642a85, 0x0, r4}, @fd, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xb}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0xffffffffffffffff}, @increfs_done={0x40106308, 0x3}, @increfs], 0x0, 0x0, 0x0}) 1.003748369s ago: executing program 0 (id=360): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x80000008, 0x3900, 0xfffffffb, 0x6, 0x10001}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001280), r4) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x51, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba2e"}) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000000)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 911.526606ms ago: executing program 1 (id=364): r0 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f0000000200)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xf5a, 0x2000) mount$9p_fd(0x0, 0x0, 0x0, 0x80080, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000480)={0x17, 0x0, 0x0}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f00000000c0)=""/55, 0x37) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x41, 0x0, @multicast2}, 0x20020003, 0x0, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000100)={0x4, 0x9, 0xcb, 0x67, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, r7, r7) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001f80)="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", 0x2000, &(0x7f0000004ac0)={&(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x9, 0x10, 0x3fb, 0x6, 0x4, 0xfff, 0x0, 0x0, 0x2, 0xfffffffc}}, &(0x7f0000000280)={0x18, 0x0, 0xfffffffffffffffb, {0x100}}, &(0x7f00000004c0)={0x18, 0x0, 0xd27b, {0xfffffffffffffff8}}, &(0x7f0000000500)={0x18, 0x0, 0x3, {0x3ff}}, &(0x7f0000000540)={0x18, 0xfffffffffffffff5, 0xfff, {0x23d6056b}}, &(0x7f0000000580)={0x28, 0x0, 0x1000, {{0x8001, 0x100, 0x1}}}, &(0x7f00000005c0)={0x60, 0x0, 0xffffffff, {{0x800, 0x6, 0x2, 0x9, 0x8, 0x18000000, 0xfffffffd, 0x90be2dc}}}, &(0x7f0000000640)={0x18, 0x0, 0x9, {0x80000001}}, &(0x7f0000000680)={0x16, 0x0, 0x2, {'-\\([\xa8\x00'}}, &(0x7f00000006c0)={0x20, 0x0, 0x2, {0x0, 0x10}}, &(0x7f0000000780)={0x78, 0x0, 0x33b5, {0x9, 0x4, 0x0, {0x5, 0x10, 0xc4, 0x7fbb, 0x0, 0x1, 0x4e0, 0x8, 0x5e, 0xa000, 0xfffffff9, 0x0, 0x0, 0xaa56, 0x4}}}, &(0x7f0000000940)={0x90, 0xffffffffffffffda, 0x3, {0x2, 0x2, 0xff, 0xa000000, 0xd, 0x6, {0x3, 0x1, 0x1000, 0xc00, 0x401, 0xb7, 0x1, 0x3a7, 0xc, 0x8000, 0x401, 0x0, 0x0, 0x2a, 0x9}}}, &(0x7f0000000a00)={0x160, 0x0, 0x5, [{0x5, 0xaf1, 0x136, 0x8, '/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda'}]}, &(0x7f00000040c0)={0x5b0, 0x0, 0x4, [{{0x0, 0x3, 0xffffffffffffffff, 0x3, 0x7, 0x6, {0x6, 0x0, 0x7, 0x9, 0x80, 0x9, 0x9900000, 0x3, 0x3, 0x2000, 0x2, 0x0, 0xee00, 0x2}}, {0x3, 0x9, 0x136, 0x4, '/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda'}}, {{0x0, 0x1, 0x80, 0x800, 0x7fffffff, 0x2a2d, {0x4, 0x6, 0x5, 0x8001, 0x4, 0xfffffffffffff420, 0x10, 0xfb5, 0x5, 0xa000, 0x4, 0x0, 0xffffffffffffffff, 0x4, 0x5}}, {0x6, 0x8, 0xc, 0x8000, '/dev/ashmem\x00'}}, {{0x0, 0x3, 0x7fff, 0x6, 0x2, 0x1, {0x1, 0x6, 0x1000, 0x81, 0x7, 0x9, 0xd74, 0x1, 0x7fff, 0x1000, 0x0, 0x0, 0x0, 0x8, 0x5}}, {0x5, 0x5, 0xc, 0x2, '/dev/ashmem\x00'}}, {{0x4, 0x3, 0x7, 0x10000, 0x1, 0x8, {0x3, 0x230, 0x1, 0x3, 0x200, 0x3, 0x7, 0x2, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x61fa, 0x2}}, {0x5, 0xe000000000000000, 0x0, 0xffffffc0}}, {{0x3, 0x2, 0x0, 0x6, 0x5, 0xec1, {0x0, 0x8, 0x4, 0x7, 0x1, 0x7, 0x8, 0x9, 0xb, 0x6000, 0x8, 0x0, 0x0, 0x6, 0x3d}}, {0x0, 0x81, 0x1, 0x2, '\x00'}}, {{0x2, 0x2, 0x6, 0xa2d, 0xfff, 0x10, {0x1, 0x0, 0xcc, 0x3, 0x7, 0x803, 0x6, 0x3, 0x45, 0x8000, 0x6, 0x0, 0xee01, 0x9}}, {0x0, 0x10001, 0x1, 0xfff, ')'}}, {{0x0, 0x3, 0x3b, 0x8200, 0x1, 0x7, {0x4, 0x6, 0x8000000000000000, 0x8000, 0xc5, 0x10000, 0xff, 0xe, 0x40, 0x6000, 0x1b96, 0x0, 0x0, 0x3, 0x8}}, {0x2, 0x55, 0xc, 0xffffffff, '/dev/ashmem\x00'}}]}, &(0x7f00000047c0)={0xa0, 0x0, 0x4, {{0x0, 0x3, 0xc28, 0x0, 0x81, 0x3, {0x5, 0xffffffffffffffff, 0xbb, 0x6, 0x85af, 0xf55, 0xffff, 0x3, 0xfff, 0x2000, 0x6, 0x0, 0xee00, 0x80000000, 0x2}}, {0x0, 0x18}}}, &(0x7f0000004880)={0x20, 0x0, 0xfffffffffffffffb, {0x2, 0x0, 0x6, 0x6}}, &(0x7f0000004980)={0x130, 0x0, 0x2, {0x100000000, 0x3, 0x0, '\x00', {0x1c17cb7ae7d910bb, 0xffffffff, 0xfffffffffffffff8, 0x5, 0x0, r7, 0xa000, '\x00', 0xe, 0x8000000000000001, 0x0, 0x5, {0x859, 0x5}, {0x4a, 0x8}, {0xc, 0x1000}, {0x6, 0x7ec9}, 0x5, 0x1, 0x9, 0x7}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) msync(&(0x7f0000123000/0x1000)=nil, 0x1000, 0x5) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$ASHMEM_SET_SIZE(r10, 0x40087703, 0x10001) ioctl$ASHMEM_SET_NAME(r10, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x6, 0x2, 0x4, 0x8}, {0x8000, 0x7, 0x2, 0x5}, {0x0, 0x5, 0xa, 0x9}, {0x5, 0x40, 0x3, 0x9}, {0x401, 0xf9, 0xd, 0x1000}]}) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r10, 0x22e7c000) 910.966586ms ago: executing program 3 (id=365): setresgid(0xffffffffffffffff, 0xee01, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x4) recvmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001840)=""/4080, 0xff0}, {&(0x7f0000002bc0)=""/90, 0x5a}], 0x2}, 0x12}, {{0x0, 0x0, 0x0}, 0x2be9}], 0x2, 0x2, 0x0) 887.340708ms ago: executing program 3 (id=366): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$UFFDIO_POISON(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000380)={{&(0x7f000024c000/0x1000)=nil, 0x1000}}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x2, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x5, 0x400000, 0x9, 0x4000000000000000, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 881.296308ms ago: executing program 0 (id=367): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000080001000100"/28], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="68000000010301010000000000000000020000000c0002"], 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x804) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 811.529864ms ago: executing program 3 (id=368): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x6, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b733000000000000000800000000000000ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x1, 0xba, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0x97, 0x70, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xff}, [@extension_unit={0xb, 0x24, 0x8, 0x1, 0xfffa, 0xeb, "f6d79dc8"}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x8, '&'}, @selector_unit={0x6, 0x24, 0x5, 0x1, 0x9, "ba"}, @mixer_unit={0xa, 0x24, 0x4, 0x6, 0xea, "2249171056"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4c, 0xf7, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0x6, 0x5, "98cd", "8e58"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x7, 0xfa, '=x', "f4"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x7, 0x1, 0x3, 0x5, "ab78"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0x9, 0x5, {0x7, 0x25, 0x1, 0x80, 0x0, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x7ef, 0xa, 0x6, 0x0, {0x7, 0x25, 0x1, 0x2, 0x1, 0x10}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x200, 0x5, 0x8, 0x3, 0xf7, 0x81}, 0xef, &(0x7f0000000540)={0x5, 0xf, 0xef, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "88e8ac724de95881756e30656f1d8822"}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x3, 0xff0f, 0x4, [0xff3f18, 0xf, 0xaf, 0xf, 0xff0000]}, @ssp_cap={0x18, 0x10, 0xa, 0x40, 0x3, 0x7, 0xf000, 0x3, [0x1fec0c0, 0xc0cf, 0xff00c0]}, @generic={0x91, 0x10, 0x2, "0c77e8b79a9839594fce376b082847befdb15d9e0db69333e5698848e3b073eef65fce6716e950293a6603ca86edd6b93cde6c7b6e3ed9336aaf3f47ea01c75329d1207d2484c851346faac3b2ae15cfe200ffd41f4e5b79fcf3a21ce554212b293e6af749f98ce0301e3ea4f49004982c6789c4db3cc89fc8f9d4f0d9b7a2f01be6d35a0151e44ad7174fb6b10c"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x2, 0xf2}, @ptm_cap={0x3}]}, 0x8, [{0x52, &(0x7f0000000640)=@string={0x52, 0x3, "2505cff03a49ff46a39b6a2a46e869d5578c7cd97c01071eefd8309925051260fa19e7d3161c4244e3d309d508d34a7c5433cac3a6a276ea5debf2b167080d4ede6e84a2262b514fa526a342a157d5f0"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x480a}}, {0xa3, &(0x7f0000000800)=@string={0xa3, 0x3, "015e1fb2c820492b2f4b371851c627bcd8d010a4d4de9372de90d9ac6d85499d64e7f670d5cdbe57380d014102ed97dd17b99d6a6887eb5ce27d11d8fec8785ba7afc131d1b795835decf157264488abe77d330446a0f32f7b9003f2a9f5e6b3748efe33c55e71632dc0333c387f05e3a723cc66814a0bb93cb84832179965d713771ac79e5db35dbbd9c6d46ee4db280bd8aa5905893396a5f9c54947a5348d36"}}, {0x93, &(0x7f00000008c0)=@string={0x93, 0x3, "b2ba9b6dca82f519604f8a9c75f25036e6b3dc238f555d6ec5742d44c5de70abc5b4581be2b8e929ecc41b5e94c0a77253a1b97a10bfe29843c92876a83cb65053ebcf3a9444be863de855df24ac753e7ff6d0b633911dd5a944bc9141c6b0400b9a59ade003bdb0ace91a1e6f2cc7a8454e58530f899195bd7bfca699aa8dffdea1bbbf2ea9d75d2cc925af196e9f0520"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000002340)=ANY=[@ANYBLOB="4030100000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000100)={0x20, 0x17, 0x1, "1817"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x7, 0x3e, "878f9791860613a5b034bb03f097e7c265df40a47a3c71cae4f6630bc4d0cbd9e9df8830991761f94035fcd3a837d19f344880aa71ad7f5ea11f2a6d844e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000200)={0x14, &(0x7f0000000180)={0x20, 0xe, 0x72, {0x72, 0x21, "bac9fd3fb08eef44168ee5808ea426e69a8e3fce0c1f3365409ab5c20449a602923c8170c7881ab22f3060e296b3396f983728a0d7475a952539ff60e60d0a8b64be74161ce2289accd1c83629ebacaf94cc62e64b0ac0245712be549ce79956e85b50b4cd95c2e8c6635b3c9298fa81"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x1c, &(0x7f0000000280)={0x0, 0x15, 0x88, "9a8e067ce7c7c602dc1a62a01e280c0e7a2d240b4ec28d2695e5785f0b6b885e7ced91e04881b24cde1054ca924be8a272d7ada6e0b53c47dcebbed7656427af25e07ba386b3b460e0f443d965ae9fb3e16a7e35fdf3f7e76527a43bbfda2c3993fe8fca2c77376d32f298737e2fbabfa4f54beb258a3c5bcbd2e0268b505d0f72957f5bdfdacd93"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6e}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000003140)=""/4106, 0x100a}, {0x0}], 0x2, 0x1, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) (async) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) write$khugepaged_scan(r3, &(0x7f0000000000), 0x8) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) 811.185684ms ago: executing program 0 (id=369): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x18000, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xc) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000140)) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) r6 = socket$tipc(0x1e, 0x7, 0x0) listen(r6, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000200)=0x7) accept4(r6, 0x0, 0x0, 0x400000000000000) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) dup(r2) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r8, 0xaece) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f00001e9000/0x1000)=nil, &(0x7f0000700000/0x4000)=nil, &(0x7f0000703000/0x4000)=nil, &(0x7f0000702000/0x1000)=nil, &(0x7f0000702000/0x2000)=nil, &(0x7f0000703000/0xb000)=nil, &(0x7f0000709000/0x1000)=nil, &(0x7f00006ff000/0x2000)=nil, &(0x7f000070c000/0x2000)=nil, &(0x7f0000706000/0x4000)=nil, &(0x7f0000700000/0x2000)=nil, &(0x7f0000000200)}, 0x68) r9 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r10 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYBLOB="77566de415ce792f92e403790acd1f9fc0c1c8817d7151f5db1abb272028bee95032d57dd6ce03a35280cbcd52215e96caff0e2377249bb515bd8940c2d0a4b84ba1a384615985cb9d625a939f1537fb2448280fbe6e019aa5fc8771bd02346e24583cb418f54e9b1fb1bd56db44ab2232e67c3df88bc2fa1d7482bd06bba0f524d8c1115ccf8635c14d8f78b4a93a1ec9a3b738f25b7e58d85817206c9bb2d8dfd149c5a706661e0a4e840e3be67c24c0aa670fade62a906adbd9accf3a4b69968e12855928654cec209f2fa2a55c9361680b66b1c57a4f84abe76a5321cc770d7a7ac82fa255", @ANYRES64=r4, @ANYRESHEX=r5, @ANYRES8=r9, @ANYRESHEX=r1, @ANYRESOCT=r0], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x400, 0x28200) 287.642847ms ago: executing program 3 (id=372): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40854) openat$kvm(0xffffffffffffff9c, 0x0, 0x48e80, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x7, 0x4, 0x438, 0x0, 0x240, 0x0, 0x350, 0x110, 0x350, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0x0, 0xffffff00, 0x3, 0x0, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0xfffd, 'veth0_to_bridge\x00', 'veth1_macvtap\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="1758a179fe8f", @rand_addr=0x64010100, @multicast1, 0x2, 0xffffffff}}}, {{@arp={@rand_addr=0x64010101, @rand_addr, 0x0, 0x0, 0xc, 0x3, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x8a8cfb792f7af7f0]}}, 0x0, 0xfffc, 0x0, 0xa51, 0x0, 0x1000, 'team_slave_0\x00', 'veth0\x00', {0xff}}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x8, 0x5, 0x0, 0x0, "f245442f682c06144f1fb782d77bc38316214ca84d2f69b44810c3a40a495fa278a1728df4f6eaac07ddb7086bd6e732ed48ea39c4670df6527298897d41f42e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0xa010100, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x488) ptrace(0x4206, r2) setpgid(r1, r1) waitid(0x2, r1, 0x0, 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000200)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020315030b000000ff0e000000000000010009000000000003000600000000000200000000000000000000000000000002000200"], 0x58}, 0x1, 0x7}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x72) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x478103, 0x60) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x12}, @flat=@weak_handle={0x77682a85, 0x0, 0x100}, @flat=@binder={0x73622a85, 0x1001, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 283.767417ms ago: executing program 2 (id=373): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f00000001c0)=""/227, 0xe3}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000000940)=""/4104, 0x1008}, {&(0x7f0000001980)=""/168, 0xa8}, {&(0x7f0000000680)=""/132, 0x84}, {&(0x7f0000000300)=""/153, 0x99}, {&(0x7f0000002d00)=""/127, 0x7f}, {&(0x7f0000001b40)=""/275, 0x104}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}}, {{0x0, 0xfffffffffffffe7a, 0x0}, 0x100}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x40}], 0x7, 0x40000100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$UFFDIO_POISON(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000380)={{&(0x7f000024c000/0x1000)=nil, 0x1000}}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x7}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f00), r6) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f40)={0x2c, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x2, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x5, 0x400000, 0x9, 0x4000000000000000, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x200000000005, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x99e, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 227.869322ms ago: executing program 2 (id=374): setresgid(0xffffffffffffffff, 0xee01, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x4) recvmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001840)=""/4080, 0xff0}, {&(0x7f0000002bc0)=""/90, 0x5a}], 0x2}, 0x12}, {{0x0, 0x0, 0x0}, 0x2be9}], 0x2, 0x2, 0x0) 149.183098ms ago: executing program 2 (id=375): r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000280)=0x1e) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) 148.857678ms ago: executing program 2 (id=376): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x971cf49930d0c854, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000040)={0x2, 0x1, 0x1d}) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0xb) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mremap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 148.699478ms ago: executing program 3 (id=377): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xaece, 0x2) preadv(r1, &(0x7f00000000c0)=[{&(0x7f00000031c0)=""/166, 0xa6}], 0x1, 0x43a, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) (async) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000340)={0x60, 0x1, &(0x7f00004cb000/0x4000)=nil, &(0x7f00006ff000/0x3000)=nil, 0x3, &(0x7f0000000280)=[{0x2, 0x1, 0x9}, {0xa4b, 0x8c95, 0x41}, {0x6, 0x9, 0x8abb}, {0x5, 0xfffffffffffffffb, 0x8}, {0x1, 0x3}, {0x4, 0x9, 0x1}, {0x7fffffff, 0x2, 0x6}, {0x1, 0x7, 0x4}], 0x8, 0x9, 0x0, 0x40, 0x1, 0x8}) (async) open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_DEFRAG(r2, 0x1267, 0x3) (async, rerun: 64) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000009, 0x8, 0x20) (async) futex(&(0x7f0000000000), 0xc, 0x80002, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000240)=0x1, 0x0) (async) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') 148.565118ms ago: executing program 2 (id=378): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@redirect_dir_follow}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@redirect_dir_follow}]}) (async) 130.393559ms ago: executing program 3 (id=379): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000f, 0x11, r0, 0x45809000) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x52d0c0, 0x0) (async, rerun: 64) r2 = socket$inet6(0xa, 0x4, 0x0) (rerun: 64) bind$inet6(r2, 0x0, 0x0) (async) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, 0x3}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000097000040"]) (async) syz_clone(0x20000, 0x0, 0x36, 0x0, 0x0, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x13, 0x0, &(0x7f0000000100), 0xfffffffffffffe6d, 0x0, 0x0}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x100009, @remote, 0x9db9}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) (async) r7 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000"], 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030349b303030302c007365725f69643db68f5a69ee55a118442316695e37de4de1"]) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0, 0x2e}, 0xffffffff}], 0x1, 0x0, 0x0) (async) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfff}, 0x1c) (async) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_usb_disconnect(r7) (async, rerun: 64) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async, rerun: 64) fcntl$dupfd(r6, 0x0, r6) (async) sendmmsg$inet6(r2, &(0x7f0000000200), 0x0, 0x240400c4) (async) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000200), 0x1cbd81, 0x0) ioctl$BLKRRPART(r9, 0x125f, 0x0) 71.784284ms ago: executing program 2 (id=380): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f00006fd000/0x2000)=nil, 0x2000, 0x9, 0x810, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x11c, &(0x7f00000000c0)=0x800, 0x0, 0x4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000493000/0x1000)=nil, 0x1000}, 0x1}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) timer_create(0x6, &(0x7f0000000080)={0x0, 0x35, 0x4, @thr={&(0x7f0000000380)="ceb248caada952514e4bd2e69758804d07b18a482d552643add3c7700be2cccf95bd9d54091e5b39b3a4cfc962c0aca2cf5c605c22b0fa29c736f18320aa78667497875a", &(0x7f0000000180)="a6bcd12080cfc922309d72deecf5698a1e756df08f1d3f87097e0c35e61777e7f41a4c85561a475bf0f7c0269ca9e954c609ecb8de14f9c2fae9da258a4817bc248678cc1cee541414d952fa85d7f186fbeaa4b53672a41042f61a1ef8af22172027079ec6c4033b100d5546b86426df9f11cf603e734158e3c195bcbd4540e77bafdc5caaf725c11220404e36def1c7cf3ee0a5b34265f22d2eaff4f3e6d826bf2fff725b5bc3c057a9c84245523912ca2074f0cc907222287a"}}, &(0x7f0000000000)) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000a2c000/0x3000)=nil, 0x3000, 0xe) socket$inet6(0xa, 0x2, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) fadvise64(r3, 0x6b, 0x4000000000f7c, 0x4) 49.373826ms ago: executing program 1 (id=381): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) keyctl$update(0x2, 0x0, 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001e00010025bd7000fbdbd7251a590000"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f00000000c0)=""/46, 0x2e, 0x1f}, 0x8}], 0x32, 0x10122, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) 0s ago: executing program 1 (id=382): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') (async) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x80000, 0x80) read$FUSE(r1, &(0x7f00000004c0)={0x2020}, 0x2020) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r4 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000004240)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x71) (async) preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000004240)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x71) io_setup(0x3ff, &(0x7f0000000000)=0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000440)={r0, 0xf, 0x7, 0xfffffffffffffff9}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000440)={r0, 0xf, 0x7, 0xfffffffffffffff9}) r7 = syz_io_uring_complete(0x0) r8 = eventfd(0xff) io_submit(r5, 0x7, &(0x7f0000000880)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x7fff, 0xffffffffffffffff, &(0x7f0000000200)="db8500f5a1a002a8c617a3e0bb6bbf21d6fb2a216d19161e78901375d115711f46c808d6e045f53fcbf37d0734c095bc049de0130c5ce7393f2eb7802c62bd14fe81a21bc4aff5ddf28f6064b7659f3b7f0220b89f3646f79a2f878d7b926d873ab38104dd5420502e3500ca7047a6c0c09a80fd5c4175d64e2da6d71fce47f9ff4eae095867374aabe13a24bfe193428a4b890ef4a938c30e5c30b3c6e748a1", 0xa0, 0x7fffffff, 0x0, 0x1, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000100)="70ab60055d95c4", 0x7, 0x6, 0x0, 0x1, r3}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x7, r3, &(0x7f0000000340)="0fa9ec01f5d9e9d97addb971f162d23041b3e1fed1f2f99fadf1443610269645b8e0136f61840a72e66f1bdaed55f8f600cfe92e366c7f28551d3896b71781d43f945e5bc02f7ec1d7dcdbf174d3bff8fd51e9a13856c9a07edbc4de39a548c17dcf2bcda112cfd7b91b707725ab89b30d115aa71e6ba112555edbd2edf6d22d544d9b22c263dc3a5b7be9dc148e88b14a39ca45d46aca1e73ffa374629c839b35fca97d21f2cdc605156b89ea0f9d", 0xaf, 0x1e9, 0x0, 0x3, r3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0xaba5, r6, &(0x7f0000001080)="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", 0x1000, 0xb3e, 0x0, 0xd9f410fa6a8333fd, r7}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0xd, r3, &(0x7f0000000540)="24dc021b0affb2adda31b1ab3b31cb7e22988f0ab158dee53d0e1b06df5a359f7d44d22c6e15a372a1841226398357ac71ac185181def6b2513047927afd292c24297e1e03eb6d6a5c64f870373f0807f8473f6c27f1d76e96e234f5a385e673d616228ab95e47dd31fc3907a6c88f317cae9024fab135b0bd37cc430ff760a4d048b283812482301a90848c3d3b8b7b0c563b7bbea26d587c319cba8e5c9b98ebda170d4af79a585c21bdb6d21f825b41b38bf449de73a11e835c32ebb137427619170dc280d685f9f8feec2b84907f3b2b2f2379a6", 0xd6, 0x74ef4910, 0x0, 0x2, r8}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x9, r2, &(0x7f0000000680)="05674c65e898e35e2a4b952bb8eb83ef73bd629eb4336c496c5e07e53510b315143704fced92310c0430635dc0a0304a029bccf87d729fb8f6fed4cf2aec687f1235d0097a78c37f3b880fd0348356f295fe51c9927fc8a0a97fdcb4030e7a5ca65925b373ac153701", 0x69, 0x8, 0x0, 0x0, r3}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x7, 0x40, r3, &(0x7f0000000740)="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", 0xfa, 0x7, 0x0, 0x1, r3}]) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000002540), r3) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000002640)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x40002}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)={0x74, r9, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_MS_ADDR6={0x14, 0xc, @private2}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_TID={0xc}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x10) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x603f) (async) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x603f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xc}, @flat=@handle={0x73682a85, 0x42aba3fff20acffe}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. [ 21.801013][ T36] audit: type=1400 audit(1756197494.910:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.802029][ T283] cgroup: Unknown subsys name 'net' [ 21.823671][ T36] audit: type=1400 audit(1756197494.910:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.851156][ T36] audit: type=1400 audit(1756197494.940:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.851373][ T283] cgroup: Unknown subsys name 'devices' [ 22.019213][ T283] cgroup: Unknown subsys name 'hugetlb' [ 22.024833][ T283] cgroup: Unknown subsys name 'rlimit' [ 22.178357][ T36] audit: type=1400 audit(1756197495.290:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.201575][ T36] audit: type=1400 audit(1756197495.290:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.208467][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.226832][ T36] audit: type=1400 audit(1756197495.290:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.258461][ T36] audit: type=1400 audit(1756197495.340:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.264247][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.284230][ T36] audit: type=1400 audit(1756197495.340:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.318608][ T36] audit: type=1400 audit(1756197495.370:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.344496][ T36] audit: type=1400 audit(1756197495.370:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.140201][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.147286][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.154428][ T291] bridge_slave_0: entered allmulticast mode [ 23.160938][ T291] bridge_slave_0: entered promiscuous mode [ 23.174048][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.181138][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.188339][ T291] bridge_slave_1: entered allmulticast mode [ 23.194512][ T291] bridge_slave_1: entered promiscuous mode [ 23.215914][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.223208][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.230385][ T290] bridge_slave_0: entered allmulticast mode [ 23.236581][ T290] bridge_slave_0: entered promiscuous mode [ 23.251062][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.258221][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.265283][ T290] bridge_slave_1: entered allmulticast mode [ 23.271850][ T290] bridge_slave_1: entered promiscuous mode [ 23.298873][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.305943][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.313122][ T293] bridge_slave_0: entered allmulticast mode [ 23.319369][ T293] bridge_slave_0: entered promiscuous mode [ 23.333952][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.341032][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.348250][ T293] bridge_slave_1: entered allmulticast mode [ 23.354517][ T293] bridge_slave_1: entered promiscuous mode [ 23.400686][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.407880][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.414932][ T292] bridge_slave_0: entered allmulticast mode [ 23.421469][ T292] bridge_slave_0: entered promiscuous mode [ 23.428461][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.435506][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.442691][ T292] bridge_slave_1: entered allmulticast mode [ 23.448995][ T292] bridge_slave_1: entered promiscuous mode [ 23.569528][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.576602][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.583917][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.591049][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.626468][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.633569][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.640966][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.648012][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.657053][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.664134][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.671449][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.678597][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.686856][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.693915][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.701389][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.708478][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.740799][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.748380][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.755595][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.762902][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.770565][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.777859][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.785104][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.792504][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.804689][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.812037][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.821423][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.828487][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.857014][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.864148][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.872026][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.879079][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.900118][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.907202][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.925268][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.932345][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.940256][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.947315][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.968102][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.975160][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.015762][ T290] veth0_vlan: entered promiscuous mode [ 24.025687][ T291] veth0_vlan: entered promiscuous mode [ 24.036730][ T292] veth0_vlan: entered promiscuous mode [ 24.044213][ T293] veth0_vlan: entered promiscuous mode [ 24.062137][ T292] veth1_macvtap: entered promiscuous mode [ 24.073417][ T293] veth1_macvtap: entered promiscuous mode [ 24.084993][ T290] veth1_macvtap: entered promiscuous mode [ 24.097562][ T291] veth1_macvtap: entered promiscuous mode [ 24.141228][ T292] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.190911][ T336] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.207380][ T339] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 24.216183][ T334] rust_binder: Write failure EFAULT in pid:2 [ 24.272064][ T345] rust_binder: Error in use_page_slow: ESRCH [ 24.272092][ T345] rust_binder: use_range failure ESRCH [ 24.279018][ T345] rust_binder: Failed to allocate buffer. len:216, is_oneway:false [ 24.284637][ T345] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 24.293214][ T345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:4 [ 24.303377][ T350] rust_binder: 336 RLIMIT_NICE not set [ 24.412299][ T65] rust_binder: 332: removing orphan mapping 0:4248 [ 24.483374][ T358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 24.541197][ T364] rust_binder: Failed to allocate buffer. len:88, is_oneway:true [ 24.541298][ T364] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.808907][ T397] process 'syz.1.22' launched './file0' with NULL argv: empty string added [ 24.956871][ T62] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 25.051337][ T405] rust_binder: Error while translating object. [ 25.051392][ T405] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 25.057807][ T405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:21 [ 25.108593][ T62] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1632, setting to 64 [ 25.129020][ T62] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 25.142145][ T62] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 25.154403][ T62] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.172916][ T62] usb 1-1: config 0 descriptor?? [ 25.180921][ T382] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 25.776839][ T65] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.836054][ T62] usbhid 1-1:0.0: can't add hid device: -71 [ 25.842928][ T62] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 25.852159][ T62] usb 1-1: USB disconnect, device number 2 [ 25.928040][ T65] usb 2-1: config 6 has an invalid interface number: 132 but max is 0 [ 25.936305][ T65] usb 2-1: config 6 has no interface number 0 [ 25.942620][ T65] usb 2-1: config 6 interface 132 has no altsetting 0 [ 25.952404][ T65] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice=d1.6e [ 25.962932][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.970978][ T65] usb 2-1: Product: syz [ 25.975234][ T65] usb 2-1: Manufacturer: syz [ 25.980088][ T65] usb 2-1: SerialNumber: syz [ 26.034149][ T429] binder: Bad value for 'defcontext' [ 26.079284][ T438] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.189520][ T65] cdc_subset 2-1:6.132: probe with driver cdc_subset failed with error -22 [ 26.206591][ T65] usb 2-1: USB disconnect, device number 2 [ 26.336947][ T62] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.392891][ T425] rust_binder: Error while translating object. [ 26.392934][ T425] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 26.399181][ T425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:37 [ 26.490622][ T62] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.515872][ T62] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.525711][ T62] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 26.546901][ T62] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.565503][ T62] usb 4-1: config 0 descriptor?? [ 26.596886][ T444] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 26.726845][ T444] usb 3-1: device descriptor read/64, error -71 [ 26.959429][ T36] kauditd_printk_skb: 102 callbacks suppressed [ 26.959447][ T36] audit: type=1400 audit(1756197500.070:176): avc: denied { read write } for pid=461 comm="syz.1.39" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 26.990455][ T444] usb 3-1: device descriptor read/64, error -71 [ 26.992921][ T36] audit: type=1400 audit(1756197500.070:177): avc: denied { open } for pid=461 comm="syz.1.39" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 27.020890][ T36] audit: type=1400 audit(1756197500.070:178): avc: denied { ioctl } for pid=461 comm="syz.1.39" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 27.049021][ T36] audit: type=1400 audit(1756197500.070:179): avc: denied { create } for pid=461 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.052669][ T467] rust_binder: Write failure EINVAL in pid:46 [ 27.069699][ T36] audit: type=1400 audit(1756197500.070:180): avc: denied { write } for pid=461 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.096701][ T36] audit: type=1400 audit(1756197500.070:181): avc: denied { write } for pid=461 comm="syz.1.39" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 27.120177][ T36] audit: type=1400 audit(1756197500.070:182): avc: denied { create } for pid=461 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.140509][ T36] audit: type=1400 audit(1756197500.070:183): avc: denied { write } for pid=461 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.161406][ T36] audit: type=1400 audit(1756197500.070:184): avc: denied { read } for pid=461 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.181647][ T36] audit: type=1400 audit(1756197500.070:185): avc: denied { ioctl } for pid=461 comm="syz.1.39" path="socket:[3944]" dev="sockfs" ino=3944 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.207218][ T62] usb 4-1: language id specifier not provided by device, defaulting to English [ 27.266959][ T444] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 27.295545][ T478] 9pnet_fd: Insufficient options for proto=fd [ 27.396924][ T444] usb 3-1: device descriptor read/64, error -71 [ 27.433893][ T485] 9pnet_fd: Insufficient options for proto=fd [ 27.636885][ T444] usb 3-1: device descriptor read/64, error -71 [ 27.747002][ T444] usb usb3-port1: attempt power cycle [ 27.849777][ T62] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #100: -71 [ 27.858776][ T62] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 27.867557][ T62] uclogic 0003:256C:006D.0001: failed probing pen v1 parameters: -71 [ 27.875853][ T62] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 27.883459][ T62] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 27.895361][ T62] usb 4-1: USB disconnect, device number 2 [ 28.107024][ T444] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 28.127923][ T444] usb 3-1: device descriptor read/8, error -71 [ 28.258033][ T444] usb 3-1: device descriptor read/8, error -71 [ 28.476861][ T65] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 28.496851][ T444] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 28.517975][ T444] usb 3-1: device descriptor read/8, error -71 [ 28.606874][ T65] usb 1-1: device descriptor read/64, error -71 [ 28.647977][ T444] usb 3-1: device descriptor read/8, error -71 [ 28.756966][ T444] usb usb3-port1: unable to enumerate USB device [ 28.846937][ T65] usb 1-1: device descriptor read/64, error -71 [ 29.086930][ T65] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 29.216872][ T65] usb 1-1: device descriptor read/64, error -71 [ 29.379215][ T509] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 237) [ 29.379234][ T509] rust_binder: Error while translating object. [ 29.391076][ T509] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.397571][ T509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 29.456889][ T65] usb 1-1: device descriptor read/64, error -71 [ 29.576962][ T65] usb usb1-port1: attempt power cycle [ 29.916878][ T65] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 29.937845][ T65] usb 1-1: device descriptor read/8, error -71 [ 30.026893][ T491] Bluetooth: hci0: command 0x1003 tx timeout [ 30.027153][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 30.067937][ T65] usb 1-1: device descriptor read/8, error -71 [ 30.306921][ T65] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 30.327972][ T65] usb 1-1: device descriptor read/8, error -71 [ 30.457917][ T65] usb 1-1: device descriptor read/8, error -71 [ 30.566962][ T65] usb usb1-port1: unable to enumerate USB device [ 39.199729][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 39.199749][ T36] audit: type=1400 audit(1756197512.310:200): avc: denied { ioctl } for pid=511 comm="syz.1.57" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 39.260125][ T36] audit: type=1400 audit(1756197512.320:201): avc: denied { append } for pid=515 comm="syz.2.58" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.304052][ T36] audit: type=1400 audit(1756197512.320:202): avc: denied { mounton } for pid=518 comm="syz.3.59" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 39.328684][ T36] audit: type=1400 audit(1756197512.360:203): avc: denied { read } for pid=524 comm="syz.3.60" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.373983][ T36] audit: type=1400 audit(1756197512.360:204): avc: denied { open } for pid=524 comm="syz.3.60" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.416861][ T36] audit: type=1400 audit(1756197512.360:205): avc: denied { ioctl } for pid=510 comm="syz.0.56" path="socket:[5290]" dev="sockfs" ino=5290 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.460684][ T444] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 39.484381][ T36] audit: type=1400 audit(1756197512.360:206): avc: denied { bind } for pid=510 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.504833][ T535] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 39.505147][ T36] audit: type=1400 audit(1756197512.370:207): avc: denied { ioctl } for pid=510 comm="syz.0.56" path="socket:[5289]" dev="sockfs" ino=5289 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.572891][ T36] audit: type=1400 audit(1756197512.680:208): avc: denied { setopt } for pid=536 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.607811][ T36] audit: type=1400 audit(1756197512.720:209): avc: denied { create } for pid=543 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 39.628077][ T444] usb 3-1: Using ep0 maxpacket: 16 [ 39.660150][ T444] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 39.670976][ T444] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.682214][ T444] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.694314][ T444] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.703769][ T444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.714981][ T444] usb 3-1: Product: syz [ 39.724450][ T444] usb 3-1: Manufacturer: syz [ 39.733345][ T444] usb 3-1: SerialNumber: syz [ 39.977186][ T444] usb 3-1: 0:2 : does not exist [ 40.012400][ T444] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 40.033728][ T444] usb 3-1: USB disconnect, device number 6 [ 40.075494][ T523] udevd[523]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.113867][ T579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=579 comm=syz.3.78 [ 40.146234][ T579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=579 comm=syz.3.78 [ 40.271789][ T588] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 40.280636][ T588] rust_binder: Write failure EINVAL in pid:64 [ 40.410741][ T596] rust_binder: 595 RLIMIT_NICE not set [ 40.486814][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 40.666813][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 40.675444][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 40.684209][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.694663][ T31] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 40.707851][ T31] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 40.717151][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8192, setting to 64 [ 40.729750][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=4a23, bcdDevice=cc.c0 [ 40.739040][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.747590][ T31] usb 3-1: Product: syz [ 40.751900][ T31] usb 3-1: Manufacturer: syz [ 40.756526][ T31] usb 3-1: SerialNumber: syz [ 41.034658][ T31] usb 3-1: USB disconnect, device number 7 [ 41.055051][ T523] udevd[523]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.386823][ T62] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 41.395952][ T609] 9pnet_fd: Insufficient options for proto=fd [ 41.548465][ T62] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.560494][ T444] rust_binder: 581: removing orphan mapping 0:24 [ 41.576808][ T62] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.578424][ T444] rust_binder: 0: removing orphan mapping 24:96 [ 41.603483][ T62] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 41.622744][ T62] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.640928][ T62] usb 2-1: Product: syz [ 41.645178][ T62] usb 2-1: Manufacturer: syz [ 41.656870][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 41.666804][ T62] usb 2-1: SerialNumber: syz [ 41.806848][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 41.815874][ T31] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 41.829272][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.846434][ T31] usb 4-1: config 0 has no interface number 0 [ 41.862237][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 41.876840][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.904898][ T31] usb 4-1: Product: syz [ 41.908434][ T624] GUP no longer grows the stack in syz.2.93 (624): 200000005000-200000008000 (200000004000) [ 41.909208][ T31] usb 4-1: Manufacturer: syz [ 41.924322][ T31] usb 4-1: SerialNumber: syz [ 41.957323][ T31] usb 4-1: config 0 descriptor?? [ 41.967203][ T625] netlink: 128 bytes leftover after parsing attributes in process `syz.1.87'. [ 41.976970][ T31] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 41.977978][ T624] CPU: 0 UID: 0 PID: 624 Comm: syz.2.93 Not tainted syzkaller #0 cf5fa0ddcc8aee0a441189d525bb38feba3bb086 [ 41.978023][ T624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 41.978035][ T624] Call Trace: [ 41.978042][ T624] [ 41.978049][ T624] __dump_stack+0x21/0x30 [ 41.978080][ T624] dump_stack_lvl+0x10c/0x190 [ 41.978107][ T624] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.978130][ T624] ? find_vma+0xcd/0x110 [ 41.978158][ T624] ? is_bpf_text_address+0x17b/0x1a0 [ 41.978180][ T624] dump_stack+0x19/0x20 [ 41.978204][ T624] __get_user_pages+0x1e34/0x22d0 [ 41.978226][ T624] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 41.978253][ T624] ? __kasan_check_write+0x18/0x20 [ 41.978282][ T624] ? down_read_killable+0x79/0xf0 [ 41.978301][ T624] ? populate_vma_page_range+0x230/0x230 [ 41.978332][ T624] __gup_longterm_locked+0xcb1/0x1580 [ 41.978355][ T624] ? finish_task_switch+0x13a/0x780 [ 41.978378][ T624] ? __schedule+0x132a/0x1df0 [ 41.978401][ T624] ? __pte_offset_map+0x1b0/0x230 [ 41.978426][ T624] gup_fast_fallback+0x12ae/0x14a0 [ 41.978450][ T624] ? get_user_pages_fast_only+0xc0/0xc0 [ 41.978473][ T624] ? __cfi_check_preempt_wakeup_fair+0x10/0x10 [ 41.978499][ T624] ? preempt_schedule_thunk+0x1a/0x40 [ 41.978519][ T624] get_user_pages_fast+0x73/0xb0 [ 41.978540][ T624] get_futex_key+0x24d/0x930 [ 41.978558][ T624] ? __cfi_get_futex_key+0x10/0x10 [ 41.978575][ T624] ? __kasan_check_write+0x18/0x20 [ 41.978602][ T624] futex_wake+0x120/0x900 [ 41.978626][ T624] ? __cfi_futex_wake+0x10/0x10 [ 41.978646][ T624] ? mas_walk+0x3f7/0x650 [ 41.978671][ T624] ? userfaultfd_unmap_complete+0x279/0x2d0 [ 41.978690][ T624] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 41.978709][ T624] ? mas_find+0x358/0x5f0 [ 41.978726][ T624] ? __kasan_check_write+0x18/0x20 [ 41.978751][ T624] do_futex+0x356/0x500 [ 41.978769][ T624] ? __cfi_do_futex+0x10/0x10 [ 41.978787][ T624] ? __vm_munmap+0x2c7/0x370 [ 41.978805][ T624] __se_sys_futex+0x28f/0x300 [ 41.978823][ T624] ? __x64_sys_futex+0x110/0x110 [ 41.978842][ T624] ? __kasan_check_write+0x18/0x20 [ 41.978867][ T624] __x64_sys_futex+0xe9/0x110 [ 41.978886][ T624] x64_sys_call+0x227f/0x2ee0 [ 41.978911][ T624] do_syscall_64+0x58/0xf0 [ 41.978932][ T624] ? clear_bhb_loop+0x50/0xa0 [ 41.978951][ T624] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.978978][ T624] RIP: 0033:0x7fa65d58ebe9 [ 41.978994][ T624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.979008][ T624] RSP: 002b:00007fa65e485038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 41.979030][ T624] RAX: ffffffffffffffda RBX: 00007fa65d7b5fa0 RCX: 00007fa65d58ebe9 [ 41.979045][ T624] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000040c0 [ 41.979057][ T624] RBP: 00007fa65d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 41.979069][ T624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.979081][ T624] R13: 00007fa65d7b6038 R14: 00007fa65d7b5fa0 R15: 00007ffd495e2818 [ 41.979096][ T624] [ 42.282521][ T632] rust_binder: 36: no such ref 2 [ 42.312529][ T31] usb 4-1: No valid video chain found. [ 42.319432][ T62] usb 2-1: 0:2 : does not exist [ 42.322064][ T31] usb 4-1: USB disconnect, device number 3 [ 42.333802][ T62] usb 2-1: USB disconnect, device number 3 [ 42.362453][ T634] rust_binder: Fixups oob 164 166 363 196 [ 42.362477][ T634] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 42.369196][ T634] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.386462][ T634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79 [ 42.434949][ T640] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 42.444758][ T640] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.840606][ T659] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 42.986881][ T65] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 43.136854][ T65] usb 4-1: Using ep0 maxpacket: 8 [ 43.143378][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 43.153806][ T65] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 43.161971][ T65] usb 4-1: config 0 has no interface number 0 [ 43.168153][ T65] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 43.191855][ T65] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 16394, setting to 1024 [ 43.220263][ T65] usb 4-1: config 0 interface 88 has no altsetting 0 [ 43.243437][ T65] usb 4-1: string descriptor 0 read error: -22 [ 43.252667][ T65] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 43.262640][ T65] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 43.271356][ T65] usb 4-1: config 0 descriptor?? [ 43.278051][ T65] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input4 [ 43.478372][ T61] usb 4-1: USB disconnect, device number 4 [ 43.487170][ T62] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 43.647292][ T62] usb 1-1: unable to get BOS descriptor or descriptor too short [ 43.660729][ T62] usb 1-1: not running at top speed; connect to a high speed hub [ 43.669810][ T62] usb 1-1: config 14 has an invalid interface number: 224 but max is 1 [ 43.678346][ T62] usb 1-1: config 14 has no interface number 0 [ 43.686635][ T678] overlay: ./file0 is not a directory [ 43.689198][ T62] usb 1-1: config 14 interface 1 altsetting 228 endpoint 0x1 has invalid maxpacket 1535, setting to 64 [ 43.703236][ T680] rust_binder: Write failure EFAULT in pid:100 [ 43.703683][ T678] netlink: 'syz.3.108': attribute type 1 has an invalid length. [ 43.708170][ T62] usb 1-1: config 14 interface 224 altsetting 255 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 43.719458][ T678] netlink: 416 bytes leftover after parsing attributes in process `syz.3.108'. [ 43.735218][ T62] usb 1-1: config 14 interface 1 has no altsetting 0 [ 43.744915][ T62] usb 1-1: config 14 interface 224 has no altsetting 0 [ 43.747788][ T678] Zero length message leads to an empty skb [ 43.765725][ T62] usb 1-1: string descriptor 0 read error: -22 [ 43.766435][ T686] netlink: 76 bytes leftover after parsing attributes in process `syz.2.112'. [ 43.772055][ T62] usb 1-1: Dual-Role OTG device on HNP port [ 43.787269][ T686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.112'. [ 43.787340][ T62] usb 1-1: New USB device found, idVendor=16d8, idProduct=7253, bcdDevice=3e.16 [ 43.787475][ T684] binder: Unknown parameter 'func' [ 43.796217][ T62] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.808375][ T678] rust_binder: Write failure EFAULT in pid:90 [ 43.811812][ T62] hub 1-1:14.1: Invalid hub with more than one config or interface [ 43.867005][ T62] hub 1-1:14.1: probe with driver hub failed with error -22 [ 44.017811][ T10] usb 1-1: USB disconnect, device number 8 [ 44.116856][ T65] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 44.166865][ T62] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 44.266879][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 44.273201][ T65] usb 2-1: config 0 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 44.283259][ T693] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 44.290860][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 44.298905][ T65] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 44.308097][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.316087][ T65] usb 2-1: Product: syz [ 44.320346][ T65] usb 2-1: Manufacturer: syz [ 44.325022][ T65] usb 2-1: SerialNumber: syz [ 44.330444][ T62] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.340386][ T65] usb 2-1: config 0 descriptor?? [ 44.345385][ T62] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 44.354586][ T62] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.362794][ T688] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 44.363583][ T62] usb 3-1: config 0 descriptor?? [ 44.449452][ T693] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 44.458682][ T693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.466681][ T693] usb 4-1: Product: syz [ 44.470918][ T693] usb 4-1: Manufacturer: syz [ 44.475550][ T693] usb 4-1: SerialNumber: syz [ 44.575912][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 44.575952][ T36] audit: type=1400 audit(1756201869.670:236): avc: denied { create } for pid=687 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.602308][ T65] ipheth 2-1:0.0: ipheth_get_macaddr: usb_control_msg: -71 [ 44.616916][ T65] ipheth 2-1:0.0: probe with driver ipheth failed with error -71 [ 44.631999][ T65] usb 2-1: USB disconnect, device number 4 [ 44.668491][ T705] FAT-fs (rnullb0): bogus number of reserved sectors [ 44.675273][ T705] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 44.685876][ T61] usb 4-1: USB disconnect, device number 5 [ 44.803267][ T62] dragonrise 0003:0079:0006.0002: item fetching failed at offset 4/5 [ 44.821804][ T62] dragonrise 0003:0079:0006.0002: parse failed [ 44.833986][ T62] dragonrise 0003:0079:0006.0002: probe with driver dragonrise failed with error -22 [ 45.005811][ T65] usb 3-1: USB disconnect, device number 8 [ 45.136900][ T62] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 45.177824][ T720] rust_binder: inc_ref_done called when no active inc_refs [ 45.202664][ T723] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.224379][ T726] overlayfs: failed to resolve './file0': -2 [ 45.269244][ T36] audit: type=1400 audit(1756201870.370:237): avc: denied { write } for pid=725 comm="syz.0.125" name="arp" dev="proc" ino=4026532361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 45.316820][ T62] usb 4-1: Invalid ep0 maxpacket: 64 [ 45.446839][ T62] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 45.610484][ T735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=735 comm=syz.2.128 [ 45.616836][ T62] usb 4-1: Invalid ep0 maxpacket: 64 [ 45.623538][ T735] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4294967292 [ 45.648212][ T62] usb usb4-port1: attempt power cycle [ 45.684767][ T36] audit: type=1400 audit(1756201870.780:238): avc: denied { read } for pid=740 comm="syz.2.130" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 45.718785][ T745] netlink: 64 bytes leftover after parsing attributes in process `syz.1.132'. [ 45.728802][ T745] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 368, limit: 4256, size: 18446744073709551588) [ 45.728825][ T745] rust_binder: Error while translating object. [ 45.741040][ T36] audit: type=1400 audit(1756201870.780:239): avc: denied { open } for pid=740 comm="syz.2.130" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 45.772858][ T745] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.772891][ T745] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119 [ 45.779467][ T36] audit: type=1400 audit(1756201870.890:240): avc: denied { accept } for pid=744 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 45.813871][ T36] audit: type=1400 audit(1756201870.910:241): avc: denied { mount } for pid=740 comm="syz.2.130" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 45.846736][ T36] audit: type=1400 audit(1756201870.920:242): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 45.904450][ T36] audit: type=1400 audit(1756201871.000:243): avc: denied { read write } for pid=756 comm="syz.0.137" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 45.905328][ T757] netlink: 'syz.2.136': attribute type 11 has an invalid length. [ 45.928376][ T36] audit: type=1400 audit(1756201871.000:244): avc: denied { open } for pid=756 comm="syz.0.137" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 45.959489][ T36] audit: type=1326 audit(1756201871.000:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=755 comm="syz.2.136" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa65d58ebe9 code=0x0 [ 46.046836][ T62] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 46.077190][ T62] usb 4-1: Invalid ep0 maxpacket: 64 [ 46.104038][ T774] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 46.216849][ T62] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 46.250253][ T781] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.250293][ T781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134 [ 46.257206][ T62] usb 4-1: Invalid ep0 maxpacket: 64 [ 46.284802][ T62] usb usb4-port1: unable to enumerate USB device [ 46.454527][ T792] SELinux: failed to load policy [ 46.830155][ T797] rust_binder: Error in use_page_slow: ESRCH [ 46.830174][ T797] rust_binder: use_range failure ESRCH [ 46.836361][ T797] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 46.841978][ T797] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 46.849893][ T797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:121 [ 47.436873][ T62] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 47.596857][ T62] usb 4-1: Using ep0 maxpacket: 16 [ 47.603324][ T62] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 47.613529][ T62] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.624687][ T62] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.634487][ T62] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 47.647363][ T62] usb 4-1: config 7 interface 0 has no altsetting 0 [ 47.653997][ T62] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 47.666307][ T62] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.701152][ T810] rust_binder: Write failure EFAULT in pid:125 [ 48.262991][ T829] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 368, limit: 4256, size: 18446744073709551588) [ 48.269304][ T829] rust_binder: Error while translating object. [ 48.281898][ T829] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.283338][ T807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.289097][ T829] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:131 [ 48.315558][ T807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.352554][ T831] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 48.352581][ T831] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 48.362995][ T831] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:133 [ 48.363313][ T807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.421711][ T807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.500413][ T834] /dev/rnullb0: Can't open blockdev [ 48.642202][ T62] usbhid 4-1:7.0: can't add hid device: -71 [ 48.652531][ T62] usbhid 4-1:7.0: probe with driver usbhid failed with error -71 [ 48.671531][ T62] usb 4-1: USB disconnect, device number 10 [ 49.316824][ T62] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 49.486835][ T62] usb 1-1: Using ep0 maxpacket: 16 [ 49.493142][ T62] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 49.503384][ T62] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.514340][ T62] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.524110][ T62] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 49.537099][ T62] usb 1-1: config 7 interface 0 has no altsetting 0 [ 49.543779][ T62] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 49.552974][ T62] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.609210][ T876] rust_binder: Error while translating object. [ 49.609259][ T876] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.615725][ T876] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 49.636596][ T878] binder: Unknown parameter 'uid<00000000000000000000' [ 49.666956][ T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 49.675174][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 49.675210][ T36] audit: type=1400 audit(1756201874.770:260): avc: denied { accept } for pid=879 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.774761][ T884] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 49.782261][ T884] rust_binder: 150: no such ref 1 [ 49.787387][ T884] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 49.983794][ T62] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0003/input/input5 [ 50.029198][ T62] kye 0003:0458:5010.0003: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 50.249139][ T10] usb 1-1: USB disconnect, device number 9 [ 50.690957][ T36] audit: type=1400 audit(1756201875.790:261): avc: denied { getopt } for pid=902 comm="syz.3.188" laddr=fe80::a8aa:aaff:feaa:aa16 lport=55514 faddr=ff02::1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.760214][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 50.822822][ T45] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 50.824200][ T889] fido_id[889]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 50.833233][ T45] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.858235][ T45] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.868080][ T45] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 50.880972][ T45] usb 3-1: config 7 interface 0 has no altsetting 0 [ 50.887646][ T45] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 50.896962][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.972346][ T36] audit: type=1400 audit(1756201876.070:262): avc: denied { mount } for pid=911 comm="syz.1.192" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 51.108256][ T36] audit: type=1400 audit(1756201876.210:263): avc: denied { write } for pid=867 comm="syz.2.175" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.133453][ T36] audit: type=1400 audit(1756201876.210:264): avc: denied { open } for pid=867 comm="syz.2.175" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.156934][ T36] audit: type=1400 audit(1756201876.210:265): avc: denied { ioctl } for pid=867 comm="syz.2.175" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.258598][ T36] audit: type=1400 audit(1756201876.360:266): avc: denied { getopt } for pid=928 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.307878][ T934] rust_binder: 927 RLIMIT_NICE not set [ 51.308997][ T36] audit: type=1400 audit(1756201876.410:267): avc: denied { create } for pid=926 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 51.353410][ T944] ======================================================= [ 51.353410][ T944] WARNING: The mand mount option has been deprecated and [ 51.353410][ T944] and is ignored by this kernel. Remove the mand [ 51.353410][ T944] option from the mount to silence this warning. [ 51.353410][ T944] ======================================================= [ 51.401468][ T944] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 51.436592][ T36] audit: type=1400 audit(1756201876.530:268): avc: denied { mount } for pid=951 comm="syz.3.204" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 51.459601][ T955] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 51.466568][ T36] audit: type=1400 audit(1756201876.570:269): avc: denied { watch } for pid=951 comm="syz.3.204" path="/54/file0" dev="tmpfs" ino=322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 51.538316][ T45] usbhid 3-1:7.0: can't add hid device: -71 [ 51.548572][ T45] usbhid 3-1:7.0: probe with driver usbhid failed with error -71 [ 51.560835][ T45] usb 3-1: USB disconnect, device number 9 [ 51.921881][ T966] tipc: Can't bind to reserved service type 1 [ 52.206813][ T45] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 52.367282][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 52.389806][ T977] overlayfs: failed to clone upperpath [ 52.396910][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.427588][ T983] /dev/rnullb0: Can't open blockdev [ 52.439946][ T45] usb 3-1: config 0 has no interfaces? [ 52.445470][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 52.449362][ T987] rust_binder: 134: no such ref 0 [ 52.460114][ T987] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 52.478533][ T995] rust_binder: 134: no such ref 0 [ 52.495750][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.512520][ T997] netlink: 104 bytes leftover after parsing attributes in process `syz.1.218'. [ 52.513387][ T45] usb 3-1: config 0 descriptor?? [ 52.782450][ T1025] binder: Unknown parameter 'fscontext?}' [ 52.812644][ T1029] kvm: kvm [1026]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 52.821240][ T1029] kvm: kvm [1026]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 52.859181][ T1031] mmap: syz.1.228 (1031) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.856020][ T1062] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 53.868194][ T1062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 54.283210][ T1066] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=1066 comm=syz.1.243 [ 54.434502][ T1073] fuse: Bad value for 'fd' [ 54.536818][ T444] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 54.696813][ T444] usb 2-1: Using ep0 maxpacket: 32 [ 54.703242][ T444] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 54.712128][ T444] usb 2-1: config 0 has no interface number 0 [ 54.718563][ T444] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 54.728876][ T444] usb 2-1: config 0 interface 196 has no altsetting 0 [ 54.737269][ T444] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 54.746483][ T444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.754844][ T444] usb 2-1: Product: syz [ 54.759379][ T444] usb 2-1: Manufacturer: syz [ 54.764051][ T444] usb 2-1: SerialNumber: syz [ 54.769841][ T444] usb 2-1: config 0 descriptor?? [ 54.777271][ T1066] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 55.036224][ T693] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 55.044411][ T10] usb 3-1: USB disconnect, device number 10 [ 55.186657][ T444] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 2 bytes [ 55.202441][ T1100] netlink: 68 bytes leftover after parsing attributes in process `syz.3.255'. [ 55.211501][ T444] ipheth 2-1:0.196: probe with driver ipheth failed with error -22 [ 55.346657][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 55.346676][ T36] audit: type=1400 audit(1756201887.442:290): avc: denied { read } for pid=1107 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.392507][ T61] usb 2-1: USB disconnect, device number 5 [ 55.487849][ T693] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 55.502344][ T1118] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 55.505614][ T693] usb 1-1: config 0 has no interface number 1 [ 55.532704][ T693] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 55.545219][ T693] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 55.567453][ T693] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 55.586636][ T693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 55.596863][ T693] usb 1-1: SerialNumber: syz [ 55.602382][ T693] usb 1-1: config 0 descriptor?? [ 55.615598][ T1122] rust_binder: Write failure EFAULT in pid:171 [ 55.733415][ T1126] kvm: apic: phys broadcast and lowest prio [ 55.817012][ T1036] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.817040][ T1036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:151 [ 55.829562][ T693] usb 1-1: Found UVC 0.00 device (0002:0000) [ 55.856816][ T693] usb 1-1: No valid video chain found. [ 55.864289][ T693] usb 1-1: USB disconnect, device number 10 [ 56.127835][ T36] audit: type=1400 audit(1756201888.232:291): avc: denied { read } for pid=1149 comm="syz.1.269" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.428028][ T1168] netlink: 44 bytes leftover after parsing attributes in process `syz.3.274'. [ 56.488028][ T1175] fuse: Bad value for 'fd' [ 56.546852][ T693] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 56.565527][ T36] audit: type=1400 audit(1756201888.662:292): avc: denied { block_suspend } for pid=1176 comm="syz.3.278" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.696807][ T693] usb 2-1: device descriptor read/64, error -71 [ 56.890802][ T1188] rust_binder: Write failure EFAULT in pid:167 [ 56.927526][ T36] audit: type=1400 audit(1756201889.032:293): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 56.937722][ T1193] rust_binder: Write failure EFAULT in pid:172 [ 56.956822][ T693] usb 2-1: device descriptor read/64, error -71 [ 57.095408][ T1204] fuse: Bad value for 'fd' [ 57.136701][ T1206] netlink: 180 bytes leftover after parsing attributes in process `syz.0.287'. [ 57.226815][ T693] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 57.366820][ T693] usb 2-1: device descriptor read/64, error -71 [ 57.385864][ T1218] netlink: 'syz.3.291': attribute type 16 has an invalid length. [ 57.401404][ T1218] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.291'. [ 57.596803][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 57.607683][ T693] usb 2-1: device descriptor read/64, error -71 [ 57.726916][ T693] usb usb2-port1: attempt power cycle [ 57.768258][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 57.776956][ T10] usb 1-1: config 7 has an invalid interface number: 188 but max is 0 [ 57.785395][ T10] usb 1-1: config 7 has no interface number 0 [ 57.792012][ T10] usb 1-1: config 7 interface 188 altsetting 7 endpoint 0x1 has invalid maxpacket 5095, setting to 64 [ 57.803636][ T10] usb 1-1: config 7 interface 188 has no altsetting 0 [ 57.812319][ T10] usb 1-1: New USB device found, idVendor=054c, idProduct=0010, bcdDevice= 5.06 [ 57.821870][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.830270][ T10] usb 1-1: Product: syz [ 57.834624][ T10] usb 1-1: Manufacturer: syz [ 57.839604][ T10] usb 1-1: SerialNumber: syz [ 57.953773][ T1220] netlink: 'syz.3.292': attribute type 21 has an invalid length. [ 57.961707][ T1220] netlink: 388 bytes leftover after parsing attributes in process `syz.3.292'. [ 58.047425][ T1213] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 58.076815][ T693] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 58.084386][ T1213] rust_binder: Write failure EINVAL in pid:192 [ 58.087233][ T10] usb-storage 1-1:7.188: USB Mass Storage device detected [ 58.322127][ T693] usb 2-1: device descriptor read/8, error -71 [ 58.333132][ T10] usb-storage 1-1:7.188: Quirks match for vid 054c pid 0010: 1 [ 58.383618][ T1233] fuse: Bad value for 'fd' [ 58.392834][ T10] usb 1-1: USB disconnect, device number 11 [ 58.457828][ T693] usb 2-1: device descriptor read/8, error -71 [ 58.706869][ T693] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 58.728327][ T693] usb 2-1: device descriptor read/8, error -71 [ 58.744280][ T36] audit: type=1400 audit(1756201890.842:294): avc: denied { remount } for pid=1244 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 58.744294][ T1245] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 58.744858][ T1245] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 58.876112][ T693] usb 2-1: device descriptor read/8, error -71 [ 59.006903][ T693] usb usb2-port1: unable to enumerate USB device [ 59.083172][ T36] audit: type=1400 audit(1756201891.182:295): avc: denied { append } for pid=1278 comm="syz.0.311" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 59.117060][ T1281] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 59.124125][ T1281] rust_binder: Write failure EINVAL in pid:220 [ 59.208660][ T1289] rust_binder: Write failure EFAULT in pid:194 [ 59.386875][ T693] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 59.426707][ T36] audit: type=1400 audit(1756201891.522:296): avc: denied { mounton } for pid=1295 comm="syz.1.319" path="/syzcgroup/unified/syz1" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 59.426833][ T1296] FAT-fs (rnullb0): bogus number of reserved sectors [ 59.457403][ T1296] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 59.477273][ T36] audit: type=1400 audit(1756201891.582:297): avc: denied { mounton } for pid=1297 comm="syz.1.320" path="/proc/251/mountinfo" dev="proc" ino=11273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 59.516818][ T444] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 59.557912][ T693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.570096][ T693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.583463][ T693] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 59.596647][ T693] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 59.606091][ T693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.616141][ T693] usb 1-1: config 0 descriptor?? [ 59.668559][ T444] usb 3-1: unable to get BOS descriptor or descriptor too short [ 59.676647][ T444] usb 3-1: not running at top speed; connect to a high speed hub [ 59.685318][ T444] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 59.693485][ T444] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.703725][ T444] usb 3-1: config 0 has no interface number 0 [ 59.709847][ T444] usb 3-1: config 0 interface 88 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 59.722858][ T444] usb 3-1: config 0 interface 88 has no altsetting 0 [ 59.731708][ T444] usb 3-1: language id specifier not provided by device, defaulting to English [ 59.742091][ T444] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 59.751178][ T444] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 59.759302][ T444] usb 3-1: Product: syz [ 59.763568][ T444] usb 3-1: Manufacturer: syz [ 59.768192][ T444] usb 3-1: SerialNumber: syz [ 59.773853][ T444] usb 3-1: config 0 descriptor?? [ 59.856849][ T443] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 59.981575][ T1292] tmpfs: Unsupported parameter 'mpol' [ 59.990974][ T444] usb 3-1: USB disconnect, device number 11 [ 60.008110][ T443] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.019422][ T443] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.031459][ T693] usbhid 1-1:0.0: can't add hid device: -71 [ 60.037995][ T693] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 60.046007][ T443] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 60.056113][ T693] usb 1-1: USB disconnect, device number 12 [ 60.062101][ T443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.071124][ T443] usb 2-1: Product: syz [ 60.075927][ T443] usb 2-1: Manufacturer: syz [ 60.080754][ T443] usb 2-1: SerialNumber: syz [ 60.086044][ T443] usb 2-1: config 0 descriptor?? [ 60.092263][ T443] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 60.098888][ T443] usb 2-1: No valid video chain found. [ 60.293782][ T1305] 9pnet_fd: Insufficient options for proto=fd [ 60.354049][ T1305] rust_binder: Write failure EINVAL in pid:258 [ 60.354765][ T45] usb 2-1: USB disconnect, device number 10 [ 60.609731][ T45] rust_binder: 1306: removing orphan mapping 0:24 [ 60.616256][ T45] rust_binder: 1306: removing orphan mapping 24:96 [ 60.649516][ T36] audit: type=1400 audit(1756201892.752:298): avc: denied { read } for pid=1320 comm="syz.0.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.649729][ T1323] capability: warning: `syz.0.329' uses deprecated v2 capabilities in a way that may be insecure [ 60.680456][ T1321] rust_binder: 233: no such ref 3 [ 60.704043][ T36] audit: type=1400 audit(1756201892.792:299): avc: denied { accept } for pid=1324 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.844466][ T36] audit: type=1400 audit(1756201892.942:300): avc: denied { read } for pid=1336 comm="syz.0.334" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.872391][ T36] audit: type=1400 audit(1756201892.942:301): avc: denied { open } for pid=1336 comm="syz.0.334" path="/84/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.036848][ T444] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 61.148161][ T1343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.156715][ T1343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.186857][ T444] usb 3-1: Using ep0 maxpacket: 16 [ 61.193106][ T444] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.204205][ T444] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.214007][ T444] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 61.223171][ T444] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.231862][ T444] usb 3-1: config 0 descriptor?? [ 61.236847][ T693] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 61.481785][ T1351] netlink: 679 bytes leftover after parsing attributes in process `syz.3.338'. [ 61.536924][ T1363] fuse: Bad value for 'fd' [ 61.646203][ T444] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5012.0004/input/input6 [ 61.659386][ T444] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5012.0004/input/input7 [ 61.686992][ T444] kye 0003:0458:5012.0004: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.2-1/input0 [ 61.729276][ T1385] /dev/md0: Can't lookup blockdev [ 62.031539][ T1393] rust_binder: Error while translating object. [ 62.031577][ T1393] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 62.042943][ T1393] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:257 [ 62.179674][ T1407] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 62.182173][ T45] usb 3-1: USB disconnect, device number 12 [ 62.313696][ T36] audit: type=1400 audit(1756201894.412:302): avc: denied { write } for pid=1420 comm="syz.3.363" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 62.363953][ T693] rust_binder: 1408: removing orphan mapping 0:24 [ 62.392200][ T1429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 62.411240][ T1429] netlink: 72 bytes leftover after parsing attributes in process `syz.0.367'. [ 62.666880][ T693] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 62.796823][ T693] usb 1-1: device descriptor read/64, error -71 [ 62.840276][ T36] audit: type=1400 audit(1756201894.942:303): avc: denied { create } for pid=1436 comm="syz.2.370" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 62.861506][ T36] audit: type=1400 audit(1756201894.972:304): avc: denied { write } for pid=1436 comm="syz.2.370" name="file0" dev="tmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 62.883857][ T36] audit: type=1400 audit(1756201894.972:305): avc: denied { open } for pid=1436 comm="syz.2.370" path="/66/file0" dev="tmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 62.912734][ T36] audit: type=1400 audit(1756201895.002:306): avc: denied { unlink } for pid=292 comm="syz-executor" name="file0" dev="tmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 63.066840][ T693] usb 1-1: device descriptor read/64, error -71 [ 63.114004][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.270369][ T1479] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.297734][ T1478] ------------[ cut here ]------------ [ 63.298410][ T36] audit: type=1400 audit(1756201895.402:307): avc: denied { load_policy } for pid=1477 comm="syz.1.382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 63.303258][ T1478] WARNING: CPU: 1 PID: 1478 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 63.333036][ T1478] Modules linked in: [ 63.335883][ T693] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 63.336967][ T1478] CPU: 1 UID: 0 PID: 1478 Comm: syz.1.382 Not tainted syzkaller #0 cf5fa0ddcc8aee0a441189d525bb38feba3bb086 [ 63.336995][ T1478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 63.366134][ T1478] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 63.372109][ T1478] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d b1 25 ee 05 00 0f 85 be 00 00 00 c6 05 a4 25 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 63.392004][ T1478] RSP: 0018:ffffc900100bf680 EFLAGS: 00010246 [ 63.398228][ T1478] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 63.406241][ T1478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900100bf738 [ 63.414531][ T1478] RBP: ffffc900100bf7a8 R08: ffffc900100bf737 R09: 0000000000000000 [ 63.422556][ T1478] R10: ffffc900100bf720 R11: fffff52002017ee7 R12: ffffc900100bf6c0 [ 63.430629][ T1478] R13: dffffc0000000000 R14: 1ffff92002017ed4 R15: 0000000000000000 [ 63.438650][ T1478] FS: 00007faa023b46c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 63.447742][ T1478] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.454400][ T1478] CR2: 0000200000006000 CR3: 00000001033a8000 CR4: 00000000003526b0 [ 63.462454][ T1478] Call Trace: [ 63.465752][ T1478] [ 63.468749][ T1478] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 63.474503][ T1478] ? kasan_save_alloc_info+0x40/0x50 [ 63.476800][ T693] usb 1-1: device descriptor read/64, error -71 [ 63.479939][ T1478] ? __kasan_slab_alloc+0x73/0x90 [ 63.491229][ T1478] ? hashtab_init+0xdb/0x1f0 [ 63.495966][ T1478] ___kmalloc_large_node+0x9c/0x1d0 [ 63.501246][ T1478] ? ebitmap_read+0x21d/0x990 [ 63.505964][ T1478] ? hashtab_init+0xdb/0x1f0 [ 63.510609][ T1478] __kmalloc_large_node_noprof+0x1e/0xe0 [ 63.516286][ T1478] ? hashtab_init+0xdb/0x1f0 [ 63.521044][ T1478] __kmalloc_noprof+0x26d/0x450 [ 63.525931][ T1478] hashtab_init+0xdb/0x1f0 [ 63.530411][ T1478] ? policydb_read+0x86f/0x28c0 [ 63.535390][ T1478] symtab_init+0x44/0x70 [ 63.539697][ T1478] policydb_read+0x8fe/0x28c0 [ 63.544588][ T1478] ? kasan_save_alloc_info+0x40/0x50 [ 63.550085][ T1478] ? __cfi_policydb_read+0x10/0x10 [ 63.555237][ T1478] ? security_load_policy+0x128/0x12f0 [ 63.560767][ T1478] security_load_policy+0x162/0x12f0 [ 63.566171][ T1478] ? irqentry_exit+0x4a/0x60 [ 63.570825][ T1478] ? exc_page_fault+0x66/0xc0 [ 63.575536][ T1478] ? asm_exc_page_fault+0x2b/0x30 [ 63.580728][ T1478] ? __cfi_security_load_policy+0x10/0x10 [ 63.586657][ T1478] ? rep_movs_alternative+0x4a/0xa0 [ 63.592133][ T1478] sel_write_load+0x298/0x5e0 [ 63.596865][ T1478] ? futex_wait+0x29a/0x7a0 [ 63.601404][ T1478] ? __cfi_sel_write_load+0x10/0x10 [ 63.606634][ T1478] ? __cfi_futex_wait+0x10/0x10 [ 63.611569][ T1478] ? bpf_lsm_file_permission+0xd/0x20 [ 63.616993][ T1478] ? __cfi_sel_write_load+0x10/0x10 [ 63.622239][ T1478] vfs_write+0x3c0/0xe80 [ 63.626523][ T1478] ? __cfi_vfs_write+0x10/0x10 [ 63.631457][ T1478] ? __kasan_check_write+0x18/0x20 [ 63.636601][ T1478] ? mutex_lock+0x92/0x1c0 [ 63.636916][ T1480] rust_binder: Error in use_page_slow: ESRCH [ 63.641125][ T1478] ? __cfi_mutex_lock+0x10/0x10 [ 63.641257][ T1480] rust_binder: use_range failure ESRCH [ 63.647142][ T1478] ? __fget_files+0x2c5/0x340 [ 63.647170][ T1478] ksys_write+0x141/0x250 [ 63.654357][ T1480] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 63.657524][ T1478] ? xfd_validate_state+0x68/0x150 [ 63.677502][ T1480] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 63.679568][ T1478] ? __cfi_ksys_write+0x10/0x10 [ 63.685032][ T1480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:278 [ 63.688888][ T1478] ? __kasan_check_write+0x18/0x20 [ 63.708042][ T1478] ? fpregs_restore_userregs+0x11d/0x260 [ 63.713890][ T1478] __x64_sys_write+0x7f/0x90 [ 63.718538][ T1478] x64_sys_call+0x271c/0x2ee0 [ 63.723257][ T1478] do_syscall_64+0x58/0xf0 [ 63.727822][ T1478] ? clear_bhb_loop+0x50/0xa0 [ 63.732612][ T1478] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.736799][ T693] usb 1-1: device descriptor read/64, error -71 [ 63.738655][ T1478] RIP: 0033:0x7faa0158ebe9 [ 63.749358][ T1478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.769734][ T1478] RSP: 002b:00007faa023b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 63.778194][ T1478] RAX: ffffffffffffffda RBX: 00007faa017b5fa0 RCX: 00007faa0158ebe9 [ 63.786203][ T1478] RDX: 000000000000603f RSI: 0000200000000000 RDI: 0000000000000006 [ 63.794314][ T1478] RBP: 00007faa01611e19 R08: 0000000000000000 R09: 0000000000000000 [ 63.802603][ T1478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.810629][ T1478] R13: 00007faa017b6038 R14: 00007faa017b5fa0 R15: 00007ffcadd55ed8 [ 63.818635][ T1478] [ 63.821668][ T1478] ---[ end trace 0000000000000000 ]--- [ 63.827740][ T1478] SELinux: failed to load policy [ 63.832846][ T1479] SELinux: failed to load policy [ 63.846918][ T693] usb usb1-port1: attempt power cycle [ 64.196861][ T693] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 64.217860][ T693] usb 1-1: device descriptor read/8, error -71 [ 64.348010][ T693] usb 1-1: device descriptor read/8, error -71 [ 64.586855][ T693] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 64.608083][ T693] usb 1-1: device descriptor read/8, error -71 [ 64.738156][ T693] usb 1-1: device descriptor read/8, error -71 [ 64.846961][ T693] usb usb1-port1: unable to enumerate USB device