last executing test programs: 2.309993775s ago: executing program 2 (id=823): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xcb) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000480)={{r0}, "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"}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xfffffff7) r2 = socket$inet6(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r0, 0x6, 0xa, 0x9}) r4 = getpgrp(0x0) write$P9_RGETLOCK(r3, &(0x7f0000000100)={0x31, 0x37, 0x2, {0x0, 0x0, 0x7, r4, 0x13, './binderfs/binder1\x00'}}, 0x31) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/32, 0x20, 0x2020, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000080)=0x2, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x48, 0x0, &(0x7f0000000380)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000400)="f5f8bc844de1c02a7c9f049ef2cbefdd6ccc05c5c279cfffe3b1ae9eaf03bbac8fdf87c9ea45d4faace03589d639c417b54053f9f0950a9720cef8afcc1a6f9124bf7bcc5c3a6ae57145f63c85dfd263"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0x0, 0x0}) 2.309601715s ago: executing program 2 (id=824): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="6b1f9e", 0x3}], 0x1) syz_clone(0xf41a0400, 0x0, 0x17, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x8004e500, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) io_pgetevents(0x0, 0x8, 0x0, 0x0, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x8) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) 1.618699535s ago: executing program 0 (id=836): mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f0000000140), 0x5810, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0]) 1.559879596s ago: executing program 3 (id=837): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x40000, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1.559684566s ago: executing program 0 (id=838): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800010001000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000000008000100020000"], 0x1c}}, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x06') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x208080, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800010001000000"], 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000000008000100020000"], 0x1c}}, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x06') (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x208080, 0x0) (async) 1.557783607s ago: executing program 0 (id=839): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000140)={0x9, 0x5, 0x0, 0x9, 0x1}, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1e, 0x20, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f00000021c0)={'veth0_vlan\x00', {0x2, 0x0, @loopback}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000140)=0x7) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 1.512809327s ago: executing program 0 (id=840): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46a, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x7f}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "9540e45e"}]}}, 0x0}, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 1.447038248s ago: executing program 3 (id=841): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x145142, 0x0) r1 = fsopen(&(0x7f00000003c0)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) (async) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000001c0"]) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r2) (async) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}}, 0x108) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x4000010, r0, 0xf6c7f000) (async) timer_create(0x1, &(0x7f0000000340)={0x0, 0xe, 0x2, @thr={0x0, 0x0}}, 0x0) (async) sendfile(r0, r0, 0x0, 0xa121) 1.367714549s ago: executing program 2 (id=842): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) (async) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x800) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x0, 0x1fe47034, 0xf, 0x7fff, 0x5, 0xffff30b0, 0xfffffffc}, 0x1c) (async) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f00000001c0)="8a144507ae9fb7a0738358de3f447e0d1a76decb5c7dfd", 0x17}, {&(0x7f0000000200)="910a1c0e263c188b745789aeaf7c1965f3a8bb949795d467133ae0d5b7002d1acf358ae31dcffb830eb685873824e66874cd1b33a14ebb821b7e39e7359c704a7965ac18d20ddb8032b0c4499a28cb17743711291ef002daff3b9ee2a46cf1b188b4d3d64023358e4f89f15090507e4cc19c00f541c994727a9105831eabc958f16eaab7e34cfa33ac48836e235c188fbebba4961d03f60fed72fd0f0adcfc4ab6347c605132b17d622f4647a8840af853085eaf08ad6c973133138320f376bad02fcfc6b2c29cbf44cccb6caab784e2ead8efef59", 0xd5}, {&(0x7f0000000300)="d3f6acfc73c0f87dd945f543a41e24af216daca4143c431651be733a93495e0590904e78834431365dec517e054eb9b6ffff8a35bf5b477726bd68731d2571a33deac731fb5ae6ded11878c62e", 0x4d}, {&(0x7f0000000380)="50102ca617c2ada286036934a2033e0de90fcd38e879cb12e20bfe7afe73e91aa8e2c6ba94233d4ec2cc18e9b8c51ec4ffd8a5006b32101527243c5ef775ee5e5f0279c3da634329517be67d8483f8b592b88b96694d1167f2e6764f18b192c2f364cfef3d3e33a2de5b9c37fe58778aa19895db7bc654bd80f5335df273863830b7c3f20e35a5c71d", 0x89}, {&(0x7f0000000440)="82888e88855d9a74fd4d9149388838fa7377fd5ce6fbd051fcedac6a75ac861b14c5dfdaabfc0b672f35cd2f59cf305b584e68dee3f0c148181a8bfbd6c990e9edc736a520ac68d68fc0116144f7cd7785b0fe766b029ed58a719d3633c1eff1937d4754f7ab06412da7bf44286574badf806d25aea6b8c328cbceded4443977c22bbd6aec80c78c002d98f11e99b2ee4b2c17831597ae84d85bfc23f021507c8719eac7e60460c33261f9ce58deda3e26d151931b", 0xb5}], 0x5) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000580)={0x7, 0x0, 0x80000000, 0x1, 0x9, "0e1a179ed334ad402c4b058cae89ad088a736f", 0x2}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in=@empty}}, &(0x7f0000000740)=0xe8) (async, rerun: 64) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000900)={{{@in=@private, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000000a00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a40)={{{@in6=@private1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000b40)=0xe8) (async) r10 = geteuid() (async) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000c40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000002c80)='./file0\x00', &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r15 = getgid() setxattr$system_posix_acl(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='system.posix_acl_default\x00', &(0x7f0000002d40)={{}, {0x1, 0x6}, [{0x2, 0x5, r4}, {0x2, 0x6, r5}, {0x2, 0x6, r6}, {0x2, 0x7, r8}, {0x2, 0x6, 0xffffffffffffffff}, {0x2, 0x6, r9}, {0x2, 0x4, r10}], {}, [{0x8, 0x1, r11}, {0x8, 0x7, r13}, {0x8, 0x4, r14}, {0x8, 0x4, r15}], {0x10, 0x4}, {0x20, 0x1}}, 0x7c, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000002dc0)={0xffffffffffffffff, 0x2, 0x6, 0x180000}) (async, rerun: 64) r17 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002e00), 0x0, 0x0) (rerun: 64) clock_gettime(0x0, &(0x7f0000002e80)={0x0, 0x0}) ppoll(&(0x7f0000002e40)=[{r3, 0x2120}, {r17, 0x400a}, {r3, 0x21bae155667dc34e}, {r1, 0x1}, {r1, 0x2004}, {r16, 0x1012}, {r16, 0xa008}, {r16, 0xc}], 0x8, &(0x7f0000002ec0)={r18, r19+60000000}, &(0x7f0000002f00)={[0x4]}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r16, 0x29, 0x22, &(0x7f0000002f40)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000003040)=0xe8) stat(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r16, &(0x7f0000003140)={0x2b0, 0x0, r12, [{{0x1, 0x1, 0x8, 0x9, 0x7, 0x1ff, {0x6, 0x9, 0x6, 0x2, 0x200, 0x0, 0x7f, 0xd, 0xcd7, 0xc000, 0x1, r20, r13, 0x7, 0x101}}, {0x6, 0x5, 0xd, 0x800, '/dev/net/tun\x00'}}, {{0x5, 0x2, 0x1e18, 0x4, 0x1654, 0x80000, {0x4, 0x4, 0x1, 0xcbd7, 0xeb, 0xa, 0xffffffc0, 0x9, 0x14, 0x4000, 0x7fff, r5, r7, 0x2, 0x10000}}, {0x0, 0x4863288, 0x5, 0x8, ']}%()'}}, {{0x0, 0x3, 0x6, 0x4, 0x2, 0x4, {0x5, 0x401, 0x9, 0x7fffffff, 0x5, 0xac1, 0x4, 0x6, 0x1, 0xc000, 0x0, r21, r13, 0x8}}, {0x5, 0x58, 0x19, 0x9, 'system.posix_acl_default\x00'}}, {{0x6, 0x1, 0xd5b, 0x1, 0xd6, 0x1, {0x1, 0x8, 0x6, 0x9, 0x5, 0xf52, 0x0, 0xfffff800, 0x2, 0x6000, 0x10001, r4, r11, 0x0, 0x4}}, {0x2, 0xa1ea, 0x1, 0x5, '\''}}]}, 0x2b0) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x1c0e1000) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 1.362068739s ago: executing program 2 (id=843): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001100)=[{&(0x7f0000000000)="8b21097e", 0x4}, {0x0}], 0x2, 0x8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb100c117080081004803", 0x10000, 0xffffffffffffc117, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000080)={0x5, r1, 'id0\x00'}) splice(r0, 0x0, r4, 0x0, 0x3, 0x9) 1.358219369s ago: executing program 3 (id=844): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x4, 0x0) r1 = socket$inet6(0xa, 0x80000, 0xfffffffb) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0x9eb6, 0x4) bind$inet6(r1, &(0x7f0000f65000)={0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, '\x00', 0x35}, 0x2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000080)) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000180)="d534cb3c1fb34059bfdda7c8446b171c538028482bfc9ffb21bcf720fd768b9b05c08deaa5eb20486af67a3ff3a916f842ec93c4e3c52095a46089368a6ee0d5647fa1ea86f5309174d2fb59dffda39df3b86ecc4cf486a092581af62c35f77aba59e76a099a08fccb22ce23441076731be544f1494057ca4851bb66b79b70665886d30fd212ec9aaf10f5d811b9c61ed93224577405bb1916d2e9970ed1ca092ac6a0da31d3494a707e625a5ad33f35839dbb0ea05f1ece8233e9547b72", 0xbe}, {&(0x7f0000000000)="bd254eaccd7f305627601ab151524d4d950384b8751c4fcec8919bf64a141a17276783321f0a9ac6f21aea8f8a40e5a0d172bb78b182e57396f7191506a45184", 0x40}, {&(0x7f0000000d40)="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", 0x1000}], 0x3, 0x7) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x3]}, &(0x7f0000000080), 0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x2, 0x1, 0x37}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) write$cgroup_int(r4, 0x0, 0x0) socket$inet6(0xa, 0x800, 0x4) socket$netlink(0x10, 0x3, 0x13) recvfrom$inet6(r1, &(0x7f00000000c0), 0x0, 0x10022, 0x0, 0x0) 547.730982ms ago: executing program 2 (id=850): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x204f00, 0x1a6) getdents64(r0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fstat(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000240), 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000001c0)='.^$\'#{@\\@', 0x0) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffe) getresuid(0x0, 0x0, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(r3, &(0x7f0000000100)='./file0\x00', 0x5e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000980)={0x1f, 0xfff8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) listen(r4, 0xff) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000005c0), 0x4) syz_clone(0x400, &(0x7f0000000040)="38c767b5026d8157bd8d218806240ee1b0c100d49f5e1bab7c5a1f2a84037ab12fff8a2ff0fbcc25f6069856954ffa00066e989f5d0eb29c9d03a65c745994d9d9400ee6335cd41e8a053ec491fd836a96259a63cfcbdce9e5fd418122d647e64b073cc1717291aeb40bdca5c3e414d95165d98fe6650b74e83e66fa6aaf2decd76b361f31218a48e8b7f8a0505d5f76c8d5d5b093e93aad33f38abe22159544a12fbf715695f1402528", 0xaa, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000140)="17be2651663cf5c9aa12fff49c83265649f844a36d2ed27370d4c66b547be649bacfa73c8fb30cb81d4f5c37b60414841bd6a289e7bf5bd28ec7") ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000000)='\x06') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x44001) 527.962832ms ago: executing program 2 (id=851): r0 = epoll_create1(0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x14) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, 0x0, 0x0) getresuid(&(0x7f0000000240), &(0x7f0000000140), 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000001c0)="b85e098ee066b9040200000f32e304f30f09660f0fdaa066b9cd0b00000f320f01c5070f013b0f2214", 0x29}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) r6 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r7, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, 0x0) lseek(r6, 0x7fffffffffffffff, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r4, 0x4068aea3, &(0x7f0000000000)={0xcc, 0x0, 0x1}) r9 = creat(&(0x7f00000001c0)='./bus\x00', 0x11f) close(r9) inotify_init1(0x800) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) ioprio_set$pid(0x1, 0x0, 0x2007) 520.809502ms ago: executing program 1 (id=852): syz_clone3(&(0x7f0000000280)={0x220000000, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01030000000000000000010000000800010012000000080003"], 0x30}, 0x1, 0x0, 0x0, 0x4000064}, 0x40) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r2, &(0x7f0000000740), 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) (async) socket(0xa, 0x3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x81, @any, 0x0, 0x2}, 0xe) listen(r5, 0x5) (async, rerun: 64) r6 = socket$inet6(0xa, 0x80001, 0x0) (rerun: 64) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000001b80)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast1, 0x3}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) close_range(r4, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) unshare(0x62040200) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0x8}, {0x6}]}) (async) syz_init_net_socket$nl_generic(0xffffffffffffffff, 0x3, 0x10) (async) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000580)={'bridge_slave_0\x00', &(0x7f0000000500)=@ethtool_link_settings={0x4c, 0x1, 0x3, 0x6, 0x73, 0x8, 0x2, 0x1, 0x9, 0x4, [0xffffffff, 0x7fff, 0xa1f, 0x7, 0x7, 0x10, 0xe9, 0xffffffff]}}) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r7, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) 432.757933ms ago: executing program 3 (id=853): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) setrlimit(0xd, &(0x7f0000000000)={0x6, 0x8}) lsm_get_self_attr(0x68, &(0x7f00000015c0)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000040)=0x1020, 0x1) 432.388223ms ago: executing program 3 (id=854): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 398.312044ms ago: executing program 1 (id=855): ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000000000001100"]) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r4 = socket(0x28, 0x5, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r5, 0x0, 0x0) 363.450784ms ago: executing program 3 (id=856): sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0xc0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001080)="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", 0x10ce}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)="8ef0", 0x2}], 0x1}}], 0x2, 0x4000804) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000b95000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7e, 0x0, 0x0}, &(0x7f0000000180)=0x40) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="01030000000000000000010100000800f5ff11"], 0x30}, 0x1, 0x0, 0x0, 0x4000064}, 0x40) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) write$uinput_user_dev(r7, &(0x7f0000000780)={'syz1\x00', {0x7f, 0x1, 0x0, 0xe}, 0x41, [0x2, 0xfffffff7, 0x3, 0x6, 0x3, 0x8000, 0x5, 0x6c, 0x4, 0x4, 0xfff, 0x7, 0x9, 0xc, 0xfffffff9, 0x9936, 0x9, 0x8, 0x1, 0x7900000, 0x10001, 0xfb82, 0x148, 0xbb, 0x800, 0xf, 0x100, 0x4, 0x1, 0x400, 0x6, 0x4, 0x5, 0x0, 0xfffffffe, 0x2, 0x7, 0x6, 0x6, 0xb, 0x4, 0x80, 0xfffffff7, 0x0, 0x6, 0xc73, 0x80000001, 0x6, 0x7, 0x7, 0x1, 0x0, 0xbfc, 0x51, 0x7, 0x3, 0x3, 0xe5, 0x8, 0xfffffffd, 0x4, 0x7, 0x1fffc], [0x9, 0x4, 0x1, 0x7, 0x1ff, 0x0, 0x1, 0x5, 0x3, 0x1, 0x0, 0xff, 0x40, 0x5, 0x8, 0x1, 0x401, 0x2, 0x8, 0x64, 0x3307868e, 0x2, 0x6, 0x1, 0x7, 0x2, 0xc87, 0x1, 0x1ff, 0x7, 0x8, 0x8, 0x3, 0x8, 0x6, 0x6, 0x6, 0x2, 0xffffffff, 0x6, 0x2, 0xa, 0xf9b1, 0xfffffffe, 0x88, 0x9, 0x2, 0x5, 0xf, 0x7, 0xa5d, 0x2, 0x4, 0x82d, 0x8, 0xc, 0x1, 0x9, 0x8, 0x9, 0x7fffffff, 0x1, 0x1], [0x6, 0x5f4, 0x7, 0x61b1, 0x2, 0x1, 0x1, 0x3, 0x10001, 0x5c10, 0x0, 0x7, 0x6, 0xd225, 0x1, 0x5, 0x0, 0x6, 0x101, 0xfffffffd, 0x7fffffff, 0x0, 0x80000000, 0x80000001, 0x90000, 0x9, 0x7, 0x6, 0x0, 0x2b, 0x9, 0x9, 0x10, 0x8000, 0x117, 0xb, 0x10000, 0x400, 0x8, 0x7fff, 0xffffffff, 0x9, 0xffffff09, 0x3, 0x1, 0xfffffa51, 0x4, 0x7f, 0xf, 0xa7b, 0x9, 0x7, 0x9, 0x7, 0x1, 0xd, 0x8, 0x1, 0x8, 0x5, 0x0, 0xf, 0x1, 0x3], [0x1ff, 0x3, 0x2, 0x3, 0x8, 0x5, 0x80000001, 0x7fff, 0xc, 0x4, 0x9, 0x5, 0xfff, 0x40, 0x7, 0x200, 0x4, 0x8, 0x6500670c, 0x1b87, 0x4, 0x40, 0x4, 0x8, 0x5, 0x7, 0x101, 0xffffffff, 0xffffff80, 0x3, 0xfffffff9, 0x10, 0x7fffffff, 0x3, 0x7, 0x4, 0x7ff, 0xb, 0x7ff, 0x63, 0x0, 0x4, 0xf, 0x80000001, 0x0, 0x7fe, 0x0, 0x2, 0x5, 0xa28, 0x23a, 0x3, 0x400, 0x3, 0x0, 0x6, 0x5, 0x3, 0x1ff1, 0x9, 0xfe8f122, 0x7ff, 0x5d8, 0x3]}, 0x45c) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x44f0) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000280)='fdinfo/3\x00') ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000000c0)=0x0) syz_open_procfs(r9, &(0x7f0000000100)='attr/sockcreate\x00') syz_kvm_setup_cpu$x86(r7, r3, &(0x7f0000525000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="b800008ee80fc75c0023065a0066b9800000c00f326635008000000f300fc77a0266b8fc0000000f23c80f21f866350c00a0000f23f8baf80c66b8483b898f66efbafc0c66edbaf80c66b889b67c8166efbafc0cb000ee2e0f79c20f01cb", 0x5e}], 0x1, 0x4cac9cd1da58358c, &(0x7f0000000300)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fffffff}], 0x1) 239.848946ms ago: executing program 1 (id=857): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f00000000c0)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) unshare(0x64000600) syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x1d39, &(0x7f0000000180)={0x0, 0x2079d9, 0x0, 0x1, 0x29d}, 0x0, 0x0) (async) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000206a053f004000010280418af2c1c441f905200109040007010301010b09211d001001221e0d090581030804000502"], 0x0) (async) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) (async) prctl$PR_SET_MM(0x41555856, 0x20000000, &(0x7f0000ffd000/0x2000)=nil) (async) r3 = eventfd2(0x3, 0x1) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x7fffffffffffffff) (async) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x7fffffffffffffff) write$eventfd(r3, &(0x7f0000000000)=0x8, 0x8) (async) cachestat(r2, &(0x7f00000001c0)={0x2, 0xb}, &(0x7f0000000200), 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000040)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) 192.039087ms ago: executing program 1 (id=858): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x1, 0x45}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x20}], 0x1}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000280)=ANY=[@ANYRES64=r0], 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000600)='cpu.max\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x1) r6 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x14, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) unshare(0x8020400) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r7, 0x3a, 0xd1, 0x0, 0x0) pipe2(0x0, 0xc00c0) r8 = getuid() mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000480), 0x1000000, &(0x7f00000004c0)={[{@metacopy_off}, {@volatile}, {@verity_on}, {@redirect_dir_nofollow}], [{@smackfshat}, {@permit_directio}, {@hash}, {@dont_appraise}, {@fowner_gt={'fowner>', r8}}]}) write(r3, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r9}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x5, 0x978b}, 0x0) setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000ac1214aa0100000006000000e0000002ac1414aa000000007f00000100000000e0000002"], 0x28) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) 180.734337ms ago: executing program 0 (id=859): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400, 0x188) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0000000000000000100000001"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) (async) recvmmsg(r2, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf0e}}], 0x1, 0x2002, 0x0) mkdirat(r0, &(0x7f0000002040)='./file1\x00', 0xa8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async, rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) (rerun: 32) write$vga_arbiter(r4, &(0x7f0000000140)=@other={'unlock', ' ', 'none'}, 0xc) (async) lseek(r4, 0xfffffffffffffffc, 0x1) (async) getdents64(r4, &(0x7f00000000c0)=""/99, 0x63) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x140c, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRESOCT=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c02"]) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2e43c0, 0x0) sendfile(r3, r5, 0x0, 0x7fffeffd) 75.869069ms ago: executing program 1 (id=860): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x40000, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 75.446869ms ago: executing program 0 (id=861): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x283, 0x0, 0x80003}]}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) (async) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000100)={0x7fff, 0x7f, 0xfffffffe, 0x8d52, 0x9, "0a0021341c00000000000000050100"}) ioctl$TCXONC(r4, 0x540a, 0x2) (async) ioctl$TCXONC(r4, 0x540a, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x1, 0xeeee0000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_pidfd_open(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=862): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xe7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xbc, 0x0, &(0x7f0000000340)=[@free_buffer={0x40086303, r2}, @acquire, @decrefs, @increfs={0x40046304, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@flat=@weak_binder={0x77622a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x2}, @fda={0x66646185, 0x3, 0x1, 0x9}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x0, 0x1}, @fda={0x66646185, 0x2, 0x0, 0x1f}, @fda={0x66646185, 0xa, 0x1, 0x14}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x18, 0x0, &(0x7f0000000240)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): [ T495] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0002/input/input6 [ 41.955465][ T495] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 41.974037][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 41.979846][ T9] usb usb1-port1: attempt power cycle [ 42.286965][ T65] usb 2-1: USB disconnect, device number 11 [ 42.321013][ T9] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 42.341360][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 42.391418][ T404] usb 3-1: USB disconnect, device number 7 [ 42.398043][ T404] usblp0: removed [ 42.480999][ T9] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 42.501397][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 42.506944][ T9] usb usb1-port1: unable to enumerate USB device [ 42.831527][ T875] input: syz0 as /devices/virtual/input/input7 [ 43.111019][ T9] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 43.140984][ T404] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 43.262312][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 43.271090][ T9] usb 2-1: config 179 has no interface number 0 [ 43.278057][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 43.281097][ T404] usb 3-1: device descriptor read/64, error -71 [ 43.290014][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 43.307121][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 43.317483][ T9] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 43.331138][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 43.340290][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.349388][ T875] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 43.531158][ T404] usb 3-1: device descriptor read/64, error -71 [ 43.780952][ T404] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 43.911001][ T404] usb 3-1: device descriptor read/64, error -71 [ 43.941468][ T9] usb 2-1: USB disconnect, device number 12 [ 44.160949][ T404] usb 3-1: device descriptor read/64, error -71 [ 44.175488][ T880] cgroup: none used incorrectly [ 44.188370][ T880] tap0: tun_chr_ioctl cmd 1074025678 [ 44.193894][ T880] tap0: group set to 0 [ 44.271287][ T404] usb usb3-port1: attempt power cycle [ 44.319705][ T893] netlink: 'syz.0.172': attribute type 4 has an invalid length. [ 44.333143][ T893] netlink: 'syz.0.172': attribute type 4 has an invalid length. [ 44.380125][ T902] netlink: 'syz.1.176': attribute type 6 has an invalid length. [ 44.397078][ T902] 9pnet_fd: Insufficient options for proto=fd [ 44.457885][ T910] SELinux: Context system_u:object_r:unconfined_exec_t:s0 is not valid (left unmapped). [ 44.469347][ T910] fuse: Unknown parameter 'fYl>I' [ 44.620995][ T404] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 44.651986][ T404] usb 3-1: device descriptor read/8, error -71 [ 44.670936][ T65] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 44.758431][ T927] syzkaller0: entered promiscuous mode [ 44.781968][ T404] usb 3-1: device descriptor read/8, error -71 [ 44.841007][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 44.848382][ T65] usb 1-1: config 0 has an invalid interface number: 177 but max is 3 [ 44.858254][ T65] usb 1-1: config 0 has an invalid interface number: 254 but max is 3 [ 44.866792][ T65] usb 1-1: config 0 has an invalid interface descriptor of length 8, skipping [ 44.876032][ T65] usb 1-1: config 0 has an invalid interface number: 38 but max is 3 [ 44.884625][ T65] usb 1-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config [ 44.895545][ T65] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 44.906301][ T65] usb 1-1: config 0 has no interface number 0 [ 44.914148][ T65] usb 1-1: config 0 has no interface number 1 [ 44.920413][ T65] usb 1-1: config 0 has no interface number 2 [ 44.927405][ T65] usb 1-1: config 0 interface 177 altsetting 5 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 44.939357][ T65] usb 1-1: config 0 interface 177 altsetting 5 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 44.950757][ T65] usb 1-1: config 0 interface 177 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 8 [ 44.962836][ T65] usb 1-1: config 0 interface 177 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 44.974773][ T65] usb 1-1: config 0 interface 177 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 44.986501][ T65] usb 1-1: config 0 interface 177 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 45.001259][ T65] usb 1-1: config 0 interface 177 altsetting 5 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 45.016973][ T65] usb 1-1: config 0 interface 177 altsetting 5 has a duplicate endpoint with address 0x8A, skipping [ 45.027978][ T404] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 45.037885][ T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 45.045582][ T65] usb 1-1: config 0 interface 177 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 45.056899][ T65] usb 1-1: config 0 interface 177 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 45.067988][ T65] usb 1-1: config 0 interface 177 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 45.079551][ T65] usb 1-1: config 0 interface 177 altsetting 5 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 45.093391][ T65] usb 1-1: config 0 interface 254 altsetting 11 has a duplicate endpoint with address 0xA, skipping [ 45.105046][ T65] usb 1-1: config 0 interface 254 altsetting 11 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 45.117367][ T404] usb 3-1: device descriptor read/8, error -71 [ 45.125247][ T65] usb 1-1: config 0 interface 254 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 45.138039][ T65] usb 1-1: config 0 interface 254 altsetting 11 has a duplicate endpoint with address 0x6, skipping [ 45.149311][ T65] usb 1-1: config 0 interface 254 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 45.160417][ T65] usb 1-1: config 0 interface 254 altsetting 11 has a duplicate endpoint with address 0x81, skipping [ 45.171812][ T65] usb 1-1: config 0 interface 254 altsetting 11 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 45.185383][ T65] usb 1-1: config 0 interface 38 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 45.198740][ T65] usb 1-1: config 0 interface 177 has no altsetting 0 [ 45.206199][ T65] usb 1-1: config 0 interface 254 has no altsetting 0 [ 45.214002][ T65] usb 1-1: config 0 interface 38 has no altsetting 0 [ 45.223845][ T65] usb 1-1: New USB device found, idVendor=19d2, idProduct=1102, bcdDevice=69.cb [ 45.233180][ T31] usb 4-1: device descriptor read/64, error -71 [ 45.239637][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.247839][ T65] usb 1-1: Product: syz [ 45.252534][ T65] usb 1-1: Manufacturer: ࠁ [ 45.257401][ T65] usb 1-1: SerialNumber: syz [ 45.262993][ T404] usb 3-1: device descriptor read/8, error -71 [ 45.269721][ T65] usb 1-1: config 0 descriptor?? [ 45.275314][ T904] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 45.371244][ T404] usb usb3-port1: unable to enumerate USB device [ 45.381103][ T9] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 45.470977][ T31] usb 4-1: device descriptor read/64, error -71 [ 45.532106][ T9] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 45.543177][ T9] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 45.553857][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 45.560619][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 45.569900][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.583891][ T9] usb 2-1: config 0 descriptor?? [ 45.591058][ T937] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 45.691865][ T65] usb 1-1: USB disconnect, device number 10 [ 45.721003][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 45.851005][ T31] usb 4-1: device descriptor read/64, error -71 [ 46.003355][ T9] logitech 0003:046D:C286.0003: unknown main item tag 0x6 [ 46.014317][ T9] logitech 0003:046D:C286.0003: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.1-1/input0 [ 46.025831][ T9] logitech 0003:046D:C286.0003: no inputs found [ 46.090997][ T31] usb 4-1: device descriptor read/64, error -71 [ 46.201189][ T31] usb usb4-port1: attempt power cycle [ 46.213062][ T937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.217107][ T955] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:245 [ 46.221702][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 46.221722][ T36] audit: type=1400 audit(1751136078.310:280): avc: denied { append } for pid=936 comm="syz.1.188" name="pfkey" dev="proc" ino=4026532531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 46.221759][ T36] audit: type=1400 audit(1751136078.310:281): avc: denied { associate } for pid=936 comm="syz.1.188" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 46.231195][ T937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.292887][ T9] usb 2-1: USB disconnect, device number 13 [ 46.300718][ T958] overlay: ./bus is not a directory [ 46.324019][ T36] audit: type=1400 audit(1751136078.420:282): avc: denied { append } for pid=960 comm="syz.2.196" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:unconfined_exec_t:s0" [ 46.372846][ T36] audit: type=1400 audit(1751136078.470:283): avc: denied { setopt } for pid=964 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 46.376538][ T965] tipc: Enabled bearer , priority 0 [ 46.401202][ T965] random: crng reseeded on system resumption [ 46.401197][ T36] audit: type=1400 audit(1751136078.500:284): avc: denied { write } for pid=964 comm="syz.0.198" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 46.449566][ T36] audit: type=1400 audit(1751136078.540:285): avc: denied { ioctl } for pid=964 comm="syz.0.198" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 46.475217][ T964] tipc: Disabling bearer [ 46.570988][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 46.592079][ T31] usb 4-1: device descriptor read/8, error -71 [ 46.600982][ T306] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 46.722054][ T31] usb 4-1: device descriptor read/8, error -71 [ 46.750989][ T306] usb 3-1: Using ep0 maxpacket: 32 [ 46.757268][ T306] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 46.765600][ T306] usb 3-1: config 0 has no interface number 0 [ 46.771812][ T306] usb 3-1: config 0 interface 184 has no altsetting 0 [ 46.781143][ T306] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=ff.ff [ 46.790313][ T306] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=3 [ 46.798800][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 46.806548][ T306] usb 3-1: Product: syz [ 46.811190][ T306] usb 3-1: Manufacturer: syz [ 46.815874][ T306] usb 3-1: SerialNumber: syz [ 46.821717][ T306] usb 3-1: config 0 descriptor?? [ 46.827741][ T306] smsc75xx v1.0.0 [ 46.898745][ T36] audit: type=1400 audit(1751136078.990:286): avc: denied { ioctl } for pid=975 comm="syz.1.202" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:unconfined_exec_t:s0" [ 46.960924][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 46.972715][ T9] usb 1-1: config 3 has an invalid interface number: 160 but max is 0 [ 46.981435][ T9] usb 1-1: config 3 has no interface number 0 [ 46.987977][ T9] usb 1-1: config 3 interface 160 has no altsetting 0 [ 46.990971][ T31] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 47.004489][ T9] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1081, bcdDevice=99.2c [ 47.013704][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.022010][ T9] usb 1-1: Product: syz [ 47.031679][ T9] usb 1-1: Manufacturer: syz [ 47.036809][ T9] usb 1-1: SerialNumber: syz [ 47.038298][ T31] usb 4-1: device descriptor read/8, error -71 [ 47.132540][ T987] rust_binder: Error while translating object. [ 47.132573][ T987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 47.138939][ T987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:204 [ 47.164470][ T36] audit: type=1400 audit(1751136079.260:287): avc: denied { create } for pid=988 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 47.194175][ T31] usb 4-1: device descriptor read/8, error -71 [ 47.231061][ T306] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 47.242029][ T306] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 47.251905][ T306] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 47.262419][ T306] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 47.271939][ T9] cdc_mbim 1-1:3.160: More than one union descriptor, skipping ... [ 47.280680][ T9] cdc_mbim 1-1:3.160: CDC Union missing and no IAD found [ 47.287823][ T9] cdc_mbim 1-1:3.160: bind() failure [ 47.294243][ T9] usb 1-1: USB disconnect, device number 11 [ 47.301124][ T31] usb usb4-port1: unable to enumerate USB device [ 47.440975][ T65] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 47.591403][ T65] usb 2-1: no configurations [ 47.596151][ T65] usb 2-1: can't read configurations, error -22 [ 47.730996][ T65] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 47.774288][ T994] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.774327][ T994] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:87 [ 47.828620][ T36] audit: type=1400 audit(1751136079.910:288): avc: denied { execute } for pid=998 comm="syz.3.211" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:unconfined_exec_t:s0" [ 47.931797][ T65] usb 2-1: no configurations [ 47.939324][ T65] usb 2-1: can't read configurations, error -22 [ 47.946764][ T65] usb usb2-port1: attempt power cycle [ 48.016086][ T1001] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.016174][ T1001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:256 [ 48.160984][ T31] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 48.291048][ T65] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 48.311694][ T65] usb 2-1: no configurations [ 48.316381][ T65] usb 2-1: can't read configurations, error -22 [ 48.322722][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 48.329437][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 48.337928][ T31] usb 4-1: config 7 has an invalid interface number: 241 but max is 8 [ 48.346192][ T31] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 9 [ 48.355483][ T31] usb 4-1: config 7 has no interface number 0 [ 48.361646][ T31] usb 4-1: config 7 interface 241 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0 [ 48.372694][ T31] usb 4-1: config 7 interface 241 altsetting 6 bulk endpoint 0x9 has invalid maxpacket 8 [ 48.383976][ T31] usb 4-1: config 7 interface 241 altsetting 6 endpoint 0x86 has an invalid bInterval 144, changing to 11 [ 48.397661][ T31] usb 4-1: config 7 interface 241 altsetting 6 endpoint 0x86 has invalid maxpacket 58007, setting to 1024 [ 48.409180][ T31] usb 4-1: config 7 interface 241 altsetting 6 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 48.422374][ T31] usb 4-1: config 7 interface 241 has no altsetting 0 [ 48.430773][ T31] usb 4-1: New USB device found, idVendor=0403, idProduct=e0f7, bcdDevice=9c.4a [ 48.440131][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.448336][ T31] usb 4-1: Product: syz [ 48.452632][ T65] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 48.460181][ T31] usb 4-1: Manufacturer: syz [ 48.464886][ T31] usb 4-1: SerialNumber: syz [ 48.470561][ T999] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 48.481656][ T65] usb 2-1: no configurations [ 48.486401][ T65] usb 2-1: can't read configurations, error -22 [ 48.493913][ T65] usb usb2-port1: unable to enumerate USB device [ 48.684001][ T999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.693334][ T999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.706709][ T36] audit: type=1400 audit(1751136080.800:289): avc: denied { setopt } for pid=998 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.746211][ T31] ftdi_sio 4-1:7.241: FTDI USB Serial Device converter detected [ 48.754987][ T31] ftdi_sio ttyUSB0: unknown device type: 0x9c4a [ 48.765087][ T31] usb 4-1: USB disconnect, device number 17 [ 48.776886][ T31] ftdi_sio 4-1:7.241: device disconnected [ 48.993101][ T1022] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.046345][ T1022] rust_binder: Error while translating object. [ 49.052954][ T1022] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 49.059154][ T1022] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:275 [ 49.079720][ T1025] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.132120][ T1035] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.244724][ T1040] fuse: Bad value for 'group_id' [ 49.256196][ T1040] fuse: Bad value for 'group_id' [ 49.277071][ T1042] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.280787][ T1042] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 21) [ 49.287331][ T1042] rust_binder: Error while translating object. [ 49.297868][ T1042] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.304116][ T1042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:295 [ 49.333501][ T1046] netlink: 'syz.3.227': attribute type 4 has an invalid length. [ 49.363956][ T1048] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 49.553401][ T1062] fuse: Bad value for 'group_id' [ 49.558462][ T1062] fuse: Bad value for 'group_id' [ 49.943031][ T65] usb 3-1: USB disconnect, device number 12 [ 49.976207][ T1075] rust_binder: Error while translating object. [ 49.976236][ T1075] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.982546][ T1075] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:125 [ 50.019217][ T1079] random: crng reseeded on system resumption [ 50.180859][ T1085] SELinux: policydb string length 5 does not match expected length 8 [ 50.189153][ T1085] SELinux: failed to load policy [ 50.208356][ T1089] fuse: Bad value for 'group_id' [ 50.219457][ T1089] fuse: Bad value for 'group_id' [ 50.236863][ T1091] capability: warning: `syz.1.244' uses 32-bit capabilities (legacy support in use) [ 50.511498][ T1111] capability: warning: `syz.1.250' uses deprecated v2 capabilities in a way that may be insecure [ 50.532248][ T1111] input: syz1 as /devices/virtual/input/input8 [ 50.557158][ T1113] kvm: pic: non byte write [ 50.646051][ T1131] binder: Bad value for 'max' [ 50.676949][ T1135] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 50.688880][ T1135] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 50.701572][ T1135] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 50.709865][ T1135] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 50.790053][ T1151] SELinux: security_context_str_to_sid () failed with errno=-22 [ 50.853450][ T1156] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.853766][ T1156] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 50.860322][ T1156] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 50.868736][ T1156] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:339 [ 50.878401][ T306] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 51.003627][ T1171] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.004005][ T1171] netlink: 240 bytes leftover after parsing attributes in process `syz.0.271'. [ 51.038058][ T1178] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 51.045616][ T1178] rust_binder: Write failure EINVAL in pid:351 [ 51.063051][ T1127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.080161][ T1127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.094792][ T306] usb 3-1: unable to get BOS descriptor or descriptor too short [ 51.111273][ T306] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 51.118896][ T306] usb 3-1: can't read configurations, error -71 [ 51.240405][ T1190] kvm: pic: non byte write [ 51.333100][ T1195] FAULT_INJECTION: forcing a failure. [ 51.333100][ T1195] name failslab, interval 1, probability 0, space 0, times 1 [ 51.345825][ T1195] CPU: 0 UID: 0 PID: 1195 Comm: syz.3.278 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 51.345863][ T1195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.345882][ T1195] Call Trace: [ 51.345888][ T1195] [ 51.345896][ T1195] __dump_stack+0x21/0x30 [ 51.345931][ T1195] dump_stack_lvl+0x10c/0x190 [ 51.345958][ T1195] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.345985][ T1195] ? avc_has_perm+0x144/0x220 [ 51.346003][ T1195] ? __cfi_avc_has_perm+0x10/0x10 [ 51.346020][ T1195] dump_stack+0x19/0x20 [ 51.346038][ T1195] should_fail_ex+0x3d9/0x530 [ 51.346058][ T1195] should_failslab+0xac/0x100 [ 51.346082][ T1195] __kmalloc_cache_noprof+0x41/0x3c0 [ 51.346103][ T1195] ? vhost_task_create+0x101/0x350 [ 51.346127][ T1195] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 51.346160][ T1195] vhost_task_create+0x101/0x350 [ 51.346183][ T1195] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 51.346210][ T1195] ? __cfi_vhost_task_create+0x10/0x10 [ 51.346234][ T1195] ? __cfi_vhost_task_fn+0x10/0x10 [ 51.346257][ T1195] ? __kasan_check_write+0x18/0x20 [ 51.346277][ T1195] ? mutex_lock+0x92/0x1c0 [ 51.346295][ T1195] ? __cfi_mutex_lock+0x10/0x10 [ 51.346314][ T1195] ? kernel_text_address+0xa9/0xe0 [ 51.346332][ T1195] kvm_mmu_post_init_vm+0x1a6/0x310 [ 51.346353][ T1195] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 51.346372][ T1195] ? _parse_integer_limit+0x195/0x1e0 [ 51.346391][ T1195] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 51.346410][ T1195] ? kstrtoull+0x13b/0x1e0 [ 51.346427][ T1195] ? kstrtouint+0x78/0xf0 [ 51.346444][ T1195] ? ioctl_has_perm+0x1aa/0x4d0 [ 51.346468][ T1195] ? __asan_memcpy+0x5a/0x80 [ 51.346488][ T1195] ? ioctl_has_perm+0x3e0/0x4d0 [ 51.346513][ T1195] ? has_cap_mac_admin+0xd0/0xd0 [ 51.346537][ T1195] ? __kasan_check_write+0x18/0x20 [ 51.346556][ T1195] ? mutex_lock_killable+0x92/0x1c0 [ 51.346576][ T1195] ? __cfi_mutex_lock_killable+0x10/0x10 [ 51.346596][ T1195] ? proc_fail_nth_write+0x17e/0x210 [ 51.346615][ T1195] kvm_vcpu_ioctl+0x96f/0xee0 [ 51.346637][ T1195] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 51.346660][ T1195] ? __cfi_vfs_write+0x10/0x10 [ 51.346681][ T1195] ? __kasan_check_write+0x18/0x20 [ 51.346700][ T1195] ? mutex_unlock+0x8b/0x240 [ 51.346718][ T1195] ? __cfi_mutex_unlock+0x10/0x10 [ 51.346736][ T1195] ? __fget_files+0x2c5/0x340 [ 51.346761][ T1195] ? __fget_files+0x2c5/0x340 [ 51.346785][ T1195] ? bpf_lsm_file_ioctl+0xd/0x20 [ 51.346804][ T1195] ? security_file_ioctl+0x34/0xd0 [ 51.346829][ T1195] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 51.346855][ T1195] __se_sys_ioctl+0x132/0x1b0 [ 51.346878][ T1195] __x64_sys_ioctl+0x7f/0xa0 [ 51.346903][ T1195] x64_sys_call+0x1878/0x2ee0 [ 51.346924][ T1195] do_syscall_64+0x58/0xf0 [ 51.346939][ T1195] ? clear_bhb_loop+0x50/0xa0 [ 51.346958][ T1195] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.346976][ T1195] RIP: 0033:0x7f5ec318e929 [ 51.346996][ T1195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.347014][ T1195] RSP: 002b:00007f5ec17f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.347050][ T1195] RAX: ffffffffffffffda RBX: 00007f5ec33b5fa0 RCX: 00007f5ec318e929 [ 51.347064][ T1195] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 51.347075][ T1195] RBP: 00007f5ec17f7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.347086][ T1195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.347096][ T1195] R13: 0000000000000000 R14: 00007f5ec33b5fa0 R15: 00007ffcd9703088 [ 51.347110][ T1195] [ 51.355133][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 51.777913][ T1204] rust_binder: Write failure EFAULT in pid:237 [ 51.822270][ T1204] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 51.842740][ T1204] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 51.851395][ T1204] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 51.859610][ T1204] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 51.869689][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 51.886102][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 51.900799][ T31] usb 1-1: config 12 has an invalid interface number: 184 but max is 0 [ 51.915174][ T31] usb 1-1: config 12 has no interface number 0 [ 51.924139][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 51.924178][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 51.930428][ T31] usb 1-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 51.938452][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 51.948181][ T31] usb 1-1: config 12 interface 184 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 51.960754][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 51.964653][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 51.968739][ T31] usb 1-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 51.971545][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 51.977392][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.986522][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 51.992420][ T31] usb 1-1: Product: syz [ 52.000836][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.006691][ T31] usb 1-1: Manufacturer: syz [ 52.015833][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.017227][ T31] usb 1-1: SerialNumber: syz [ 52.022091][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.036478][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.036661][ T1227] FAULT_INJECTION: forcing a failure. [ 52.036661][ T1227] name failslab, interval 1, probability 0, space 0, times 0 [ 52.049297][ T1227] CPU: 0 UID: 0 PID: 1227 Comm: syz.3.289 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 52.049342][ T1227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.049359][ T1227] Call Trace: [ 52.049368][ T1227] [ 52.049377][ T1227] __dump_stack+0x21/0x30 [ 52.049415][ T1227] dump_stack_lvl+0x10c/0x190 [ 52.049446][ T1227] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.049479][ T1227] dump_stack+0x19/0x20 [ 52.049507][ T1227] should_fail_ex+0x3d9/0x530 [ 52.049539][ T1227] should_failslab+0xac/0x100 [ 52.049577][ T1227] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 52.049609][ T1227] ? dup_task_struct+0xbc/0xc50 [ 52.049634][ T1227] ? kasan_save_track+0x4f/0x80 [ 52.049669][ T1227] dup_task_struct+0xbc/0xc50 [ 52.049692][ T1227] ? __kasan_check_write+0x18/0x20 [ 52.049723][ T1227] ? _raw_spin_lock_irq+0x8d/0x120 [ 52.049761][ T1227] ? copy_process+0x3220/0x3220 [ 52.049786][ T1227] ? __kasan_check_write+0x18/0x20 [ 52.049817][ T1227] copy_process+0x538/0x3220 [ 52.049846][ T1227] ? __cfi_copy_process+0x10/0x10 [ 52.049871][ T1227] ? __kasan_check_write+0x18/0x20 [ 52.049902][ T1227] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 52.049942][ T1227] vhost_task_create+0x1d6/0x350 [ 52.049979][ T1227] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 52.050019][ T1227] ? __cfi_vhost_task_create+0x10/0x10 [ 52.050056][ T1227] ? __cfi_vhost_task_fn+0x10/0x10 [ 52.050104][ T1227] ? __kasan_check_write+0x18/0x20 [ 52.050134][ T1227] ? mutex_lock+0x92/0x1c0 [ 52.050162][ T1227] ? __cfi_mutex_lock+0x10/0x10 [ 52.050190][ T1227] ? kernel_text_address+0xa9/0xe0 [ 52.050220][ T1227] kvm_mmu_post_init_vm+0x1a6/0x310 [ 52.050251][ T1227] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 52.050281][ T1227] ? _parse_integer_limit+0x195/0x1e0 [ 52.050312][ T1227] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 52.050341][ T1227] ? kstrtoull+0x13b/0x1e0 [ 52.050367][ T1227] ? kstrtouint+0x78/0xf0 [ 52.050394][ T1227] ? ioctl_has_perm+0x1aa/0x4d0 [ 52.050432][ T1227] ? __asan_memcpy+0x5a/0x80 [ 52.050463][ T1227] ? ioctl_has_perm+0x3e0/0x4d0 [ 52.050501][ T1227] ? has_cap_mac_admin+0xd0/0xd0 [ 52.050538][ T1227] ? __kasan_check_write+0x18/0x20 [ 52.050567][ T1227] ? mutex_lock_killable+0x92/0x1c0 [ 52.050599][ T1227] ? __cfi_mutex_lock_killable+0x10/0x10 [ 52.050632][ T1227] ? proc_fail_nth_write+0x17e/0x210 [ 52.050662][ T1227] kvm_vcpu_ioctl+0x96f/0xee0 [ 52.050699][ T1227] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 52.050736][ T1227] ? __cfi_vfs_write+0x10/0x10 [ 52.050767][ T1227] ? __kasan_check_write+0x18/0x20 [ 52.050795][ T1227] ? mutex_unlock+0x8b/0x240 [ 52.050823][ T1227] ? __cfi_mutex_unlock+0x10/0x10 [ 52.050851][ T1227] ? __fget_files+0x2c5/0x340 [ 52.050896][ T1227] ? __fget_files+0x2c5/0x340 [ 52.050932][ T1227] ? bpf_lsm_file_ioctl+0xd/0x20 [ 52.050961][ T1227] ? security_file_ioctl+0x34/0xd0 [ 52.050997][ T1227] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 52.051029][ T1227] __se_sys_ioctl+0x132/0x1b0 [ 52.051073][ T1227] __x64_sys_ioctl+0x7f/0xa0 [ 52.051109][ T1227] x64_sys_call+0x1878/0x2ee0 [ 52.051142][ T1227] do_syscall_64+0x58/0xf0 [ 52.051164][ T1227] ? clear_bhb_loop+0x50/0xa0 [ 52.051194][ T1227] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.051222][ T1227] RIP: 0033:0x7f5ec318e929 [ 52.051242][ T1227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.051263][ T1227] RSP: 002b:00007f5ec17f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.051291][ T1227] RAX: ffffffffffffffda RBX: 00007f5ec33b5fa0 RCX: 00007f5ec318e929 [ 52.051311][ T1227] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 52.051328][ T1227] RBP: 00007f5ec17f7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.051345][ T1227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.051362][ T1227] R13: 0000000000000000 R14: 00007f5ec33b5fa0 R15: 00007ffcd9703088 [ 52.051382][ T1227] [ 52.170979][ T306] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 52.191044][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.258089][ T1184] syzkaller0: entered promiscuous mode [ 52.260672][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.265687][ T1184] syzkaller0: entered allmulticast mode [ 52.270047][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.360921][ T306] usb 3-1: Using ep0 maxpacket: 8 [ 52.368209][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.369993][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 52.370013][ T36] audit: type=1400 audit(1751136084.470:324): avc: denied { read } for pid=94 comm="acpid" name="mouse3" dev="devtmpfs" ino=506 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 52.374705][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.385249][ T36] audit: type=1400 audit(1751136084.470:325): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/mouse3" dev="devtmpfs" ino=506 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 52.406743][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.414495][ T36] audit: type=1400 audit(1751136084.470:326): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/mouse3" dev="devtmpfs" ino=506 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 52.423195][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.452062][ T306] usb 3-1: unable to get BOS descriptor or descriptor too short [ 52.476035][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.516076][ T306] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 52.549043][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.563888][ T306] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.568124][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.593134][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.605947][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.612387][ T306] usb 3-1: Product: syz [ 52.641522][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.657169][ T306] usb 3-1: Manufacturer: syz [ 52.677197][ T306] usb 3-1: SerialNumber: syz [ 52.679205][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.682024][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.688263][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.695402][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.702012][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.710143][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.716835][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.723398][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.730307][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.736773][ T1221] rust_binder: Write failure EFAULT in pid:239 [ 52.737680][ T31] snd-usb-audio 1-1:12.184: probe with driver snd-usb-audio failed with error -12 [ 52.787924][ T31] usb 1-1: USB disconnect, device number 12 [ 52.803178][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.184/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.890344][ T306] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 52.918426][ T306] usb 3-1: failed to enable PITCH for EP 0x82 [ 52.924676][ T1253] fuse: Unknown parameter 'roo' [ 52.926083][ T306] usb 3-1: 2:1: cannot set freq 14811412 to ep 0x82 [ 52.951025][ T306] usb 3-1: USB disconnect, device number 14 [ 52.963313][ T1261] netlink: 240 bytes leftover after parsing attributes in process `syz.1.301'. [ 52.976590][ T1261] rust_binder: Write failure EINVAL in pid:261 [ 53.005142][ T31] kernel write not supported for file /rfkill (pid: 31 comm: kworker/1:0) [ 53.020377][ T1265] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 53.021511][ T1264] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 53.063807][ T36] audit: type=1400 audit(1751136085.160:327): avc: denied { create } for pid=1272 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 53.091218][ T36] audit: type=1400 audit(1751136085.190:328): avc: denied { write } for pid=1272 comm="syz.3.305" path="socket:[10940]" dev="sockfs" ino=10940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 53.145286][ T1283] netlink: 'syz.3.308': attribute type 4 has an invalid length. [ 53.154600][ T1284] netlink: 'syz.3.308': attribute type 4 has an invalid length. [ 53.162942][ T1283] netlink: 'syz.3.308': attribute type 17 has an invalid length. [ 53.175598][ T1284] netlink: 'syz.3.308': attribute type 17 has an invalid length. [ 53.198760][ T1286] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:189 [ 53.198799][ T1286] rust_binder: Read failure Err(EFAULT) in pid:189 [ 53.279230][ T1299] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.290508][ T1299] input: syz0 as /devices/virtual/input/input9 [ 53.293517][ T1301] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 53.304109][ T1301] rust_binder: Error while translating object. [ 53.316286][ T1301] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.322624][ T1301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:363 [ 53.366659][ T1305] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.366760][ T1305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:367 [ 53.373906][ T1305] rust_binder: Error while translating object. [ 53.383428][ T1305] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 53.389675][ T1305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:367 [ 53.407442][ T1306] rust_binder: Failed to allocate buffer. len:64920, is_oneway:true [ 53.416858][ T1306] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 53.425044][ T1306] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:196 [ 53.640963][ T31] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 53.770976][ T306] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 53.812086][ T31] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 53.820545][ T31] usb 1-1: config 0 has no interface number 0 [ 53.826697][ T31] usb 1-1: config 0 interface 41 has no altsetting 0 [ 53.834702][ T31] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 53.843799][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.851931][ T31] usb 1-1: Product: syz [ 53.856101][ T31] usb 1-1: Manufacturer: syz [ 53.860721][ T31] usb 1-1: SerialNumber: syz [ 53.866142][ T31] usb 1-1: config 0 descriptor?? [ 53.871188][ T430] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 53.921786][ T306] usb 3-1: not running at top speed; connect to a high speed hub [ 53.930250][ T306] usb 3-1: config 1 has an invalid descriptor of length 237, skipping remainder of the config [ 53.940659][ T306] usb 3-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 53.954340][ T306] usb 3-1: config 1 interface 0 has no altsetting 0 [ 53.963115][ T306] usb 3-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.40 [ 53.972551][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.980581][ T306] usb 3-1: Product: syz [ 53.984904][ T306] usb 3-1: Manufacturer: syz [ 53.991692][ T306] usb 3-1: SerialNumber: syz [ 54.042095][ T430] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 54.054929][ T430] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 10 [ 54.065916][ T430] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 54.075828][ T430] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 54.091190][ T430] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 54.102855][ T430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.110971][ T430] usb 2-1: Product: syz [ 54.115199][ T430] usb 2-1: Manufacturer: syz [ 54.119840][ T430] usb 2-1: SerialNumber: syz [ 54.125714][ T430] usb 2-1: config 0 descriptor?? [ 54.209023][ T1318] input: syz1 as /devices/virtual/input/input10 [ 54.226772][ T306] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 54.239478][ T306] usb 3-1: USB disconnect, device number 15 [ 54.290803][ T31] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 54.321592][ T36] audit: type=1400 audit(1751136086.420:329): avc: denied { map } for pid=1331 comm="syz.3.324" path="socket:[11343]" dev="sockfs" ino=11343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 54.372402][ T1335] fuse: Bad value for 'fd' [ 54.407406][ T65] usb 2-1: USB disconnect, device number 18 [ 54.505386][ T36] audit: type=1400 audit(1751136086.600:330): avc: denied { listen } for pid=1307 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 54.553566][ T36] audit: type=1400 audit(1751136086.650:331): avc: denied { accept } for pid=1343 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.573318][ T36] audit: type=1400 audit(1751136086.650:332): avc: denied { setopt } for pid=1347 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.594467][ T31] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 54.611152][ T31] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 54.620641][ T31] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 54.630672][ T31] usb 1-1: USB disconnect, device number 13 [ 54.684666][ T36] audit: type=1400 audit(1751136086.780:333): avc: denied { bind } for pid=1354 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.855344][ T1367] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 55.020935][ T31] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 55.123135][ T1392] rust_binder: Error while translating object. [ 55.123166][ T1392] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 55.129445][ T1392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:282 [ 55.160943][ T31] usb 1-1: device descriptor read/64, error -71 [ 55.174487][ T1396] binder: Bad value for 'max' [ 55.267592][ T1398] : renamed from bond_slave_0 [ 55.420947][ T31] usb 1-1: device descriptor read/64, error -71 [ 55.420947][ T306] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 55.572168][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.583187][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.593129][ T306] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 55.607776][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.623538][ T306] usb 3-1: config 0 descriptor?? [ 55.625305][ T1404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:230 [ 55.680963][ T31] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 55.821003][ T31] usb 1-1: device descriptor read/64, error -71 [ 55.980943][ T495] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 56.060961][ T31] usb 1-1: device descriptor read/64, error -71 [ 56.110953][ T495] usb 4-1: device descriptor read/64, error -71 [ 56.171028][ T31] usb usb1-port1: attempt power cycle [ 56.233684][ T1396] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.283470][ T306] usbhid 3-1:0.0: can't add hid device: -71 [ 56.296128][ T306] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 56.304868][ T306] usb 3-1: USB disconnect, device number 16 [ 56.350946][ T495] usb 4-1: device descriptor read/64, error -71 [ 56.511867][ T31] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 56.532009][ T31] usb 1-1: device descriptor read/8, error -71 [ 56.600961][ T495] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 56.662042][ T31] usb 1-1: device descriptor read/8, error -71 [ 56.730944][ T495] usb 4-1: device descriptor read/64, error -71 [ 56.901006][ T31] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 56.922068][ T31] usb 1-1: device descriptor read/8, error -71 [ 56.975030][ T495] usb 4-1: device descriptor read/64, error -71 [ 57.052112][ T31] usb 1-1: device descriptor read/8, error -71 [ 57.098442][ T495] usb usb4-port1: attempt power cycle [ 57.161125][ T31] usb usb1-port1: unable to enumerate USB device [ 57.242344][ T1427] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.250795][ T1427] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.258010][ T1427] bridge_slave_0: entered allmulticast mode [ 57.264837][ T1427] bridge_slave_0: entered promiscuous mode [ 57.276516][ T1427] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.283640][ T1427] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.291582][ T1427] bridge_slave_1: entered allmulticast mode [ 57.298118][ T1427] bridge_slave_1: entered promiscuous mode [ 57.398549][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.405937][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.416163][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.423355][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.450933][ T495] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 57.470531][ T1427] veth0_vlan: entered promiscuous mode [ 57.482318][ T495] usb 4-1: device descriptor read/8, error -71 [ 57.489680][ T1427] veth1_macvtap: entered promiscuous mode [ 57.511453][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 57.511473][ T36] audit: type=1400 audit(1751136089.597:340): avc: denied { mounton } for pid=1427 comm="syz-executor" path="/root/syzkaller.RL0zD2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 57.612517][ T495] usb 4-1: device descriptor read/8, error -71 [ 57.670567][ T1446] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 57.721163][ T36] audit: type=1400 audit(1751136089.807:341): avc: denied { read } for pid=1449 comm="syz.0.365" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.749218][ T36] audit: type=1400 audit(1751136089.807:342): avc: denied { open } for pid=1449 comm="syz.0.365" path="/108/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.774225][ T36] audit: type=1400 audit(1751136089.817:343): avc: denied { ioctl } for pid=1449 comm="syz.0.365" path="/108/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.861512][ T495] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 57.878187][ T1458] fuse: Unknown parameter 'group_i00000000000000000000' [ 57.886311][ T495] usb 4-1: device descriptor read/8, error -71 [ 57.921243][ T306] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 57.981032][ T9] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 58.022185][ T495] usb 4-1: device descriptor read/8, error -71 [ 58.072323][ T306] usb 2-1: No LPM exit latency info found, disabling LPM. [ 58.080752][ T306] usb 2-1: config 9 has an invalid interface number: 51 but max is 0 [ 58.088983][ T306] usb 2-1: config 9 has no interface number 0 [ 58.098110][ T306] usb 2-1: string descriptor 0 read error: -22 [ 58.104469][ T306] usb 2-1: New USB device found, idVendor=07a6, idProduct=07c2, bcdDevice=37.12 [ 58.113744][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.131044][ T495] usb usb4-port1: unable to enumerate USB device [ 58.142704][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 58.151944][ T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 58.160242][ T9] usb 3-1: can't read configurations, error -22 [ 58.290998][ T9] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 58.325544][ T495] usb 2-1: USB disconnect, device number 19 [ 58.353356][ T13] bridge_slave_1: left allmulticast mode [ 58.359058][ T13] bridge_slave_1: left promiscuous mode [ 58.364780][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.373893][ T13] bridge_slave_0: left allmulticast mode [ 58.380341][ T13] bridge_slave_0: left promiscuous mode [ 58.386208][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.462536][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 58.472816][ T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 58.481241][ T9] usb 3-1: can't read configurations, error -22 [ 58.487746][ T9] usb usb3-port1: attempt power cycle [ 58.500014][ T13] veth1_macvtap: left promiscuous mode [ 58.505694][ T13] veth0_vlan: left promiscuous mode [ 58.724392][ T1469] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.766927][ T1471] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.778384][ T1471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238 [ 58.788007][ T1471] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 58.797368][ T1471] rust_binder: Read failure Err(EFAULT) in pid:238 [ 58.806418][ T1471] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.827085][ T36] audit: type=1400 audit(1751136090.917:344): avc: denied { bind } for pid=1475 comm="syz.3.373" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.853611][ T9] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 58.864012][ T36] audit: type=1400 audit(1751136090.917:345): avc: denied { name_bind } for pid=1475 comm="syz.3.373" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 58.892183][ T36] audit: type=1400 audit(1751136090.917:346): avc: denied { node_bind } for pid=1475 comm="syz.3.373" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 58.917491][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 58.926838][ T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 58.934899][ T9] usb 3-1: can't read configurations, error -22 [ 59.007370][ T1491] fuse: Unknown parameter 'group_i00000000000000000000' [ 59.073247][ T9] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 59.102675][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 59.113141][ T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 59.121478][ T9] usb 3-1: can't read configurations, error -22 [ 59.127945][ T9] usb usb3-port1: unable to enumerate USB device [ 59.290925][ T404] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 59.463479][ T404] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 59.482817][ T1496] /dev/rnullb0: Can't open blockdev [ 59.484457][ T404] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 59.499379][ T404] usb 4-1: config 0 interface 0 has no altsetting 0 [ 59.506220][ T404] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 59.527609][ T404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.545765][ T404] usb 4-1: config 0 descriptor?? [ 59.556532][ T1493] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 59.745756][ T36] audit: type=1400 audit(1751136091.837:347): avc: denied { map } for pid=1502 comm="syz.1.382" path="pipe:[13163]" dev="pipefs" ino=13163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 59.769759][ T36] audit: type=1400 audit(1751136091.837:348): avc: denied { execute } for pid=1502 comm="syz.1.382" path="pipe:[13163]" dev="pipefs" ino=13163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 59.837490][ T1513] fuse: Unknown parameter 'group_i00000000000000000000' [ 59.880515][ T1520] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 59.904059][ T36] audit: type=1400 audit(1751136091.997:349): avc: denied { compute_member } for pid=1522 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 59.971309][ T404] logitech 0003:046D:C286.0004: unknown main item tag 0x0 [ 59.978540][ T404] logitech 0003:046D:C286.0004: unknown main item tag 0x0 [ 59.985745][ T404] logitech 0003:046D:C286.0004: unknown main item tag 0x0 [ 59.992936][ T404] logitech 0003:046D:C286.0004: unknown main item tag 0x0 [ 60.000066][ T404] logitech 0003:046D:C286.0004: unknown main item tag 0x0 [ 60.007237][ T404] logitech 0003:046D:C286.0004: unknown main item tag 0x0 [ 60.015116][ T404] logitech 0003:046D:C286.0004: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.3-1/input0 [ 60.026572][ T404] logitech 0003:046D:C286.0004: no inputs found [ 60.072330][ T1531] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1531 comm=syz.1.390 [ 60.170958][ T31] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 60.181723][ T65] usb 4-1: USB disconnect, device number 22 [ 60.197804][ T1544] fuse: Unknown parameter 'group_id00000000000000000000' [ 60.223436][ T1546] rust_binder: Error while translating object. [ 60.223466][ T1546] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 60.229734][ T1546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:30 [ 60.254194][ T1548] rust_binder: Write failure EINVAL in pid:32 [ 60.255003][ T1549] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 237) [ 60.263689][ T1550] rust_binder: Write failure EINVAL in pid:32 [ 60.269746][ T1549] rust_binder: Error while translating object. [ 60.287055][ T1549] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.293495][ T1549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:32 [ 60.335857][ T31] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 60.356027][ T31] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 60.366891][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 60.373942][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 60.383181][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.396816][ T31] usb 1-1: config 0 descriptor?? [ 60.402482][ T1526] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 60.700228][ T1566] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 60.707490][ T1566] rust_binder: Write failure EINVAL in pid:259 [ 60.709541][ T1567] overlay: filesystem on ./bus not supported as upperdir [ 60.726042][ T1568] binder: Unknown parameter 'maxJ+ :}Oߒ֚؛a޲.F}|[*_rYP gq3Rv9>B' [ 60.766876][ T1572] overlayfs: failed to resolve './file1': -2 [ 60.812537][ T1526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.826530][ T1526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.856714][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 60.864949][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 60.877887][ T31] usb 1-1: USB disconnect, device number 18 [ 60.886433][ T13] tipc: Subscription rejected, illegal request [ 60.902589][ T1579] netlink: 36 bytes leftover after parsing attributes in process `syz.1.406'. [ 61.025886][ T1615] netlink: 124 bytes leftover after parsing attributes in process `syz.1.417'. [ 61.180985][ T9] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 61.322736][ T1637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 61.323789][ T1636] rust_binder: Error while translating object. [ 61.331767][ T1636] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.338010][ T1636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:219 [ 61.348636][ T1637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.425'. [ 61.377694][ T9] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 61.388965][ T9] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 61.410068][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 61.430093][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 61.450286][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.458750][ T1645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 61.468081][ T9] usb 4-1: config 0 descriptor?? [ 61.471235][ T1645] bridge_slave_1: left allmulticast mode [ 61.479620][ T1604] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.511295][ T1645] bridge_slave_1: left promiscuous mode [ 61.517015][ T1645] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.526267][ T1645] bridge_slave_0: left allmulticast mode [ 61.532401][ T1645] bridge_slave_0: left promiscuous mode [ 61.538406][ T1645] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.705287][ T1652] kvm: pic: non byte write [ 61.870411][ T1672] rust_binder: Write failure EFAULT in pid:464 [ 61.889021][ T9] logitech 0003:046D:C286.0005: unknown main item tag 0x6 [ 61.905841][ T9] logitech 0003:046D:C286.0005: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.3-1/input0 [ 61.920933][ T9] logitech 0003:046D:C286.0005: no inputs found [ 61.941854][ T1655] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 61.998026][ T1680] xfrm0: mtu less than device minimum [ 62.095983][ T65] usb 4-1: USB disconnect, device number 23 [ 62.225328][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 62.233551][ T304] Bluetooth: hci1: Frame reassembly failed (-84) [ 62.644654][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 62.644672][ T36] audit: type=1326 audit(1751136094.737:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1717 comm="syz.1.448" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa90bf8e929 code=0x0 [ 62.850950][ T65] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 63.000928][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 63.007300][ T65] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 63.015796][ T65] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 63.024484][ T65] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 63.033634][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 63.043333][ T65] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 63.053568][ T65] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 63.066614][ T65] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 63.075846][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.084521][ T65] usb 4-1: config 0 descriptor?? [ 63.291726][ T65] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 63.371640][ T65] usb 4-1: USB disconnect, device number 24 [ 63.383489][ T65] usblp0: removed [ 63.482829][ T1729] overlayfs: missing 'workdir' [ 63.489965][ T36] audit: type=1400 audit(1751136095.577:358): avc: denied { setopt } for pid=1728 comm="syz.1.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.529517][ T36] audit: type=1400 audit(1751136095.617:359): avc: denied { create } for pid=1730 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.555223][ T36] audit: type=1326 audit(1751136095.647:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1733 comm="syz.1.453" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa90bf8e929 code=0x0 [ 63.740973][ T65] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 63.892118][ T65] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 63.903192][ T65] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 63.913868][ T65] usb 4-1: config 0 interface 0 has no altsetting 0 [ 63.920502][ T65] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 63.929572][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.938395][ T65] usb 4-1: config 0 descriptor?? [ 63.943707][ T1727] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 64.271064][ T1702] Bluetooth: hci0: command 0x1003 tx timeout [ 64.271069][ T1701] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 64.283685][ T1700] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 64.353287][ T65] logitech 0003:046D:C286.0006: unknown main item tag 0x6 [ 64.361576][ T65] logitech 0003:046D:C286.0006: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.3-1/input0 [ 64.373587][ T65] logitech 0003:046D:C286.0006: no inputs found [ 64.403126][ T13] tipc: Subscription rejected, illegal request [ 64.423574][ T36] audit: type=1400 audit(1751136096.517:361): avc: denied { read } for pid=1741 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.456629][ T36] audit: type=1400 audit(1751136096.537:362): avc: denied { nlmsg_read } for pid=1741 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.488786][ T36] audit: type=1400 audit(1751136096.577:363): avc: denied { checkpoint_restore } for pid=1748 comm="syz.2.458" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.518742][ T36] audit: type=1400 audit(1751136096.607:364): avc: denied { load_policy } for pid=1750 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 64.518750][ T1751] SELinux: policydb string length 5 does not match expected length 8 [ 64.547247][ T1751] SELinux: failed to load policy [ 64.556875][ T65] usb 4-1: USB disconnect, device number 25 [ 64.783229][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 65.634085][ T1781] syzkaller0: entered promiscuous mode [ 65.639608][ T1781] syzkaller0: entered allmulticast mode [ 65.647958][ T36] audit: type=1400 audit(1751136097.747:365): avc: denied { sqpoll } for pid=1780 comm="syz.2.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 65.667669][ T65] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 65.777078][ T36] audit: type=1400 audit(1751136097.867:366): avc: denied { getopt } for pid=1788 comm="syz.2.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.798794][ T1789] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 65.808084][ T65] usb 1-1: device descriptor read/64, error -71 [ 65.814732][ T1789] rust_binder: Write failure EINVAL in pid:268 [ 65.913667][ T1798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 65.963619][ T1803] netlink: 68 bytes leftover after parsing attributes in process `syz.3.478'. [ 65.985119][ T1805] raw_sendmsg: syz.2.479 forgot to set AF_INET. Fix it! [ 66.050999][ T65] usb 1-1: device descriptor read/64, error -71 [ 66.230947][ T495] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 66.291002][ T65] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 66.382116][ T495] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 66.393203][ T495] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 66.404005][ T495] usb 3-1: config 0 interface 0 has no altsetting 0 [ 66.410637][ T495] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 66.419774][ T495] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.428465][ T495] usb 3-1: config 0 descriptor?? [ 66.431000][ T65] usb 1-1: device descriptor read/64, error -71 [ 66.439087][ T1806] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 66.560193][ T1810] fuse: Invalid rootmode [ 66.670999][ T65] usb 1-1: device descriptor read/64, error -71 [ 66.781073][ T65] usb usb1-port1: attempt power cycle [ 66.831175][ T1700] Bluetooth: hci0: command 0x1003 tx timeout [ 66.831327][ T1702] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.851123][ T495] usbhid 3-1:0.0: can't add hid device: -71 [ 66.857150][ T495] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 66.867352][ T495] usb 3-1: USB disconnect, device number 21 [ 66.880935][ T31] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 67.032090][ T31] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 67.043049][ T31] usb 4-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 67.056253][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 67.064522][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 67.073841][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.082148][ T31] usb 4-1: Product: ꩕Ⱊ๫ꐝ澘偦ꃖ漸ꗢ蝠谫䋟⛥帵貕팔룒낋︟ᴵ焛﹫㰥氞픋漰臟⺭졁鐷ዚ熪 [ 67.095662][ T31] usb 4-1: Manufacturer: 綁볡⾬匕耤惷憡亭梹｜瓏쁳垘瞶항੆ꄐ纫ជ핻뷆㔘힛鎢奲촢賣䝯楨卪씭 [ 67.109383][ T31] usb 4-1: SerialNumber: syz [ 67.115137][ T1819] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 67.123189][ T65] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 67.152176][ T65] usb 1-1: device descriptor read/8, error -71 [ 67.282084][ T65] usb 1-1: device descriptor read/8, error -71 [ 67.417470][ T1825] tmpfs: Bad value for 'nr_blocks' [ 67.530920][ T65] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 67.541518][ T31] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 67.555615][ T65] usb 1-1: device descriptor read/8, error -71 [ 67.564511][ T31] usb 4-1: USB disconnect, device number 26 [ 67.572136][ T31] usblp0: removed [ 67.712058][ T65] usb 1-1: device descriptor read/8, error -71 [ 67.728948][ T1838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'. [ 67.738043][ T1836] fuse: Invalid rootmode [ 67.744991][ T1838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'. [ 67.768699][ T1845] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 67.776993][ T1845] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 67.785696][ T1845] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 67.793943][ T1845] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 67.831005][ T65] usb usb1-port1: unable to enumerate USB device [ 67.851974][ T1847] binder: Unknown parameter 'defcontext01777777777777777777777' [ 68.070932][ T36] audit: type=1400 audit(1751136100.157:367): avc: denied { create } for pid=1864 comm="syz.1.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 68.153343][ T1872] fuse: Invalid rootmode [ 68.227964][ T36] audit: type=1400 audit(1751136100.317:368): avc: denied { map } for pid=1875 comm="syz.2.501" path="socket:[16326]" dev="sockfs" ino=16326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.261029][ T36] audit: type=1400 audit(1751136100.317:369): avc: denied { read } for pid=1875 comm="syz.2.501" path="socket:[16326]" dev="sockfs" ino=16326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.330672][ T1881] rust_binder: Write failure EFAULT in pid:318 [ 68.376503][ T1884] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 68.390326][ T1884] rust_binder: Write failure EINVAL in pid:321 [ 68.406487][ T1886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:323 [ 68.460913][ T65] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 68.464071][ T1890] fuse: Bad value for 'rootmode' [ 68.497719][ T36] audit: type=1400 audit(1751136100.587:370): avc: denied { getopt } for pid=1893 comm="syz.3.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 68.549445][ T1900] netlink: 'syz.3.511': attribute type 11 has an invalid length. [ 68.557394][ T1900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'. [ 68.570922][ T495] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 68.611013][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 68.617311][ T65] usb 3-1: New USB device found, idVendor=056a, idProduct=00db, bcdDevice= 0.00 [ 68.626714][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.636914][ T65] usb 3-1: config 0 descriptor?? [ 68.678719][ T36] audit: type=1400 audit(1751136100.767:371): avc: denied { read write } for pid=1910 comm="syz.3.515" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.702304][ T36] audit: type=1400 audit(1751136100.767:372): avc: denied { open } for pid=1910 comm="syz.3.515" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.740975][ T495] usb 2-1: Using ep0 maxpacket: 16 [ 68.747598][ T495] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 68.756911][ T495] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.768786][ T495] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.780959][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 68.792112][ T495] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.803828][ T36] audit: type=1400 audit(1751136100.887:373): avc: denied { write } for pid=1913 comm="syz.3.516" name="fib_triestat" dev="proc" ino=4026532562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 68.827093][ T495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.835218][ T495] usb 2-1: Product: syz [ 68.839410][ T495] usb 2-1: Manufacturer: syz [ 68.844169][ T495] usb 2-1: SerialNumber: syz [ 68.846853][ T1914] devtmpfs: Too few inodes for current use [ 68.852670][ T36] audit: type=1400 audit(1751136100.947:374): avc: denied { remount } for pid=1913 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 68.876190][ T36] audit: type=1400 audit(1751136100.947:375): avc: denied { unmount } for pid=1913 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 68.899982][ T1916] fuse: Bad value for 'rootmode' [ 68.950952][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 68.960505][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.981104][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.000932][ T10] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 69.010377][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.019612][ T10] usb 1-1: config 0 descriptor?? [ 69.057976][ T65] wacom 0003:056A:00DB.0007: Unknown device_type for 'HID 056a:00db'. Assuming pen. [ 69.072637][ T65] wacom 0003:056A:00DB.0007: hidraw0: USB HID vff.fe Device [HID 056a:00db] on usb-dummy_hcd.2-1/input0 [ 69.101743][ T65] input: Wacom Bamboo 2FG 6x8 SE Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00DB.0007/input/input13 [ 69.265851][ T31] usb 3-1: USB disconnect, device number 22 [ 69.281053][ T36] audit: type=1400 audit(1751136101.367:376): avc: denied { wake_alarm } for pid=1921 comm="syz.3.519" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 69.296532][ T495] usb 2-1: 0:2 : does not exist [ 69.328779][ T495] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 69.346031][ T495] usb 2-1: USB disconnect, device number 20 [ 69.359855][ T494] udevd[494]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.390712][ T1929] rust_binder: Write failure EFAULT in pid:359 [ 69.432131][ T10] playstation 0003:054C:05C4.0008: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 69.458295][ T1936] binder: Bad value for 'stats' [ 69.635479][ T1892] tipc: Can't bind to reserved service type 0 [ 69.670931][ T495] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 69.682857][ T10] playstation 0003:054C:05C4.0008: Failed to retrieve feature with reportID 18: -71 [ 69.692662][ T10] playstation 0003:054C:05C4.0008: Failed to retrieve DualShock4 pairing info: -71 [ 69.702141][ T10] playstation 0003:054C:05C4.0008: Failed to get MAC address from DualShock4 [ 69.711071][ T10] playstation 0003:054C:05C4.0008: Failed to create dualshock4. [ 69.719380][ T10] playstation 0003:054C:05C4.0008: probe with driver playstation failed with error -71 [ 69.730483][ T10] usb 1-1: USB disconnect, device number 23 [ 69.800914][ T495] usb 2-1: device descriptor read/64, error -71 [ 69.851653][ T1939] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 70.040939][ T495] usb 2-1: device descriptor read/64, error -71 [ 70.290976][ T495] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 70.379189][ T1947] fuse: Bad value for 'rootmode' [ 70.413577][ T1953] tmpfs: Unknown parameter 'nr_in xp~]pn1ol' [ 70.431150][ T495] usb 2-1: device descriptor read/64, error -71 [ 70.671387][ T404] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 70.680982][ T495] usb 2-1: device descriptor read/64, error -71 [ 70.791122][ T495] usb usb2-port1: attempt power cycle [ 70.833639][ T404] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 70.842848][ T404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.851122][ T404] usb 4-1: Product: syz [ 70.855323][ T404] usb 4-1: Manufacturer: syz [ 70.859971][ T404] usb 4-1: SerialNumber: syz [ 70.950936][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 71.081163][ T10] usb 3-1: device descriptor read/64, error -71 [ 71.141021][ T495] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 71.162242][ T495] usb 2-1: device descriptor read/8, error -71 [ 71.292142][ T495] usb 2-1: device descriptor read/8, error -71 [ 71.320969][ T10] usb 3-1: device descriptor read/64, error -71 [ 71.530974][ T495] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 71.552099][ T495] usb 2-1: device descriptor read/8, error -71 [ 71.561058][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 71.682068][ T495] usb 2-1: device descriptor read/8, error -71 [ 71.691072][ T10] usb 3-1: device descriptor read/64, error -71 [ 71.801811][ T495] usb usb2-port1: unable to enumerate USB device [ 71.816578][ T1974] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.817042][ T1974] rust_binder: Error while translating object. [ 71.823576][ T1974] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 71.829760][ T1974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:514 [ 71.853363][ T1979] fuse: Unknown parameter 'use00000000000000000000' [ 71.930986][ T10] usb 3-1: device descriptor read/64, error -71 [ 72.041130][ T10] usb usb3-port1: attempt power cycle [ 72.210956][ T495] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 72.361617][ T495] usb 1-1: not running at top speed; connect to a high speed hub [ 72.370839][ T495] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1032, setting to 64 [ 72.381952][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 72.391073][ T495] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.400667][ T495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.409827][ T495] usb 1-1: Product: syz [ 72.414168][ T495] usb 1-1: Manufacturer: ﭲ嶖䪓뫛菆앹숕偛ںﵺ땓⚧哏Ⳓ헊ᲇﶬ蘙骮嗥ﴭ֥ꪵ옡付᫅啿ᇡ悌 [ 72.428025][ T495] usb 1-1: SerialNumber: syz [ 72.433870][ T10] usb 3-1: device descriptor read/8, error -71 [ 72.442040][ T1986] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 72.562162][ T10] usb 3-1: device descriptor read/8, error -71 [ 72.653103][ T495] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 72.659921][ T495] cdc_ncm 1-1:1.0: bind() failure [ 72.667290][ T495] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 72.674498][ T495] cdc_ncm 1-1:1.1: bind() failure [ 72.680768][ T495] usb 1-1: USB disconnect, device number 24 [ 72.731018][ T404] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 72.810956][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 72.831948][ T10] usb 3-1: device descriptor read/8, error -71 [ 72.882024][ T404] usb 2-1: config 0 has an invalid interface number: 37 but max is 0 [ 72.890163][ T404] usb 2-1: config 0 has no interface number 0 [ 72.896467][ T404] usb 2-1: config 0 interface 37 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.907499][ T404] usb 2-1: config 0 interface 37 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.917462][ T404] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 72.926562][ T404] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.935379][ T404] usb 2-1: config 0 descriptor?? [ 72.964288][ T10] usb 3-1: device descriptor read/8, error -71 [ 73.081122][ T10] usb usb3-port1: unable to enumerate USB device [ 73.171432][ T1995] KVM: debugfs: duplicate directory 1995-4 [ 73.222526][ T1995] FAT-fs (rnullb0): bogus number of reserved sectors [ 73.229276][ T1995] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 73.265105][ T1997] exFAT-fs (rnullb0): invalid boot record signature [ 73.271830][ T1997] exFAT-fs (rnullb0): failed to read boot sector [ 73.278484][ T1997] exFAT-fs (rnullb0): failed to recognize exfat type [ 73.342987][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 73.343006][ T36] audit: type=1400 audit(1751136105.437:381): avc: denied { map } for pid=1992 comm="syz.1.540" path="socket:[17668]" dev="sockfs" ino=17668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.373268][ T404] usbhid 2-1:0.37: can't add hid device: -71 [ 73.379371][ T404] usbhid 2-1:0.37: probe with driver usbhid failed with error -71 [ 73.391795][ T404] usb 2-1: USB disconnect, device number 25 [ 73.448770][ T10] usb 4-1: USB disconnect, device number 27 [ 73.466213][ T2002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:377 [ 73.466520][ T2003] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.489123][ T2007] fuse: Unknown parameter 'use00000000000000000000' [ 73.662900][ T2018] SELinux: Context Q{[>R(.qhdQ^,gwœזFu is not valid (left unmapped). [ 73.725802][ T2027] rust_binder: Write failure EFAULT in pid:298 [ 73.747956][ T2032] fuse: Unknown parameter 'use00000000000000000000' [ 73.785218][ T36] audit: type=1326 audit(1751136106.882:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2034 comm="syz.2.555" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ec0d8e929 code=0x0 [ 73.886651][ T2039] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 74.077130][ T36] audit: type=1400 audit(1751136107.172:383): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.160925][ T10] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 74.304891][ T36] audit: type=1400 audit(1751136107.402:384): avc: denied { create } for pid=2051 comm="syz.0.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.331965][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 74.340918][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 74.361361][ T10] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 74.372325][ T10] usb 2-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.385664][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 74.393907][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.410917][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.419006][ T10] usb 2-1: Product: syz [ 74.423272][ T10] usb 2-1: Manufacturer: syz [ 74.428087][ T10] usb 2-1: SerialNumber: syz [ 74.437732][ T2042] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 74.688709][ T36] audit: type=1400 audit(1751136107.782:385): avc: denied { setattr } for pid=2054 comm="syz.2.561" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.694153][ T2058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.741162][ T2058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.749829][ T36] audit: type=1326 audit(1751136107.842:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2054 comm="syz.2.561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ec0d8e929 code=0x0 [ 74.789430][ T2062] fuse: Unknown parameter 'user_i00000000000000000000' [ 74.933571][ T10] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 74.943837][ T10] usb 2-1: USB disconnect, device number 26 [ 75.032883][ T2078] binder: Bad value for 'stats' [ 75.095941][ T65] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 75.134071][ T2086] fuse: Unknown parameter 'user_i00000000000000000000' [ 75.252265][ T65] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.262532][ T65] usb 4-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 75.275847][ T65] usb 4-1: config 0 interface 0 has no altsetting 0 [ 75.282546][ T65] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 75.291706][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.300482][ T65] usb 4-1: config 0 descriptor?? [ 75.306882][ T65] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 75.370949][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 75.501103][ T10] usb 2-1: device descriptor read/64, error -71 [ 75.740931][ T10] usb 2-1: device descriptor read/64, error -71 [ 75.980963][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 76.110972][ T10] usb 2-1: device descriptor read/64, error -71 [ 76.350939][ T10] usb 2-1: device descriptor read/64, error -71 [ 76.357549][ T36] audit: type=1326 audit(1751136109.452:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2091 comm="syz.2.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec0d8e929 code=0x7fc00000 [ 76.461049][ T10] usb usb2-port1: attempt power cycle [ 76.671554][ T495] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 76.801013][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 76.820976][ T495] usb 3-1: Invalid ep0 maxpacket: 32 [ 76.827626][ T10] usb 2-1: device descriptor read/8, error -71 [ 76.950947][ T495] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 76.961954][ T10] usb 2-1: device descriptor read/8, error -71 [ 77.100932][ T495] usb 3-1: Invalid ep0 maxpacket: 32 [ 77.106407][ T495] usb usb3-port1: attempt power cycle [ 77.200936][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 77.222118][ T10] usb 2-1: device descriptor read/8, error -71 [ 77.352052][ T10] usb 2-1: device descriptor read/8, error -71 [ 77.450957][ T495] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 77.461036][ T10] usb usb2-port1: unable to enumerate USB device [ 77.471464][ T495] usb 3-1: Invalid ep0 maxpacket: 32 [ 77.600929][ T495] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 77.621398][ T495] usb 3-1: Invalid ep0 maxpacket: 32 [ 77.626847][ T495] usb usb3-port1: unable to enumerate USB device [ 77.849153][ T495] usb 4-1: USB disconnect, device number 28 [ 77.889078][ T2109] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:424 [ 78.025940][ T36] audit: type=1400 audit(1751136111.122:388): avc: denied { create } for pid=2114 comm="syz.3.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 78.074422][ T36] audit: type=1326 audit(1751136111.172:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2116 comm="syz.1.582" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fa90bf8e929 code=0x0 [ 78.101030][ T2124] devpts: called with bogus options [ 78.299068][ T2130] 9pnet_fd: Insufficient options for proto=fd [ 78.751731][ T36] audit: type=1400 audit(1751136111.852:390): avc: denied { setopt } for pid=2150 comm="syz.0.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.896645][ T36] audit: type=1326 audit(1751136111.992:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2159 comm="syz.1.592" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa90bf8e929 code=0x0 [ 78.997581][ T36] audit: type=1400 audit(1751136112.092:392): avc: denied { write } for pid=2159 comm="syz.1.592" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.120286][ T2168] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 79.146135][ T36] audit: type=1400 audit(1751136112.242:393): avc: denied { remount } for pid=2169 comm="syz.3.595" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.192309][ T2172] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 79.192340][ T2172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:442 [ 79.216364][ T2174] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 79.226185][ T2174] rust_binder: Error while translating object. [ 79.238651][ T2174] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.245104][ T2174] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:444 [ 79.442394][ T36] audit: type=1400 audit(1751136112.542:394): avc: denied { mounton } for pid=2178 comm="syz.3.599" path="/154/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 79.512245][ T36] audit: type=1400 audit(1751136112.612:395): avc: denied { accept } for pid=2191 comm="syz.2.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.654897][ T2204] netlink: 'syz.2.606': attribute type 11 has an invalid length. [ 79.664668][ T2204] exFAT-fs (rnullb0): invalid boot record signature [ 79.671398][ T2204] exFAT-fs (rnullb0): failed to read boot sector [ 79.677974][ T2204] exFAT-fs (rnullb0): failed to recognize exfat type [ 79.708549][ T2208] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 79.708576][ T2208] rust_binder: Error while translating object. [ 79.726369][ T2208] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.738598][ T2208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:583 [ 79.784632][ T2217] process 'syz.0.612' launched './file0' with NULL argv: empty string added [ 79.805137][ T36] audit: type=1400 audit(1751136112.902:396): avc: denied { execute_no_trans } for pid=2216 comm="syz.0.612" path="/172/file0" dev="tmpfs" ino=985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.833506][ T2218] kvm: pic: non byte write [ 80.040934][ T10] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 80.192125][ T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 80.203323][ T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 80.214010][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 80.220637][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 80.229751][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.239585][ T10] usb 1-1: config 0 descriptor?? [ 80.244889][ T2217] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 80.546106][ T36] audit: type=1400 audit(1751136113.642:397): avc: denied { listen } for pid=2230 comm="syz.2.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.642760][ T2242] netlink: 'syz.1.620': attribute type 4 has an invalid length. [ 80.650612][ T2242] netlink: 3581 bytes leftover after parsing attributes in process `syz.1.620'. [ 80.656225][ T10] logitech 0003:046D:C286.0009: unknown main item tag 0x6 [ 80.667151][ T2242] usb usb9: usbfs: process 2242 (syz.1.620) did not claim interface 4 before use [ 80.668971][ T10] logitech 0003:046D:C286.0009: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.0-1/input0 [ 80.701186][ T10] logitech 0003:046D:C286.0009: no inputs found [ 80.810931][ T31] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 80.856694][ T65] usb 1-1: USB disconnect, device number 25 [ 80.962398][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 80.970531][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 80.978588][ T404] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 80.986734][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.996931][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.007696][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.016832][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.025111][ T31] usb 3-1: Product: syz [ 81.029288][ T31] usb 3-1: Manufacturer: syz [ 81.033948][ T31] usb 3-1: SerialNumber: syz [ 81.141961][ T404] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 81.150980][ T404] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 81.158599][ T404] usb 2-1: can't read configurations, error -61 [ 81.262342][ T31] usb 3-1: 0:2 : does not exist [ 81.267285][ T31] usb 3-1: unit 6 not found! [ 81.274916][ T31] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 81.284996][ T31] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 81.292956][ T404] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 81.302930][ T31] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 81.312538][ T31] usb 3-1: USB disconnect, device number 31 [ 81.421092][ T2256] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.452259][ T404] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 81.461618][ T404] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 81.469478][ T404] usb 2-1: can't read configurations, error -61 [ 81.476021][ T404] usb usb2-port1: attempt power cycle [ 81.517958][ T2264] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.518083][ T2264] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:601 [ 81.525870][ T2264] rust_binder: Error while translating object. [ 81.535255][ T2264] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 81.541501][ T2264] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:601 [ 81.564250][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.574018][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.581470][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.588013][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.594507][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.601097][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.607592][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.614097][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.620636][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.627167][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.633697][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.640346][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.647052][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.653587][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.660335][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.666915][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.673416][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.679880][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.686650][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.693136][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.699595][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.706090][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.712592][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.719029][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.725564][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.732095][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.738699][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.745224][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.751758][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.758234][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.764731][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.771258][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.777797][ T2267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.808577][ T2272] TCP: TCP_TX_DELAY enabled [ 81.821008][ T404] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 81.821361][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.842405][ T404] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 81.858215][ T404] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 81.868040][ T404] usb 2-1: can't read configurations, error -61 [ 81.956118][ T2291] @: renamed from vlan0 (while UP) [ 82.000968][ T404] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 82.022515][ T404] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 82.031510][ T404] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 82.039137][ T404] usb 2-1: can't read configurations, error -61 [ 82.045875][ T404] usb usb2-port1: unable to enumerate USB device [ 82.512917][ T2297] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.637'. [ 82.527831][ T36] audit: type=1400 audit(1751136115.622:398): avc: denied { search } for pid=2296 comm="syz.0.637" name="/" dev="configfs" ino=2478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.561058][ T36] audit: type=1400 audit(1751136115.622:399): avc: denied { write } for pid=2296 comm="syz.0.637" name="/" dev="configfs" ino=2478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.623911][ T2305] kvm: pic: non byte write [ 82.815716][ T2332] rust_binder: Failed copying remainder into alloc: EFAULT [ 82.815742][ T2332] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 82.823085][ T2332] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 82.831420][ T2332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:482 [ 82.880929][ T404] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 83.037866][ T2343] batadv_slave_1: entered promiscuous mode [ 83.040936][ T404] usb 1-1: Using ep0 maxpacket: 16 [ 83.050558][ T404] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.061663][ T404] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.075923][ T404] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 83.091041][ T404] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 83.100455][ T404] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.112205][ T404] usb 1-1: config 0 descriptor?? [ 83.198882][ T2344] batadv_slave_1: left promiscuous mode [ 83.318747][ T2313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.327630][ T2313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.539467][ T404] usbhid 1-1:0.0: can't add hid device: -71 [ 83.545609][ T65] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 83.553281][ T404] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 83.562417][ T404] usb 1-1: USB disconnect, device number 26 [ 83.710985][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 83.717530][ T65] usb 4-1: config 2 has an invalid interface number: 28 but max is 0 [ 83.725854][ T65] usb 4-1: config 2 has no interface number 0 [ 83.732322][ T65] usb 4-1: config 2 interface 28 altsetting 64 has an endpoint descriptor with address 0x77, changing to 0x7 [ 83.744152][ T65] usb 4-1: config 2 interface 28 has no altsetting 0 [ 83.768730][ T65] usb 4-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=a4.dc [ 83.777900][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.786035][ T65] usb 4-1: Product: ␉ [ 83.790499][ T65] usb 4-1: Manufacturer: 嫾퉠秧㴕ᛌ㭬ᔔᎋ빐柦ϸ廁澧裟糱곍⠑먰䐆⵮渝맑騅ぢ䧿棓꜡ⷉ῱筀硎賎⡁犖﹗熘㵗㕶剮妻뢚岙Ģ厉蕪읓敡釩櫵㻽￘ꟕ㥴拋묔퐞㦛䱑뀎ꩂ정鿉衴㙬턽ר欍ꚈỚ䫦에䯮㇍䷓䟼﮺㍜뿙⋪ₓ畛ỿⵑ쌬砉葏 [ 83.821033][ T65] usb 4-1: SerialNumber: 䐊 [ 83.842882][ T36] audit: type=1326 audit(1751136116.942:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2350 comm="syz.1.654" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa90bf8e929 code=0x0 [ 83.924185][ T2359] overlayfs: missing 'lowerdir' [ 83.965862][ T2365] kvm: pic: non byte write [ 84.029008][ T36] audit: type=1400 audit(1751136117.122:401): avc: denied { create } for pid=2346 comm="syz.3.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 84.052775][ T65] usb 4-1: USB disconnect, device number 29 [ 84.092340][ T2369] binder: Unknown parameter '?yqzC}C? ;h' [ 84.114730][ T2371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:633 [ 84.114770][ T2371] rust_binder: Read failure Err(EFAULT) in pid:633 [ 84.137805][ T2374] fuse: Unknown parameter '0x0000000000000005' [ 84.181198][ T2376] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.181432][ T2376] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:638 [ 84.262557][ T2382] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 84.279761][ T2382] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 84.288642][ T2382] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 84.296910][ T2382] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 84.330812][ T2384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:396 [ 84.412613][ T2399] fuse: Unknown parameter '0x0000000000000005' [ 84.526227][ T2417] overlayfs: failed to resolve './file1': -2 [ 84.573388][ T2419] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 84.580766][ T2419] rust_binder: Write failure EINVAL in pid:499 [ 84.716779][ T2426] fuse: Unknown parameter '0x0000000000000005' [ 84.732029][ T2430] tmpfs: Unknown parameter 'usrquota' [ 84.873009][ T2443] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.880143][ T2443] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 84.880175][ T2443] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 84.891003][ T36] audit: type=1400 audit(1751136117.992:402): avc: denied { read } for pid=2440 comm="syz.1.684" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 84.900292][ T2443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:646 [ 84.924373][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 85.090935][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 85.101645][ T9] usb 3-1: config 3 has an invalid interface number: 185 but max is 0 [ 85.109884][ T9] usb 3-1: config 3 has no interface number 0 [ 85.130905][ T9] usb 3-1: config 3 interface 185 has no altsetting 0 [ 85.152006][ T9] usb 3-1: New USB device found, idVendor=1c04, idProduct=0015, bcdDevice=7b.bb [ 85.161147][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.169174][ T9] usb 3-1: Product: syz [ 85.173460][ T9] usb 3-1: Manufacturer: syz [ 85.178098][ T9] usb 3-1: SerialNumber: syz [ 85.213650][ T36] audit: type=1400 audit(1751136118.312:403): avc: denied { create } for pid=2449 comm="syz.0.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 85.392164][ T9] usb 3-1: USB disconnect, device number 32 [ 85.507998][ T2457] fuse: Unknown parameter 'fd0x0000000000000005' [ 85.573002][ T36] audit: type=1400 audit(1751136118.672:404): avc: denied { ioctl } for pid=2463 comm="syz.3.692" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 85.628781][ T2472] netlink: 20 bytes leftover after parsing attributes in process `syz.3.695'. [ 85.656022][ T2474] rust_binder: Error while translating object. [ 85.656072][ T2474] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 85.662537][ T2474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:232 [ 85.687071][ T2478] SELinux: security_context_str_to_sid () failed with errno=-22 [ 85.722593][ T2481] fuse: Unknown parameter 'fd0x0000000000000005' [ 85.941162][ T36] audit: type=1400 audit(1751136119.042:405): avc: denied { mount } for pid=2496 comm="syz.2.705" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 85.945247][ T2497] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 85.986067][ T36] audit: type=1400 audit(1751136119.072:406): avc: denied { getattr } for pid=2496 comm="syz.2.705" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 85.986834][ T2497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 86.008771][ T2497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:434 [ 86.013610][ T36] audit: type=1400 audit(1751136119.082:407): avc: denied { mount } for pid=2496 comm="syz.2.705" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 86.050229][ T36] audit: type=1400 audit(1751136119.082:408): avc: denied { read } for pid=2496 comm="syz.2.705" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 86.050467][ T65] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 86.073955][ T36] audit: type=1400 audit(1751136119.082:409): avc: denied { open } for pid=2496 comm="syz.2.705" path="/144/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 86.140590][ T2511] fuse: Unknown parameter 'fd0x0000000000000005' [ 86.160745][ T2513] rust_binder: Write failure EINVAL in pid:439 [ 86.222495][ T65] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 86.237080][ T65] usb 4-1: can't read configurations, error -61 [ 86.303331][ T2523] kvm: emulating exchange as write [ 86.380956][ T65] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 86.403519][ T2530] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 86.411132][ T2530] rust_binder: Write failure EINVAL in pid:446 [ 86.542301][ T65] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 86.556300][ T2544] rust_binder: Write failure EFAULT in pid:271 [ 86.556742][ T65] usb 4-1: can't read configurations, error -61 [ 86.569772][ T65] usb usb4-port1: attempt power cycle [ 86.623233][ T2547] binder: Bad value for 'max' [ 86.800969][ T9] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 86.911832][ T65] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 86.930999][ T9] usb 2-1: device descriptor read/64, error -71 [ 86.932938][ T65] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 86.946158][ T65] usb 4-1: can't read configurations, error -61 [ 87.080980][ T65] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 87.102786][ T65] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 87.110490][ T65] usb 4-1: can't read configurations, error -61 [ 87.116936][ T65] usb usb4-port1: unable to enumerate USB device [ 87.170971][ T9] usb 2-1: device descriptor read/64, error -71 [ 87.364226][ T2572] netlink: 'syz.2.728': attribute type 4 has an invalid length. [ 87.420962][ T9] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 87.550947][ T9] usb 2-1: device descriptor read/64, error -71 [ 87.557112][ T2579] can0: slcan on ttyS3. [ 87.762360][ T2615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.736'. [ 87.775320][ T2616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.736'. [ 87.788221][ T2618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.801391][ T9] usb 2-1: device descriptor read/64, error -71 [ 87.805603][ T2618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.911493][ T9] usb usb2-port1: attempt power cycle [ 88.040917][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 88.185918][ T2633] __vm_enough_memory: pid: 2633, comm: syz.2.742, bytes: 70373039144960 not enough memory for the allocation [ 88.222020][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.240102][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.260950][ T10] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 88.272501][ T9] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 88.300918][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.309940][ T10] usb 1-1: config 0 descriptor?? [ 88.321625][ T9] usb 2-1: device descriptor read/8, error -71 [ 88.451992][ T9] usb 2-1: device descriptor read/8, error -71 [ 88.700932][ T9] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 88.732002][ T9] usb 2-1: device descriptor read/8, error -71 [ 88.752692][ T10] steelseries 0003:1038:12B6.000A: unknown main item tag 0x2 [ 88.760194][ T10] steelseries 0003:1038:12B6.000A: item fetching failed at offset 3/7 [ 88.781185][ T10] steelseries 0003:1038:12B6.000A: probe with driver steelseries failed with error -22 [ 88.862009][ T9] usb 2-1: device descriptor read/8, error -71 [ 88.919243][ T2643] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:519 [ 88.921007][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 88.971019][ T9] usb usb2-port1: unable to enumerate USB device [ 89.025337][ T2645] rust_binder: Write failure EINVAL in pid:519 [ 90.096959][ T2659] rust_binder: Failed to allocate buffer. len:4192, is_oneway:false [ 90.198674][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 90.198702][ T36] audit: type=1400 audit(1751136123.292:432): avc: denied { create } for pid=2662 comm="syz.1.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 90.256889][ T36] audit: type=1400 audit(1751136123.332:433): avc: denied { sys_admin } for pid=2662 comm="syz.1.753" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 90.310934][ T31] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 90.421224][ T2670] rust_binder: Write failure EFAULT in pid:285 [ 90.460924][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 90.473997][ T31] usb 3-1: config 0 has no interfaces? [ 90.481520][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.491577][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.499799][ T31] usb 3-1: Product: syz [ 90.504680][ T31] usb 3-1: Manufacturer: syz [ 90.509404][ T31] usb 3-1: SerialNumber: syz [ 90.518268][ T31] usb 3-1: config 0 descriptor?? [ 90.726181][ T36] audit: type=1326 audit(1751136123.822:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2655 comm="syz.2.750" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ec0d8e929 code=0x0 [ 90.749767][ T10] usb 1-1: USB disconnect, device number 27 [ 90.777956][ T31] usb 3-1: USB disconnect, device number 34 [ 90.990929][ T1702] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 90.990961][ T1700] Bluetooth: hci0: command 0x1003 tx timeout [ 91.026546][ T36] audit: type=1400 audit(1751136124.122:435): avc: denied { bind } for pid=2690 comm="syz.0.762" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.046860][ T36] audit: type=1400 audit(1751136124.142:436): avc: denied { name_bind } for pid=2690 comm="syz.0.762" src=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 91.067900][ T36] audit: type=1400 audit(1751136124.142:437): avc: denied { node_bind } for pid=2690 comm="syz.0.762" src=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 91.138457][ T36] audit: type=1400 audit(1751136124.232:438): avc: denied { mounton } for pid=2700 comm="syz.3.765" path="/179/file0" dev="tmpfs" ino=1021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.161540][ T45] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 91.312374][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.323394][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.333186][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.346132][ T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.355210][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.364023][ T45] usb 2-1: config 0 descriptor?? [ 91.773939][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 91.781588][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 91.789082][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 91.797440][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 91.804919][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 91.812428][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 91.820134][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 91.827907][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 91.835441][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 91.842941][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 91.850465][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 91.858296][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 91.865918][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 91.873592][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 91.881239][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 91.888910][ T45] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 91.898129][ T45] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 91.997275][ T2718] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 92.018683][ T2720] cgroup: Unknown parameter './binderfs/binder0' [ 92.052443][ T2728] overlay: ./file0 is not a directory [ 92.072587][ T9] usb 2-1: USB disconnect, device number 39 [ 92.311041][ T10] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 92.466710][ T2732] rust_binder: Write failure EINVAL in pid:709 [ 92.467346][ T10] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 92.490490][ T10] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 92.501443][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 92.508369][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 92.517521][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.518788][ T2734] binder: Binderfs stats mode cannot be changed during a remount [ 92.531075][ T10] usb 4-1: config 0 descriptor?? [ 92.539348][ T2730] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 92.601405][ T2739] 9p: Unknown access argument eڴ@zG -@ַf`ܗ$ӱC~$^`Tw>/πSU#3="bu[@Q HID v0.00 Device [syz1] on syz0 [ 95.740971][ T65] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 95.890916][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 95.897284][ T65] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 95.906746][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.916014][ T65] usb 1-1: config 0 descriptor?? [ 96.123899][ T65] usbhid 1-1:0.0: can't add hid device: -71 [ 96.129949][ T65] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 96.138731][ T65] usb 1-1: USB disconnect, device number 28 [ 96.247597][ T2953] rust_binder: Error while translating object. [ 96.247640][ T2953] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.253958][ T2953] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:327 [ 96.338591][ T36] audit: type=1400 audit(1751136130.429:456): avc: denied { bind } for pid=2958 comm="syz.1.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.502924][ T2967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.852'. [ 96.556024][ T36] audit: type=1326 audit(1751136130.649:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2966 comm="syz.1.852" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa90bf8e929 code=0x0 [ 96.733423][ T2979] SELinux: policydb magic number 0x40 does not match expected magic number 0xf97cff8c [ 96.751013][ T2979] SELinux: failed to load policy [ 96.844990][ T36] audit: type=1400 audit(1751136130.939:458): avc: denied { create } for pid=2986 comm="syz.1.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 97.023520][ T3000] rust_kernel: panicked at drivers/android/binder/node.rs:893:13: [ 97.023520][ T3000] attempt to subtract with overflow [ 97.038718][ T3000] ------------[ cut here ]------------ [ 97.044270][ T3000] kernel BUG at rust/helpers/bug.c:7! [ 97.047690][ T36] audit: type=1400 audit(1751136131.139:459): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 97.050302][ T3000] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 97.079143][ T3000] CPU: 1 UID: 0 PID: 3000 Comm: syz.1.862 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 97.092634][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.102712][ T3000] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 97.108027][ T3000] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 1d 01 e6 6e 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 57 c5 af e2 90 90 90 90 90 90 90 90 90 [ 97.127657][ T3000] RSP: 0018:ffffc90003355a90 EFLAGS: 00010246 [ 97.133757][ T3000] RAX: 0000000000000061 RBX: 1ffff9200066ab54 RCX: 62bfb4a88212a100 [ 97.141747][ T3000] RDX: ffffc900011e1000 RSI: 00000000000025e7 RDI: 00000000000025e8 [ 97.149729][ T3000] RBP: ffffc90003355a90 R08: ffffc90003355787 R09: 1ffff9200066aaf0 [ 97.157745][ T3000] R10: dffffc0000000000 R11: fffff5200066aaf1 R12: 0000000000000000 [ 97.165747][ T3000] R13: dffffc0000000000 R14: ffffc90003355ac0 R15: ffffc90003355af0 [ 97.173740][ T3000] FS: 00007fa90ce7f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 97.182698][ T3000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.189300][ T3000] CR2: 0000001b2d21fffc CR3: 0000000121694000 CR4: 00000000003526b0 [ 97.197285][ T3000] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 97.205266][ T3000] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 97.213260][ T3000] Call Trace: [ 97.216555][ T3000] [ 97.219501][ T3000] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 97.226988][ T3000] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 97.235092][ T3000] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x401/0x810 [ 97.245539][ T3000] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 97.259140][ T3000] ? __cfi__RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 97.269981][ T3000] ? __kasan_check_write+0x18/0x20 [ 97.275422][ T3000] ? _raw_spin_lock+0x8c/0x120 [ 97.280228][ T3000] ? __cfi__raw_spin_lock+0x10/0x10 [ 97.285731][ T3000] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 97.292980][ T3000] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 97.300962][ T3000] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 97.311229][ T3000] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 97.321844][ T3000] ? __asan_memcpy+0x5a/0x80 [ 97.326483][ T3000] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 97.339450][ T3000] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 97.349663][ T3000] ? __kasan_check_write+0x18/0x20 [ 97.354844][ T3000] ? _raw_spin_lock+0x8c/0x120 [ 97.359646][ T3000] ? __cfi__raw_spin_lock+0x10/0x10 [ 97.364872][ T3000] ? __kasan_check_write+0x18/0x20 [ 97.370007][ T3000] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 97.379619][ T3000] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 97.389582][ T3000] ? is_bpf_text_address+0x17b/0x1a0 [ 97.394913][ T3000] ? kernel_text_address+0xa9/0xe0 [ 97.400494][ T3000] ? unwind_get_return_address+0x51/0x90 [ 97.406171][ T3000] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 97.412565][ T3000] ? arch_stack_walk+0x10b/0x170 [ 97.417620][ T3000] ? stack_depot_save_flags+0x38/0x800 [ 97.423112][ T3000] ? kasan_save_alloc_info+0x40/0x50 [ 97.428433][ T3000] ? kasan_save_track+0x4f/0x80 [ 97.433421][ T3000] ? kasan_save_track+0x3e/0x80 [ 97.438304][ T3000] ? kasan_save_alloc_info+0x40/0x50 [ 97.444037][ T3000] ? __kasan_kmalloc+0x96/0xb0 [ 97.448820][ T3000] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 97.455436][ T3000] ? krealloc_noprof+0x8d/0x130 [ 97.460309][ T3000] ? rust_helper_krealloc+0x33/0xd0 [ 97.465611][ T3000] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xb1/0x100 [ 97.475375][ T3000] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 97.486423][ T3000] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a4/0x2cd0 [ 97.495830][ T3000] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 97.504794][ T3000] ? __se_sys_ioctl+0x132/0x1b0 [ 97.509670][ T3000] ? __x64_sys_ioctl+0x7f/0xa0 [ 97.514452][ T3000] ? do_syscall_64+0x58/0xf0 [ 97.519054][ T3000] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.525143][ T3000] ? __kasan_kmalloc+0x96/0xb0 [ 97.530041][ T3000] ? kasan_save_alloc_info+0x40/0x50 [ 97.535436][ T3000] ? __kasan_kmalloc+0x96/0xb0 [ 97.540238][ T3000] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 97.546947][ T3000] ? __kasan_check_write+0x18/0x20 [ 97.552077][ T3000] ? _raw_spin_lock+0x8c/0x120 [ 97.556923][ T3000] ? __cfi__raw_spin_lock+0x10/0x10 [ 97.562168][ T3000] ? __asan_memset+0x39/0x50 [ 97.566796][ T3000] ? _raw_spin_unlock+0x45/0x60 [ 97.571681][ T3000] ? rust_helper_spin_unlock+0x19/0x30 [ 97.577174][ T3000] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0xdfc/0x1440 [ 97.587731][ T3000] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 97.598536][ T3000] ? kvm_sched_clock_read+0x15/0x30 [ 97.603757][ T3000] ? sched_clock_noinstr+0xd/0x30 [ 97.608799][ T3000] ? sched_clock+0x44/0x60 [ 97.613229][ T3000] ? sched_clock_cpu+0x75/0x400 [ 97.618181][ T3000] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 97.624268][ T3000] ? xfd_validate_state+0x68/0x150 [ 97.629397][ T3000] ? save_fpregs_to_fpstate+0x196/0x230 [ 97.635058][ T3000] ? __cfi___switch_to+0x10/0x10 [ 97.640139][ T3000] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0 [ 97.650255][ T3000] ? _raw_spin_unlock+0x45/0x60 [ 97.655133][ T3000] ? __switch_to_asm+0x3d/0x70 [ 97.659920][ T3000] ? avc_has_extended_perms+0x7c7/0xdd0 [ 97.665478][ T3000] ? __asan_memcpy+0x5a/0x80 [ 97.670086][ T3000] ? avc_has_extended_perms+0x921/0xdd0 [ 97.675650][ T3000] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 97.685212][ T3000] ? do_vfs_ioctl+0xeda/0x1e30 [ 97.690001][ T3000] ? __futex_queue+0x19a/0x340 [ 97.694795][ T3000] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 97.700453][ T3000] ? __cfi___futex_queue+0x10/0x10 [ 97.705582][ T3000] ? futex_wait_setup+0x1bc/0x260 [ 97.710630][ T3000] ? __futex_wait+0x218/0x2a0 [ 97.715343][ T3000] ? ioctl_has_perm+0x384/0x4d0 [ 97.720233][ T3000] ? has_cap_mac_admin+0xd0/0xd0 [ 97.725195][ T3000] ? futex_wake+0x5fb/0x900 [ 97.729716][ T3000] ? futex_setup_timer+0xb4/0xd0 [ 97.734685][ T3000] ? futex_wait+0x288/0x540 [ 97.739202][ T3000] ? __cfi_futex_wait+0x10/0x10 [ 97.744064][ T3000] ? selinux_file_ioctl+0x6e0/0x1360 [ 97.749460][ T3000] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 97.755040][ T3000] ? do_futex+0x309/0x500 [ 97.759605][ T3000] ? __cfi_do_futex+0x10/0x10 [ 97.764402][ T3000] ? __fget_files+0x2c5/0x340 [ 97.769110][ T3000] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 97.777695][ T3000] ? __se_sys_ioctl+0x114/0x1b0 [ 97.782678][ T3000] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 97.791863][ T3000] __se_sys_ioctl+0x132/0x1b0 [ 97.796593][ T3000] __x64_sys_ioctl+0x7f/0xa0 [ 97.801242][ T3000] x64_sys_call+0x1878/0x2ee0 [ 97.805941][ T3000] do_syscall_64+0x58/0xf0 [ 97.810375][ T3000] ? clear_bhb_loop+0x50/0xa0 [ 97.815504][ T3000] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.821412][ T3000] RIP: 0033:0x7fa90bf8e929 [ 97.826131][ T3000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.845943][ T3000] RSP: 002b:00007fa90ce7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.854558][ T3000] RAX: ffffffffffffffda RBX: 00007fa90c1b5fa0 RCX: 00007fa90bf8e929 [ 97.862733][ T3000] RDX: 0000200000000000 RSI: 00000000c0306201 RDI: 0000000000000004 [ 97.870724][ T3000] RBP: 00007fa90c010b39 R08: 0000000000000000 R09: 0000000000000000 [ 97.878711][ T3000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.886813][ T3000] R13: 0000000000000000 R14: 00007fa90c1b5fa0 R15: 00007fff839055f8 [ 97.894819][ T3000] [ 97.897873][ T3000] Modules linked in: [ 97.902157][ T3000] ---[ end trace 0000000000000000 ]--- [ 97.909357][ T36] audit: type=1400 audit(1751136131.139:460): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.955754][ T3000] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 97.961226][ T3000] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 1d 01 e6 6e 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 57 c5 af e2 90 90 90 90 90 90 90 90 90 [ 97.984323][ T3000] RSP: 0018:ffffc90003355a90 EFLAGS: 00010246 [ 97.993820][ T3000] RAX: 0000000000000061 RBX: 1ffff9200066ab54 RCX: 62bfb4a88212a100 [ 98.004341][ T3000] RDX: ffffc900011e1000 RSI: 00000000000025e7 RDI: 00000000000025e8 [ 98.014010][ T3000] RBP: ffffc90003355a90 R08: ffffc90003355787 R09: 1ffff9200066aaf0 [ 98.022256][ T3000] R10: dffffc0000000000 R11: fffff5200066aaf1 R12: 0000000000000000 [ 98.030467][ T3000] R13: dffffc0000000000 R14: ffffc90003355ac0 R15: ffffc90003355af0 [ 98.049346][ T3000] FS: 00007fa90ce7f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 98.058477][ T3000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.065271][ T3000] CR2: 00007f5ec3381178 CR3: 0000000121694000 CR4: 00000000003526b0 [ 98.074420][ T3000] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 98.101058][ T3000] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 98.118558][ T3000] Kernel panic - not syncing: Fatal exception [ 98.124974][ T3000] Kernel Offset: disabled [ 98.129310][ T3000] Rebooting in 86400 seconds..