last executing test programs: 4.358745179s ago: executing program 3 (id=441): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0x2c, 0xa01, 0x0, 0x25dfdbfb, {0x17}}, 0x14}}, 0x20004014) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x21, 0x0, &(0x7f0000000000)) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) ioctl$ASHMEM_SET_NAME(r5, 0x41007701, &(0x7f0000000080)='pim6reg1\x00') ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x16803}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="90000000", 0x4, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000008, 0x80010, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) 4.164003634s ago: executing program 3 (id=446): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) flock(0xffffffffffffffff, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) timer_create(0x2, &(0x7f0000000180)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_tables_names\x00') (async) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x0}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x8, 0x0, &(0x7f0000000000)=0x64) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) (async) sendto$packet(r2, &(0x7f00000000c0)="3f031c00eee8140006191e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x1b, r4, 0x1, 0x0, 0x6, @remote}, 0x14) (async) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) write$tun(r5, 0x0, 0x1d) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x410280, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 4.030206455s ago: executing program 0 (id=450): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000041, 0x0, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r2, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x541142, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$cgroup_pid(r4, &(0x7f0000000000), 0x12) sendfile(r3, r3, 0x0, 0x7ffff000) 3.97572945s ago: executing program 0 (id=451): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)={0x1d, 0x17, '\x00', [@ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x48, {0x0, 0x10, 0x1, 0x1, [0x1, 0x7, 0x6, 0x3, 0x7, 0x9, 0x3, 0x8000]}}, @generic={0xd, 0x47, "9fe4f09fa66e2f00b5f764832c69b0523b374cb6131b46c164bd14f0426dbd1a03b3b4ac1b54bb46ee7cfb4c3f508b94c17768bcd371e81886ceb9fca6baa18553b2b69ba1222c"}]}, 0xc8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000400)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="400f07"], 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000100)={0x2, 0x2, 0x9, 0xfffffffffffffff8}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/166, 0xa6, 0x0, &(0x7f0000000340)=""/174, 0xae}, &(0x7f0000000440)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/166, 0xa6, 0x0, &(0x7f0000000340)=""/174, 0xae}, &(0x7f0000000440)=0x40) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup(r4) syz_usb_control_io(r2, &(0x7f0000002640)={0x2c, &(0x7f00000024c0)={0x0, 0xf, 0x6e, {0x6e, 0xf, "8ea50656a8152788a18ce98f61a6b3f591fe59993de759bf27e94f1f9ba37647b6fdcc4b79695a9c87a8cec56657c0251b6c3aa3c95f799caf34435783ca90e43001bcfa3304ba56054f58b5718b00b735b081a850fdb405f9af2aa1837b99a164cc2f89808dbe1f06850326"}}, &(0x7f0000002540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}, &(0x7f0000002580)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000025c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x8, 0xc, 0x8, "e0cbf2fd", "37b3b195"}}, &(0x7f0000002600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x4, 0x6, 0x6, 0x5, 0x8d, 0x800}}}, &(0x7f0000002b00)={0x84, &(0x7f0000002680)={0x0, 0xe, 0xb0, "b77a16d1077cd4d6a85c9bca55aa100d05093acaf9364072c482dfdc800b7ecafa0cbfd5eb959ba7f6f95301ae5b1f67835f364cc79cee06c7060245eb727cd14f3bd56700df9413f99f47a63867f636ef70309474fa7875a961587bf8748a281afcbd7fb973dd1b1b800f0a094dacf8cda6eeb22f152798f51ef0d16722af3bf1712572eabb18f98edcf2c9c8652f81d43fbdad9d31f977bb72228748dbabb5d2973f6b5f449b84179af20f293ea115"}, &(0x7f0000002740)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000002780)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000027c0)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000002800)={0x20, 0x0, 0x8, {0x20, 0x10, [0xf0]}}, &(0x7f0000002840)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000002880)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000028c0)={0x40, 0xb, 0x2, "5ddd"}, &(0x7f0000002900)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000002940)={0x40, 0x13, 0x6, @remote}, &(0x7f0000002980)={0x40, 0x17, 0x6}, &(0x7f00000029c0)={0x40, 0x19, 0x2, "c955"}, &(0x7f0000002a00)={0x40, 0x1a, 0x2, 0x5363}, &(0x7f0000002a40)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000002a80)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000002ac0)={0x40, 0x21, 0x1, 0x8}}) (async) syz_usb_control_io(r2, &(0x7f0000002640)={0x2c, &(0x7f00000024c0)={0x0, 0xf, 0x6e, {0x6e, 0xf, "8ea50656a8152788a18ce98f61a6b3f591fe59993de759bf27e94f1f9ba37647b6fdcc4b79695a9c87a8cec56657c0251b6c3aa3c95f799caf34435783ca90e43001bcfa3304ba56054f58b5718b00b735b081a850fdb405f9af2aa1837b99a164cc2f89808dbe1f06850326"}}, &(0x7f0000002540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}, &(0x7f0000002580)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000025c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x8, 0xc, 0x8, "e0cbf2fd", "37b3b195"}}, &(0x7f0000002600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x4, 0x6, 0x6, 0x5, 0x8d, 0x800}}}, &(0x7f0000002b00)={0x84, &(0x7f0000002680)={0x0, 0xe, 0xb0, "b77a16d1077cd4d6a85c9bca55aa100d05093acaf9364072c482dfdc800b7ecafa0cbfd5eb959ba7f6f95301ae5b1f67835f364cc79cee06c7060245eb727cd14f3bd56700df9413f99f47a63867f636ef70309474fa7875a961587bf8748a281afcbd7fb973dd1b1b800f0a094dacf8cda6eeb22f152798f51ef0d16722af3bf1712572eabb18f98edcf2c9c8652f81d43fbdad9d31f977bb72228748dbabb5d2973f6b5f449b84179af20f293ea115"}, &(0x7f0000002740)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000002780)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000027c0)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000002800)={0x20, 0x0, 0x8, {0x20, 0x10, [0xf0]}}, &(0x7f0000002840)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000002880)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000028c0)={0x40, 0xb, 0x2, "5ddd"}, &(0x7f0000002900)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000002940)={0x40, 0x13, 0x6, @remote}, &(0x7f0000002980)={0x40, 0x17, 0x6}, &(0x7f00000029c0)={0x40, 0x19, 0x2, "c955"}, &(0x7f0000002a00)={0x40, 0x1a, 0x2, 0x5363}, &(0x7f0000002a40)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000002a80)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000002ac0)={0x40, 0x21, 0x1, 0x8}}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) (async) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 3.448859762s ago: executing program 1 (id=459): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x94, 0x0, &(0x7f00000006c0)=[@request_death, @release, @enter_looper, @dead_binder_done, @register_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000640)={@ptr={0x70742a85, 0x1, &(0x7f0000000780)=""/100, 0x64, 0x1, 0x11}, @ptr={0x70742a85, 0x1, &(0x7f0000000800)=""/224, 0xe0, 0x2, 0xd}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/200, 0xc8, 0x2, 0x25}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}}, @request_death={0x400c630e, 0x1}, @acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) 3.404286006s ago: executing program 1 (id=460): r0 = socket$vsock_stream(0x28, 0x1, 0x0) recvmsg(r0, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x40012100) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kheaders.tar.xz', 0x400200, 0x20) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x541b, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0xa000000}, 0xc) mknod$loop(0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pidfd_getfd(r1, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) 3.279996876s ago: executing program 3 (id=461): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x66742, 0x0) (async) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000) (async) madvise(&(0x7f000019c000/0x4000)=nil, 0x4000, 0xe) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$msr(r1, &(0x7f0000000280)=""/175, 0xaf) (async) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) (async) write(r0, &(0x7f00000026c0)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b3464b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024436ecad74459a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6798428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc000f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb68ec4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e63c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b330e7735bf1c7e0e26aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3e4c29b02331aac4351f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9560dac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cac1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3ca6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad744941039c494e73ac91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d3de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca3064b954915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d9733b149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b7500e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4f624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06406a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc607185701065a8b84a2f2502af8e68d0fe7635ac502f1b9ef82e61102b303d5f6483c0169ac112d9010a022c58e3f80f0cfb16f906a3df335d42df851aeee62f85bb93c87e7b8b171054c2b7d77a8e4f04c0ed12076233729e6f82e46e8065bb8d870c27bdd427ebf21cd8cb83fd53667a48a42c0ffe91d1fc078b616cb9b763c448aa7c7156df9485535ae508cc87b66a340af762db602326d02af73557e3fba164c12cc92ee61ae4dea1a65c32d3acab702227e9484a927777f07bcd7b5e3616012d9ec79802e2830e7732590a83bfe1bd710ff70bfb53b0b6c711c10cfa6902f645bcebaf64e0805731061f5478d801601c1deeb2d14c26aa130d1d31a235f97d93902ba1ea08be27cb65a8d16fad94d3ef3d4a66c00a89a6be502cb2eef40cbdb28b78d5a7d7ed68f1b8d53696b8f137b7b806095ef082525c29c7cd174666850e72bab6fcf10288204291e158216a177716728f8d578710acf801c9b59d6fd950581a08d5e1e76f6184c7b84f60142dd40b56c4247882ead660ea55d98592f776f95aae202777de1dc555360d2edb54a220483a43d14a0b687f37a690a790cc69b09734961fd4889a67d4ffc5cc843a8b3ac77b8186fea10ac7033e4e193ac8a2cfa14c90a9e9d7514449565aa8c0ea99a9ea7ae7a9b1f2584e6013bd619b30c626ad63ec0000f6c199d8374453c5e1f05170dff8546f20373b2e65395c", 0x11f1) 3.279371906s ago: executing program 1 (id=462): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000200)={0x2, 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x1d) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x3, &(0x7f0000000100)=""/193, &(0x7f0000000040)=0xc1) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000006c0)="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", 0xfc) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f00000000c0)=0x4000000000000200, 0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r3, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r7, 0x4dd99000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000002680)=@abs={0x1, 0x0, 0x4e24}, 0x6e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) 3.274784116s ago: executing program 3 (id=463): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x802, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'cpuacct'}]}, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000df58"]) setns(r4, 0x10000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x200000024}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 3.270096436s ago: executing program 1 (id=464): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40}, {0x1, 0x0, 0x9}, {0x0, 0x5, 0x0, 0xffffff80}}}, 0xb8}}, 0x4000) 3.263283247s ago: executing program 3 (id=465): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000100)={0x1f, 0x0, 0x7}) recvmmsg(r1, &(0x7f00000000c0), 0x5bb, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000282000/0x400000)=nil) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f0000000180)={0x30}, 0x30) syz_kvm_add_vcpu$x86(r7, &(0x7f0000000140)={0x0, 0x0, 0x18}) syz_kvm_add_vcpu$x86(r7, &(0x7f0000000140)={0x0, 0x0}) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') read$FUSE(r12, &(0x7f00000005c0)={0x2020}, 0x2020) syz_usb_control_io(r11, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r11, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=@newsa={0x140, 0x10, 0x633, 0x200, 0x25dfdbfc, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x2e}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0xfffffffffffffffd, 0x0, 0x0, 0x2dcd, 0x8, 0x0, 0x400000, 0x8000}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20008000}, 0x4048040) fstat(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r13, 0xffffffff80000602, r14, &(0x7f0000000000)={0x5, 0x6, 0x0, 0xdd04ba2520bad77c}) close_range(r13, 0xffffffffffffffff, 0x0) 2.709795832s ago: executing program 1 (id=471): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380), 0x0) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x84}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = fsopen(&(0x7f0000000140)='vfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) (async) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rt_sigaction(0x19, &(0x7f00000000c0)={0x0, 0x84000004, 0x0}, 0x0, 0x8, &(0x7f0000000000)) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r0, 0xd3c59000) 2.709527452s ago: executing program 1 (id=472): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r4 = eventfd2(0x0, 0x1) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r4}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f216ee40f00a057a0000010203010902120001000000000904000000ff"], 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) bind$bt_l2cap(r5, &(0x7f0000000180), 0xe) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000140)=0x0) syz_pidfd_open(r6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.755646889s ago: executing program 0 (id=480): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup(r1) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0xa000002, 0x4) (async) getsockopt$inet_int(r2, 0x0, 0xd, 0x0, &(0x7f0000000400)) (async) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f00000000c0)={0xd, 0x2}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) fadvise64(r0, 0x3, 0x9, 0x5) openat$cgroup_ro(r2, &(0x7f0000000080)='freezer.state\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) (async) madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x17) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.593067922s ago: executing program 0 (id=481): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x84, @empty, 0x3}, 0x1c) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, "352bc764aef32890"}, 0x10}, 0x2, 0x0, 0x0, 0x4080}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1a) madvise(&(0x7f0000666000/0x2000)=nil, 0x2000, 0x6f) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r4, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4083, 0xff3}, {0x0}], 0x2) 1.515322888s ago: executing program 0 (id=483): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) unshare(0x62040200) (async, rerun: 32) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}) (async, rerun: 64) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0xfffd, @remote}, {0x2, 0x0, @empty}, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1}) (async, rerun: 64) r2 = getpid() (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000240)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000740)={"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"}) (async) ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f00000002c0)) (async, rerun: 64) r6 = syz_pidfd_open(r2, 0x0) (rerun: 64) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000555000/0x7000)=nil, 0x7000, 0x3000019, 0x1010, r9, 0xcc66e000) (async, rerun: 64) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x40002) (rerun: 64) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f00000008c0)={0x60, 0x16, 0x8, 0x45, 0x0, 0xc, 0x0}) write$selinux_load(r8, &(0x7f0000000c40)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1, @ANYRES8=r1, @ANYRES16=r4, @ANYRESHEX=r9, @ANYRESOCT=r5, @ANYRES8=0x0], 0x6000) (async) r11 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002cc2cd8406307302079000102030109021200015f6560705b1582b96c0aa6ff09"], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r11, 0x0, 0x0) (async) syz_usb_ep_read(r11, 0x97, 0x46, &(0x7f0000000180)=""/70) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r7, 0x80045400, &(0x7f0000000040)) r12 = fcntl$dupfd(r6, 0x406, r6) statx(r12, 0x0, 0x1000, 0x20, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000b40)=""/237, 0xed, 0x2, 0xa}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) (rerun: 32) 1.378921199s ago: executing program 0 (id=487): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) (async) r1 = socket(0x1, 0x2, 0x1) bind$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$SIOCGETLINKNAME(r1, 0x89e0, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x101, 0xc, 0x40, 0x4}, {0xc, 0x0, 0x4, 0x2}, {0xf0, 0x8, 0x8, 0x5}, {0xe, 0x8, 0x6, 0x1}, {0x8000, 0x7, 0x1, 0x6}, {0x9, 0x7, 0x2, 0x104}, {0xf800, 0x11, 0x1, 0x7fff}, {0x3, 0x3, 0x8, 0x100}, {0x6aa, 0x7, 0x0, 0x80000001}, {0xc6, 0x2, 0x81, 0x1}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) (async) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xcc, 0x2c, 0xdf, 0x40, 0x763, 0x2030, 0x7979, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5f, 0x65, 0x60, 0x70, [{{0x9, 0x4, 0x1, 0x8, 0x0, 0xff, 0xa2, 0x7d, 0x9}}]}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r4, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0x80, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r4, 0x0) futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r3, 0x0, 0x0) (rerun: 64) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 123.96512ms ago: executing program 3 (id=493): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aebe10103010902240001000020000904c40102fffd01"], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000001f80), 0x34, 0x181002) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000140)=""/106) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000008c0)) modify_ldt$write(0x1, 0x0, 0x0) r3 = dup(r1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x891d, &(0x7f0000001b00)={'ip_vti0\x00', 0x0}) syz_clone(0x40008000, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000200)=0x17d, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340), 0x1000) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000800)) sendmsg$unix(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x4040000}, 0x44000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2080, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x2e) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f00000029c0)={0x2020}, 0x2020) 123.51258ms ago: executing program 2 (id=494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0xfffffffffffffffd) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000680)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x10000000, &(0x7f0000000300)=""/161, 0xa1, 0x1, 0x11}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r2}, @request_death={0x400c630e, 0x1}, @increfs_done={0x40106308, 0x2}, @exit_looper], 0xfc, 0x0, &(0x7f0000000700)="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"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000680)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x10000000, &(0x7f0000000300)=""/161, 0xa1, 0x1, 0x11}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r2}, @request_death={0x400c630e, 0x1}, @increfs_done={0x40106308, 0x2}, @exit_looper], 0xfc, 0x0, &(0x7f0000000700)="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"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0xa, 0x1, 0x35}, @fda={0x66646185, 0x8000000005, 0x2, 0x18}}, 0x0}, 0x400}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x0, 0x2c}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 121.673221ms ago: executing program 2 (id=495): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f00000001c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x4000000000000c2, 0x3a, '', 0x3a, '', 0x3a, './file0'}, 0x27) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x5, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0x843, 0x1, 0x100000000001, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x4003, 0x9}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x100) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) utime(&(0x7f0000000340)='./file0\x00', &(0x7f0000000600)={0x8, 0x6}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f0000000380)=[@dead_binder_done, @exit_looper, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xffe9, 0x0, &(0x7f0000000100), 0xfffffffffffffe9e, 0x0, 0x0}) 117.013381ms ago: executing program 2 (id=496): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) mknod(&(0x7f0000000080)='.\x00', 0x8, 0x5) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x1000}, @fda={0x66646185, 0x0, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 105.838862ms ago: executing program 2 (id=497): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000002580)=""/4096, 0x1000}], 0x4}, 0x5e}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0xffff22cb}], 0x4, 0x2, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) 94.593223ms ago: executing program 2 (id=498): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x77c9, 0x108080) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f00000001c0)={0x9, 0x6, 0x2, 0x7ff}) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x1802, 0x0) (async) keyctl$reject(0x13, 0x0, 0x9, 0x204, 0xfffffffffffffff9) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = socket(0x2b, 0x3, 0xaa1c3e12) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f00000002c0)={0x9, {{0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x12}, 0x6}}, {{0xa, 0x4e23, 0x28000000, @loopback, 0x55}}}, 0x108) (async) io_setup(0x9, &(0x7f0000000280)=0x0) io_getevents(r6, 0x8, 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=499): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40}, {0x1, 0x0, 0x9}, {0x0, 0x5, 0x0, 0x300000000000000}}}, 0xb8}}, 0x4000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.173' (ED25519) to the list of known hosts. [ 22.523086][ T36] audit: type=1400 audit(1756498622.530:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.524543][ T281] cgroup: Unknown subsys name 'net' [ 22.545745][ T36] audit: type=1400 audit(1756498622.530:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.573128][ T36] audit: type=1400 audit(1756498622.560:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.573362][ T281] cgroup: Unknown subsys name 'devices' [ 22.682544][ T281] cgroup: Unknown subsys name 'hugetlb' [ 22.688172][ T281] cgroup: Unknown subsys name 'rlimit' [ 22.823406][ T36] audit: type=1400 audit(1756498622.830:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.846623][ T36] audit: type=1400 audit(1756498622.830:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.871449][ T36] audit: type=1400 audit(1756498622.830:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.882973][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.903753][ T36] audit: type=1400 audit(1756498622.910:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.929280][ T36] audit: type=1400 audit(1756498622.910:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.962734][ T36] audit: type=1400 audit(1756498622.970:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.963335][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.988258][ T36] audit: type=1400 audit(1756498622.970:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.280147][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.287441][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.294739][ T291] bridge_slave_0: entered allmulticast mode [ 24.301287][ T291] bridge_slave_0: entered promiscuous mode [ 24.316250][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.323346][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.330556][ T291] bridge_slave_1: entered allmulticast mode [ 24.336811][ T291] bridge_slave_1: entered promiscuous mode [ 24.353820][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.360922][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.367991][ T289] bridge_slave_0: entered allmulticast mode [ 24.374355][ T289] bridge_slave_0: entered promiscuous mode [ 24.383852][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.390953][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.398284][ T288] bridge_slave_0: entered allmulticast mode [ 24.404630][ T288] bridge_slave_0: entered promiscuous mode [ 24.410849][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.417908][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.425077][ T289] bridge_slave_1: entered allmulticast mode [ 24.431405][ T289] bridge_slave_1: entered promiscuous mode [ 24.443779][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.451114][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.458182][ T288] bridge_slave_1: entered allmulticast mode [ 24.464552][ T288] bridge_slave_1: entered promiscuous mode [ 24.531955][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.539024][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.546167][ T290] bridge_slave_0: entered allmulticast mode [ 24.552448][ T290] bridge_slave_0: entered promiscuous mode [ 24.559070][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.566165][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.573419][ T290] bridge_slave_1: entered allmulticast mode [ 24.579759][ T290] bridge_slave_1: entered promiscuous mode [ 24.716054][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.723135][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.730458][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.737491][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.749425][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.756496][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.763876][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.770917][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.790776][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.797916][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.805225][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.812291][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.832945][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.840013][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.847284][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.854327][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.887501][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.894839][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.902095][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.909259][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.916965][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.924184][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.931780][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.938962][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.958708][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.965891][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.973925][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.980990][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.002489][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.009543][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.017544][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.024615][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.043681][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.050752][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.058342][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.065396][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.073176][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.080230][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.087774][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.095193][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.143467][ T289] veth0_vlan: entered promiscuous mode [ 25.156174][ T288] veth0_vlan: entered promiscuous mode [ 25.173039][ T291] veth0_vlan: entered promiscuous mode [ 25.187476][ T288] veth1_macvtap: entered promiscuous mode [ 25.196276][ T290] veth0_vlan: entered promiscuous mode [ 25.216788][ T290] veth1_macvtap: entered promiscuous mode [ 25.228017][ T291] veth1_macvtap: entered promiscuous mode [ 25.238665][ T289] veth1_macvtap: entered promiscuous mode [ 25.282451][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.340404][ T338] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4'. [ 25.487773][ T361] input: syz0 as /devices/virtual/input/input4 [ 25.510729][ T362] binder: Unknown parameter '00000000000000000000003' [ 25.521106][ T365] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.663011][ T377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 25.706791][ T380] SELinux: failed to load policy [ 25.930036][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.080093][ T10] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 26.091862][ T9] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 26.101596][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 26.109906][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.40 [ 26.119092][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.127218][ T9] usb 2-1: Product: 앸뇷뜌໲讈킟ᗍ髊锷涯ߣู㫴ᨢ퀾啧퀄뗅音뙂茋徳瀳条衁蓀锜൧狻࿵鍎㞶ᰗ튵蚪梐资癢ﶷჅ㓘蘵殒䑲逎ꃑ慒㊖溴뚗뭦➮冲鴫֮졞ೀ晹Й뙹蕷氺羴៾嘭놙腔䤿珞骋᠀燏ખ貢턤䄐率椴䎋㵌잼߅ [ 26.161749][ T9] usb 2-1: Manufacturer: م [ 26.166381][ T9] usb 2-1: SerialNumber: 侾ἱᕩӪ걺拺蕱苷׳賓ꝕ७ഷ؏⊅㱄체杔㋹샸Ꮹ䭎践⥌֓뻻鉚劆꺅彣ⴹ탄룣漴庇㩩䇋㖇떻짺辴䥚䜞㛹Ꚍ㋲㼵འꭶ㑢㆔ᶀ寋煷ላ [ 26.231057][ T10] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 26.240480][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.249447][ T10] usb 1-1: config 0 descriptor?? [ 26.409321][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 26.415524][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 26.426625][ T9] usb 2-1: USB disconnect, device number 2 [ 26.459910][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 26.739284][ T419] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 26.746561][ T419] IPv6: NLM_F_CREATE should be set when creating new route [ 26.753899][ T419] IPv6: NLM_F_CREATE should be set when creating new route [ 26.766365][ T419] capability: warning: `syz.3.31' uses deprecated v2 capabilities in a way that may be insecure [ 26.891839][ T424] SELinux: policydb string does not match my string SE Linux [ 26.899560][ T424] SELinux: failed to load policy [ 26.905503][ T424] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 26.905576][ T424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:37 [ 26.960182][ T330] rust_binder: 370: removing orphan mapping 0:24 [ 27.009740][ T429] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 27.280135][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 27.293049][ T330] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.310288][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 27.317562][ T441] binder: Bad value for 'stats' [ 27.330048][ T10] asix 1-1:0.0: probe with driver asix failed with error -71 [ 27.350955][ T10] usb 1-1: USB disconnect, device number 2 [ 27.449999][ T330] usb 4-1: Using ep0 maxpacket: 8 [ 27.464855][ T330] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 27.480352][ T330] usb 4-1: config 0 has no interface number 0 [ 27.486487][ T330] usb 4-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 27.500040][ T330] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 27.513968][ T330] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 1126, setting to 1024 [ 27.528003][ T330] usb 4-1: config 0 interface 200 has no altsetting 0 [ 27.535980][ T36] kauditd_printk_skb: 101 callbacks suppressed [ 27.535997][ T36] audit: type=1400 audit(1756498627.550:175): avc: denied { unlink } for pid=289 comm="syz-executor" name="file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 27.544749][ T330] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 27.577887][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.586507][ T330] usb 4-1: Product: syz [ 27.590866][ T330] usb 4-1: Manufacturer: syz [ 27.595582][ T330] usb 4-1: SerialNumber: syz [ 27.606340][ T36] audit: type=1400 audit(1756498627.590:176): avc: denied { setopt } for pid=464 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.619145][ T330] usb 4-1: config 0 descriptor?? [ 27.650947][ T36] audit: type=1400 audit(1756498627.590:177): avc: denied { ioctl } for pid=464 comm="syz.1.43" path="socket:[4508]" dev="sockfs" ino=4508 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.653618][ T429] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 27.694174][ T467] rust_binder: Write failure EFAULT in pid:34 [ 27.735525][ T36] audit: type=1400 audit(1756498627.590:178): avc: denied { write } for pid=464 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.736626][ T472] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 27.751841][ T36] audit: type=1400 audit(1756498627.660:179): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 27.769982][ T472] rust_binder: Error while translating object. [ 27.799863][ T472] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.816968][ T472] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:36 [ 27.830005][ T36] audit: type=1400 audit(1756498627.700:180): avc: denied { block_suspend } for pid=466 comm="syz.1.44" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 27.862591][ T478] futex_wake_op: syz.0.47 tries to shift op by -1; fix this program [ 27.882903][ T36] audit: type=1400 audit(1756498627.720:181): avc: denied { append } for pid=469 comm="syz.0.45" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.917220][ T429] input: syz1 as /devices/virtual/input/input5 [ 27.936861][ T488] netlink: 'syz.1.49': attribute type 6 has an invalid length. [ 27.949365][ T36] audit: type=1400 audit(1756498627.720:182): avc: denied { bind } for pid=469 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.003813][ T36] audit: type=1400 audit(1756498627.920:183): avc: denied { write } for pid=428 comm="syz.3.35" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 28.033051][ T36] audit: type=1400 audit(1756498627.950:184): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=442 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.067230][ T330] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input6 [ 28.085861][ C0] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 28.093087][ C0] usb 4-1: hanwang_irq - usb_submit_urb failed with result -1 [ 28.110259][ C1] usb 4-1: hanwang_irq - urb shutting down with status: -2 [ 28.115302][ T330] usb 4-1: USB disconnect, device number 2 [ 28.880121][ T329] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 29.053458][ T506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.072263][ T506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.091882][ T506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.111102][ T506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.129852][ T506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.160081][ T506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.379438][ T506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.399560][ T506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.423116][ T329] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 29.440171][ T329] usb 1-1: can't read configurations, error -71 [ 30.069576][ T510] rust_binder: 61: no such ref 3 [ 31.247913][ T518] __vm_enough_memory: pid: 518, comm: syz.3.54, bytes: 18014402804453376 not enough memory for the allocation [ 31.281159][ T520] rust_binder: Write failure EFAULT in pid:51 [ 31.343501][ T528] capability: warning: `syz.3.62' uses 32-bit capabilities (legacy support in use) [ 31.429864][ T535] /dev/rnullb0: Can't open blockdev [ 31.530146][ T330] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.680009][ T330] usb 2-1: Using ep0 maxpacket: 16 [ 31.686768][ T330] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 31.694695][ T330] usb 2-1: can't read configurations, error -61 [ 31.809999][ T331] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.830010][ T330] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.961387][ T331] usb 3-1: unable to get BOS descriptor or descriptor too short [ 31.980191][ T331] usb 3-1: config 192 has an invalid interface number: 162 but max is 0 [ 31.989992][ T330] usb 2-1: Using ep0 maxpacket: 16 [ 31.999615][ T331] usb 3-1: config 192 has no interface number 0 [ 32.001439][ T330] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 32.006126][ T331] usb 3-1: config 192 interface 162 has no altsetting 0 [ 32.030021][ T330] usb 2-1: can't read configurations, error -61 [ 32.032233][ T331] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 32.040437][ T330] usb usb2-port1: attempt power cycle [ 32.052198][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.071564][ T331] usb 3-1: Product: syz [ 32.075915][ T331] usb 3-1: Manufacturer: syz [ 32.086902][ T331] usb 3-1: SerialNumber: syz [ 32.135329][ T46] bridge_slave_1: left allmulticast mode [ 32.150169][ T46] bridge_slave_1: left promiscuous mode [ 32.166361][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.186771][ T46] bridge_slave_0: left allmulticast mode [ 32.196274][ T46] bridge_slave_0: left promiscuous mode [ 32.216551][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.338303][ T331] usb-storage 3-1:192.162: USB Mass Storage device detected [ 32.346578][ T331] usb-storage 3-1:192.162: device ignored [ 32.394104][ T330] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 32.394322][ T46] veth1_macvtap: left promiscuous mode [ 32.420039][ T46] veth0_vlan: left promiscuous mode [ 32.440372][ T330] usb 2-1: Using ep0 maxpacket: 16 [ 32.441259][ T331] usb 3-1: USB disconnect, device number 3 [ 32.447048][ T330] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 32.462624][ T330] usb 2-1: can't read configurations, error -61 [ 32.590030][ T330] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 32.612549][ T588] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.620380][ T330] usb 2-1: Using ep0 maxpacket: 16 [ 32.626942][ T330] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 32.629783][ T588] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.634592][ T330] usb 2-1: can't read configurations, error -61 [ 32.643554][ T588] bridge_slave_0: entered allmulticast mode [ 32.654045][ T330] usb usb2-port1: unable to enumerate USB device [ 32.660458][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 32.660474][ T36] audit: type=1400 audit(1756498632.660:212): avc: denied { write } for pid=592 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.660512][ T588] bridge_slave_0: entered promiscuous mode [ 32.666584][ T36] audit: type=1400 audit(1756498632.660:213): avc: denied { ioctl } for pid=592 comm="syz.0.75" path="socket:[4865]" dev="sockfs" ino=4865 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.750805][ T588] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.757981][ T588] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.765315][ T588] bridge_slave_1: entered allmulticast mode [ 32.771967][ T588] bridge_slave_1: entered promiscuous mode [ 32.902343][ T36] audit: type=1400 audit(1756498632.910:214): avc: denied { name_bind } for pid=610 comm="syz.2.78" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.946266][ T616] process 'syz.2.79' launched './file1' with NULL argv: empty string added [ 32.956434][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.962161][ T36] audit: type=1400 audit(1756498632.910:215): avc: denied { node_bind } for pid=610 comm="syz.2.78" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 32.963530][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.001296][ T36] audit: type=1400 audit(1756498632.950:216): avc: denied { execute } for pid=615 comm="syz.2.79" name="file1" dev="tmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 33.025302][ T616] rust_binder: Error while translating object. [ 33.025346][ T616] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 33.032410][ T616] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:61 [ 33.041917][ T36] audit: type=1400 audit(1756498633.010:217): avc: denied { execute_no_trans } for pid=615 comm="syz.2.79" path="/18/file1" dev="tmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 33.043012][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.081088][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.156328][ T588] veth0_vlan: entered promiscuous mode [ 33.172397][ T588] veth1_macvtap: entered promiscuous mode [ 33.206233][ T36] audit: type=1400 audit(1756498633.210:218): avc: denied { unmount } for pid=588 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.218787][ T623] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.246841][ T623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 33.256837][ T36] audit: type=1400 audit(1756498633.270:219): avc: denied { mount } for pid=626 comm="syz.2.82" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 33.288027][ T627] ======================================================= [ 33.288027][ T627] WARNING: The mand mount option has been deprecated and [ 33.288027][ T627] and is ignored by this kernel. Remove the mand [ 33.288027][ T627] option from the mount to silence this warning. [ 33.288027][ T627] ======================================================= [ 33.323781][ T36] audit: type=1400 audit(1756498633.300:220): avc: denied { remount } for pid=626 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 33.344649][ T627] devpts: called with bogus options [ 33.349990][ T36] audit: type=1400 audit(1756498633.340:221): avc: denied { create } for pid=626 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.370435][ T623] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.370459][ T623] rust_binder: Read failure Err(EFAULT) in pid:83 [ 33.443853][ T635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 33.494623][ T640] rust_binder: Error while translating object. [ 33.494659][ T640] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 33.501066][ T640] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:71 [ 33.568143][ T643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 33.587162][ T643] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.596246][ T643] netlink: 'syz.3.86': attribute type 4 has an invalid length. [ 33.609302][ T643] netlink: 'syz.3.86': attribute type 21 has an invalid length. [ 33.626014][ T643] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.86'. [ 33.664330][ T652] tmpfs: Unknown parameter 'smackfstransmute' [ 33.689204][ T654] rust_binder: Error while translating object. [ 33.689275][ T654] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 33.695705][ T654] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:13 [ 33.708896][ T657] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.040019][ T331] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 34.090111][ T674] netlink: 'syz.3.95': attribute type 4 has an invalid length. [ 34.101521][ T674] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=674 comm=syz.3.95 [ 34.201601][ T331] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 34.210008][ T331] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 34.220341][ T331] usb 3-1: config 220 has no interface number 2 [ 34.226629][ T331] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 34.239871][ T329] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 34.247644][ T331] usb 3-1: config 220 interface 0 has no altsetting 0 [ 34.254818][ T331] usb 3-1: config 220 interface 76 has no altsetting 0 [ 34.261974][ T331] usb 3-1: config 220 interface 1 has no altsetting 0 [ 34.270492][ T331] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 34.279611][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.287812][ T331] usb 3-1: Product: syz [ 34.292062][ T331] usb 3-1: Manufacturer: syz [ 34.296692][ T331] usb 3-1: SerialNumber: syz [ 34.330252][ T687] tmpfs: Bad value for 'nr_blocks' [ 34.343558][ T682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.362998][ T682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.410381][ T691] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.410415][ T691] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 34.419915][ T691] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 34.421314][ T330] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.446049][ T329] usb 1-1: Using ep0 maxpacket: 32 [ 34.446211][ T691] rust_binder: Read failure Err(EFAULT) in pid:60 [ 34.467122][ T329] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.486036][ T329] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.495858][ T329] usb 1-1: config 0 interface 0 has no altsetting 0 [ 34.502517][ T329] usb 1-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 34.511622][ T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.515099][ T663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.520829][ T329] usb 1-1: config 0 descriptor?? [ 34.532891][ T663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.541839][ T663] /dev/rnullb0: Can't open blockdev [ 34.789999][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 34.921948][ T696] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 34.929249][ T696] rust_binder: 34: no such ref 1 [ 34.941150][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.954590][ T698] rust_binder: Write failure EFAULT in pid:36 [ 34.967922][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.984234][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 34.997369][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 35.006714][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.016181][ T31] usb 2-1: config 0 descriptor?? [ 35.046052][ T700] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 35.082599][ T702] rust_binder: Write failure EFAULT in pid:40 [ 35.181221][ T708] rust_binder: 46: no such ref 4294967295 [ 35.241591][ T714] fuse: Bad value for 'user_id' [ 35.246658][ T714] fuse: Bad value for 'user_id' [ 35.424277][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.432006][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.439634][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.447851][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.455695][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.463740][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.471426][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.479092][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.486993][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.494820][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.502756][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.510623][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.518151][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.526320][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.534004][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.541853][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.549367][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.557269][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.564971][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.572784][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.580467][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.588126][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.595882][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.603702][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.611400][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.619052][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.626843][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.634916][ T693] /dev/rnullb0: Can't open blockdev [ 35.641122][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.649164][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.656704][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.664257][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.671765][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.679249][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.688078][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.695584][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.703075][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.710571][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.718066][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 35.725925][ T31] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 35.740847][ T31] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 35.757745][ T31] usb 2-1: USB disconnect, device number 7 [ 35.790786][ T718] fido_id[718]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 36.141501][ T720] rust_binder: Error while translating object. [ 36.141542][ T720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 36.147757][ T720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:57 [ 36.530000][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 36.700009][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 36.706419][ T45] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 36.715624][ T45] usb 2-1: config 179 has no interface number 0 [ 36.727397][ T331] usb 3-1: selecting invalid altsetting 0 [ 36.737768][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 36.757514][ T331] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 36.764736][ T331] usb 3-1: No valid video chain found. [ 36.770473][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 36.782818][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 36.796642][ T331] usb 3-1: USB disconnect, device number 4 [ 36.805934][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 36.818571][ T45] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 36.843476][ T45] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 36.854985][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.866171][ T732] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 36.994268][ T329] usbhid 1-1:0.0: can't add hid device: -71 [ 37.007800][ T329] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 37.016883][ T329] usb 1-1: USB disconnect, device number 5 [ 37.281935][ T329] usb 2-1: USB disconnect, device number 8 [ 37.287822][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 37.287860][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 37.310445][ T331] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.333220][ T771] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 37.341367][ T771] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 37.349747][ T771] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 37.357787][ T771] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 37.460018][ T331] usb 3-1: device descriptor read/64, error -71 [ 37.640012][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 37.710023][ T331] usb 3-1: device descriptor read/64, error -71 [ 37.795415][ T45] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 37.806474][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.808932][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 37.808951][ T36] audit: type=1400 audit(1756498637.810:246): avc: denied { ioctl } for pid=774 comm="syz.1.131" path="socket:[7276]" dev="sockfs" ino=7276 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.817515][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.824939][ T36] audit: type=1400 audit(1756498637.840:247): avc: denied { setopt } for pid=774 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.849017][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 37.860510][ T36] audit: type=1400 audit(1756498637.870:248): avc: denied { write } for pid=774 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.878784][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 37.921358][ T45] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 37.930319][ T45] usb 1-1: Manufacturer: syz [ 37.937849][ T36] audit: type=1400 audit(1756498637.940:249): avc: denied { ioctl } for pid=778 comm="syz.1.132" path="socket:[7292]" dev="sockfs" ino=7292 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.947931][ T45] usb 1-1: config 0 descriptor?? [ 37.970033][ T331] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 38.110001][ T331] usb 3-1: device descriptor read/64, error -71 [ 38.125338][ T36] audit: type=1400 audit(1756498638.130:250): avc: denied { mount } for pid=787 comm="syz.3.135" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 38.230014][ T694] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 38.246047][ T36] audit: type=1400 audit(1756498638.250:251): avc: denied { unmount } for pid=588 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 38.266121][ T36] audit: type=1400 audit(1756498638.270:252): avc: denied { accept } for pid=790 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 38.286350][ T791] wg2: entered allmulticast mode [ 38.309538][ T36] audit: type=1400 audit(1756498638.310:253): avc: denied { bind } for pid=792 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.330293][ T793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 38.330301][ T36] audit: type=1400 audit(1756498638.320:254): avc: denied { setopt } for pid=792 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.350177][ T331] usb 3-1: device descriptor read/64, error -71 [ 38.381471][ T694] usb 2-1: unable to get BOS descriptor or descriptor too short [ 38.389910][ T694] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 38.400706][ T45] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 38.407913][ T45] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 38.415448][ T694] usb 2-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 38.428753][ T694] usb 2-1: config 1 interface 0 has no altsetting 0 [ 38.436258][ T45] appleir 0003:05AC:8243.0002: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 38.455935][ T694] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 38.468242][ T694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.476495][ T331] usb usb3-port1: attempt power cycle [ 38.570018][ T684] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 38.650749][ T45] usb 1-1: USB disconnect, device number 6 [ 38.684551][ T783] netlink: 'syz.1.134': attribute type 25 has an invalid length. [ 38.693434][ T36] audit: type=1400 audit(1756498638.700:255): avc: denied { ioctl } for pid=782 comm="syz.1.134" path="socket:[6447]" dev="sockfs" ino=6447 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 38.718057][ T694] usb 2-1: USB disconnect, device number 9 [ 38.725602][ T684] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 38.735557][ T684] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 38.743273][ T684] usb 4-1: can't read configurations, error -61 [ 38.820095][ T331] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 38.841292][ T331] usb 3-1: device descriptor read/8, error -71 [ 38.870133][ T684] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 38.971165][ T331] usb 3-1: device descriptor read/8, error -71 [ 39.020408][ T684] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 39.029143][ T684] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 39.036773][ T684] usb 4-1: can't read configurations, error -61 [ 39.043173][ T684] usb usb4-port1: attempt power cycle [ 39.168055][ T798] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:117 [ 39.210041][ T331] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 39.241295][ T331] usb 3-1: device descriptor read/8, error -71 [ 39.255283][ T803] mmap: syz.1.140 (803) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.373725][ T331] usb 3-1: device descriptor read/8, error -71 [ 39.380215][ T684] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 39.401082][ T684] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 39.409999][ T684] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 39.417592][ T684] usb 4-1: can't read configurations, error -61 [ 39.490087][ T331] usb usb3-port1: unable to enumerate USB device [ 39.550053][ T684] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 39.570701][ T684] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 39.581759][ T684] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 39.590678][ T684] usb 4-1: can't read configurations, error -61 [ 39.600274][ T684] usb usb4-port1: unable to enumerate USB device [ 39.708433][ T816] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 39.717098][ T816] fuse: Bad value for 'fd' [ 39.963605][ T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 40.014188][ T820] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.121150][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 40.132406][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 40.139060][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 40.148257][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.157027][ T9] usb 2-1: config 0 descriptor?? [ 40.162435][ T816] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 40.348144][ T825] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:125 [ 40.353501][ T330] rust_binder: 824: removing orphan mapping 0:24 [ 40.369106][ T330] rust_binder: 0: removing orphan mapping 24:1112 [ 40.390044][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 40.543071][ T10] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 40.552303][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.560430][ T10] usb 3-1: Product: syz [ 40.564710][ T10] usb 3-1: Manufacturer: syz [ 40.569352][ T10] usb 3-1: SerialNumber: syz [ 40.575650][ T10] usb 3-1: config 0 descriptor?? [ 40.582268][ T9] ryos 0003:1E7D:3232.0003: unknown main item tag 0x0 [ 40.589749][ T9] ryos 0003:1E7D:3232.0003: unknown main item tag 0x0 [ 40.597458][ T9] ryos 0003:1E7D:3232.0003: hidraw0: USB HID v0.03 Device [HID 1e7d:3232] on usb-dummy_hcd.1-1/input0 [ 40.626770][ T840] rust_binder: 837 RLIMIT_NICE not set [ 40.627667][ T837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.633524][ T837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.640248][ T837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:137 [ 40.650457][ T9] rust_binder: 836: removing orphan mapping 0:24 [ 40.784152][ T684] usb 2-1: USB disconnect, device number 10 [ 40.926815][ T847] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 40.979743][ T846] usb usb9: usbfs: process 846 (syz.0.156) did not claim interface 47 before use [ 40.989245][ T846] rust_binder: Write failure EINVAL in pid:145 [ 41.326238][ T852] /dev/nullb0: Can't lookup blockdev [ 41.338609][ T853] /dev/nullb0: Can't lookup blockdev [ 41.408705][ T857] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84 [ 41.480367][ T868] netlink: 16 bytes leftover after parsing attributes in process `syz.3.162'. [ 41.546832][ T873] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.576287][ T878] Zero length message leads to an empty skb [ 41.597933][ T881] rust_binder: 109: no such ref 0 [ 41.603494][ T881] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 4294967295 [ 41.611643][ T881] rust_binder: Write failure EINVAL in pid:109 [ 41.797461][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 41.813936][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 41.825026][ T10] asix 3-1:0.0: probe with driver asix failed with error -71 [ 41.833444][ T10] usb 3-1: USB disconnect, device number 9 [ 41.870014][ T330] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 42.020002][ T330] usb 4-1: Using ep0 maxpacket: 8 [ 42.026267][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.037345][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.047229][ T330] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.060103][ T330] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 42.069150][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.078008][ T330] usb 4-1: config 0 descriptor?? [ 42.352775][ T892] syz.2.170 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 42.366681][ T892] 9pnet_fd: Insufficient options for proto=fd [ 42.390003][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 42.486995][ T330] sony 0003:1345:3008.0004: hiddev96,hidraw0: USB HID v80.04 Device [HID 1345:3008] on usb-dummy_hcd.3-1/input0 [ 42.499230][ T330] sony 0003:1345:3008.0004: failed to claim input [ 42.541081][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 42.549854][ T10] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 42.562120][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 42.571622][ T10] usb 2-1: config 1 has no interface number 0 [ 42.578639][ T10] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 42.589884][ T10] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 42.604421][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 42.609565][ T897] netlink: 'syz.0.172': attribute type 4 has an invalid length. [ 42.613572][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.622176][ T897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=897 comm=syz.0.172 [ 42.629243][ T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 42.649606][ T10] usb 2-1: Product: syz [ 42.653955][ T10] usb 2-1: Manufacturer: syz [ 42.658930][ T10] usb 2-1: SerialNumber: syz [ 42.665528][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 42.672410][ T10] cdc_ncm 2-1:1.1: bind() failure [ 42.740635][ T10] usb 4-1: USB disconnect, device number 8 [ 42.811066][ T9] usb 3-1: descriptor type invalid, skip [ 42.817057][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 42.825636][ T9] usb 3-1: config 0 has no interfaces? [ 42.832565][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 42.841654][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.849658][ T9] usb 3-1: Product: syz [ 42.853929][ T9] usb 3-1: Manufacturer: syz [ 42.858534][ T9] usb 3-1: SerialNumber: syz [ 42.863948][ T9] usb 3-1: config 0 descriptor?? [ 42.872307][ T9] usb 2-1: USB disconnect, device number 11 [ 42.950014][ T684] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 43.073029][ T894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.081722][ T894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.090706][ T9] usb 3-1: USB disconnect, device number 10 [ 43.101087][ T684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.112270][ T684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.122054][ T684] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 43.131146][ T684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.139740][ T684] usb 1-1: config 0 descriptor?? [ 43.466380][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 43.466398][ T36] audit: type=1400 audit(1756498643.470:279): avc: denied { setopt } for pid=908 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.507219][ T36] audit: type=1400 audit(1756498643.510:280): avc: denied { relabelfrom } for pid=910 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 43.527117][ T36] audit: type=1400 audit(1756498643.510:281): avc: denied { relabelto } for pid=910 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 43.653527][ T924] exFAT-fs (rnullb0): invalid boot record signature [ 43.660439][ T924] exFAT-fs (rnullb0): failed to read boot sector [ 43.666869][ T924] exFAT-fs (rnullb0): failed to recognize exfat type [ 43.748473][ T684] usbhid 1-1:0.0: can't add hid device: -32 [ 43.754561][ T684] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 43.770110][ T796] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 43.932608][ T796] usb 4-1: unable to get BOS descriptor or descriptor too short [ 43.950357][ T796] usb 4-1: not running at top speed; connect to a high speed hub [ 43.961841][ T796] usb 4-1: config 5 has an invalid interface number: 29 but max is 0 [ 43.973314][ T796] usb 4-1: config 5 has no interface number 0 [ 43.979443][ T796] usb 4-1: config 5 interface 29 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 44.009972][ T796] usb 4-1: config 5 interface 29 has no altsetting 0 [ 44.021431][ T796] usb 4-1: New USB device found, idVendor=05a9, idProduct=2643, bcdDevice=49.45 [ 44.039991][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.048223][ T796] usb 4-1: Product: syz [ 44.058339][ T796] usb 4-1: Manufacturer: syz [ 44.068440][ T796] usb 4-1: SerialNumber: syz [ 44.075308][ T913] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 44.351848][ T796] usb 4-1: Found UVC 0.00 device syz (05a9:2643) [ 44.369451][ T796] usb 4-1: No valid video chain found. [ 44.376381][ T796] usb 4-1: USB disconnect, device number 9 [ 44.488473][ T36] audit: type=1400 audit(1756498644.490:282): avc: denied { map } for pid=938 comm="syz.1.187" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=7046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 44.539976][ T36] audit: type=1400 audit(1756498644.490:283): avc: denied { read } for pid=938 comm="syz.1.187" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=7046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 44.627509][ T948] /dev/rnullb0: Can't open blockdev [ 44.847874][ T36] audit: type=1400 audit(1756498644.850:284): avc: denied { ioctl } for pid=957 comm="syz.1.194" path="socket:[8053]" dev="sockfs" ino=8053 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.974496][ T36] audit: type=1400 audit(1756498644.980:285): avc: denied { setopt } for pid=959 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.021612][ T961] rust_binder: Error in use_page_slow: ESRCH [ 45.021639][ T961] rust_binder: use_range failure ESRCH [ 45.027875][ T961] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 45.047390][ T961] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 45.057488][ T961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:138 [ 45.110364][ T974] rust_binder: Write failure EFAULT in pid:120 [ 45.142313][ T976] Dead loop on virtual device ip6_vti0, fix it urgently! [ 45.156483][ T976] Dead loop on virtual device ip6_vti0, fix it urgently! [ 45.163884][ T976] Dead loop on virtual device ip6_vti0, fix it urgently! [ 45.171278][ T976] Dead loop on virtual device ip6_vti0, fix it urgently! [ 45.180191][ T976] Dead loop on virtual device ip6_vti0, fix it urgently! [ 45.186991][ T980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 45.187596][ T976] Dead loop on virtual device ip6_vti0, fix it urgently! [ 45.245245][ T990] netlink: 'syz.2.205': attribute type 4 has an invalid length. [ 45.255762][ T990] netlink: 'syz.2.205': attribute type 4 has an invalid length. [ 45.684170][ T9] usb 1-1: USB disconnect, device number 7 [ 45.702605][ T36] audit: type=1400 audit(1756498645.710:286): avc: denied { read write } for pid=1008 comm="syz.0.209" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 45.703913][ T1009] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 45.727451][ T36] audit: type=1400 audit(1756498645.710:287): avc: denied { open } for pid=1008 comm="syz.0.209" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 45.744443][ T1009] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 45.762247][ T36] audit: type=1400 audit(1756498645.710:288): avc: denied { ioctl } for pid=1008 comm="syz.0.209" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x942a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 45.855548][ T1012] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 45.863223][ T1012] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 97) [ 45.863241][ T1012] rust_binder: Error while translating object. [ 45.873822][ T1012] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.880113][ T1012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:157 [ 45.912236][ T1014] rust_binder: Error while translating object. [ 45.921476][ T1014] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 45.927673][ T1014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:147 [ 46.059805][ T1021] devpts: called with bogus options [ 46.094507][ T1024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 46.129994][ T684] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 46.246727][ T1038] xt_NFQUEUE: number of total queues is 0 [ 46.286937][ T684] usb 1-1: Using ep0 maxpacket: 32 [ 46.298736][ T684] usb 1-1: unable to get BOS descriptor or descriptor too short [ 46.307917][ T684] usb 1-1: config 10 has an invalid interface number: 163 but max is 0 [ 46.317287][ T684] usb 1-1: config 10 has no interface number 0 [ 46.326046][ T684] usb 1-1: config 10 interface 163 altsetting 95 bulk endpoint 0x82 has invalid maxpacket 64 [ 46.350615][ T684] usb 1-1: config 10 interface 163 has no altsetting 0 [ 46.359165][ T684] usb 1-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=d2.2e [ 46.368554][ T684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.378449][ T684] usb 1-1: Product: syz [ 46.383691][ T684] usb 1-1: Manufacturer: syz [ 46.388874][ T684] usb 1-1: SerialNumber: syz [ 46.398487][ T1012] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 46.608000][ T1012] rust_binder: Write failure EINVAL in pid:157 [ 46.690815][ T1085] tipc: Failed to remove unknown binding: 66,1,1/0:278855838/278855840 [ 46.854230][ T1094] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 46.861722][ T1094] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 97) [ 46.861770][ T1094] rust_binder: Error while translating object. [ 46.872722][ T1094] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.879044][ T1094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:179 [ 47.365460][ T796] hid-generic 007F:6E8D:0005.0005: item fetching failed at offset 1/5 [ 47.383766][ T796] hid-generic 007F:6E8D:0005.0005: probe with driver hid-generic failed with error -22 [ 47.445614][ T1123] netlink: 28 bytes leftover after parsing attributes in process `syz.3.246'. [ 47.455027][ T1123] rust_binder: Write failure EFAULT in pid:155 [ 47.477870][ T1125] rust_binder: Error while translating object. [ 47.484210][ T1125] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 47.490913][ T1125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:157 [ 47.501347][ T1127] kthread_run failed with err -4 [ 48.467907][ T1149] fuse: Bad value for 'user_id' [ 48.472878][ T1149] fuse: Bad value for 'user_id' [ 48.506322][ T1153] batadv_slave_0: entered promiscuous mode [ 48.525427][ T1153] batadv_slave_0: left promiscuous mode [ 48.671596][ T1164] 9pnet_fd: Insufficient options for proto=fd [ 48.710190][ T1166] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.710223][ T1166] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:198 [ 48.779983][ T796] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 48.797428][ T1172] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 48.839702][ T684] snd-usb-audio 1-1:10.163: probe with driver snd-usb-audio failed with error -2 [ 48.852911][ T1171] rust_binder: Write failure EINVAL in pid:203 [ 48.853490][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 48.853506][ T36] audit: type=1400 audit(1756498648.860:300): avc: denied { mount } for pid=1173 comm="syz.0.261" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 48.888694][ T684] usb 1-1: USB disconnect, device number 8 [ 48.895196][ T737] udevd[737]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:10.163/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.921206][ T36] audit: type=1400 audit(1756498648.910:301): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 48.961711][ T796] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 48.961724][ T36] audit: type=1400 audit(1756498648.970:302): avc: denied { setopt } for pid=1185 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 48.962152][ T1186] 9pnet_fd: Insufficient options for proto=fd [ 48.970047][ T796] usb 4-1: can't read configurations, error -22 [ 49.032420][ T36] audit: type=1400 audit(1756498649.030:303): avc: denied { name_bind } for pid=1192 comm="syz.2.266" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 49.080995][ T1191] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 49.090482][ T1191] kvm: pic: non byte read [ 49.095057][ T1191] kvm: pic: level sensitive irq not supported [ 49.095185][ T1191] kvm: pic: non byte read [ 49.106599][ T1191] kvm: pic: level sensitive irq not supported [ 49.106692][ T1191] kvm: pic: non byte read [ 49.118527][ T1191] kvm: pic: level sensitive irq not supported [ 49.118596][ T1191] kvm: pic: non byte read [ 49.129878][ T1191] kvm: pic: level sensitive irq not supported [ 49.129995][ T1191] kvm: pic: non byte read [ 49.160004][ T796] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 49.321514][ T796] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 49.329526][ T796] usb 4-1: can't read configurations, error -22 [ 49.336502][ T796] usb usb4-port1: attempt power cycle [ 49.343484][ T1214] rust_binder: Write failure EFAULT in pid:179 [ 49.572047][ T36] audit: type=1400 audit(1756498649.580:304): avc: denied { getopt } for pid=1229 comm="syz.2.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.672512][ T36] audit: type=1400 audit(1756498649.680:305): avc: denied { unlink } for pid=1238 comm="syz.1.281" name="#1" dev="tmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 49.694693][ T796] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 49.721637][ T796] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 49.729611][ T796] usb 4-1: can't read configurations, error -22 [ 49.760114][ T684] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 49.860063][ T796] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 49.881937][ T796] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 49.889913][ T796] usb 4-1: can't read configurations, error -22 [ 49.896517][ T796] usb usb4-port1: unable to enumerate USB device [ 49.910005][ T684] usb 1-1: Using ep0 maxpacket: 32 [ 49.915528][ T684] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 49.924039][ T684] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.934970][ T684] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.945815][ T684] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.956763][ T684] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.967596][ T684] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.978421][ T684] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.989341][ T684] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.000150][ T684] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.010281][ T684] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 50.019404][ T684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.028241][ T684] usb 1-1: config 0 descriptor?? [ 50.034259][ T684] hub 1-1:0.0: Invalid hub with more than one config or interface [ 50.042204][ T684] hub 1-1:0.0: probe with driver hub failed with error -22 [ 50.246266][ T684] usb 1-1: USB disconnect, device number 9 [ 50.324275][ T1253] rust_binder: Failed to allocate buffer. len:10771147061988852024, is_oneway:false [ 50.324308][ T1253] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 50.333822][ T1253] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:217 [ 50.345337][ T36] audit: type=1400 audit(1756498650.350:306): avc: denied { bind } for pid=1242 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.374387][ T36] audit: type=1400 audit(1756498650.380:307): avc: denied { ioctl } for pid=1254 comm="syz.1.286" path="socket:[10100]" dev="sockfs" ino=10100 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.457248][ T1260] binder: Unknown parameter '18446744073709551615' [ 50.545079][ T1265] can0: slcan on ttyS3. [ 50.549293][ T36] audit: type=1400 audit(1756498650.550:308): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 50.570391][ T36] audit: type=1400 audit(1756498650.550:309): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.767055][ T1282] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.767082][ T1282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:190 [ 50.800162][ T684] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 50.901059][ T1291] overlayfs: failed to clone upperpath [ 50.961127][ T684] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 50.975873][ T684] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.990837][ T684] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 51.000008][ T684] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 51.014317][ T684] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 51.014863][ T1306] 9pnet_fd: Insufficient options for proto=fd [ 51.023652][ T684] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 51.045763][ T684] usb 2-1: Product: syz [ 51.050171][ T1308] fuse: Bad value for 'fd' [ 51.051353][ T684] usb 2-1: Manufacturer: syz [ 51.063481][ T684] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 51.261317][ T1265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.269901][ T1265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.330343][ T1265] can0 (unregistered): slcan off ttyS3. [ 51.343840][ T10] usb 2-1: USB disconnect, device number 13 [ 51.370758][ T1341] binder: Unknown parameter '00000000000000000000000' [ 51.535574][ T1370] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.307'. [ 51.568129][ T1370] rust_binder: Fixups oob 164 166 363 196 [ 51.568158][ T1370] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 51.574160][ T1370] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.592586][ T1370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:169 [ 51.706807][ T1385] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551438) [ 51.708715][ T1387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=1387 comm=syz.3.311 [ 51.730092][ T1385] rust_binder: Error while translating object. [ 51.730124][ T1385] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.730150][ T1385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:205 [ 51.759491][ T1388] netlink: 32 bytes leftover after parsing attributes in process `syz.3.311'. [ 51.770649][ T1390] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=1390 comm=syz.0.312 [ 52.030187][ T1415] 9pnet_fd: p9_fd_create_tcp (1415): problem binding to privport [ 52.041249][ T1415] binder: Bad value for 'max' [ 52.092726][ T1378] netlink: 84 bytes leftover after parsing attributes in process `syz.1.309'. [ 52.370013][ T684] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 52.419634][ T1441] rust_binder: 260: no such ref 3 [ 52.424860][ T1441] rust_binder: Write failure EINVAL in pid:260 [ 52.439696][ T1447] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.460189][ T1451] netlink: 116 bytes leftover after parsing attributes in process `syz.1.330'. [ 52.477855][ T1451] incfs: Options parsing error. -22 [ 52.483186][ T1451] incfs: mount failed -22 [ 52.872461][ T1483] fuse: Unknown parameter 'Group_id' [ 52.898074][ T1483] tmpfs: Unknown parameter 'huge' [ 52.946707][ T1489] rust_binder: Error while translating object. [ 52.946757][ T1489] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.956294][ T1489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:228 [ 53.049362][ T1495] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 53.103322][ T1494] rust_binder: Write failure EINVAL in pid:230 [ 53.290843][ T1516] 9pnet_fd: Insufficient options for proto=fd [ 53.409994][ T684] usb 2-1: device descriptor read/64, error -71 [ 53.520064][ T1537] syz.2.357: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 53.535142][ T1537] CPU: 1 UID: 0 PID: 1537 Comm: syz.2.357 Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 53.535181][ T1537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.535204][ T1537] Call Trace: [ 53.535213][ T1537] [ 53.535223][ T1537] __dump_stack+0x21/0x30 [ 53.535269][ T1537] dump_stack_lvl+0x10c/0x190 [ 53.535302][ T1537] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.535339][ T1537] dump_stack+0x19/0x20 [ 53.535369][ T1537] warn_alloc+0x1bc/0x2a0 [ 53.535400][ T1537] ? stack_depot_save_flags+0x38/0x800 [ 53.535426][ T1537] ? __cfi_warn_alloc+0x10/0x10 [ 53.535456][ T1537] ? kasan_save_track+0x4f/0x80 [ 53.535479][ T1537] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 53.535514][ T1537] ? xskq_create+0x68/0x2a0 [ 53.535536][ T1537] ? xsk_init_queue+0xb6/0x120 [ 53.535571][ T1537] ? xsk_setsockopt+0x43f/0x6f0 [ 53.535606][ T1537] ? do_sock_setsockopt+0x26d/0x400 [ 53.535641][ T1537] ? __x64_sys_setsockopt+0x1b8/0x250 [ 53.535678][ T1537] ? x64_sys_call+0x2adc/0x2ee0 [ 53.535713][ T1537] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.535740][ T1537] __vmalloc_node_range_noprof+0x135/0x1420 [ 53.535779][ T1537] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 53.535813][ T1537] ? avc_has_perm+0x144/0x220 [ 53.535847][ T1537] ? kasan_save_alloc_info+0x40/0x50 [ 53.535880][ T1537] ? __kasan_kmalloc+0x96/0xb0 [ 53.535906][ T1537] vmalloc_user_noprof+0x77/0x90 [ 53.535938][ T1537] ? xskq_create+0xdb/0x2a0 [ 53.535970][ T1537] xskq_create+0xdb/0x2a0 [ 53.535994][ T1537] xsk_init_queue+0xb6/0x120 [ 53.536031][ T1537] xsk_setsockopt+0x43f/0x6f0 [ 53.536067][ T1537] ? __cfi_xsk_setsockopt+0x10/0x10 [ 53.536102][ T1537] ? do_futex+0x309/0x500 [ 53.536127][ T1537] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 53.536157][ T1537] ? security_socket_setsockopt+0x33/0xd0 [ 53.536181][ T1537] ? __cfi_xsk_setsockopt+0x10/0x10 [ 53.536216][ T1537] do_sock_setsockopt+0x26d/0x400 [ 53.536252][ T1537] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 53.536292][ T1537] __x64_sys_setsockopt+0x1b8/0x250 [ 53.536330][ T1537] x64_sys_call+0x2adc/0x2ee0 [ 53.536365][ T1537] do_syscall_64+0x58/0xf0 [ 53.536398][ T1537] ? clear_bhb_loop+0x50/0xa0 [ 53.536425][ T1537] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.536452][ T1537] RIP: 0033:0x7f378218ebe9 [ 53.536480][ T1537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.536503][ T1537] RSP: 002b:00007f3782f52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 53.536530][ T1537] RAX: ffffffffffffffda RBX: 00007f37823b5fa0 RCX: 00007f378218ebe9 [ 53.536550][ T1537] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 53.536566][ T1537] RBP: 00007f3782211e19 R08: 0000000000000004 R09: 0000000000000000 [ 53.536583][ T1537] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.536599][ T1537] R13: 00007f37823b6038 R14: 00007f37823b5fa0 R15: 00007ffca9fd3848 [ 53.536622][ T1537] [ 53.536636][ T1537] Mem-Info: [ 53.835363][ T1537] active_anon:39125 inactive_anon:1 isolated_anon:0 [ 53.835363][ T1537] active_file:20917 inactive_file:17628 isolated_file:0 [ 53.835363][ T1537] unevictable:0 dirty:39 writeback:0 [ 53.835363][ T1537] slab_reclaimable:7125 slab_unreclaimable:71074 [ 53.835363][ T1537] mapped:24343 shmem:32784 pagetables:925 [ 53.835363][ T1537] sec_pagetables:0 bounce:0 [ 53.835363][ T1537] kernel_misc_reclaimable:0 [ 53.835363][ T1537] free:1469957 free_pcp:2127 free_cma:0 [ 53.890023][ T1537] Node 0 active_anon:156500kB inactive_anon:4kB active_file:83668kB inactive_file:71012kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97372kB dirty:156kB writeback:0kB shmem:131136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5312kB pagetables:3700kB sec_pagetables:0kB all_unreclaimable? no [ 53.920065][ T684] usb 2-1: Using ep0 maxpacket: 8 [ 53.928573][ T684] usb 2-1: unable to get BOS descriptor or descriptor too short [ 53.937428][ T684] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 53.945637][ T684] usb 2-1: config 0 has no interface number 0 [ 53.949982][ T1537] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965960kB mlocked:0kB bounce:0kB free_pcp:5748kB local_pcp:68kB free_cma:0kB [ 53.961933][ T684] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 53.988255][ T1537] lowmem_reserve[]: 0 3921 3921 [ 54.001753][ T1537] Normal free:2935820kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:156500kB inactive_anon:4kB active_file:83668kB inactive_file:71012kB unevictable:0kB writepending:156kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3160kB local_pcp:784kB free_cma:0kB [ 54.008671][ T684] usb 2-1: config 0 interface 88 has no altsetting 0 [ 54.033678][ T1537] lowmem_reserve[]: 0 0 0 [ 54.044501][ T1537] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 54.060391][ T1537] Normal: 1*4kB (U) 662*8kB (UME) 688*16kB (UE) 27*32kB (UE) 229*64kB (UM) 111*128kB (UME) 10*256kB (UME) 5*512kB (ME) 3*1024kB (ME) 7*2048kB (UME) 700*4096kB (UME) = 2935764kB [ 54.072150][ T684] usb 2-1: string descriptor 0 read error: -22 [ 54.078514][ T1537] 68678 total pagecache pages [ 54.089828][ T1537] 3 pages in swap cache [ 54.094623][ T1537] Free swap = 124460kB [ 54.094997][ T684] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 54.098838][ T1537] Total swap = 124996kB [ 54.115915][ T1537] 2097051 pages RAM [ 54.119787][ T1537] 0 pages HighMem/MovableOnly [ 54.124826][ T1537] 351531 pages reserved [ 54.128210][ T684] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 54.129124][ T1537] 0 pages cma reserved [ 54.144697][ T1537] Memory allocations: [ 54.148534][ T684] usb 2-1: config 0 descriptor?? [ 54.148758][ T1537] 0 B 0 init/main.c:1370 func:do_initcalls [ 54.161218][ T1537] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 54.168687][ T684] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input12 [ 54.169358][ T1537] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 54.188823][ T1537] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 54.196940][ T1537] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 54.205257][ T1537] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 54.214110][ T1537] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 54.222298][ T1537] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 54.230421][ T1537] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 54.238497][ T1537] 0 B 0 init/initramfs.c:101 func:find_link [ 54.394532][ T684] usb 2-1: USB disconnect, device number 14 [ 54.581420][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 54.581439][ T36] audit: type=1400 audit(1756498654.590:339): avc: denied { connect } for pid=1567 comm="syz.0.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 54.586815][ T1568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'. [ 54.685619][ T36] audit: type=1400 audit(1756498654.690:340): avc: denied { mounton } for pid=1569 comm="syz.0.367" path="/proc/247/task" dev="proc" ino=11315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 54.929490][ T1573] rust_binder: Fixups oob 164 166 363 196 [ 54.929512][ T1573] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 54.935478][ T1573] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.943890][ T1573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:297 [ 54.954208][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.963717][ T1575] rust_binder: Fixups oob 164 166 363 196 [ 54.970435][ T1575] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 54.976285][ T1575] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.984683][ T1575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:297 [ 55.118734][ T1586] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 55.483600][ T1597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.483639][ T1597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:255 [ 55.521637][ T36] audit: type=1400 audit(1756498655.530:341): avc: denied { map } for pid=1599 comm="syz.0.376" path="/proc/258/attr/keycreate" dev="proc" ino=11436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 55.651690][ T36] audit: type=1400 audit(1756498655.660:342): avc: denied { read } for pid=1605 comm="syz.0.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.734599][ T36] audit: type=1400 audit(1756498655.740:343): avc: denied { write } for pid=1618 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.768340][ T36] audit: type=1400 audit(1756498655.740:344): avc: denied { read } for pid=1618 comm="syz.2.382" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.789126][ T36] audit: type=1400 audit(1756498655.770:345): avc: denied { ioctl } for pid=1618 comm="syz.2.382" path="socket:[10658]" dev="sockfs" ino=10658 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.052138][ T1628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'. [ 56.061187][ T1629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'. [ 56.070631][ T1628] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 368, limit: 4256, size: 18446744073709551588) [ 56.070655][ T1628] rust_binder: Error while translating object. [ 56.083339][ T1629] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 56.089725][ T1629] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 56.098037][ T1628] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.107699][ T1628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200 [ 56.117313][ T1629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:200 [ 56.208052][ T1636] syz.3.386 uses obsolete (PF_INET,SOCK_PACKET) [ 56.420044][ T331] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 56.549993][ T331] usb 2-1: device descriptor read/64, error -71 [ 56.560879][ T1653] can0: slcan on ttyS3. [ 56.597431][ T1657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:270 [ 56.601732][ T1653] can0 (unregistered): slcan off ttyS3. [ 56.785238][ T1671] /dev/rnullb0: Can't open blockdev [ 56.790580][ T331] usb 2-1: device descriptor read/64, error -71 [ 56.819359][ T1688] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.934914][ T1704] rust_binder: Write failure EFAULT in pid:217 [ 56.999141][ T1715] netlink: 'syz.2.407': attribute type 4 has an invalid length. [ 57.015244][ T36] audit: type=1400 audit(1756498657.030:346): avc: denied { map } for pid=1714 comm="syz.2.407" path="socket:[11615]" dev="sockfs" ino=11615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.050081][ T331] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 57.157990][ T1723] fuse: Bad value for 'user_id' [ 57.162973][ T1723] fuse: Bad value for 'user_id' [ 57.168434][ T36] audit: type=1400 audit(1756498657.171:347): avc: denied { map } for pid=1721 comm="syz.2.410" path="socket:[11645]" dev="sockfs" ino=11645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 57.191481][ T331] usb 2-1: device descriptor read/64, error -71 [ 57.429994][ T331] usb 2-1: device descriptor read/64, error -71 [ 57.540100][ T331] usb usb2-port1: attempt power cycle [ 57.660051][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 57.668857][ T36] audit: type=1326 audit(1756498657.671:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1726 comm="syz.3.412" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5c398ebe9 code=0x0 [ 57.782067][ T1732] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.851138][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.870484][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 57.879606][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.888606][ T9] usb 1-1: config 0 descriptor?? [ 57.890014][ T331] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 57.899469][ T1734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:226 [ 57.921397][ T331] usb 2-1: device descriptor read/8, error -71 [ 57.977362][ T1744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.416'. [ 58.061192][ T331] usb 2-1: device descriptor read/8, error -71 [ 58.300025][ T331] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 58.312814][ T1766] overlayfs: missing 'lowerdir' [ 58.321057][ T331] usb 2-1: device descriptor read/8, error -71 [ 58.451043][ T331] usb 2-1: device descriptor read/8, error -71 [ 58.493531][ T1779] netlink: 'syz.2.429': attribute type 8 has an invalid length. [ 58.528946][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 58.535718][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 58.548995][ T9] usb 1-1: USB disconnect, device number 10 [ 58.561208][ T331] usb usb2-port1: unable to enumerate USB device [ 58.604773][ T1794] 9pnet_fd: Insufficient options for proto=fd [ 58.665619][ T1808] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.120158][ T684] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 59.291091][ T684] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 59.301982][ T684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.310035][ T395] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 59.313009][ T684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.330243][ T684] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 59.349426][ T684] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 59.360469][ T684] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 59.368772][ T684] usb 4-1: Manufacturer: syz [ 59.370895][ T1860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.374876][ T684] usb 4-1: config 0 descriptor?? [ 59.465030][ T1863] netlink: 'syz.2.456': attribute type 13 has an invalid length. [ 59.468906][ T1867] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.473450][ T1867] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 59.474000][ T395] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 59.490485][ T1867] rust_binder: 325: no such ref 1 [ 59.497018][ T395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.502582][ T1867] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:325 [ 59.510981][ T395] usb 1-1: config 0 descriptor?? [ 59.645243][ T1875] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.645845][ T1875] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.652574][ T1876] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:333 [ 59.659490][ T1875] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 59.685059][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 59.685080][ T36] audit: type=1400 audit(1756498659.691:352): avc: denied { read } for pid=1880 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.692273][ T684] usbhid 4-1:0.0: can't add hid device: -71 [ 59.694934][ T36] audit: type=1400 audit(1756498659.701:353): avc: denied { write } for pid=1880 comm="syz.1.460" dev="sockfs" ino=11224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.699058][ T684] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 59.718958][ T1881] 9pnet_fd: Insufficient options for proto=fd [ 59.766743][ T684] usb 4-1: USB disconnect, device number 14 [ 59.804296][ T1890] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.992853][ T36] audit: type=1400 audit(1756498660.001:354): avc: denied { accept } for pid=1896 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.031851][ T36] audit: type=1400 audit(1756498660.041:355): avc: denied { mounton } for pid=1898 comm="syz.2.467" path="/file0" dev="ramfs" ino=11991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 60.053773][ T36] audit: type=1400 audit(1756498660.041:356): avc: denied { watch } for pid=1898 comm="syz.2.467" path="/file0" dev="ramfs" ino=11991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 60.199990][ T684] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 60.361728][ T684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.380982][ T684] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 60.390620][ T684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.399518][ T684] usb 4-1: config 0 descriptor?? [ 60.670011][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 60.754743][ T36] audit: type=1400 audit(1756498660.761:357): avc: denied { nlmsg_read } for pid=1920 comm="syz.2.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.790233][ T1926] netlink: 44 bytes leftover after parsing attributes in process `syz.2.476'. [ 60.800738][ T395] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 60.812403][ T10] usb 2-1: device descriptor read/64, error -71 [ 60.821404][ T1926] netlink: 43 bytes leftover after parsing attributes in process `syz.2.476'. [ 60.823006][ T684] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 60.830364][ T395] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 60.849050][ T1926] netlink: 'syz.2.476': attribute type 6 has an invalid length. [ 60.856790][ T395] asix 1-1:0.0: probe with driver asix failed with error -71 [ 60.860057][ T684] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0006/input/input13 [ 60.864330][ T1926] netlink: 'syz.2.476': attribute type 5 has an invalid length. [ 60.887187][ T395] usb 1-1: USB disconnect, device number 11 [ 60.898132][ T1926] netlink: 43 bytes leftover after parsing attributes in process `syz.2.476'. [ 60.954640][ T684] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 60.989605][ T1934] overlayfs: failed to clone upperpath [ 61.070035][ T10] usb 2-1: device descriptor read/64, error -71 [ 61.116099][ T36] audit: type=1400 audit(1756498661.121:358): avc: denied { read } for pid=1937 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 61.250381][ T36] audit: type=1400 audit(1756498661.261:359): avc: denied { ioctl } for pid=1915 comm="syz.1.472" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.310004][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 61.359222][ T36] audit: type=1400 audit(1756498661.361:360): avc: denied { create } for pid=1893 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.392016][ T36] audit: type=1400 audit(1756498661.361:361): avc: denied { write } for pid=1893 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.449988][ T10] usb 2-1: device descriptor read/64, error -71 [ 61.690473][ T10] usb 2-1: device descriptor read/64, error -71 [ 61.820098][ T10] usb usb2-port1: attempt power cycle [ 61.940001][ T796] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 62.090611][ T796] usb 1-1: not running at top speed; connect to a high speed hub [ 62.099131][ T796] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 62.107306][ T796] usb 1-1: config 95 has no interface number 0 [ 62.113654][ T796] usb 1-1: config 95 interface 1 has no altsetting 0 [ 62.121857][ T796] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 62.131076][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.139086][ T796] usb 1-1: Product: syz [ 62.143273][ T796] usb 1-1: Manufacturer: syz [ 62.147876][ T796] usb 1-1: SerialNumber: syz [ 62.160028][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 62.181144][ T10] usb 2-1: device descriptor read/8, error -71 [ 62.311065][ T10] usb 2-1: device descriptor read/8, error -71 [ 62.560025][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 62.581096][ T10] usb 2-1: device descriptor read/8, error -71 [ 62.711130][ T10] usb 2-1: device descriptor read/8, error -71 [ 62.828375][ T10] usb usb2-port1: unable to enumerate USB device [ 62.842143][ T395] usb 4-1: USB disconnect, device number 15 [ 62.945615][ T2019] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 63.220048][ T395] usb 4-1: new high-speed USB device number 16 using dummy_hcd Connection to 10.128.0.173 closed by remote host. [ 63.462000][ T684] usb 1-1: USB disconnect, device number 12 [ 63.623004][ T12] bridge_slave_1: left allmulticast mode [ 63.628675][ T12] bridge_slave_1: left promiscuous mode [ 63.634449][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.642311][ T12] bridge_slave_0: left allmulticast mode [ 63.647957][ T12] bridge_slave_0: left promiscuous mode [ 63.653670][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.661516][ T12] bridge_slave_1: left allmulticast mode [ 63.667186][ T12] bridge_slave_1: left promiscuous mode [ 63.672900][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.680644][ T12] bridge_slave_0: left allmulticast mode [ 63.686295][ T12] bridge_slave_0: left promiscuous mode [ 63.691986][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.699613][ T12] bridge_slave_1: left allmulticast mode [ 63.705327][ T12] bridge_slave_1: left promiscuous mode [ 63.710985][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.718402][ T12] bridge_slave_0: left allmulticast mode [ 63.724091][ T12] bridge_slave_0: left promiscuous mode [ 63.729699][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.945326][ T12] veth1_macvtap: left promiscuous mode [ 63.950897][ T12] veth0_vlan: left promiscuous mode [ 63.956431][ T12] veth1_macvtap: left promiscuous mode [ 63.962004][ T12] veth0_vlan: left promiscuous mode [ 63.967582][ T12] veth1_macvtap: left promiscuous mode [ 63.973117][ T12] veth0_vlan: left promiscuous mode [ 65.367700][ T2035] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 65.374433][ T2035] ACPI: PM: Preparing to enter system sleep state S5 [ 65.381356][ T2035] kvm: exiting hardware virtualization [ 65.386930][ T2035] reboot: Power down serialport: VM disconnected.