last executing test programs: 4.244818426s ago: executing program 1 (id=217): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x53, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x50, 0x0, &(0x7f0000000140)="b23fa6e1e653b2a2fcb8ff0ea7290da4e1593a3edf0f0c97ab9949be179eca4c02b12ac3ea2aa481ad6b2b5da3188d299b5483f1411733f6b08a46b85d1234f4635cd08300"/80}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xfffffffe) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0xfffffffe}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x40045402) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000680)="68c8e4bc8e6569f85655cf3cd072d238c08b2abd0abb3e12889093c16add1c084ea3f26ba93354e659a28671009282f2eac4a5d7579849fb4478193301a22dd8d4dfd85c33bc", 0x46}], 0x1) r4 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r6, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x58}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000"]) recvmmsg(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvfrom$unix(r4, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r9, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 3.356977659s ago: executing program 1 (id=228): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x3301, 0x400000000000001}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$TUNGETDEVNETNS(r1, 0xff09, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001d002100000000000000000007"], 0x34}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000040)=0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x3}], 0x0, 0x1000000, 0x0}) 2.874148226s ago: executing program 3 (id=238): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)='/dev/audio#\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xfffffffffffffffd) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 2.773224548s ago: executing program 3 (id=239): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000003c0)) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a00"], 0x1c}], 0x1}, 0x4000080) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x5, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fe01002505000000180001801400020073797a5f74756e00000000000000000018000380140003800180005a0000000073797a5f74756e006842920a828810946192bb0200a86ae3514c4cf0ca4c007c4381a47d918cb7a8c10ff68792d2775495b7492e244f7728fcf2fae78df56a03e7f210bd8e9a61ac3451f4c80d50745644d808ea99180ed936e2953c4e8a9630d15e0f41f1cdc48632be88c8f78beb10d0115a230d83dcafaed6c2db8a1cf6de2f6b68aece764af7e129bc27667ad5be589dc6091d9a9fc14678142e024c6289a43aa554c7ea25"], 0x44}}, 0x0) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8100, 0xa0) openat$incfs(r5, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x110) (async) dup2(0xffffffffffffffff, r5) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 2.772178498s ago: executing program 3 (id=240): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = memfd_secret(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x490, &(0x7f0000000000)={[{@verity_on}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8}, {0x3000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2000, 0xe, 0x2, 0xfe, 0x10, 0x6, 0x1, 0x1, 0x8, 0x4, 0x6}, {0x0, 0x8000000, 0x0, 0x0, 0x5, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xe000, 0x5000, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0xeeee0000, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfc, 0x4, 0x0, 0x0, 0x5}, {0x2000, 0x401}, {}, 0xddf8ffdb, 0x0, 0x0, 0x730, 0x8, 0x8000, 0x2000, [0xff, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r2, 0x26, &(0x7f0000000200)={0x0, 0x0, 0x1000000020, 0x1fd}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000008, 0x10, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x34102, 0x0) 2.6631209s ago: executing program 3 (id=243): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') r0 = socket$inet(0x2, 0x200000003, 0x84) getsockopt$inet_buf(r0, 0x0, 0x50, 0x0, &(0x7f00000000c0)=0x58) 2.565288551s ago: executing program 3 (id=244): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4602, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0x1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 2.518177452s ago: executing program 3 (id=246): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000040)="d1304bbb535db09c8a8db61736ac85ef933d150191b84768ef32e050eed37dc2b8050e0fd523c4dc14f2f8a94287c52e7c1c494f9f3d2b81d83d9c34edcbe23fa37558e1bbdc92dd1defc225c51348ade83679dac81dcde30f3233569a950c4a81d8e16a4cbef82fee0730f9905258c6ac38caf81d311869820d3a4ffb6579487575947d5668841c3d2c897c8f137813141c34938ce0b7784bee352d957ce739a8e5ebb6e0fdfeea6f1aff93e6fc07f2ae7b676088db5adbea137d1ce780a04cfbb2b7fc1c25230c7d63cdc284ff5ea8b4d21aa87a4c680a36ef8a578bc6d3de9c418bea8fb0ee08b8745ab76938b29b88ac6ea53a17", 0xf6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0xb, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x200c800}, 0xb82cc5a3eb6e3ad9) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000240)={0x3, 'syzkaller1\x00', {0x7}, 0x7}) openat(r0, &(0x7f0000000280)='./file0\x00', 0x4000, 0x44) (async) r3 = openat(r0, &(0x7f0000000280)='./file0\x00', 0x4000, 0x44) write$nbd(r3, &(0x7f00000002c0)={0x67446698, 0x0, 0x3, 0x2, 0x1, "a5dd378f3bfc4257bdfa7d476ffb9348128465d5593f056c1642697abe24bbfe34"}, 0x31) (async) write$nbd(r3, &(0x7f00000002c0)={0x67446698, 0x0, 0x3, 0x2, 0x1, "a5dd378f3bfc4257bdfa7d476ffb9348128465d5593f056c1642697abe24bbfe34"}, 0x31) r4 = socket$inet6(0xa, 0x4, 0x5) fgetxattr(r1, &(0x7f0000000300)=@random={'os2.', '\xdd+\x00'}, &(0x7f0000000340)=""/183, 0xb7) r5 = dup3(r2, r4, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x3c, 0x0, &(0x7f0000000400)=[@release={0x40046306, 0x2}, @release={0x40046306, 0x3}, @dead_binder_done, @decrefs={0x40046307, 0x1}, @acquire_done={0x40106309, 0x2}, @enter_looper], 0x7a, 0x0, &(0x7f0000000440)="2207ae0d4c027f9874a982750245275a38c21fd12100fc153491533aade55655a6b42a90ed46fce45c79bc70aec037a801c40a636cf44761b5a0dcd8b5d8a09262d95e59a6286b49933638f68b810a053dfd1c5be1be17eb11bd96e6ab3264ad7993bcc8df385eefc18e9e4ab019f43fd75bc60f992e25c8991f"}) finit_module(r5, &(0x7f0000000500)='syzkaller1\x00', 0x2) read(r4, &(0x7f0000000540), 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000ac0)={0x0, &(0x7f00000005c0)=[@uexit={0x0, 0x18, 0xfffffffffffffcf2}, @cpuid={0x2, 0x18, {0x401, 0x8}}, @code={0x1, 0x6b, {"0f017b35450f1fd666430f3acf19000f01c866baf80cb84d857b8cef66bafc0cecc482998e19c74424008d000000c7442402104a0000ff2c240f162b66ba4100b802000000ef66baf80cb8e485218bef66bafc0c66b8008066ef"}}, @cpuid={0x2, 0x18, {0x0, 0x4}}, @cpuid={0x2, 0x18, {0xfff, 0x8}}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x2, 0x18, {0x5, 0x7}}, @uexit={0x0, 0x18, 0x40}, @uexit={0x0, 0x18, 0xc}, @uexit={0x0, 0x18, 0x6}, @code={0x1, 0x66, {"66baf80cb8bea6888eef66bafc0c66b8680066ef450fc7380f20e035010000000f22e0b9bf0200000f32440fc739f30f1efbc401a457662366ba400066ed6444d766baf80cb804b15a89ef66bafc0c66b8800066ef"}}, @code={0x1, 0x6f, {"f3400f09c7442400af000000c744240243ed0000ff1c240f1c9e1f000000b99a0900000f32470f01c8b9af090000b8486dc952ba000000000f30b805000000b9c89e4aa30f01d9c4612967a022ae260366bad10466b8070066ef420f01c9"}}, @cpuid={0x2, 0x18, {0x7fff, 0x8}}, @cpuid={0x2, 0x18, {0x8, 0xb}}, @cpuid={0x2, 0x18, {0x1}}, @uexit={0x0, 0x18, 0xe774}, @cpuid={0x2, 0x18, {0x8, 0x20422be3}}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x2, 0x18, {0x81}}, @uexit={0x0, 0x18, 0x50}, @cpuid={0x2, 0x18, {0xa, 0x8}}, @uexit={0x0, 0x18, 0xc59}, @cpuid={0x2, 0x18, {0xae, 0x40}}, @uexit={0x0, 0x18, 0x7}, @code={0x1, 0x54, {"400f01c42e440f01ca66baf80cb8b6dbd18def66bafc0c66b8140066ef6426420f211f67da14a80f015a036647df9bedbf00000f01ca66400f6e5d850fc7b97ae00000"}}, @code={0x1, 0x98, {"64490fc76b4bb90d0b0000b8cbc50000ba000000000f3066baf80cb8ec337087ef66bafc0ced66b8b0008ec0666564660f38808900000000b94a030000b8d02014a4ba8215280e0f30b8010000000f01c1c744240000000000c7442402e4000000c7442406000000000f011c2466bad00466b8089266ef66baf80cb8a0acf28cef66bafc0c66ed"}}, @cpuid={0x2, 0x18, {0x6a, 0x5d}}, @uexit={0x0, 0x18, 0x2}, @code={0x1, 0x85, {"66baf80cb8103d7084ef66bafc0c66b8ecdc66ef66b858008ec8450f01c9f3430f01ea440f01c9c462ed90bc9b000000006636f2420f10d9b911090000b80c00c0feba000000000f30c744240045000000c74424027d4b88b9ff1c2448b808000000000000000f23d80f21f835400000400f23f8"}}, @cpuid={0x2, 0x18, {0x4, 0x8}}], 0x4f1}) (async) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000ac0)={0x0, &(0x7f00000005c0)=[@uexit={0x0, 0x18, 0xfffffffffffffcf2}, @cpuid={0x2, 0x18, {0x401, 0x8}}, @code={0x1, 0x6b, {"0f017b35450f1fd666430f3acf19000f01c866baf80cb84d857b8cef66bafc0cecc482998e19c74424008d000000c7442402104a0000ff2c240f162b66ba4100b802000000ef66baf80cb8e485218bef66bafc0c66b8008066ef"}}, @cpuid={0x2, 0x18, {0x0, 0x4}}, @cpuid={0x2, 0x18, {0xfff, 0x8}}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x2, 0x18, {0x5, 0x7}}, @uexit={0x0, 0x18, 0x40}, @uexit={0x0, 0x18, 0xc}, @uexit={0x0, 0x18, 0x6}, @code={0x1, 0x66, {"66baf80cb8bea6888eef66bafc0c66b8680066ef450fc7380f20e035010000000f22e0b9bf0200000f32440fc739f30f1efbc401a457662366ba400066ed6444d766baf80cb804b15a89ef66bafc0c66b8800066ef"}}, @code={0x1, 0x6f, {"f3400f09c7442400af000000c744240243ed0000ff1c240f1c9e1f000000b99a0900000f32470f01c8b9af090000b8486dc952ba000000000f30b805000000b9c89e4aa30f01d9c4612967a022ae260366bad10466b8070066ef420f01c9"}}, @cpuid={0x2, 0x18, {0x7fff, 0x8}}, @cpuid={0x2, 0x18, {0x8, 0xb}}, @cpuid={0x2, 0x18, {0x1}}, @uexit={0x0, 0x18, 0xe774}, @cpuid={0x2, 0x18, {0x8, 0x20422be3}}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x2, 0x18, {0x81}}, @uexit={0x0, 0x18, 0x50}, @cpuid={0x2, 0x18, {0xa, 0x8}}, @uexit={0x0, 0x18, 0xc59}, @cpuid={0x2, 0x18, {0xae, 0x40}}, @uexit={0x0, 0x18, 0x7}, @code={0x1, 0x54, {"400f01c42e440f01ca66baf80cb8b6dbd18def66bafc0c66b8140066ef6426420f211f67da14a80f015a036647df9bedbf00000f01ca66400f6e5d850fc7b97ae00000"}}, @code={0x1, 0x98, {"64490fc76b4bb90d0b0000b8cbc50000ba000000000f3066baf80cb8ec337087ef66bafc0ced66b8b0008ec0666564660f38808900000000b94a030000b8d02014a4ba8215280e0f30b8010000000f01c1c744240000000000c7442402e4000000c7442406000000000f011c2466bad00466b8089266ef66baf80cb8a0acf28cef66bafc0c66ed"}}, @cpuid={0x2, 0x18, {0x6a, 0x5d}}, @uexit={0x0, 0x18, 0x2}, @code={0x1, 0x85, {"66baf80cb8103d7084ef66bafc0c66b8ecdc66ef66b858008ec8450f01c9f3430f01ea440f01c9c462ed90bc9b000000006636f2420f10d9b911090000b80c00c0feba000000000f30c744240045000000c74424027d4b88b9ff1c2448b808000000000000000f23d80f21f835400000400f23f8"}}, @cpuid={0x2, 0x18, {0x4, 0x8}}], 0x4f1}) dup3(r2, r6, 0x0) (async) dup3(r2, r6, 0x0) sendto$inet(r5, &(0x7f0000000b00)="1c11aa46677c998bdd4bab9ba20dfd641c70f3c51f8c532d1e74234c1060acbc381d4d7bcfb8c03ce2a712d3e6a7ec30c5f56cb19e511afe95884d018d8b01bc8a971b59032af950f69506a15626567e0b112257abb4ca263753c8115be3a2075beb2e76a510541f752563eb76a2aa82faa5e2795ca904d7d0c3a9a39dd31b9d88a5c549989c2e81d9b1f8fda073a458da64912899a13a8ab7e12524560642363cd96d9331c3cd24abf9c9dd646f2884ec3eb079e4b41c17934bd8dbe465ae27a0d66d24830645aacc3cf124d6838b7746c0b5b87a287aa1b12052461223512d40ddb3e8df14518450978a0e76538720b04e14212b06", 0xf6, 0x4, &(0x7f0000000c00)={0x2, 0x4e21, @empty}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001280)=@filter={'filter\x00', 0xe, 0x4, 0x5e0, [0x0, 0x200000000c80, 0x200000000f44, 0x200000000f74], 0x0, &(0x7f0000000c40), &(0x7f0000000c80)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x6, 0x2, 0x9e53, 'ip6tnl0\x00', 'sit0\x00', 'batadv_slave_1\x00', 'nicvf0\x00', @random="e3f385b2a98f", [0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0xce, 0xce, 0xfe, [@pkttype={{'pkttype\x00', 0x0, 0x8}}, @pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x7}}}], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x6}}}}, {0x9, 0x4, 0x200, 'geneve0\x00', 'bond_slave_0\x00', 'ip6erspan0\x00', 'batadv0\x00', @local, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @random="eba4259cda8e", [0x0, 0x0, 0xff, 0x0, 0xff], 0xf6, 0x146, 0x196, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00', 0x3}}}, @realm={{'realm\x00', 0x0, 0x10}, {{0xa, 0x5}}}], [@common=@log={'log\x00', 0x28, {{0x2, "1413c8991b55f8d29ef7d6b26cf0017def75cbc49ed09de8c067d05f584f", 0xf}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9, 'syz1\x00', {0x78}}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x5, 0x0, 0x22f0, 'tunl0\x00', 'batadv_slave_0\x00', 'tunl0\x00', 'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0xff, 0xff, 0x0, 0x0, 0x2010959cd911d910], @broadcast, [0xff, 0x80, 0x0, 0x0, 0x0, 0xff], 0xce, 0xce, 0x116, [@state={{'state\x00', 0x0, 0x8}, {{0xc47}}}, @state={{'state\x00', 0x0, 0x8}, {{0x9}}}], [], @common=@ERROR={'ERROR\x00', 0x20, {"2115ee408714805d0715b9a37b71d777806d3705bedd627af3749b4dae26"}}}, {0x3, 0x4, 0x88be, 'veth1_macvtap\x00', '\x00', 'team0\x00', 'netdevsim0\x00', @broadcast, [0x0, 0x0, 0x0, 0xff, 0xff], @link_local, [0xff, 0xff, 0xff, 0xe8ac7328a2f699e, 0x0, 0xff], 0xf6, 0x176, 0x1a6, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x0, 0x7fffffff, 0x1, 0x1, 0xfffff553}}}, @limit={{'limit\x00', 0x0, 0x20}, {{0xcb2, 0x8, 0x3, 0x2, 0xfffffff7, 0xdb}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x1, 0xfc, {0xfffffffffffffffe}}}}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xffffffffffffffff}}}], @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}]}, 0x658) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001400), 0xa8202, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000001440), 0x4) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000001480)={0x29, 0x0, '\x00', [@jumbo]}, 0x10) (async) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000001480)={0x29, 0x0, '\x00', [@jumbo]}, 0x10) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x80, 0xd, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x24004000) (async) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x80, 0xd, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x24004000) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000001600)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1e7d, 0x30d4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0x80, 0x5, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0x1, 0x7f, 0x1, {0x22, 0xfe9}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x4, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x40, 0xf, 0xff}}]}}}]}}]}}, &(0x7f0000001840)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x300, 0x2, 0x2, 0x3, 0x40, 0x3}, 0xc, &(0x7f0000001680)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0x2, 0x4e}]}, 0x2, [{0x8a, &(0x7f00000016c0)=@string={0x8a, 0x3, "65716a99d22d81eed0a8714eeb28782b92ddf872ce2e3d1c236cdbda5de9f1f902c8a103b6325f5e7a1bded8a8f5d80b1ca3a24fab1adf2f441337e3f98bcaa6d06d3706733c8895635a392bb079e20c1e37b967e59be3423edbbd163de071a6e469e875a981fedcdfa519ad429d74f8e69c4cda54e7b5b0eaa833fb1e5b269feb91c0b73d2cd13f"}}, {0xba, &(0x7f0000001780)=@string={0xba, 0x3, "af49940cf48b536892b2d2cd6d51ab472b3b432bb114217a3c38f49e285bc6d38f5794723daf3e299442ec708cfc0536a028898ab36cb3485fcda0634af36b8dce5a26303f445d06b75c404b633c1c0a6af2e2dc486a17d900d852e848458bdae03ad34295afa6113076dcd891f8ddde4b1fd811f6d30f7b71dab1570be844085c64aa917606eb50d3c15ea7014e84112d49d83ff0a7d499d3d9bd00c4d744598ad97db8ed09c5897eb88be26e17e37314eeb0645f94d24a"}}]}) (async) r8 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000001600)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1e7d, 0x30d4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0x80, 0x5, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0x1, 0x7f, 0x1, {0x22, 0xfe9}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x4, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x40, 0xf, 0xff}}]}}}]}}]}}, &(0x7f0000001840)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x300, 0x2, 0x2, 0x3, 0x40, 0x3}, 0xc, &(0x7f0000001680)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0x2, 0x4e}]}, 0x2, [{0x8a, &(0x7f00000016c0)=@string={0x8a, 0x3, "65716a99d22d81eed0a8714eeb28782b92ddf872ce2e3d1c236cdbda5de9f1f902c8a103b6325f5e7a1bded8a8f5d80b1ca3a24fab1adf2f441337e3f98bcaa6d06d3706733c8895635a392bb079e20c1e37b967e59be3423edbbd163de071a6e469e875a981fedcdfa519ad429d74f8e69c4cda54e7b5b0eaa833fb1e5b269feb91c0b73d2cd13f"}}, {0xba, &(0x7f0000001780)=@string={0xba, 0x3, "af49940cf48b536892b2d2cd6d51ab472b3b432bb114217a3c38f49e285bc6d38f5794723daf3e299442ec708cfc0536a028898ab36cb3485fcda0634af36b8dce5a26303f445d06b75c404b633c1c0a6af2e2dc486a17d900d852e848458bdae03ad34295afa6113076dcd891f8ddde4b1fd811f6d30f7b71dab1570be844085c64aa917606eb50d3c15ea7014e84112d49d83ff0a7d499d3d9bd00c4d744598ad97db8ed09c5897eb88be26e17e37314eeb0645f94d24a"}}]}) syz_usb_control_io$hid(r8, &(0x7f0000001b00)={0x24, &(0x7f0000001880)={0x0, 0x3, 0xd7, {0xd7, 0x23, "bd832f0aee6e7a737dbb9204a84f28e3e6d1e28f443fc46252da8bb50a6677943ae24d2864100642e901db6063b36e2954086ac56304a7aed751ac1910aadfab9a7f0339efd6b8c8b2ab865221d26872e7f9fe946b5a4f6eb25b045acaa6cdeee4ee8917b96db37762612e379ba88f08414f9ea029b5ce1aa70231a193c031f56e55cc4809592d75622f14cb2dfb5da70db78485d5a5f79a73e2c8b5c06c584afd0d138bc9669250401befa91c716c6a9b9624795f5c98c8446f8d1c7f05fa88d4b9432008c45b2c07cc0b05b1ce56239fcf56294d"}}, &(0x7f0000001980)={0x0, 0x3, 0xf9, @string={0xf9, 0x3, "80279443bca11c528249ee96cbaef15d2d07dda41f6aedbcd9fef0a8648bf45984e7bfc65703aa5f620e9b70caeb4545f905bdc15b572d8d2ba058d997f39e10988a76777d65000a3ebd6aa229b65b55a32db8c199d6f3b5fe2c010d06de4d06a57eb00fcd4e59991ca1a85c907154a8bfe41f83e66741fed93c649f4f9ad5d0e33fb9076e4bb426d4bcaba93bc01597c4edcf7328cccac394a2c5fb0b277048fe7a12ef8f45b82bf7d29b4710f4b99393f158d1ec033477318e66b8a2c18257bb6733bfad2f747b092fcc00e13bc524f6e92ffca54de82568d95f59bd26c27dca2dd3b1b359db27922aaf00842253f7dc4165ded29bec"}}, &(0x7f0000001a80), &(0x7f0000001ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xffff, 0x8, 0x1, {0x22, 0x50f}}}}, &(0x7f0000001c80)={0x2c, &(0x7f0000001b40)={0x40, 0x18, 0x20, "64970e23ced09ff0860dd4180d1bfb437eb5b7dd3cc83d9cea2c946231a0085a"}, &(0x7f0000001b80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001bc0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000001c00)={0x20, 0x1, 0x1a, "2edcb0b1852370328fb76c244a503b66c4e28217f47ca66e485f"}, &(0x7f0000001c40)={0x20, 0x3, 0x1, 0x81}}) (async) syz_usb_control_io$hid(r8, &(0x7f0000001b00)={0x24, &(0x7f0000001880)={0x0, 0x3, 0xd7, {0xd7, 0x23, "bd832f0aee6e7a737dbb9204a84f28e3e6d1e28f443fc46252da8bb50a6677943ae24d2864100642e901db6063b36e2954086ac56304a7aed751ac1910aadfab9a7f0339efd6b8c8b2ab865221d26872e7f9fe946b5a4f6eb25b045acaa6cdeee4ee8917b96db37762612e379ba88f08414f9ea029b5ce1aa70231a193c031f56e55cc4809592d75622f14cb2dfb5da70db78485d5a5f79a73e2c8b5c06c584afd0d138bc9669250401befa91c716c6a9b9624795f5c98c8446f8d1c7f05fa88d4b9432008c45b2c07cc0b05b1ce56239fcf56294d"}}, &(0x7f0000001980)={0x0, 0x3, 0xf9, @string={0xf9, 0x3, "80279443bca11c528249ee96cbaef15d2d07dda41f6aedbcd9fef0a8648bf45984e7bfc65703aa5f620e9b70caeb4545f905bdc15b572d8d2ba058d997f39e10988a76777d65000a3ebd6aa229b65b55a32db8c199d6f3b5fe2c010d06de4d06a57eb00fcd4e59991ca1a85c907154a8bfe41f83e66741fed93c649f4f9ad5d0e33fb9076e4bb426d4bcaba93bc01597c4edcf7328cccac394a2c5fb0b277048fe7a12ef8f45b82bf7d29b4710f4b99393f158d1ec033477318e66b8a2c18257bb6733bfad2f747b092fcc00e13bc524f6e92ffca54de82568d95f59bd26c27dca2dd3b1b359db27922aaf00842253f7dc4165ded29bec"}}, &(0x7f0000001a80), &(0x7f0000001ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xffff, 0x8, 0x1, {0x22, 0x50f}}}}, &(0x7f0000001c80)={0x2c, &(0x7f0000001b40)={0x40, 0x18, 0x20, "64970e23ced09ff0860dd4180d1bfb437eb5b7dd3cc83d9cea2c946231a0085a"}, &(0x7f0000001b80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001bc0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000001c00)={0x20, 0x1, 0x1a, "2edcb0b1852370328fb76c244a503b66c4e28217f47ca66e485f"}, &(0x7f0000001c40)={0x20, 0x3, 0x1, 0x81}}) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000001cc0)={'ah\x00'}, &(0x7f0000001d00)=0x1e) 2.450903623s ago: executing program 2 (id=247): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="12040e00e0ff030002004788aa96a13bb1000000000086ddffff", 0x10029, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, @in=@remote, 0x0, 0x2400, 0x1000, 0x0, 0x2, 0x20, 0x20, 0x84, 0x0, 0xee01}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, 0x0, &(0x7f0000000080)) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0xc2, 0x0) syz_clone(0x802400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r7, 0x293f000) 2.241235246s ago: executing program 2 (id=248): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)=@arm64={0xf4, 0xa, 0x7, '\x00', 0x8000000000000001}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0xe0001}) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, 0x0) 2.187203117s ago: executing program 2 (id=249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, &(0x7f00000000c0)={0x0, 0xf, 0x9, {0x9, 0x4, "0ac35d73a19ebd"}}, 0x0, 0x0, 0x0}, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0308003c5c980128876360864668f82ffdd569d2f630b5e033ff11ed"], 0xffdd) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x5d3, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x200000, 0x1, 0x2, 0x9], 0x5000}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x3000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000000040)=0xfa2f, 0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000003a40)={0x0, 0x0, 0x0}, 0x4001) ioprio_set$pid(0x2, 0x0, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) read(r9, &(0x7f0000000080)=""/93, 0xffffff6c) 1.934760941s ago: executing program 1 (id=250): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) syz_io_uring_setup(0xcbf, &(0x7f00000000c0)={0x0, 0xd94b, 0x40, 0x3, 0x256}, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0xdfc, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb1, 0xe0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x1, 0xb, {0x9, 0x21, 0xfff7, 0x82, 0x1, {0x22, 0x9c4}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfb, 0x80, 0x1}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x6, 0x7f, 0x1, 0x10, 0x5}, 0x11, &(0x7f0000000140)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x2b, 0x0, 0x8, 0xf007, 0x40}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x420}}]}) mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x4008024, &(0x7f0000000040)={[{@stats}]}) socket$inet6(0xa, 0x2, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) (async) syz_io_uring_setup(0xcbf, &(0x7f00000000c0)={0x0, 0xd94b, 0x40, 0x3, 0x256}, 0x0, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0xdfc, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb1, 0xe0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x1, 0xb, {0x9, 0x21, 0xfff7, 0x82, 0x1, {0x22, 0x9c4}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfb, 0x80, 0x1}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x6, 0x7f, 0x1, 0x10, 0x5}, 0x11, &(0x7f0000000140)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x2b, 0x0, 0x8, 0xf007, 0x40}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x420}}]}) (async) mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x4008024, &(0x7f0000000040)={[{@stats}]}) (async) 1.802661033s ago: executing program 1 (id=251): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xbb50}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c76e3, 0x40) fallocate(r2, 0x0, 0x0, 0x1000f4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) read(r2, &(0x7f00000023c0)=""/91, 0x5b) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000100)={0x30}, 0x30) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r6, 0x65, 0x80000000, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000240)='+#(.\x00') ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000800)=""/92) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCNXCL(r7, 0x540d) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r8, &(0x7f0000000000), 0x2002) 1.736741933s ago: executing program 1 (id=254): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9250) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x1800004, 0x20010, r0, 0xfdc6000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) listen(r1, 0x8) read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000040)) 1.523844077s ago: executing program 0 (id=257): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x5) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001540), 0x40900, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x10000003) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r2, 0x0) 1.499673117s ago: executing program 0 (id=258): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x50, 0x10, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0x3, 0x7, 0x1, {0x22, 0x195}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xa1, 0x9, 0xf7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x6c, 0x5}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x1a, 0x9, 0x5, 0x0, 0xb7}, 0xf7, &(0x7f0000000300)={0x5, 0xf, 0xf7, 0x2, [@generic={0xe7, 0x10, 0x2, "8783515b2a8af74c2b3ddd0c917a4de79553a3c419043e1106e7206ac054a315a477082a912cd255aceb8ef1951ebc750fefad61e34f64e7506423816a6345c31c4f387bca95254c81fa3dafe19a91683e5269e8e3f62a299435e74ff28cb37857913bfb1c3b47cae49873fef2059e16d637b1cfeff25dc0b17819284c8c26f93a5430cc3ebb01e11e557012ec63e8f530e6c4c889f5710739b6ce8350b6a336d9a697fe6a215c007de2a13b207db99562d2bb8792a55e903c5d8e3667fa4c1eaa819f370e2ffbf8623d34df7ee7a6be1b6c1c6eed54602851c66a4a2148258cb4df479d"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x48, 0x8, 0x0, 0x1ff}]}, 0x2, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x420}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000680)={0x24, &(0x7f00000004c0)={0x40, 0x23, 0x62, {0x62, 0xb, "441289cb8da7e42e63bc2c2b9046e1290a8248ecf56e212e33108cd10766bcb3ceef10455017ed25a11fc6c391b00d388a598e91b95755c9b08570a08b19f51d4ff542154cfa1bd17286ab74a9c479acbff061770c1d9493e01982145dc110ad"}}, &(0x7f0000000540)={0x0, 0x3, 0xaa, @string={0xaa, 0x3, "77870e6d60f5f2315d04d4596714e7299d6f9b2a2fedf342bc929e500a102e55ceb2bd29a62aaf16e3539a489abe6b75887123e8d7835ce830552e1e7aafba2f1968f34774855858de78f5d771f287861560ed87b821b04ac7468fdcca9648a0b68b30d3ee6c279932b2e0f532dd60c38e2f2557c1cb24b028b949f7124d7c299c595d6d4bc2749cf4ccd9f1dd9608deecb5760eac7adbc0a2f2f7151401692ed0420f0a4d2c7982"}}, &(0x7f0000000600), &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x4, 0x1, {0x22, 0xe6f}}}}, &(0x7f0000000840)={0x2c, &(0x7f00000006c0)={0x40, 0x12, 0x66, "32f0b4fffa2cee52e1913b0d36736a88abb54b4a9041aefc7aabf8df54fc79cb1d46c873fce0d007e219d847817558d68d13dd930f5584f87780da56fc69bb8f275735faab5b92029b121876abb35fdb14542efdee9cfb371b2a221381c028ef5ff7da6935a3"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0xc0}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000007c0)={0x20, 0x1, 0x25, "94c215981d232bb32826ec56103ccf20cd1c7d51e8775a4a21e2d4e9fd1128c10bd6cc0323"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0x4}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x8, {0x3, 0x100000000000, 0x100000003, 0x0, 0x0, 0x3881fffc, {0x5, 0xff, 0x1, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x2, 0x8009}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @flat=@binder={0x73622a85, 0x100, 0x1}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)={0x2}) 929.073796ms ago: executing program 0 (id=259): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x10, r1, 0xb3089000) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r4, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) r5 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc) close(0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r6, 0x2a, r7}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) pread64(r8, &(0x7f0000000000)=""/157, 0x9d, 0x7fffffffffffffff) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 927.738026ms ago: executing program 0 (id=260): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, &(0x7f0000000400)) r2 = socket$netlink(0x10, 0x3, 0xe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r3 = dup2(r2, r1) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000280)="9403969008e07347c43c29cad7dae099ea2c332daa58c38dfbcdb9f9335c1e3a428dbad1f6e41365a64ff14c72e6110077d3d9f4768627b047c67c731e3223a27c982494a42725bb474af548a738c64fb96cef8f9f56b07af996c975efa084178f75ade68f7e416770860509637c1911c1dd166320481ebd3263529c89c907bdeae8dc2172603f22bcca79637d775ef1e3b63de17286510df8ef8f19d5a457c274de28d0d50e2474c076790b992006807e29791bc50a28666a452925052e7aaf6d976baa2f7497ffbc62ca6046ef", 0xce) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x1, 0x0, 0x2, 0xff, 0x8, 0x99, 0x0, 0x0, 0xd, 0x10, 0x0, 0x20006, 0xf0, 0x0, 0x1, 0x4, 0xfe, '\x00', 0x0, 0x3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = pidfd_getfd(r3, r3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @fda={0x66646185, 0x5, 0x0, 0x34}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 822.713577ms ago: executing program 0 (id=261): r0 = socket$inet(0x2, 0x200000003, 0x84) getsockopt$inet_buf(r0, 0x0, 0x50, 0x0, &(0x7f00000000c0)=0x58) 806.127838ms ago: executing program 0 (id=262): fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getrusage(0x1, &(0x7f0000000880)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000003b40)="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", 0x2000, &(0x7f0000005b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x8, {0x1, 0x2, 0x2, 0x6a08, 0x401, 0x80, {0x2, 0x4, 0x1, 0x1, 0x3bc4, 0xfffffffffffff8de, 0x2, 0xfffffff7, 0x8, 0x1000, 0x8, r2, r3, 0x3, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)='$\x00\x00\x00', 0x4) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000740)) read$FUSE(r0, &(0x7f00000013c0)={0x2020}, 0x2020) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="9446fa8eafe4d5016818e0d4e1a3187a4700f1ce3c6538ccac23484f1801552e1f6f38854a07f5f0c7edba5da13a82a4acca7015", @ANYRES16=r6, @ANYBLOB="030300000000000000003d000000"], 0x14}}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x53, 0x0, &(0x7f0000000400)="892a7863af87409b1b8fe4e183cc4e2c2eddca324f8c2a61fb078c81d7272d92b902bf051aacb6decd83ec368991a0d7599c3ce3f7bed9d8078ba649896475d964ddb0c6d4d498b0ef80a3f6170b75654851be"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001240)=ANY=[@ANYBLOB="2c000002", @ANYRES16=r9, @ANYBLOB="01002dbd7000fddbdf250d000000180001801400020077673000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x800) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r11, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="f2fff7369fc1b94f8a121b000000"], 0x14}}, 0x40090) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/uevent_helper', 0x1, 0x44) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x2, 0x65}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4804) 22.845499ms ago: executing program 2 (id=263): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) fadvise64(r0, 0xffffffffffff8adf, 0x9, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x4003, 0x6, 0x9, 0x4, 0x0, 0x0, 0x40}, 0xc) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e21, 0x10, @mcast2, 0xff}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000340)={0x1, {{0xa, 0x4e20, 0xfffffffc, @mcast2, 0x100}}, {{0xa, 0x0, 0x2, @local}}}, 0x108) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12b840, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x9, &(0x7f0000000080)=[{0x7ff, 0xb2, 0xb}, {0xfff, 0x6, 0xfd, 0x5}, {0xa, 0xff, 0x5, 0x2}, {0x2, 0x81, 0xf, 0x4}, {0x9, 0x9, 0x52, 0xfffffb1c}, {0x37c, 0x0, 0x7, 0x9}, {0x7, 0x6, 0x5, 0xc5c6}, {0x1, 0x8, 0x67}, {0x6, 0x6, 0x2, 0x6}]}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, 0x0, 0x0) readahead(r3, 0x1, 0x79844e1c) 21.01251ms ago: executing program 2 (id=264): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x6d, &(0x7f0000000000)=0x7f, 0x4) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1000, 0x8000000001}) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) (async) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_client}]}}) (async) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0xbea) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 18.62967ms ago: executing program 1 (id=265): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000004c0)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0x10000a}, 0x1c) getsockopt(r0, 0xff, 0xc82, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYRES8, @ANYRESOCT=r0], 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) syz_usb_control_io$printer(r2, &(0x7f0000000040)={0x14, &(0x7f0000000400)={0xa0aeff7fedf5b0d, 0x1e, 0x8f, {0x8f, 0x21, "f49e5feaf0f2126ed79f7e2ba4c08159612b85c9404190e7d621925225543a25d36851832fdaafe4ea568669d2af8dea446e07e435562e0fd8569b8a709aa7681c349d81cef78da84231178c5a50be32656e6113ddca65bdf12f5a6bb9150f08df935cb70f47c26b28cdf9f5d21fcc2252f5c18b3b8a906c2b231315cc64f350f3bc730a42f2b1205164b7c6a9"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}}, &(0x7f0000000680)={0x34, &(0x7f00000002c0)={0x0, 0x3, 0x69, "ad30657cbee9995ab302bc8059e7ffc2db5a8381ac3c35dca71f547a3ae77ff427707495a1dacae7f97938f3959562d290fc324702adbccd1e7bc3daeae1990dfaa1741ca7bf3a255cee8d469f2900aba2c9058f3e04ba1ac33a827c26242f58ae8dc33f166a74bd8a"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4c}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000540)={0x20, 0x0, 0xb6, {0xb4, "68432b4a9f112a6be6dfee372bef2974f832851cd3b0867cb381b39efad2ab17a8e3fee37cd335a81ca8e6fbdde80adeafc262526e0ae15b051baa2f990f7462edec92fc63ea2ac1d7804f354904eebd248cbcb520ebcbd3c280772cebaa9811fbbf8b4dd3b202a4b6407e7d6cd09b933826ff72d05e353d0d456816ed4a5693f60a8078f41d4fe31bb58fbaa7fc5c9f687065f8679e5a6f03378430322d44fdd68cd6d8501241a2d0db86cb8184ea7526d1e642"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0xf}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0xf6}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x1}, @register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=266): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x606100, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xcc) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000001cc0)={'ip6gre0\x00', 0x0}) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {&(0x7f0000000340)="2009f5", 0x3}], 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="da3ed91d65737a4cf96a8a9e299256f1b81246668d26146e31286d03aedce7f49a4e7f02a1e387dad735bff5e5637306069a549544066e60b08e5a67214f504fb33a326683338f4a565e0b7e1d8d80e63b223aa26005223313cceedcb982bf963be12020a6f5e70036f2a39b07ba194afd44256fb5aa400ad4331b244e50afc7a8b8ae358df4fae670ed50317a1fc6be51a0", 0x92}], 0x1}}], 0x1, 0x50d41de21d476b06) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20003, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x164}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. [ 21.413825][ T36] audit: type=1400 audit(1750592373.100:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.415218][ T281] cgroup: Unknown subsys name 'net' [ 21.436845][ T36] audit: type=1400 audit(1750592373.100:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.463943][ T36] audit: type=1400 audit(1750592373.140:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.464170][ T281] cgroup: Unknown subsys name 'devices' [ 21.669450][ T281] cgroup: Unknown subsys name 'hugetlb' [ 21.675085][ T281] cgroup: Unknown subsys name 'rlimit' [ 21.769421][ T36] audit: type=1400 audit(1750592373.460:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.792289][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.792619][ T36] audit: type=1400 audit(1750592373.460:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.825843][ T36] audit: type=1400 audit(1750592373.460:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.848997][ T36] audit: type=1400 audit(1750592373.500:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.852679][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.874407][ T36] audit: type=1400 audit(1750592373.500:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.908894][ T36] audit: type=1400 audit(1750592373.540:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.934446][ T36] audit: type=1400 audit(1750592373.540:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.724777][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.731868][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.739038][ T289] bridge_slave_0: entered allmulticast mode [ 22.745271][ T289] bridge_slave_0: entered promiscuous mode [ 22.751779][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.758853][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.765909][ T289] bridge_slave_1: entered allmulticast mode [ 22.772334][ T289] bridge_slave_1: entered promiscuous mode [ 22.804826][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.811889][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.819006][ T291] bridge_slave_0: entered allmulticast mode [ 22.825245][ T291] bridge_slave_0: entered promiscuous mode [ 22.838803][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.845877][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.852992][ T291] bridge_slave_1: entered allmulticast mode [ 22.859392][ T291] bridge_slave_1: entered promiscuous mode [ 22.900001][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.907167][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.914233][ T288] bridge_slave_0: entered allmulticast mode [ 22.920639][ T288] bridge_slave_0: entered promiscuous mode [ 22.927540][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.934573][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.941674][ T288] bridge_slave_1: entered allmulticast mode [ 22.948078][ T288] bridge_slave_1: entered promiscuous mode [ 22.960812][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.967896][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.974961][ T290] bridge_slave_0: entered allmulticast mode [ 22.981312][ T290] bridge_slave_0: entered promiscuous mode [ 22.997945][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.005014][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.012121][ T290] bridge_slave_1: entered allmulticast mode [ 23.018405][ T290] bridge_slave_1: entered promiscuous mode [ 23.164716][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.171890][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.179193][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.186224][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.197067][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.204119][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.211416][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.218456][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.231699][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.238768][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.246039][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.253085][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.262075][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.269137][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.276407][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.283451][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.335076][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.342397][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.350516][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.358071][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.365222][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.372772][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.379966][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.387239][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.408070][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.415107][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.422772][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.429810][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.446736][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.453767][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.461375][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.468431][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.490292][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.497374][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.505020][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.512101][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.525799][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.532861][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.541905][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.548975][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.587439][ T289] veth0_vlan: entered promiscuous mode [ 23.596000][ T291] veth0_vlan: entered promiscuous mode [ 23.613853][ T288] veth0_vlan: entered promiscuous mode [ 23.629489][ T289] veth1_macvtap: entered promiscuous mode [ 23.637969][ T291] veth1_macvtap: entered promiscuous mode [ 23.649672][ T288] veth1_macvtap: entered promiscuous mode [ 23.678875][ T290] veth0_vlan: entered promiscuous mode [ 23.710576][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.729432][ T290] veth1_macvtap: entered promiscuous mode [ 23.768493][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.768532][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.790007][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.790028][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.790893][ T314] rust_binder: Error in use_page_slow: ESRCH [ 23.796473][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.803141][ T315] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 23.818779][ T315] rust_binder: Error while translating object. [ 23.824155][ T315] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 23.824377][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.855224][ T315] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 23.856310][ T314] rust_binder: use_range failure ESRCH [ 23.869831][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.886879][ T314] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 23.888606][ T314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 23.890104][ T321] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.897011][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.953943][ T314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:2 [ 23.965287][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.965350][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.973029][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.980182][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.986981][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.987192][ T324] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 23.993724][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.000844][ T324] rust_binder: Error while translating object. [ 24.011374][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.018041][ T324] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.029815][ T324] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 24.040240][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.050608][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.057663][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.065844][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.072899][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.081506][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.088341][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.094827][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.101434][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.115752][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.115769][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.123828][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.130460][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.137393][ T330] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 24.138259][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.152250][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.161061][ T330] rust_binder: Read failure Err(EFAULT) in pid:6 [ 24.172410][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.178184][ T330] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 24.185310][ T330] rust_binder: Read failure Err(EFAULT) in pid:6 [ 24.190197][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.203798][ T334] Zero length message leads to an empty skb [ 24.206606][ T308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.287286][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 24.301457][ T9] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1023 [ 24.312053][ T9] usb 2-1: config 1 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 24.335852][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 24.345977][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 24.362662][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.370950][ T9] usb 2-1: Product: 쨧⿨詚듈榦뀈忯ᬱ⟱ﵚ鬔靆⃳䬺䉶荧㊸┮⇊嚀譭쪫ᣊ졓ậ塆줝ﲫ⡙᧟캉㑮졽㣙燭❹ꅻ젡均䓆῾ [ 24.388208][ T9] usb 2-1: Manufacturer: у [ 24.393230][ T9] usb 2-1: SerialNumber: 螷봦蜡桤쭥谁斘ꩇ횯萡珬 [ 24.405736][ T312] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 24.414125][ T312] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 24.626743][ T312] bridge0: port 3(bond_slave_1) entered blocking state [ 24.633650][ T312] bridge0: port 3(bond_slave_1) entered disabled state [ 24.640598][ T305] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.641078][ T312] bond_slave_1: entered allmulticast mode [ 24.654602][ T312] bond_slave_1: entered promiscuous mode [ 24.660844][ T312] rust_binder: Write failure EFAULT in pid:2 [ 24.662566][ T356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.676646][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.677691][ T356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.705112][ T9] usb 2-1: USB disconnect, device number 2 [ 24.721564][ T360] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.754808][ T363] binder: Unknown parameter 'contextrfs/binder0' [ 24.779278][ T365] rust_binder: Write failure EFAULT in pid:12 [ 24.796729][ T305] usb 3-1: Using ep0 maxpacket: 8 [ 24.813910][ T305] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 24.822418][ T305] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 24.830990][ T305] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 24.840081][ T305] usb 3-1: config 250 has no interface number 0 [ 24.846483][ T305] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 24.849078][ T367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 24.858831][ T305] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 24.878472][ T45] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 24.886745][ T305] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 15571, setting to 1024 [ 24.904286][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 24.914511][ T305] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 24.925329][ T45] usb 1-1: config 0 has no interface number 0 [ 24.931771][ T305] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 24.945610][ T305] usb 3-1: config 250 interface 228 has no altsetting 0 [ 24.953783][ T45] usb 1-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 24.963124][ T305] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 24.972590][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.980640][ T305] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 24.988986][ T45] usb 1-1: Product: syz [ 24.993217][ T45] usb 1-1: Manufacturer: syz [ 24.998016][ T305] usb 3-1: Product: syz [ 25.002199][ T305] usb 3-1: SerialNumber: syz [ 25.007924][ T45] usb 1-1: SerialNumber: syz [ 25.013294][ T45] usb 1-1: config 0 descriptor?? [ 25.020013][ T305] hub 3-1:250.228: bad descriptor, ignoring hub [ 25.021738][ T376] rust_binder: Write failure EFAULT in pid:22 [ 25.026415][ T305] hub 3-1:250.228: probe with driver hub failed with error -5 [ 25.202956][ T383] netlink: 3 bytes leftover after parsing attributes in process `syz.1.24'. [ 25.221189][ T305] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 25.221285][ T344] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 25.232975][ T344] rust_binder: Error while translating object. [ 25.244656][ T385] rust_binder: Write failure EINVAL in pid:11 [ 25.251965][ T344] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.252419][ T386] rust_binder: Write failure EINVAL in pid:11 [ 25.261043][ T344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15 [ 25.269210][ T385] rust_binder: Read failure Err(EAGAIN) in pid:11 [ 25.285330][ T386] rust_binder: Read failure Err(EAGAIN) in pid:11 [ 25.300621][ T45] usb 1-1: Found UVC 0.00 device syz (056d:0000) [ 25.316901][ T45] usb 1-1: No valid video chain found. [ 25.325864][ T45] usb 1-1: USB disconnect, device number 2 [ 25.567599][ T10] usb 3-1: USB disconnect, device number 2 [ 25.574701][ T10] usblp0: removed [ 25.829146][ T397] syz.0.28 uses obsolete (PF_INET,SOCK_PACKET) [ 25.866665][ T10] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 25.926088][ T400] kvm: kvm [399]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x1 [ 26.027662][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 26.039363][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.049260][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 26.058841][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.067599][ T10] usb 3-1: config 0 descriptor?? [ 26.224717][ T416] tipc: Started in network mode [ 26.229696][ T416] tipc: Node identity ac14140f, cluster identity 4711 [ 26.236920][ T416] tipc: Enabled bearer , priority 10 [ 26.275171][ T10] logitech-djreceiver 0003:046D:C52F.0001: unknown main item tag 0x0 [ 26.283330][ T10] logitech-djreceiver 0003:046D:C52F.0001: unknown main item tag 0x0 [ 26.292892][ T10] logitech-djreceiver 0003:046D:C52F.0001: hidraw0: USB HID v0.00 Device [HID 046d:c52f] on usb-dummy_hcd.2-1/input0 [ 26.307011][ T419] rust_binder: Error in use_page_slow: ESRCH [ 26.307031][ T419] rust_binder: use_range failure ESRCH [ 26.310771][ T425] rust_binder: Write failure EFAULT in pid:21 [ 26.313135][ T419] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 26.328292][ T419] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 26.341730][ T419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:32 [ 26.367916][ T10] usb 3-1: USB disconnect, device number 3 [ 26.437422][ T434] fido_id[434]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 26.476553][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.555550][ T431] rust_binder: Read failure Err(EFAULT) in pid:26 [ 26.606572][ T9] usb 4-1: device descriptor read/64, error -71 [ 26.634312][ T36] kauditd_printk_skb: 109 callbacks suppressed [ 26.634330][ T36] audit: type=1400 audit(1750592378.320:183): avc: denied { create } for pid=435 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 26.660027][ T36] audit: type=1400 audit(1750592378.330:184): avc: denied { sys_admin } for pid=435 comm="syz.2.38" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 26.672603][ T436] rust_binder: Write failure EINVAL in pid:31 [ 26.693888][ T439] incfs: Options parsing error. -22 [ 26.705268][ T439] incfs: mount failed -22 [ 26.839597][ T36] audit: type=1400 audit(1750592378.530:185): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 26.856700][ T9] usb 4-1: device descriptor read/64, error -71 [ 26.859337][ T36] audit: type=1400 audit(1750592378.540:186): avc: denied { ioctl } for pid=448 comm="syz.1.42" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 26.933434][ T36] audit: type=1400 audit(1750592378.620:187): avc: denied { associate } for pid=450 comm="syz.1.43" name="blkio.bfq.io_wait_time_recursive" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 26.981100][ T457] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.089404][ T459] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 27.095927][ T459] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 27.104027][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.121154][ T459] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:36 [ 27.196952][ T36] audit: type=1400 audit(1750592378.890:188): avc: denied { remount } for pid=462 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 27.227098][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 27.236124][ T36] audit: type=1400 audit(1750592378.900:189): avc: denied { read } for pid=462 comm="syz.0.48" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.286761][ T9] usb 4-1: device descriptor read/64, error -71 [ 27.366933][ T444] tipc: Node number set to 2886997007 [ 27.377993][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 27.386061][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 27.394733][ T10] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 27.403224][ T10] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 27.413504][ T10] usb 2-1: config 4 has no interface number 0 [ 27.421067][ T10] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 27.430161][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.438184][ T10] usb 2-1: Product: syz [ 27.442363][ T10] usb 2-1: Manufacturer: syz [ 27.447258][ T10] usb 2-1: SerialNumber: syz [ 27.546583][ T9] usb 4-1: device descriptor read/64, error -71 [ 27.656074][ T10] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 27.663106][ T9] usb usb4-port1: attempt power cycle [ 27.668534][ T10] usb 2-1: No valid video chain found. [ 27.674972][ T10] usb 2-1: USB disconnect, device number 3 [ 27.836565][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 27.987646][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.998608][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.008637][ T45] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 28.016567][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 28.017778][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.036629][ T45] usb 3-1: config 0 descriptor?? [ 28.042855][ T9] usb 4-1: device descriptor read/8, error -71 [ 28.083444][ T36] audit: type=1400 audit(1750592379.770:190): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 28.169140][ T36] audit: type=1400 audit(1750592379.860:191): avc: denied { read write } for pid=470 comm="syz.1.52" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 28.169441][ T471] fuse: Bad value for 'user_id' [ 28.197747][ T36] audit: type=1400 audit(1750592379.860:192): avc: denied { open } for pid=470 comm="syz.1.52" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 28.203190][ T9] usb 4-1: device descriptor read/8, error -71 [ 28.227585][ T471] fuse: Bad value for 'user_id' [ 28.249033][ T476] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.453984][ T45] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 28.466582][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 28.472127][ T45] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 28.487914][ T9] usb 4-1: device descriptor read/8, error -71 [ 28.497154][ T490] ======================================================= [ 28.497154][ T490] WARNING: The mand mount option has been deprecated and [ 28.497154][ T490] and is ignored by this kernel. Remove the mand [ 28.497154][ T490] option from the mount to silence this warning. [ 28.497154][ T490] ======================================================= [ 28.539990][ T490] tmpfs: Bad value for 'uid' [ 28.544697][ T490] tmpfs: Bad value for 'uid' [ 28.555601][ T494] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.555735][ T493] rust_binder: Write failure EINVAL in pid:48 [ 28.565201][ T493] incfs: Options parsing error. -22 [ 28.577096][ T490] rust_binder: Error while translating object. [ 28.577138][ T490] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.577256][ T493] incfs: mount failed -22 [ 28.583311][ T490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 28.593588][ T493] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 28.597279][ T494] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 28.617506][ T9] usb 4-1: device descriptor read/8, error -71 [ 28.625691][ T493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 28.736641][ T9] usb usb4-port1: unable to enumerate USB device [ 28.753113][ T45] cp2112 0003:10C4:EA90.0002: error requesting version [ 28.760706][ T45] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -71 [ 28.771204][ T45] usb 3-1: USB disconnect, device number 4 [ 28.787012][ T498] fido_id[498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 29.290225][ T504] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 29.936571][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.096558][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 30.102791][ T45] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1024 [ 30.113080][ T45] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 64 [ 30.123360][ T45] usb 2-1: config 1 interface 0 has no altsetting 0 [ 30.139139][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 30.148520][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.156773][ T45] usb 2-1: Product: ఉ [ 30.161059][ T45] usb 2-1: Manufacturer: Ј [ 30.165836][ T45] usb 2-1: SerialNumber: syz [ 30.175358][ T535] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 30.176976][ T556] overlayfs: missing 'lowerdir' [ 30.183142][ T535] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 30.316769][ T561] binder: Binderfs stats mode cannot be changed during a remount [ 30.486473][ T570] can: request_module (can-proto-0) failed. [ 30.565316][ T45] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 3 proto 3 vid 0x0525 pid 0xA4A8 [ 30.579596][ T45] usb 2-1: USB disconnect, device number 4 [ 30.586293][ T45] usblp0: removed [ 35.981819][ T588] rust_binder: Write failure EINVAL in pid:75 [ 35.981853][ T588] rust_binder: Write failure EINVAL in pid:75 [ 35.982784][ T589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.998214][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.004703][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.016328][ T36] kauditd_printk_skb: 43 callbacks suppressed [ 36.016346][ T36] audit: type=1400 audit(1750592387.700:236): avc: denied { write } for pid=584 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 36.018061][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.027827][ T36] audit: type=1400 audit(1750592387.700:237): avc: denied { write } for pid=584 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.028815][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.050325][ T36] audit: type=1400 audit(1750592387.740:238): avc: denied { connect } for pid=595 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.054296][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.077401][ T36] audit: type=1400 audit(1750592387.770:239): avc: denied { write } for pid=595 comm="syz.0.87" path="socket:[5627]" dev="sockfs" ino=5627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.098873][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.098898][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.098916][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.146534][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.146564][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.152660][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.155344][ T36] audit: type=1326 audit(1750592387.830:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=583 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3daff8e929 code=0x7fc00000 [ 36.160019][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.188542][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.194729][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.200944][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.206106][ T36] audit: type=1400 audit(1750592387.890:241): avc: denied { mounton } for pid=609 comm="syz.1.90" path="/proc/77/task" dev="proc" ino=5717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 36.207128][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.235329][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.241608][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.247847][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.254006][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.260152][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.266260][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.272432][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.278696][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.284818][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.290928][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.297169][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.303248][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.309345][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.315430][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.321539][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.327654][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.333724][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.339845][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 36.353486][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.353512][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.359894][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.366017][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.372212][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.378329][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.384489][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.390648][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.396826][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.402930][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.409099][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.415293][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.421861][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.427986][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.434121][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.440241][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.446345][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.452459][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.458590][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.464663][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.470767][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.476957][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.483095][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.489192][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.495280][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.501460][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.507598][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.513776][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.519911][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.526080][ T588] rust_binder: Write failure EINVAL in pid:75 [ 36.532415][ T9] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 36.553747][ T9] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 36.573021][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 36.581089][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 36.590445][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.601618][ T36] audit: type=1400 audit(1750592388.290:242): avc: denied { getopt } for pid=616 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.620894][ T618] binder: Unknown parameter 'mZQ{%Sp\.>/' [ 36.621658][ T9] usb 1-1: config 0 descriptor?? [ 36.633978][ T9] usbhid 1-1:0.0: can't add hid device: -22 [ 36.640011][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 36.665442][ T622] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.836684][ T31] usb 1-1: USB disconnect, device number 3 [ 36.916585][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 36.963119][ T649] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.963150][ T649] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.971359][ T649] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.996999][ T656] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 37.050773][ T662] rust_binder: Read failure Err(EAGAIN) in pid:96 [ 37.060586][ T36] audit: type=1400 audit(1750592388.750:243): avc: denied { write } for pid=664 comm="syz.1.105" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 37.091323][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.100575][ T668] binder: Unknown parameter 'context' [ 37.101480][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.116030][ T36] audit: type=1400 audit(1750592388.780:244): avc: denied { setopt } for pid=667 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.126388][ T673] binder: Bad value for 'stats' [ 37.135291][ T36] audit: type=1326 audit(1750592388.780:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=667 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3daff8e929 code=0x7ffc0000 [ 37.163652][ T45] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 37.172726][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 37.180729][ T45] usb 3-1: SerialNumber: syz [ 37.216557][ T305] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 37.377655][ T305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.388658][ T305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.398547][ T305] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 37.407806][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.421112][ T45] usb 3-1: 0:2 : does not exist [ 37.430746][ T305] usb 4-1: config 0 descriptor?? [ 37.439747][ T45] usb 3-1: USB disconnect, device number 5 [ 37.449791][ T690] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 37.476457][ T694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:89 [ 37.498515][ T696] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 37.507607][ T696] rust_binder: Error while translating object. [ 37.516286][ T696] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.522649][ T696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:91 [ 37.616937][ T603] udevd[603]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.843992][ T305] usbhid 4-1:0.0: can't add hid device: -71 [ 37.860051][ T305] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 37.873281][ T305] usb 4-1: USB disconnect, device number 6 [ 37.938458][ T713] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:135 [ 38.004006][ T717] rust_binder: Failed copying remainder into alloc: EFAULT [ 38.013227][ T717] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 38.020865][ T717] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 38.029369][ T717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:137 [ 38.050346][ T720] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 38.059544][ T720] rust_binder: Error while translating object. [ 38.070123][ T720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.076304][ T720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:139 [ 38.238757][ T724] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:143 [ 38.239169][ T726] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:143 [ 38.913831][ T758] binder: Bad value for 'max' [ 38.982563][ T767] rust_binder: Error while translating object. [ 38.982591][ T767] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 38.989195][ T767] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:107 [ 39.011989][ T769] rust_binder: Write failure EFAULT in pid:109 [ 39.012321][ T770] rust_binder: Error while translating object. [ 39.032015][ T770] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.038456][ T770] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:109 [ 39.228113][ T786] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 39.237312][ T786] rust_binder: Error while translating object. [ 39.246205][ T786] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.252480][ T786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:120 [ 39.976884][ T798] netlink: 112 bytes leftover after parsing attributes in process `syz.3.149'. [ 40.029277][ T798] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 40.038801][ T798] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 40.186525][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 40.215751][ T811] fuse: Unknown parameter 'fd50x0000000000000003' [ 40.348719][ T9] usb 2-1: config 1 interface 0 altsetting 192 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 40.373561][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 40.385166][ T821] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:130 [ 40.386624][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 40.408624][ T822] rust_binder: Write failure EFAULT in pid:90 [ 40.414977][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.436584][ T9] usb 2-1: Product: syz [ 40.446536][ T9] usb 2-1: Manufacturer: 《 [ 40.451176][ T9] usb 2-1: SerialNumber: syz [ 40.467406][ T796] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 40.566552][ T750] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 40.566553][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 41.026540][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 41.186530][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 41.197574][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 41.206922][ T10] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 1967, setting to 1024 [ 41.226600][ T10] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 41.236773][ T10] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 41.249826][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 41.258827][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.274953][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.293220][ T10] usb 3-1: Product: syz [ 41.297695][ T10] usb 3-1: Manufacturer: syz [ 41.304546][ T10] usb 3-1: SerialNumber: syz [ 41.318434][ T837] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 41.534114][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 41.554005][ T10] usb 3-1: USB disconnect, device number 6 [ 42.055957][ T848] tipc: Started in network mode [ 42.060907][ T848] tipc: Node identity 4, cluster identity 4711 [ 42.067483][ T848] tipc: Node number set to 4 [ 42.072776][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 42.072792][ T36] audit: type=1400 audit(1750592393.760:284): avc: denied { setopt } for pid=847 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.121994][ T850] rust_binder: Write failure EINVAL in pid:146 [ 42.185574][ T36] audit: type=1400 audit(1750592393.870:285): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 42.323851][ T858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.323880][ T858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.330704][ T858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.337441][ T858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.344065][ T858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.696591][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 42.857727][ T31] usb 3-1: config 0 has no interfaces? [ 42.863405][ T31] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 42.872777][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.881876][ T31] usb 3-1: config 0 descriptor?? [ 42.963434][ T9] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 192 proto 3 vid 0x0525 pid 0xA4A8 [ 42.977277][ T9] usb 2-1: USB disconnect, device number 5 [ 42.984037][ T9] usblp0: removed [ 43.090027][ T872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.099980][ T872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.108601][ T31] usb 3-1: USB disconnect, device number 7 [ 43.120369][ T36] audit: type=1400 audit(1750592394.810:286): avc: denied { read } for pid=874 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.139983][ T36] audit: type=1400 audit(1750592394.830:287): avc: denied { getopt } for pid=874 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.436571][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 43.496557][ T45] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 43.556547][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 43.596536][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 43.603155][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 43.611701][ T9] usb 2-1: config 2 has an invalid interface number: 85 but max is 0 [ 43.620003][ T9] usb 2-1: config 2 has no interface number 0 [ 43.626158][ T9] usb 2-1: config 2 interface 85 has no altsetting 0 [ 43.634255][ T9] usb 2-1: New USB device found, idVendor=0482, idProduct=0100, bcdDevice= 1.00 [ 43.643385][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.651397][ T9] usb 2-1: Product: syz [ 43.655589][ T9] usb 2-1: Manufacturer: syz [ 43.660223][ T9] usb 2-1: SerialNumber: syz [ 43.669133][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 43.678254][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.686274][ T45] usb 4-1: Product: syz [ 43.690661][ T45] usb 4-1: Manufacturer: syz [ 43.695287][ T45] usb 4-1: SerialNumber: syz [ 43.716564][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 43.722929][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.733422][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.744702][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 43.754049][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.762275][ T31] usb 3-1: Product: syz [ 43.766685][ T31] usb 3-1: Manufacturer: syz [ 43.771349][ T31] usb 3-1: SerialNumber: syz [ 43.868989][ T9] usb-storage 2-1:2.85: USB Mass Storage device detected [ 43.879122][ T9] usb-storage 2-1:2.85: Quirks match for vid 0482 pid 0100: 8 [ 43.911464][ T45] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 43.934351][ T45] cdc_ncm 4-1:1.0: bind() failure [ 43.943393][ T9] usb 2-1: USB disconnect, device number 6 [ 43.944938][ T45] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 43.966531][ T45] cdc_ncm 4-1:1.1: bind() failure [ 43.985036][ T45] usb 4-1: USB disconnect, device number 7 [ 44.183653][ T31] usb 3-1: 0:2 : does not exist [ 44.418455][ T36] audit: type=1400 audit(1750592396.110:288): avc: denied { write } for pid=904 comm="syz.1.181" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.441234][ T36] audit: type=1400 audit(1750592396.130:289): avc: denied { ioctl } for pid=904 comm="syz.1.181" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.590297][ T908] input: syz0 as /devices/virtual/input/input6 [ 44.599633][ T908] input: failed to attach handler leds to device input6, error: -6 [ 44.607394][ T31] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 44.608618][ T36] audit: type=1400 audit(1750592396.300:290): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=477 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.617527][ T31] usb 3-1: Warning! Unlikely big volume range (=18856), cval->res is probably wrong. [ 44.637638][ T36] audit: type=1400 audit(1750592396.300:291): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=477 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.651253][ T31] usb 3-1: [5] FU [Delay Control] ch = 1, val = 34190/53046/1 [ 44.670864][ T36] audit: type=1400 audit(1750592396.300:292): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=477 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.699642][ T908] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 44.709926][ T908] rust_binder: Write failure EINVAL in pid:162 [ 44.716658][ T31] usb 3-1: USB disconnect, device number 8 [ 44.738672][ T910] 9p: Unknown Cache mode or invalid value ;j~.rM09]~ށa΋!B\nz\A/ [ 44.791017][ T911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:164 [ 44.814792][ T36] audit: type=1400 audit(1750592396.500:293): avc: denied { ioctl } for pid=912 comm="syz.1.184" path="socket:[7887]" dev="sockfs" ino=7887 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 45.305616][ T927] binder: Unknown parameter 'processor : 0 [ 45.305616][ T927] vendor_id : GenuineIntel [ 45.305616][ T927] cpu family : 6 [ 45.305616][ T927] model : 79 [ 45.305616][ T927] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 45.305616][ T927] stepping : 0 [ 45.305616][ T927] microcode : 0xffffffff [ 45.305616][ T927] cpu MHz : 2199.998 [ 45.305616][ T927] cache size : 56320 KB [ 45.305616][ T927] physical id : 0 [ 45.305616][ T927] siblings : 2 [ 45.305616][ T927] core id : 0 [ 45.305616][ T927] cpu cores : 1 [ 45.305616][ T927] apicid : 0 [ 45.305616][ T927] initial apicid : 0 [ 45.305616][ T927] fpu : yes [ 45.305616][ T927] fpu_exception : yes [ 45.305616][ T927] cpuid level : 13 [ 45.305616][ T927] wp : yes [ 45.305616][ T927] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 45.305616][ T927] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 45.479240][ T933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.130556][ T465] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 46.166558][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 46.166553][ T750] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.277498][ T959] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 46.277526][ T959] rust_binder: Error while translating object. [ 46.288414][ T959] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.294776][ T959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:159 [ 46.306533][ T465] usb 2-1: Using ep0 maxpacket: 16 [ 46.337672][ T465] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 46.348882][ T465] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 46.362780][ T465] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 46.379710][ T465] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.393213][ T465] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 46.401990][ T465] usb 2-1: SerialNumber: syz [ 46.417543][ T948] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 46.530113][ T963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.691076][ T465] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 46.708300][ T465] usb 2-1: USB disconnect, device number 7 [ 46.796230][ T972] proc: Unknown parameter 'tmpfs' [ 46.806898][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 46.816902][ T974] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.967664][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.986116][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.995908][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 47.005049][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 47.013220][ T10] usb 4-1: SerialNumber: syz [ 47.106603][ T326] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 47.222178][ T10] usb 4-1: 0:2 : does not exist [ 47.229861][ T10] usb 4-1: USB disconnect, device number 8 [ 47.266535][ T326] usb 1-1: Using ep0 maxpacket: 16 [ 47.273658][ T326] usb 1-1: config 3 has an invalid interface number: 146 but max is 2 [ 47.282370][ T326] usb 1-1: config 3 has an invalid interface number: 105 but max is 2 [ 47.290783][ T326] usb 1-1: config 3 has an invalid interface number: 174 but max is 2 [ 47.299396][ T326] usb 1-1: config 3 has no interface number 0 [ 47.305558][ T326] usb 1-1: config 3 has no interface number 1 [ 47.312388][ T326] usb 1-1: config 3 has no interface number 2 [ 47.318833][ T326] usb 1-1: config 3 interface 146 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 47.330019][ T326] usb 1-1: config 3 interface 146 altsetting 9 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 47.341320][ T326] usb 1-1: config 3 interface 146 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 47.352560][ T326] usb 1-1: config 3 interface 105 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 47.364136][ T326] usb 1-1: config 3 interface 174 altsetting 6 endpoint 0xC has an invalid bInterval 243, changing to 7 [ 47.375650][ T326] usb 1-1: config 3 interface 174 altsetting 6 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 47.386958][ T326] usb 1-1: config 3 interface 174 altsetting 6 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 47.399028][ T603] udevd[603]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.414870][ T326] usb 1-1: config 3 interface 174 altsetting 6 bulk endpoint 0x5 has invalid maxpacket 1024 [ 47.425356][ T326] usb 1-1: config 3 interface 174 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 47.442712][ T326] usb 1-1: config 3 interface 174 altsetting 6 endpoint 0xB has invalid maxpacket 511, setting to 64 [ 47.453796][ T326] usb 1-1: config 3 interface 174 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 47.464693][ T326] usb 1-1: config 3 interface 146 has no altsetting 0 [ 47.471595][ T326] usb 1-1: config 3 interface 105 has no altsetting 0 [ 47.478590][ T326] usb 1-1: config 3 interface 174 has no altsetting 0 [ 47.486972][ T326] usb 1-1: New USB device found, idVendor=05d1, idProduct=2003, bcdDevice=ea.14 [ 47.496241][ T326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.504500][ T326] usb 1-1: Product: syz [ 47.509037][ T326] usb 1-1: Manufacturer: syz [ 47.513731][ T326] usb 1-1: SerialNumber: syz [ 47.724688][ T990] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.750535][ T326] ftdi_sio 1-1:3.146: FTDI USB Serial Device converter detected [ 47.766408][ T326] ftdi_sio ttyUSB0: unknown device type: 0xea14 [ 47.775712][ T326] ftdi_sio 1-1:3.105: FTDI USB Serial Device converter detected [ 47.784175][ T326] ftdi_sio ttyUSB1: unknown device type: 0xea14 [ 47.794702][ T326] hub 1-1:3.174: Invalid hub with more than one config or interface [ 47.815040][ T326] hub 1-1:3.174: probe with driver hub failed with error -22 [ 47.836775][ T326] ftdi_sio 1-1:3.174: FTDI USB Serial Device converter detected [ 47.852927][ T326] ftdi_sio ttyUSB2: unknown device type: 0xea14 [ 47.886876][ T326] usb 1-1: USB disconnect, device number 4 [ 47.893423][ T326] ftdi_sio 1-1:3.146: device disconnected [ 47.902397][ T999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.902472][ T999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.917516][ T326] ftdi_sio 1-1:3.105: device disconnected [ 47.948368][ T326] ftdi_sio 1-1:3.174: device disconnected [ 48.270318][ T1017] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 48.444697][ T1023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:209 [ 48.747442][ T1028] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.764911][ T1028] rust_binder: Error while translating object. [ 48.771533][ T1028] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 48.777751][ T1028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:162 [ 48.787675][ T1029] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.929321][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 48.929340][ T36] audit: type=1400 audit(1750592400.620:304): avc: denied { listen } for pid=1039 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.066556][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 49.159083][ T1056] netlink: 'syz.2.227': attribute type 4 has an invalid length. [ 49.169648][ T1056] netlink: 'syz.2.227': attribute type 4 has an invalid length. [ 49.222980][ T36] audit: type=1400 audit(1750592400.910:305): avc: denied { ioctl } for pid=1057 comm="syz.1.228" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.223240][ T1058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.228'. [ 49.257735][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.268726][ T31] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 49.278037][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.287576][ T31] usb 1-1: config 0 descriptor?? [ 49.340054][ T1061] binder: Binderfs stats mode cannot be changed during a remount [ 49.367435][ T1063] binder: Unknown parameter 'cX+ ntDe' [ 49.396039][ T36] audit: type=1400 audit(1750592401.080:306): avc: denied { read write } for pid=1064 comm="syz.2.231" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 49.422142][ T36] audit: type=1400 audit(1750592401.080:307): avc: denied { open } for pid=1064 comm="syz.2.231" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 49.448015][ T1068] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:203 [ 49.467919][ T1071] syz.2.233 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.509746][ T1074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:209 [ 49.512060][ T1074] rust_binder: Read failure Err(EFAULT) in pid:209 [ 49.547637][ T36] audit: type=1400 audit(1750592401.240:308): avc: denied { ioctl } for pid=1075 comm="syz.3.235" path="socket:[10559]" dev="sockfs" ino=10559 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.632243][ T36] audit: type=1400 audit(1750592401.320:309): avc: denied { getopt } for pid=1077 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.652843][ T1078] rust_binder: Error while translating object. [ 49.652883][ T1078] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.666867][ T1078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:211 [ 49.711458][ T31] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 49.735553][ T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0003/input/input7 [ 49.806335][ T1090] overlayfs: disabling nfs_export due to verity=on [ 49.818014][ T31] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 49.830737][ T1090] overlayfs: missing 'lowerdir' [ 50.011102][ T36] audit: type=1400 audit(1750592401.700:310): avc: denied { read } for pid=1108 comm="syz.2.245" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 50.013378][ T1109] binder: Bad value for 'defcontext' [ 50.082199][ T1112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.088652][ T36] audit: type=1400 audit(1750592401.700:311): avc: denied { getopt } for pid=1108 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.106643][ T1112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.136579][ T36] audit: type=1400 audit(1750592401.770:312): avc: denied { ioctl } for pid=1110 comm="syz.3.246" path="socket:[10777]" dev="sockfs" ino=10777 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.190248][ T36] audit: type=1400 audit(1750592401.770:313): avc: denied { read } for pid=1110 comm="syz.3.246" dev="sockfs" ino=10777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.260529][ T1115] netlink: 277 bytes leftover after parsing attributes in process `syz.2.247'. [ 50.323399][ T31] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 50.466569][ T31] usb 4-1: device descriptor read/64, error -71 [ 50.497617][ T1126] rust_binder: Write failure EINVAL in pid:213 [ 50.507395][ T1058] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 Stopping sshd: stopped /usr/sbin/sshd (pid 202) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 147) [ 50.551418][ T1058] rust_binder: Write failure EINVAL in pid:213 [ 50.686541][ T326] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 50.702613][ T1140] binder: Binderfs stats mode cannot be changed during a remount Stopping network: [ 50.728189][ T31] usb 4-1: device descriptor read/64, error -71 [ 50.856520][ T326] usb 3-1: Using ep0 maxpacket: 32 [ 50.867270][ T326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.889250][ T326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.909395][ T326] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 50.922801][ T326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.948192][ T326] usb 3-1: config 0 descriptor?? OK [ 50.960935][ T326] hub 3-1:0.0: USB hub found Stopping iptables: [ 50.986625][ T31] usb 4-1: new full-speed USB device number 10 using dummy_hcd OK Stopping system message bus: done [ 51.085447][ T1176] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.106551][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 51.120704][ T31] usb 4-1: device descriptor read/64, error -71 [ 51.159197][ T326] hub 3-1:0.0: 10 ports detected [ 51.165759][ T326] hub 3-1:0.0: insufficient power available to use all downstream ports Stopping klogd: [ 51.276548][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 51.282986][ T45] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 OK [ 51.291467][ T45] usb 2-1: config 1 has no interface number 0 [ 51.297830][ T45] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 51.308109][ T45] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 51.318256][ T45] usb 2-1: config 1 interface 105 has no altsetting 0 Stopping acpid: [ 51.327480][ T45] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 51.336654][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.344727][ T45] usb 2-1: Product: syz [ 51.349162][ T45] usb 2-1: Manufacturer: syz [ 51.353868][ T45] usb 2-1: SerialNumber: syz [ 51.360354][ T1160] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 51.368300][ T31] usb 4-1: device descriptor read/64, error -71 [ 51.374634][ T1160] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 51.487221][ T31] usb usb4-port1: attempt power cycle [ 51.631317][ T1194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.662707][ T1194] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 51.678835][ T1194] rust_binder: Error in use_page_slow: ESRCH [ 51.678862][ T1194] rust_binder: use_range failure ESRCH [ 51.684970][ T1194] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 51.690629][ T1194] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 51.698742][ T1194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:190 [ 51.773993][ T1199] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.783311][ T1160] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 51.783389][ T1199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:195 [ 51.789923][ T1160] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 51.826542][ T31] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 51.848605][ T31] usb 4-1: device descriptor read/8, error -71 [ 51.902634][ T326] usb 3-1: USB disconnect, device number 9 [ 51.977559][ T31] usb 4-1: device descriptor read/8, error -71 [ 52.015025][ T45] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 52.026087][ T45] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 52.035669][ T45] usb 2-1: USB disconnect, device number 8 [ 52.216644][ T31] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 52.237601][ T31] usb 4-1: device descriptor read/8, error -71 [ 52.367598][ T31] usb 4-1: device descriptor read/8, error -71 OK Stopping syslogd: stopped /sbin/syslogd (pid 91) OK umount: can't remount debugfs re[ 52.476658][ T31] usb usb4-port1: unable to enumerate USB device ad-only [ 52.525670][ T1211] rust_binder: Error while translating object. [ 52.525700][ T1211] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } umount: can't remount sysfs read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.1.14 closed by remote host. [ 52.537642][ T1211] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:238 [ 52.633040][ T465] usb 1-1: USB disconnect, device number 5 [ 52.867817][ T12] bond_slave_1: left allmulticast mode [ 52.873416][ T12] bond_slave_1: left promiscuous mode [ 52.879046][ T12] bridge0: port 3(bond_slave_1) entered disabled state [ 52.886337][ T12] bridge_slave_1: left allmulticast mode [ 52.891994][ T12] bridge_slave_1: left promiscuous mode [ 52.897778][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.905378][ T12] bridge_slave_0: left allmulticast mode [ 52.911088][ T12] bridge_slave_0: left promiscuous mode [ 52.917052][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.019147][ T12] veth1_macvtap: left promiscuous mode [ 53.024667][ T12] veth0_vlan: left promiscuous mode [ 53.350449][ T12] bridge_slave_1: left allmulticast mode [ 53.356197][ T12] bridge_slave_1: left promiscuous mode [ 53.361878][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.369475][ T12] bridge_slave_0: left allmulticast mode [ 53.375118][ T12] bridge_slave_0: left promiscuous mode [ 53.380955][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.388804][ T12] bridge_slave_1: left allmulticast mode [ 53.394458][ T12] bridge_slave_1: left promiscuous mode [ 53.400193][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.407648][ T12] bridge_slave_0: left allmulticast mode [ 53.413283][ T12] bridge_slave_0: left promiscuous mode [ 53.418975][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.426680][ T12] bridge_slave_1: left allmulticast mode [ 53.432320][ T12] bridge_slave_1: left promiscuous mode [ 53.437918][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.445316][ T12] bridge_slave_0: left allmulticast mode [ 53.451050][ T12] bridge_slave_0: left promiscuous mode [ 53.456797][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.699597][ T12] tipc: Left network mode [ 53.704247][ T12] tipc: Disabling bearer [ 53.709654][ T12] tipc: Left network mode [ 53.715974][ T12] veth1_macvtap: left promiscuous mode [ 53.721522][ T12] veth0_vlan: left promiscuous mode [ 53.727146][ T12] veth1_macvtap: left promiscuous mode [ 53.732674][ T12] veth0_vlan: left promiscuous mode Sent SIGKILL to[ 53.738446][ T12] veth0_vlan: left promiscuous mode all processes Requesting system poweroff [ 54.750039][ T1217] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 54.756855][ T1217] ACPI: PM: Preparing to enter system sleep state S5 [ 54.763748][ T1217] kvm: exiting hardware virtualization [ 54.769270][ T1217] reboot: Power down serialport: VM disconnected.