last executing test programs: 2.168623559s ago: executing program 2 (id=357): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getrandom(0xffffffffffffffff, 0x0, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f00000002c0)) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=@newsa={0x2fc, 0x10, 0x400, 0x70bd25, 0x25dfdbfb, {{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0x80, 0x60, 0x2f, 0x0, r5}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d5, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, {0x5e9, 0xffff, 0x0, 0x1, 0xfffffffffffffff7, 0x3, 0x100000001, 0xfffffffffffffffb}, {0x7, 0x6, 0x5, 0x63}, {0x1, 0x5, 0xa9c}, 0x70bd2a, 0x8, 0x2, 0x4, 0x2e, 0x2}, [@sec_ctx={0x68, 0x8, {0x64, 0x8, 0x1, 0xff, 0x5c, "0747bfac18b73f47cd2fce28f06e69b924679926feaa27c0ea9afb0c84bc1f9627af2d1813a1d72a2a7e0cab94417b955474472fe78e3ac26862dfe35a813c9cf1a9f0a4e73bea0e5e3c489b492618428e6a1d1b73907890a275fdcd"}}, @address_filter={0x28, 0x1a, {@in=@broadcast, @in=@private=0xa010101, 0x2, 0x1, 0x3}}, @sec_ctx={0x51, 0x8, {0x4d, 0x8, 0x1, 0x81, 0x45, "588ccd6f6932f53477b2aa8519786a01f0480c89229ce19726e339a61e0e4bec3af3edd28b182ce493dcb31436789769514e578ab936a9da2debf5d06a1d1c5aa3921020d1"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x9}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e21, 0x4e24, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @algo_auth={0xe5, 0x1, {{'sha384\x00'}, 0x4e8, "e4764c3cc54098978fa28f2d64f2f0f88596a52d649bcbf688fa8989cde1c0937c08acb43d7146b6b305c0ac8664fd28d47313f5be39867f72ca24fc8c339ff379229f792c8247901ae03e95f75a3fd66866c199cdaec0914391aad61972f75f9d46d29050a527b000ad6a1e448f5e8fd62854846fa635d5a92c472a2dedd9181f2f93ae6cd94388b37e137bcb9499304e69352dc2d293d4f6274419bd"}}, @coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x60}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x48004}, 0x4004) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r7, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r8 = socket$tipc(0x1e, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) poll(&(0x7f0000000000)=[{r8, 0x5188}], 0x1, 0x6) ioctl$USBDEVFS_CLAIM_PORT(r6, 0x80045518, &(0x7f0000000040)=0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.10966559s ago: executing program 3 (id=358): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x7c, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x55) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x88, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_handle={0x77682a85, 0x110a, 0x2}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)={@ptr={0x70742a85, 0x528, &(0x7f0000000200)=""/108, 0x6c, 0x3, 0x37}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0xb0}}, 0x0}}], 0x0, 0x0, 0x0}) 2.046989401s ago: executing program 3 (id=359): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffdfe}, 0x1, 0x0, 0x0, 0x40050}, 0x448d5) (async) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x201020, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async, rerun: 32) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) 2.033603771s ago: executing program 3 (id=360): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000040)={0x4, r3}) (async) r4 = dup(0xffffffffffffffff) (async, rerun: 32) mkdir(0x0, 0x21) (rerun: 32) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x100, r3}) (async) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r4, 0x8010aebb, &(0x7f0000000080)={0xf000, 0x11e000}) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000000)={0x80a0000, 0x16000, 0x1}) 1.874512514s ago: executing program 3 (id=361): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) madvise(&(0x7f000046a000/0x3000)=nil, 0x3000, 0xd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1800004, 0x10012, r4, 0x0) read$FUSE(r4, &(0x7f0000000a40)={0x2020}, 0x2020) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) io_pgetevents(r5, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x25a5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000080)={0x10002, 0x0, &(0x7f00002fa000/0xd000)=nil}) close_range(r6, 0xffffffffffffffff, 0x0) 1.404979683s ago: executing program 2 (id=364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="070000000000000081000040"]) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r6}, 0x14) (async) sendto$packet(r4, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r6}, 0x14) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @empty, r6}, 0xc) (async) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @empty, r6}, 0xc) 1.373882304s ago: executing program 0 (id=365): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000deb1000040"]) syz_usb_connect(0x3, 0x40, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x59, 0x4d, 0x4c, 0x8, 0x4b4, 0x9321, 0xe0c2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x5d, 0x5, 0x0, 0x2, 0x2, 0xff, 0xf9, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xfffffffc, 0xd, 0x4, 0xf2}, [@mdlm_detail={0x5, 0x24, 0x13, 0x9, "c4"}]}]}}]}}]}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000240)="390000001300034700ab65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}, {0x0}], 0x2) r7 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f0000000440)=0xc) capset(&(0x7f00000004c0)={0x20071026, r8}, &(0x7f0000000500)={0x7, 0x0, 0x7fffffff, 0x4, 0x7ff, 0x4}) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000140)=0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x13, 0x1, 0x0, 0x25dfdbff, {0x7}}, 0x14}}, 0x20000000) sendto$inet6(r7, 0x0, 0x0, 0x240800c5, &(0x7f0000000280)={0xa, 0x4e22, 0x79, @rand_addr=' \x01\x00', 0x7}, 0x1c) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(r4, &(0x7f0000000180)='memory.numa_stat\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x7840, 0x4f, 0x6, 0x7f, {{0xe, 0x4, 0x1, 0x0, 0x38, 0x64, 0x0, 0x1e, 0x29, 0x0, @multicast1, @loopback, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x92, 0x0, 0x8, [0x1, 0x5, 0x10, 0xe]}, @lsrr={0x83, 0xb, 0x71, [@local, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=@newae={0x340, 0x1e, 0x1, 0x70bd25, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x2, 0x6c}, @in=@loopback, 0x3ff}, [@XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}, @algo_auth_trunc={0xd9, 0x14, {{'sha256-neon\x00'}, 0x468, 0xa0, "c026bcada53bb96de18e1d8f8699aaa9e2d9a44cdd21384969c2ef9d3010179af962fe3333f65492c5e90be93126bdc8d925bd3b1742eb73726499c8fc7b8fa32ff38c47182ba95dab017e31b2db5cdc6493f07f00232e0166d59e1ed86b4efad4ec490f3b853f0604f19b11a507cc652be64beefbc6b2b57cd778fd5c5f56d95af0f564abbdaf28ceec538ef7"}}, @algo_crypt={0xa1, 0x2, {{'ecb(twofish-asm)\x00'}, 0x2c8, "99d047178c810bbcbca0fe4eef3fc04a1acadd4fefbe26e152a6d7d0ed1e11f8572881516cc43a3be1660dc2674add5e5099fd731f13e2db687d4893e9018280dcb68c2cbe8dc1350f3c2ba1e76a0d8aa10ca2c6e7d4186beb"}}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd25, 0x70bd25, 0x70bd2d, 0x70bd29, 0x2, [0x1, 0x82, 0x7fffffff]}}, @offload={0xc, 0x1c, {r11, 0x1}}, @address_filter={0x28, 0x1a, {@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x10, 0x6}}, @algo_auth_trunc={0xd3, 0x14, {{'sha3-256-ce\x00'}, 0x438, 0x180, "5b3aa7253a251ea3bb5e525dc8bfbdc7e83cbf43d2b9d273f215f228182f5d8943557c142fb70fe782ca7bd99a0dd6eb23e65f609c33c9bb4e489c0aac868967b2ad3ae984b9f683670da461d52418225001b6ee18f794d3fb156027cac7197e36d44685b88d1381e47226edd08d57738ad5d7c0037c1296a7966704ca2f31e2f7e2b58160d175"}}, @tfcpad={0x8, 0x16, 0x4}, @sec_ctx={0x40, 0x8, {0x3c, 0x8, 0x0, 0x4, 0x34, "ece892b707e574b96f073252252efd05c5a48c4e444cf846564567dc5d726cab0be844e413c7f2e389329c7be0be6e753e7a6de4"}}]}, 0x340}}, 0xc0) setsockopt$inet6_udp_int(r7, 0x11, 0x1, &(0x7f0000000080), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.257098536s ago: executing program 2 (id=366): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000580)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000005c0)={0x4e00, 0x85, 0x730, 0xbdff, 0x15, "feeeff000000001b"}) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000001a00)={[0xaea, 0x4, 0x400, 0xff, 0x7, 0x9, 0x6, 0x7fff, 0x6, 0x80, 0x8, 0xc72, 0x6, 0x0, 0x4], 0x80a0000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000440)={{0x0, 0x0, 0x80, {0x0, 0x5000, 0x2}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r6 = syz_open_pts(r2, 0x8182) r7 = dup3(r6, r2, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x17) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000006c0)={'\x00', 0x1, 0x6709, 0x8, 0x0, 0x0, 0xffffffffffffffff}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000740)=0xe) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001900)) r8 = syz_clone(0x10103900, 0x0, 0xfffffffffffffe1a, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r8, 0x2, &(0x7f0000000080)={0x0}) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r9, &(0x7f0000000f40)=""/243, 0xf3) 1.232693916s ago: executing program 1 (id=368): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000000)={0x3, 0x10000}) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe28, 0x4, @mcast2, 0x7}, 0x1c) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="d40d208e87b8a1ac46822921e269f1ad5b658f7a43eeaf3bfb06c83348fd2f36dca76beda2a1ead5aae016e13df084c64a30865e502ddd955f"]) pread64(r1, &(0x7f0000019080)=""/102352, 0x18fd0, 0x3) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000140)={0x8, 0x80000000, 0x8, 0x7, 0xffffffff, 0x1}) inotify_init1(0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0x4, 0x300, 0x1dafa}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x2, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0xc, 0x4010, r9, 0xa3711000) 1.04218826s ago: executing program 1 (id=369): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r0, 0x5147f000) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) 985.194261ms ago: executing program 3 (id=370): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) fsopen(0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = dup(r1) r3 = socket$inet6(0xa, 0x4, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x503380, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r4, r4) r5 = fsopen(&(0x7f00000002c0)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000602, r4, &(0x7f0000000140)={0x7ff, 0x3, 0x0, 0x4}) getsockname$inet6(r2, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000000)=0x4, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = gettid() ptrace(0x10, r8) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)={0x14, 0x1d, 0x400, 0xfffffffd, 0x25dfdc01, "", [@typed={0x4, 0x1}]}, 0x14}], 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000001c0)={'tunl0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xef, 0xbd, 0xcb, 0x40, 0x1a0a, 0x108, 0x617, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x58, 0x0, 0x0, 0xe5, 0xa6, 0x9d}}]}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 984.874491ms ago: executing program 1 (id=371): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) epoll_create1(0x0) setresuid(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x9c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xfffffffffffffff7, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0x1, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}, @dead_binder_done], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) epoll_create1(0x0) (async) setresuid(0x0, 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (async) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) (async) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) (async) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) getpid() (async) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x9c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xfffffffffffffff7, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0x1, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}, @dead_binder_done], 0x0, 0x0, 0x0}) (async) 895.705093ms ago: executing program 1 (id=372): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x2, 0x34d, 0x7, "ea71061d0000000001000200", 0x0, 0x80}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xf, r3, 0x4, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x1, &(0x7f00000000c0)={0x0}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r4, &(0x7f0000000940)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r1}}) 813.932675ms ago: executing program 0 (id=373): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) (async) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) lsm_get_self_attr(0x66, &(0x7f0000000000)={0x0, 0x0, 0xa7, 0x87, ""/135}, &(0x7f0000000100)=0xa7, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) close_range(r0, 0xffffffffffffffff, 0x0) 441.093312ms ago: executing program 3 (id=374): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000a00011000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000bb000000002b000000fe8000000000000000000000000000aa00000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200d0"], 0x104}}, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={[{@redirect_dir_off}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open$dir(&(0x7f0000000100)='./file0\x00', 0x15b800, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x82400, 0x85) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x62, "9f9b1b1063013bebdfd426e96af5016bafbb1502c87a3bfbb0bc6e96f868471ce101a3d57571e6ce7eb4358cbdc4b11ad75483bc5672228440c3326758d70b1f932a047451072c1e97666b3be57459e87a71dbf3afa44ffc86ec05958e49b163f1cc"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x4}}) syz_usb_connect$uac1(0x5, 0xba, &(0x7f0000000c00)=ANY=[], 0x0) syz_usb_ep_write(r2, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x26}, @flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @fda={0x66646185, 0x2, 0x2, 0x6}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, &(0x7f0000001fc0)=[{0xfffffffffffffffc}], 0x1, 0x9, 0x0, 0x2, 0x0, 0x2}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000000)={0xcca, 0x4001, 0x1000, 0x6, 0x17}) 403.744902ms ago: executing program 2 (id=375): r0 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x1) (async) fcntl$getflags(r0, 0x401) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) (async) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r3 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, &(0x7f00000000c0)) open_tree(r3, &(0x7f0000000000)='./file0\x00', 0x1) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) r5 = dup2(r1, r4) close_range(r5, r1, 0x0) 390.185712ms ago: executing program 2 (id=376): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000080)=0x1) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="d206090d0ff30000000000000000"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 32) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) (async, rerun: 32) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000080)={0x1, 0x200, 0x10ac, 0x4, 0x7, 0x82, 0x4, 0x5, 0x1, 0x6, 0x7, 0x3ff, 0x1, 0x54}) (async, rerun: 64) futex(&(0x7f0000000140), 0xb, 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) (async) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x100000000) (async) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) close_range(r0, 0xffffffffffffffff, 0x0) 337.176733ms ago: executing program 2 (id=377): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x100801f9, 0x1, 0xb94}) write$vga_arbiter(r1, 0x0, 0xf) write$vga_arbiter(r1, &(0x7f0000000080)=@other={'decodes', ' ', 'io+mem'}, 0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r0, 0x8ee46000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="c0000000"], 0xc0}}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) 101.659288ms ago: executing program 0 (id=378): r0 = socket(0x1e, 0x1, 0x0) recvfrom$packet(r0, &(0x7f0000000280)=""/130, 0x82, 0x2002, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) 90.965808ms ago: executing program 0 (id=379): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$snapshot(r1, &(0x7f0000000040)="de2962477ab6363a0a6a05ff87691feeb618109e2a88fcf5c36711c167dd03a674afffca5404d176ea21aa6623d252ba4e91b8766e6a85e76d07949704618b2fdef3b4e2e2e9bd31331bd71d6b5c73efb648b2e58bb1c022cef3dcf6c9d65d65a4efa17b4cf8c693eea00172e307f85eabd95aa052885fd9aad09d131a65ca365dd64083415118581bda1faf4ab750033bc6fb2cac3d8d97ff981a121820102d0d941fd4bac918adc5ebe66747e27d521d4806b52b4bc32b9ee28db01478dde26ddb5f0c8549cda6908507cd21cfeedeb5", 0xd1) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$KVM_RUN(r1, 0xae80, 0x0) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000013c0)={0x10000, 0x6, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000001400)) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000001440)={{0x1, 0x0, 0x80, {0xd000, 0x8000000, 0x1}}, "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", "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"}) ioctl$LOOP_CLR_FD(r1, 0x4c01) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000034c0), 0x2, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x1d) setsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f0000003500)="3d4e11d02cc9ef9c47474aa2ae829186ea4885c3a7caabb02ab5c31f35331e8c215198d33379702229d431055ee1825da1ef7c0056931843acad0774553d61158513235a2e3a7ee803115afb72c3390b7839c0553e108e722563c3dacc8c4b10f29e8f1dd289f5034fe9e9d9366dfa738bf9a8961f0ad96aa555e660803326a8376956c90f2628c1e7f6", 0x8a) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000003640)=[@text32={0x20, &(0x7f00000035c0)="6690f3a70f1c2af30f09b805000000b9008000000f01d9b8000000000f23c80f21f835040010000f23f8c4c125f94b4cf20f5f1500000000b95e0300000f320f01cf", 0x42}], 0x1, 0x5e, &(0x7f0000003680), 0x0) symlink(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)='./file0\x00') ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000003740)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000003780)={0x6, 0x0, [{0x1, 0x5, 0x2, 0x0, @sint={0x0, 0xb3}}, {0x5, 0x4, 0x0, 0x0, @irqchip={0x70e3a351, 0xfffff12a}}, {0xe, 0x3, 0x1, 0x0, @sint={0x3}}, {0x6, 0x3, 0x0, 0x0, @sint={0x30, 0x7}}, {0x9db, 0x4, 0x0, 0x0, @msi={0x34, 0x800, 0x4, 0x3ff}}, {0x80000001, 0x4, 0x1, 0x0, @msi={0x5, 0x4f, 0xe, 0x8}}]}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x540a, 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f00000038c0)={0x1, 0x2, @status={[0x7ff, 0x3, 0xecc, 0x7, 0x100000000, 0x101]}, [0xfffffffffffffff9, 0x0, 0xffff, 0x0, 0x6, 0x0, 0xfffffffffffffc88, 0x1, 0xbdd, 0x4, 0x1, 0x4, 0x401, 0x2, 0x100, 0x9, 0x5, 0x7, 0x8, 0xea, 0x6, 0x7ff, 0x9, 0x9e8e, 0x9, 0x9, 0x8, 0x51, 0x0, 0x8, 0xf96, 0x2, 0x5, 0x10000, 0xf76, 0x8, 0x5, 0xffffffffffff40be, 0x2, 0x2, 0x2, 0x8000000000000001, 0x4, 0x5, 0x8, 0x4, 0x2, 0xd, 0x7fff, 0x1000, 0x40, 0x79, 0x2, 0x8001, 0x0, 0x6, 0x7fffffff, 0x0, 0x1, 0x2, 0x7f, 0x4ff, 0xa, 0x4]}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x15) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000004300)={0x80a0000, 0x5000}) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000004380)={0x3, &(0x7f0000004340)=[{0x1169, 0x44, 0xa8, 0x5}, {0xfffe, 0x0, 0x10, 0x9fb}, {0x2, 0x2, 0x40, 0x1}]}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000043c0)='/dev/uinput\x00', 0x0, r3) ioctl$LOOP_CLR_FD(r1, 0x4c01) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000004400), 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r5, 0x3309) openat(0xffffffffffffffff, &(0x7f0000004440)='./file0\x00', 0x428e03, 0x148) 1.47001ms ago: executing program 1 (id=380): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x109000, 0x2d) r1 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) fchown(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe74e) close_range(r0, 0xffffffffffffffff, 0x0) 894.41µs ago: executing program 0 (id=381): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187013, &(0x7f0000000040)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000f80)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000200)="63624fe300835ea30a38f74d1a184d088472f6f41bb5970efbaa19b3a8e5674ff8a12f6f44b94f60f5642b9b3be33a7c5219e443d4de8da9eb30953e9fec4a6ad74ab72b95516132d48fb58e7324509753d65282a3d01836a0aa1e5915634e3fc91e3e544ce0d6b6f2dd99c3458aed721bb83e001aa07a4b87fed871c31fb4a94a248983cfed53c9bc3e506b372229a930cbefe934dc9a99e662e1e7e9ba996dd7158835679016b25d1cdc6babccc74a7cac44245c8d85ddc9eb85e3a0d5cabe0ca8ed2967", 0xc5}, {&(0x7f0000000300)="5348804eb7cbc8117bc97e1385183b6643e9f930feebe9581992a2766f7bd6fc34939b479e90b7a3d65f1a84224a5b79a2212f3c5c892093ecf72b1bb14190841da3ea0f57fbb0ef2a8362e4a59549ce4599c32d19cf9ac27386b1e83dda71cc322e5f0362714ec7cec70f50bb9f2f6703bac0b79d4ca7d8ecc9a7146ffd0c137fb4b6d17e12f01e2ec836a9fc4de83470e915854e63e90817dfc0f4458423", 0x9f}, {&(0x7f0000000140)="7501431ccdc0f0b9e13da89d8820b90287f50f59f0900faa37d758afb73017f729d89aa1d788270097d516575bead187c05b817c184708b037bd6ea49e8882e30ac40e827e0b37adbb93a934f42b2c91f970e480f953c7c1fa6b84ae75ca1c81f0664b353d6623179ce250a3f0f392", 0x6f}, {&(0x7f00000004c0)="e0bc6b57d627002f9dc0f1698c13d5c28f32579522336653f7a1fe238617e095644b598406aa172e78de7d4a700a08f1516a0a9c46102120762b4edf4c61686b5f36bdd727af8f1990d97c2852f6159811ec67c2f8b2f8a87182b981f86eb6ad149b91bccdf7de3a52c0ad300653dc931e4d2d12e40a2d1ab178555131c91099dc29d854807eac372c5af1f26d6837309d9c6b6e7b0dd4dca9dd931eb8ba231de6aa6bc6621f2825f6f7fd7d84e59ec2d949d542a9f4ed0cb6e558a261ad35c9c4e40baed3df2b2c26778a2f798715337f", 0xd1}], 0x4, &(0x7f00000005c0)=[@dstopts={{0x160, 0x29, 0x37, {0x16, 0x28, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x20, {0x0, 0x6, 0x2, 0x1, [0x21e, 0xd65, 0x800]}}, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x80}, @calipso={0x7, 0x40, {0x3, 0xe, 0x3, 0x6, [0x3, 0x3, 0x9, 0x6, 0xfffffffffffffffd, 0x5, 0x7]}}, @generic={0xc, 0xca, "a128ccaf2037284838a0a5c21431cb3fc0124c261384fb4580559b296724477fee1593b5543ecb3f681ce77b0084ad3a5051368f391c3ee01a0a0f25de5b42fd72f41cd967958c1802d7e26251cc7529368c319651ff375edff42cf612b61aa9c54d17be868f3572398d7170e3c5265e0138459c3c0e8021c20b51085d09c3f9d757177eb4dbb5033a760a88277a0eacfb198f0c649769da2b4bde4f785fb2937baea8a3813bf51eb2000ab3a9a5fca0a5e98fbc6498eb6201bf42dd19c4c42f12f3f2cd8d545d880688"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0x178}}, {{&(0x7f00000003c0)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000740)="d7dc663d1202d83980ed39d3670c5b7e5c962bb7532230c7d8c8265c38de05814c2ee1168a2c563f5c72619e8fdda2801e60a1d5", 0x34}, {&(0x7f0000000780)="35cbd3e70eb646db9068b3bbee2008236b0506f5281a9f974f45133316f3df02f8ab", 0x22}], 0x2, &(0x7f0000000800)=[@hopopts_2292={{0xf8, 0x29, 0x36, {0x29, 0x1b, '\x00', [@generic={0x2, 0xd3, "5d87389e52643fb167fbf22a499e7b2da1c9a73e67fa5792ecd56794709ca23403c5d32220f23f316bacc2a47356655415d8ba893c9306cc396bb9d65f142aa167b15addb30a83b82341b5826c011a6350bfa90003d855391fbbf955f2d14b36d2c6892ca6bb80d22930aaa1a279258a875295ad6e2e0cf5ad4f93ff1d6790bf29bb9272600b5ce5b44fa9294e5a08c54926bd8e00786fca7e351105b4e9f27ef8f65a6703425e4cde6eb192edbf41464279ce3afe7089625741c4521c2d90cdbbd9e238bd8d0df9ca4de62d9902713fadd292"}, @pad1, @jumbo={0xc2, 0x4, 0x4}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @ra={0x5, 0x2, 0x8}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x6c, 0x0, '\x00', [@pad1]}}}], 0x148}}, {{&(0x7f0000000980)={0xa, 0x4e22, 0x6, @private1, 0x10001}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f00000009c0)="7ebf61e68b04e5747c2cbe6a09b0c854b44ea384e750f3bb54f9af135eb236ea57039e61890f27ad6c3170dfc4a79be44ef5f969569d16f217c7fbd4d109467acf47e7f6b5e1651a740d2baca28d4bfaa2bfe15fe3cc822f317214ffb81f63f55955bf9ee049f2420cf6d0ffa3b26a26c46016cf31395dfd0b5856f8f4bea83ddd9748", 0x83}, {&(0x7f0000000a80)="666edccab8d5497497d2aebe27682cc34e1af795c49930989a227a314f85b64369008713ad3392a8d102a611ba9dff30cc3f710588812f21829b492d40c1c4162f7c7b1111bcd736647d6bbf9feab38afe67f0b18b560db5d86bd7e78613bee7a3512f8bac67dc6de53af18de6c49103ab4835c903b8741254fc81e1f47e196d0271", 0x82}, {&(0x7f0000000b40)="2631beabb4135b61e205eba6bad3514ff436dc98d60afb2934ec9b0ce2db5d1d1a1864a75f04f79beea79c433da04c33688a1f01c3c5f21cd59080c9468e22711d1da567ceb36d9a4b356748610d9f56c927d02e15a2e027dcb775b95897c6e2b0a1ec2229c87b76b2dd12b49f05b1692665f8c743e14d9da9d5fd72c8b6e2b76b2396265a98bb4b52f952a5a7245e36baf0adc5577baec1ffbe65e30a134c8896e5676b60aba6d80b06886c9aaa29b627581c3023985480e8a9f5dd1cd27122ef12ee4b3e2dbc8d4c1daaca7f25a45f6cc49d808a3bfabf175a7e083479f66675488caecec53eebc9720bc5", 0xec}, {&(0x7f0000000c40)="796ba823b05e092b8c574ef35bed0c87e6314842ce2edfba9e828b123750581b7aef98716c7d47ac9f9f85e95c7d9b6a8149f56faa3e62e9e23570ffb895b509b99cc680ee29ea4a2c086e387eea0f91e77d962b6803b3c1bf5bf6ebe47edd76f7bd663429e58d155425501bdbc58ecc0a5f7af024e36345640e2caa300e5146da4062d8d77a2c67ddffc104bf21d075902dcd01dc1638dbb7f347ebf08a8fb2b689746911f5a17fb100335f6d1ab44f0bd9483ba767175d0ea4cc4195157c284c40", 0xc2}, {&(0x7f0000000d40)="c4b66b44b954f8cb79907a295ad9c243f484ae23b12207f2e974296917aeba2c29d5753228cf8418a649de7aa8e05c6f2e496262ebdba898ffc93e90960de3ae280015c4a20cdc0b4d25aff50c137a255770c3c98b871b32cdf29408", 0x5c}, {&(0x7f0000000dc0)="dd175c207b6398bb8eb3616ad75226fceed73ce796522984514d2f27c08effcddb8225e8fda01c1351e7216170960aabbbdfb7d00fbd0b1a81b4b412495b8feb28e9e5a83fd8c9f95dd25fca9d297b12e93c40eef75a10f6d5af17ddc0403c12c72fdf8d7951aa388c0b6b6f60f3a50a37db71c755849c0542606d04de1b4dcfc4a10854b1487410327fad01cfd42fdb38c5633bcbe7687cc07aba0b1932a9775149473e39c61985992cdb5ed8ee2dd87125402c1d21cb0998d02bfaa08e52a10525422158f9af95d0a9", 0xca}], 0x6, &(0x7f0000000f40)=[@dstopts_2292={{0x40, 0x29, 0x4, {0x40, 0x4, '\x00', [@ra={0x5, 0x2, 0x3}, @pad1, @pad1, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x8}]}}}], 0x40}}], 0x3, 0x4004000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer], 0x3e, 0x0, 0x0}) 466.39µs ago: executing program 1 (id=382): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x1002, 0x0) (async) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) fchdir(r2) (async) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000000)={@empty, @broadcast, 0xffffffffffffffff, "aeb0fe669509b0b428568513c742b76daca8ca8d90bd3ef4ae00cd464e869e4c", 0x9, 0x9, 0x800, 0x1}, 0x3c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=383): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x10, r0, 0x44da2000) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x80) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x200, 0x80) futex(&(0x7f000000cffc)=0x1, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001580)=ANY=[@ANYBLOB="020b0107080000002abd7000fcdbdf25050019000000000002004e21ac1e0001000000000000000002005b24ac1e000100000000000000000100090000000000"], 0x40}}, 0x24000004) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$key(0xf, 0x3, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.225' (ED25519) to the list of known hosts. [ 25.146562][ T36] audit: type=1400 audit(1757124451.370:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.148008][ T281] cgroup: Unknown subsys name 'net' [ 25.169249][ T36] audit: type=1400 audit(1757124451.370:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.196588][ T36] audit: type=1400 audit(1757124451.400:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.196825][ T281] cgroup: Unknown subsys name 'devices' [ 25.345966][ T281] cgroup: Unknown subsys name 'hugetlb' [ 25.351638][ T281] cgroup: Unknown subsys name 'rlimit' [ 25.508839][ T36] audit: type=1400 audit(1757124451.730:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.532061][ T36] audit: type=1400 audit(1757124451.730:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.556856][ T36] audit: type=1400 audit(1757124451.730:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.569202][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.588762][ T36] audit: type=1400 audit(1757124451.810:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.614306][ T36] audit: type=1400 audit(1757124451.810:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.675019][ T36] audit: type=1400 audit(1757124451.900:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.675637][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.700648][ T36] audit: type=1400 audit(1757124451.900:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.932561][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.939795][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.946979][ T288] bridge_slave_0: entered allmulticast mode [ 26.953285][ T288] bridge_slave_0: entered promiscuous mode [ 26.961076][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.968178][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.975287][ T288] bridge_slave_1: entered allmulticast mode [ 26.981663][ T288] bridge_slave_1: entered promiscuous mode [ 27.009013][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.016199][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.023269][ T289] bridge_slave_0: entered allmulticast mode [ 27.029728][ T289] bridge_slave_0: entered promiscuous mode [ 27.038703][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.045867][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.052967][ T289] bridge_slave_1: entered allmulticast mode [ 27.059394][ T289] bridge_slave_1: entered promiscuous mode [ 27.095836][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.102911][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.110085][ T291] bridge_slave_0: entered allmulticast mode [ 27.116569][ T291] bridge_slave_0: entered promiscuous mode [ 27.130581][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.137788][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.144917][ T291] bridge_slave_1: entered allmulticast mode [ 27.151184][ T291] bridge_slave_1: entered promiscuous mode [ 27.183497][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.190625][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.197749][ T290] bridge_slave_0: entered allmulticast mode [ 27.204081][ T290] bridge_slave_0: entered promiscuous mode [ 27.210955][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.218060][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.225171][ T290] bridge_slave_1: entered allmulticast mode [ 27.231491][ T290] bridge_slave_1: entered promiscuous mode [ 27.381517][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.388624][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.396094][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.403148][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.438477][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.445581][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.452873][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.459948][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.470517][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.477629][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.484955][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.491998][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.500819][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.508452][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.515825][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.523064][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.530855][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.538086][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.557429][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.564551][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.572218][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.579293][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.626439][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.633505][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.659149][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.666283][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.674207][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.681370][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.690428][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.697493][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.717588][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.724683][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.732343][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.739421][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.762269][ T288] veth0_vlan: entered promiscuous mode [ 27.783440][ T291] veth0_vlan: entered promiscuous mode [ 27.802705][ T289] veth0_vlan: entered promiscuous mode [ 27.815353][ T291] veth1_macvtap: entered promiscuous mode [ 27.831384][ T290] veth0_vlan: entered promiscuous mode [ 27.843507][ T288] veth1_macvtap: entered promiscuous mode [ 27.852905][ T289] veth1_macvtap: entered promiscuous mode [ 27.890319][ T290] veth1_macvtap: entered promiscuous mode [ 27.909696][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.964661][ T332] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.976733][ T336] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 28.008161][ T336] rust_binder: Write failure EINVAL in pid:2 [ 28.011590][ T336] rust_binder: 2: no such ref 2 [ 28.028049][ T336] rust_binder: 2: no such ref 0 [ 28.033074][ T336] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 28.453614][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.533602][ T61] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 28.603620][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 28.609943][ T31] usb 4-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 28.620379][ T31] usb 4-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 28.629639][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.639227][ T31] usb 4-1: config 0 descriptor?? [ 28.684863][ T61] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 28.693673][ T61] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.704862][ T61] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.715334][ T61] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.724595][ T61] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.732614][ T61] usb 2-1: Product: syz [ 28.737095][ T61] usb 2-1: Manufacturer: syz [ 28.741705][ T61] usb 2-1: SerialNumber: syz [ 28.851204][ T352] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 28.861048][ T374] usb 4-1: USB disconnect, device number 2 [ 29.103736][ T330] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.148940][ T61] usb 2-1: 0:2 : does not exist [ 29.253818][ T330] usb 1-1: Using ep0 maxpacket: 8 [ 29.260139][ T330] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 29.268575][ T330] usb 1-1: config 179 has no interface number 0 [ 29.275191][ T330] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 29.286515][ T330] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 29.297796][ T330] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 29.309013][ T330] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 29.320541][ T330] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 29.334035][ T330] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 29.343102][ T330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.352864][ T368] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 29.403623][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.533596][ T31] usb 3-1: device descriptor read/64, error -71 [ 29.556854][ T61] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 29.571095][ T368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.580172][ T368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.590538][ T61] usb 2-1: USB disconnect, device number 2 [ 29.603224][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.744041][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.783626][ T31] usb 3-1: device descriptor read/64, error -71 [ 29.795160][ T368] netlink: 'syz.0.11': attribute type 29 has an invalid length. [ 29.893622][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 29.900454][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 29.909092][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 29.918022][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.928451][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.940071][ T9] usb 4-1: string descriptor 0 read error: -22 [ 29.946433][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 29.955693][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.968448][ T9] usb 4-1: 0:2 : does not exist [ 30.033583][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.159981][ T36] kauditd_printk_skb: 74 callbacks suppressed [ 30.160036][ T36] audit: type=1400 audit(1757124456.380:148): avc: denied { setattr } for pid=399 comm="syz.1.20" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.187944][ T31] usb 3-1: device descriptor read/64, error -71 [ 30.195021][ T36] audit: type=1400 audit(1757124456.380:149): avc: denied { write } for pid=399 comm="syz.1.20" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.215889][ T36] audit: type=1400 audit(1757124456.380:150): avc: denied { open } for pid=399 comm="syz.1.20" path="/4/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.238450][ T36] audit: type=1400 audit(1757124456.420:151): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 30.293223][ T36] audit: type=1400 audit(1757124456.510:152): avc: denied { unlink } for pid=403 comm="syz.1.21" name="#1" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 30.315849][ T36] audit: type=1400 audit(1757124456.510:153): avc: denied { mount } for pid=403 comm="syz.1.21" name="/" dev="overlay" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.347053][ T36] audit: type=1400 audit(1757124456.520:154): avc: denied { read } for pid=403 comm="syz.1.21" dev="nsfs" ino=4026532397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.368324][ T36] audit: type=1400 audit(1757124456.520:155): avc: denied { open } for pid=403 comm="syz.1.21" path="net:[4026532397]" dev="nsfs" ino=4026532397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.463872][ T31] usb 3-1: device descriptor read/64, error -71 [ 30.471297][ T409] rust_binder: 408 RLIMIT_NICE not set [ 30.471728][ T408] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 30.484722][ T408] rust_binder: Write failure EINVAL in pid:19 [ 30.564277][ T330] rust_binder: 407: removing orphan mapping 0:4248 [ 30.579297][ T31] usb usb3-port1: attempt power cycle [ 30.626693][ T411] tipc: Started in network mode [ 30.631649][ T411] tipc: Node identity 1a1738ad1992, cluster identity 4711 [ 30.639006][ T411] tipc: Enabled bearer , priority 0 [ 30.653929][ T410] tipc: Resetting bearer [ 30.677452][ T410] tipc: Disabling bearer [ 30.803654][ T413] ======================================================= [ 30.803654][ T413] WARNING: The mand mount option has been deprecated and [ 30.803654][ T413] and is ignored by this kernel. Remove the mand [ 30.803654][ T413] option from the mount to silence this warning. [ 30.803654][ T413] ======================================================= [ 30.904311][ T418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:29 [ 30.936246][ T420] kvm: emulating exchange as write [ 30.951161][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.960917][ T36] audit: type=1400 audit(1757124457.180:156): avc: denied { name_bind } for pid=419 comm="syz.1.27" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 30.994670][ T31] usb 3-1: device descriptor read/8, error -71 [ 31.134180][ T31] usb 3-1: device descriptor read/8, error -71 [ 31.216033][ T36] audit: type=1400 audit(1757124457.440:157): avc: denied { execute } for pid=423 comm="syz.1.28" path="/12/cpuacct.usage_sys" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 31.383644][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 31.414651][ T31] usb 3-1: device descriptor read/8, error -71 [ 31.564622][ T31] usb 3-1: device descriptor read/8, error -71 [ 31.639092][ T427] fuse: Bad value for 'group_id' [ 31.644156][ T427] fuse: Bad value for 'group_id' [ 31.694248][ T31] usb usb3-port1: unable to enumerate USB device [ 31.851669][ T9] usb 1-1: USB disconnect, device number 2 [ 31.851729][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 31.866120][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 32.055302][ T432] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.206068][ T443] 9p: Unknown access argument : -22 [ 32.367777][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.518988][ T396] usb 4-1: USB disconnect, device number 3 [ 32.533576][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 32.548638][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.560780][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.593049][ T31] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 32.612348][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.629225][ T31] usb 1-1: config 0 descriptor?? [ 32.890594][ T450] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 32.895961][ T449] rust_binder: Error while translating object. [ 32.905440][ T449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 32.921187][ T449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:36 [ 33.040786][ T31] saitek 0003:06A3:0621.0001: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.0-1/input0 [ 33.213610][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 33.242348][ T396] usb 1-1: USB disconnect, device number 3 [ 33.364662][ T45] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 33.373869][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.382558][ T45] usb 3-1: config 0 descriptor?? [ 33.789671][ T449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.798395][ T449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.954483][ T491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 33.954521][ T491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:57 [ 34.363600][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.416108][ T45] usb 3-1: Cannot set autoneg [ 34.421381][ T45] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 34.433870][ T45] usb 3-1: USB disconnect, device number 6 [ 34.524752][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.534749][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 34.543868][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.552576][ T10] usb 1-1: config 0 descriptor?? [ 34.765454][ T10] logitech-djreceiver 0003:046D:C71F.0002: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.0-1/input0 [ 34.944282][ T522] binder: Bad value for 'stats' [ 34.959299][ T501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.984730][ T501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.000217][ T502] usb usb8: usbfs: process 502 (syz.0.53) did not claim interface 0 before use [ 35.010790][ T526] rust_binder: Error while translating object. [ 35.010854][ T526] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.018973][ T530] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 35.029709][ T501] fuse: blksize only supported for fuseblk [ 35.041106][ T526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38 [ 35.043465][ T530] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.057615][ T10] usb 1-1: USB disconnect, device number 4 [ 35.077005][ T532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.094243][ T533] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.094387][ T533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:41 [ 35.101158][ T533] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 35.110585][ T533] rust_binder: Read failure Err(EFAULT) in pid:41 [ 35.164876][ T36] kauditd_printk_skb: 51 callbacks suppressed [ 35.164897][ T36] audit: type=1400 audit(1757124461.390:209): avc: denied { create } for pid=534 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.199197][ T36] audit: type=1400 audit(1757124461.390:210): avc: denied { connect } for pid=534 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.212259][ T544] netlink: 'syz.2.68': attribute type 4 has an invalid length. [ 35.224213][ T36] audit: type=1400 audit(1757124461.390:211): avc: denied { shutdown } for pid=534 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.246707][ T36] audit: type=1400 audit(1757124461.390:212): avc: denied { execute } for pid=534 comm="syz.3.65" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 35.271568][ T36] audit: type=1400 audit(1757124461.390:213): avc: denied { ioctl } for pid=536 comm="syz.2.64" path="socket:[5308]" dev="sockfs" ino=5308 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.341244][ T36] audit: type=1400 audit(1757124461.560:214): avc: denied { create } for pid=555 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 35.423634][ T396] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 35.435514][ T36] audit: type=1400 audit(1757124461.660:215): avc: denied { read write } for pid=559 comm="syz.2.74" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 35.459887][ T36] audit: type=1400 audit(1757124461.660:216): avc: denied { open } for pid=559 comm="syz.2.74" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 35.583624][ T396] usb 4-1: Using ep0 maxpacket: 16 [ 35.591490][ T396] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 35.600641][ T396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.608835][ T396] usb 4-1: Product: syz [ 35.613035][ T396] usb 4-1: Manufacturer: syz [ 35.617699][ T396] usb 4-1: SerialNumber: syz [ 35.628553][ T396] usb 4-1: config 0 descriptor?? [ 35.636875][ T396] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 35.643829][ T36] audit: type=1400 audit(1757124461.860:217): avc: denied { getopt } for pid=562 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.735697][ T563] binder: Bad value for 'max' [ 35.765968][ T36] audit: type=1400 audit(1757124461.990:218): avc: denied { bind } for pid=568 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.803626][ T572] netlink: 'syz.0.78': attribute type 11 has an invalid length. [ 35.828754][ T576] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 35.837561][ T576] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 35.846524][ T576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 35.859832][ T576] rust_binder: Failed to allocate buffer. len:192, is_oneway:false [ 35.898280][ T31] usb 4-1: USB disconnect, device number 4 [ 36.413635][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 36.447836][ T599] rust_binder: 58: no such ref 0 [ 36.513609][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 36.573595][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 36.579858][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.590141][ T31] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.601237][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 36.607874][ T31] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 36.616956][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.625836][ T31] usb 1-1: config 0 descriptor?? [ 36.633582][ T396] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 36.675075][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 36.683558][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.693752][ T45] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 36.702712][ T45] usb 3-1: config 1 has no interface number 1 [ 36.708895][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 36.723172][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.732304][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.740349][ T45] usb 3-1: Product: syz [ 36.744541][ T45] usb 3-1: Manufacturer: syz [ 36.749150][ T45] usb 3-1: SerialNumber: syz [ 36.783977][ T396] usb 2-1: Invalid ep0 maxpacket: 64 [ 36.913598][ T396] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 36.956691][ T593] x_tables: unsorted underflow at hook 4 [ 37.063577][ T396] usb 2-1: Invalid ep0 maxpacket: 64 [ 37.069092][ T396] usb usb2-port1: attempt power cycle [ 37.128834][ T45] usb 3-1: USB disconnect, device number 7 [ 37.138239][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.317666][ T613] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 37.326032][ T613] rust_binder: Write failure EINVAL in pid:70 [ 37.423624][ T396] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 37.454257][ T396] usb 2-1: Invalid ep0 maxpacket: 64 [ 37.535823][ T623] netlink: 56 bytes leftover after parsing attributes in process `syz.0.83'. [ 37.545172][ T623] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 37.545221][ T623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:56 [ 37.583623][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.600262][ T396] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 37.623998][ T396] usb 2-1: Invalid ep0 maxpacket: 64 [ 37.629461][ T396] usb usb2-port1: unable to enumerate USB device [ 37.733600][ T9] usb 4-1: device descriptor read/64, error -71 [ 37.973588][ T9] usb 4-1: device descriptor read/64, error -71 [ 38.213594][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 38.343662][ T9] usb 4-1: device descriptor read/64, error -71 [ 38.583596][ T9] usb 4-1: device descriptor read/64, error -71 [ 38.673587][ T45] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 38.693659][ T9] usb usb4-port1: attempt power cycle [ 38.824643][ T45] usb 3-1: config 0 has no interfaces? [ 38.830157][ T45] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 38.839298][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.848023][ T45] usb 3-1: config 0 descriptor?? [ 39.033603][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 39.054750][ T9] usb 4-1: device descriptor read/8, error -71 [ 39.056038][ T45] usb 3-1: USB disconnect, device number 8 [ 39.130468][ T396] usb 1-1: USB disconnect, device number 5 [ 39.147584][ T636] SELinux: security_context_str_to_sid () failed with errno=-22 [ 39.184688][ T9] usb 4-1: device descriptor read/8, error -71 [ 39.415123][ T640] block device autoloading is deprecated and will be removed. [ 39.425392][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 39.434329][ T640] kvm: kvm [639]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 39.442722][ T640] kvm: kvm [639]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 39.452098][ T9] usb 4-1: device descriptor read/8, error -71 [ 39.553622][ T396] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 39.594704][ T9] usb 4-1: device descriptor read/8, error -71 [ 39.703571][ T396] usb 1-1: Using ep0 maxpacket: 16 [ 39.708868][ T9] usb usb4-port1: unable to enumerate USB device [ 39.716441][ T396] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 39.724741][ T396] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 39.732135][ T396] usb 1-1: config 0 has no interface number 0 [ 39.739615][ T396] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 39.748764][ T396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.756803][ T396] usb 1-1: Product: syz [ 39.760988][ T396] usb 1-1: Manufacturer: syz [ 39.765630][ T396] usb 1-1: SerialNumber: syz [ 39.770920][ T396] usb 1-1: config 0 descriptor?? [ 39.776882][ T396] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 39.783283][ T396] usb 1-1: No valid video chain found. [ 39.883219][ T653] netlink: 'syz.2.100': attribute type 4 has an invalid length. [ 39.978197][ T45] usb 1-1: USB disconnect, device number 6 [ 40.207706][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 40.207723][ T36] audit: type=1326 audit(1757124466.430:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=674 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaead8ebe9 code=0x50000 [ 40.237176][ T36] audit: type=1326 audit(1757124466.430:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=674 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaead8ebe9 code=0x50000 [ 40.260249][ T36] audit: type=1326 audit(1757124466.430:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=674 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaead8ebe9 code=0x50000 [ 40.283585][ T36] audit: type=1326 audit(1757124466.430:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=674 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaead8ebe9 code=0x50000 [ 40.306597][ T36] audit: type=1326 audit(1757124466.430:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=674 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaead8ebe9 code=0x50000 [ 40.329524][ T36] audit: type=1326 audit(1757124466.430:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=674 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaead8ebe9 code=0x50000 [ 40.352472][ T36] audit: type=1326 audit(1757124466.430:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=674 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaead8ebe9 code=0x50000 [ 40.375392][ T36] audit: type=1326 audit(1757124466.430:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=674 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaead8ebe9 code=0x50000 [ 40.398593][ T36] audit: type=1326 audit(1757124466.430:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=674 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaead8ebe9 code=0x50000 [ 40.421687][ T36] audit: type=1326 audit(1757124466.430:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=674 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaead8ebe9 code=0x50000 [ 40.641612][ T684] rust_binder: Write failure EINVAL in pid:69 [ 40.722848][ T688] rust_binder: Write failure EFAULT in pid:73 [ 40.753563][ T45] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 40.781415][ T691] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 40.795442][ T690] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.796307][ T690] rust_binder: 75: no such ref 2 [ 40.816895][ T690] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 40.934673][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 40.955846][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 40.978770][ T45] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 40.990209][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.003731][ T45] usb 4-1: Product: syz [ 41.010174][ T45] usb 4-1: Manufacturer: syz [ 41.018164][ T45] usb 4-1: SerialNumber: syz [ 41.029534][ T45] usb 4-1: config 0 descriptor?? [ 41.043396][ T45] hub 4-1:0.0: bad descriptor, ignoring hub [ 41.050559][ T45] hub 4-1:0.0: probe with driver hub failed with error -5 [ 41.245239][ T638] usb 4-1: USB disconnect, device number 9 [ 42.412870][ T723] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 42.437456][ T723] rust_binder: Write failure EINVAL in pid:86 [ 42.629975][ T739] loop2: detected capacity change from 0 to 7 [ 42.652751][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 42.661957][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 42.673544][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 42.682735][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 42.690622][ T739] loop2: unable to read partition table [ 42.700500][ T739] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 42.713607][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 42.723158][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 42.732473][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 42.742170][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 42.751368][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 42.759445][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 42.768600][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 42.776807][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 42.786009][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 42.795204][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 42.804394][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 42.812251][ T740] loop2: unable to read partition table [ 42.813441][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 42.827101][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 42.839405][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 42.848604][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 42.873382][ T742] rust_binder: Error while translating object. [ 42.873642][ T742] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 42.886527][ T742] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:108 [ 43.013253][ T750] rust_binder: Write failure EFAULT in pid:116 [ 43.069577][ T754] Zero length message leads to an empty skb [ 43.213086][ T767] rust_binder: 767 RLIMIT_NICE not set [ 43.221725][ T396] rust_binder: 765: removing orphan mapping 0:1168 [ 43.272007][ T778] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 43.280811][ T778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.280843][ T778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:91 [ 43.312694][ T774] syz.2.143 (774): attempted to duplicate a private mapping with mremap. This is not supported. [ 43.314852][ T782] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:134 [ 43.458279][ T798] binder: Unknown parameter 'defcontext01777777777777777777777' [ 43.643622][ T396] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 43.733576][ T638] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 43.773578][ T396] usb 3-1: device descriptor read/64, error -71 [ 43.885608][ T638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.896867][ T638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.906847][ T638] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 43.920007][ T638] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 43.929183][ T638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.942666][ T638] usb 4-1: config 0 descriptor?? [ 43.954018][ T638] hub 4-1:0.0: USB hub found [ 44.013593][ T396] usb 3-1: device descriptor read/64, error -71 [ 44.051632][ T823] tipc: Enabling of bearer rejected, failed to enable media [ 44.149526][ T638] hub 4-1:0.0: 14 ports detected [ 44.160738][ T638] hub 4-1:0.0: insufficient power available to use all downstream ports [ 44.160992][ T829] rust_binder: 137: no such ref 3 [ 44.221414][ T837] netlink: 44 bytes leftover after parsing attributes in process `syz.1.167'. [ 44.230403][ T837] netlink: 'syz.1.167': attribute type 6 has an invalid length. [ 44.238265][ T837] netlink: 'syz.1.167': attribute type 5 has an invalid length. [ 44.246043][ T837] netlink: 'syz.1.167': attribute type 4 has an invalid length. [ 44.253950][ T396] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 44.393613][ T396] usb 3-1: device descriptor read/64, error -71 [ 44.412591][ T843] rust_binder: Failed to allocate buffer. len:18446744073709550944, is_oneway:false [ 44.412622][ T843] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 44.422609][ T843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:104 [ 44.600035][ T849] incfs: Error accessing: ./file0. [ 44.614633][ T849] incfs: mount failed -20 [ 44.643973][ T396] usb 3-1: device descriptor read/64, error -71 [ 44.711013][ T867] tipc: Enabling of bearer rejected, failed to enable media [ 44.753659][ T396] usb usb3-port1: attempt power cycle [ 45.093607][ T396] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 45.114582][ T396] usb 3-1: device descriptor read/8, error -71 [ 45.184382][ T638] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 45.190835][ T638] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 45.244712][ T396] usb 3-1: device descriptor read/8, error -71 [ 45.276650][ T872] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.276686][ T872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:156 [ 45.301025][ T36] kauditd_printk_skb: 44490 callbacks suppressed [ 45.301045][ T36] audit: type=1400 audit(1757124471.520:44742): avc: denied { create } for pid=873 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 45.348707][ T878] capability: warning: `syz.1.180' uses deprecated v2 capabilities in a way that may be insecure [ 45.412949][ T878] 9pnet_fd: Insufficient options for proto=fd [ 45.433532][ T36] audit: type=1400 audit(1757124471.650:44743): avc: denied { listen } for pid=880 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.483576][ T396] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 45.504903][ T396] usb 3-1: device descriptor read/8, error -71 [ 45.634586][ T396] usb 3-1: device descriptor read/8, error -71 [ 45.713605][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 45.743675][ T396] usb usb3-port1: unable to enumerate USB device [ 45.863660][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 45.870097][ T31] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 45.878537][ T31] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 45.887187][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 45.896211][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 45.905887][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 45.915557][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 45.928550][ T31] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 45.937610][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.946321][ T31] usb 2-1: config 0 descriptor?? [ 46.140479][ T899] mmap: syz.0.188 (899) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.154494][ T31] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 46.172169][ T31] usb 2-1: USB disconnect, device number 7 [ 46.173809][ T36] audit: type=1400 audit(1757124472.400:44744): avc: denied { create } for pid=902 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 46.198937][ T31] usblp0: removed [ 46.223583][ T905] tipc: Enabling of bearer rejected, failed to enable media [ 46.256015][ T910] incfs: Error accessing: ./file0/file0. [ 46.261888][ T910] incfs: mount failed -20 [ 46.279298][ T914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=914 comm=syz.0.193 [ 46.537616][ T924] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 46.548086][ T36] audit: type=1400 audit(1757124472.770:44745): avc: denied { setattr } for pid=923 comm="syz.3.197" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 46.571427][ T36] audit: type=1400 audit(1757124472.780:44746): avc: denied { map } for pid=923 comm="syz.3.197" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 46.594440][ T36] audit: type=1400 audit(1757124472.780:44747): avc: denied { append } for pid=923 comm="syz.3.197" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 46.617414][ T396] usb 4-1: USB disconnect, device number 10 [ 46.653643][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 46.709175][ T36] audit: type=1400 audit(1757124472.930:44748): avc: denied { write } for pid=925 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.770383][ T396] rust_binder: 925: removing orphan mapping 0:24 [ 46.783581][ T31] usb 2-1: device descriptor read/64, error -71 [ 46.833610][ T374] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 46.924630][ T936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 46.983577][ T374] usb 3-1: Using ep0 maxpacket: 16 [ 46.991167][ T374] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 47.000274][ T374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.008381][ T374] usb 3-1: Product: syz [ 47.012569][ T374] usb 3-1: Manufacturer: syz [ 47.017811][ T374] usb 3-1: SerialNumber: syz [ 47.032382][ T374] r8152-cfgselector 3-1: Unknown version 0x0000 [ 47.038770][ T31] usb 2-1: device descriptor read/64, error -71 [ 47.045340][ T374] r8152-cfgselector 3-1: config 0 descriptor?? [ 47.175866][ T950] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=511 (1022 ns) > initial count (2 ns). Using initial count to start timer. [ 47.283631][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 47.308364][ T956] binder: Binderfs stats mode cannot be changed during a remount [ 47.329944][ T36] audit: type=1400 audit(1757124473.550:44749): avc: denied { read } for pid=957 comm="syz.3.209" name="file2" dev="tmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.352272][ T36] audit: type=1400 audit(1757124473.550:44750): avc: denied { open } for pid=957 comm="syz.3.209" path="/44/file2" dev="tmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.375794][ T36] audit: type=1400 audit(1757124473.550:44751): avc: denied { ioctl } for pid=957 comm="syz.3.209" path="/44/file2" dev="tmpfs" ino=253 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.433563][ T31] usb 2-1: device descriptor read/64, error -71 [ 47.457477][ T638] r8152-cfgselector 3-1: USB disconnect, device number 13 [ 47.585751][ T973] capability: warning: `syz.0.214' uses 32-bit capabilities (legacy support in use) [ 47.638079][ T982] KVM: debugfs: duplicate directory 982-6 [ 47.653121][ T984] incfs: Options parsing error. -22 [ 47.658424][ T984] incfs: mount failed -22 [ 47.673586][ T31] usb 2-1: device descriptor read/64, error -71 [ 47.783728][ T31] usb usb2-port1: attempt power cycle [ 47.945308][ T1003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.225'. [ 47.953606][ T638] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 48.050782][ T1014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1014 comm=syz.0.227 [ 48.105416][ T638] usb 4-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 48.115873][ T638] usb 4-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 48.123578][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 48.128943][ T638] usb 4-1: config 1 interface 0 has no altsetting 0 [ 48.144596][ T638] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.153804][ T638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.161846][ T638] usb 4-1: Product: syz [ 48.167629][ T638] usb 4-1: Manufacturer: syz [ 48.172278][ T638] usb 4-1: SerialNumber: syz [ 48.177954][ T31] usb 2-1: device descriptor read/8, error -71 [ 48.263558][ T937] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 48.314562][ T31] usb 2-1: device descriptor read/8, error -71 [ 48.413553][ T937] usb 3-1: Using ep0 maxpacket: 16 [ 48.419844][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.431300][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.441345][ T937] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 48.450548][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.459680][ T937] usb 3-1: config 0 descriptor?? [ 48.499520][ T1016] process 'syz.1.229' launched './file1' with NULL argv: empty string added [ 48.509277][ T1016] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:175 [ 48.551242][ T1018] __vm_enough_memory: pid: 1018, comm: syz.1.230, bytes: 18014402804453376 not enough memory for the allocation [ 48.589943][ T638] usb 4-1: bad CDC descriptors [ 48.606929][ T638] usb 4-1: USB disconnect, device number 11 [ 48.637803][ T1023] tipc: Enabling of bearer rejected, failed to enable media [ 48.919719][ T1040] netlink: 'syz.0.237': attribute type 4 has an invalid length. [ 48.947350][ T937] saitek 0003:06A3:0621.0003: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.2-1/input0 [ 48.949271][ T1033] netlink: 124 bytes leftover after parsing attributes in process `syz.1.233'. [ 49.141012][ T1013] SELinux: security_context_str_to_sid () failed with errno=-22 [ 49.149167][ T937] usb 3-1: USB disconnect, device number 14 [ 49.521254][ T1072] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 49.530232][ T1072] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 49.711524][ T1084] binder: Unknown parameter '' [ 49.914243][ T1095] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 49.921669][ T1095] rust_binder: Write failure EINVAL in pid:127 [ 49.968556][ T1100] veth1: entered allmulticast mode [ 49.983861][ T1098] veth1: left allmulticast mode [ 50.178228][ T1126] 9pnet_fd: Insufficient options for proto=fd [ 50.199119][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.207209][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.214792][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.222096][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.229452][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.236787][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.244163][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.258408][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.265942][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.273325][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.281657][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.289022][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.299830][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.307193][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.308581][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 50.308596][ T36] audit: type=1400 audit(1757124476.530:44779): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 50.341079][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.350539][ T1131] cgroup: subsys name conflicts with all [ 50.350658][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.365131][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.372520][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.380363][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.388345][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.396830][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.409000][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.420448][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.428944][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.436623][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.443875][ T1141] rust_binder: Error in use_page_slow: ESRCH [ 50.443895][ T1141] rust_binder: use_range failure ESRCH [ 50.449902][ T1141] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 50.455627][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.470539][ T1141] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 50.470624][ T1141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:211 [ 50.470889][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.500061][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.507421][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.514796][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.522128][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.529589][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.536882][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.544336][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.551595][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.559009][ T1146] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 50.559138][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.574515][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.581788][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.589253][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.597444][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.604789][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.612098][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.619996][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.627237][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.639441][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.652121][ T36] audit: type=1400 audit(1757124476.870:44780): avc: denied { ioctl } for pid=1148 comm="syz.3.274" path="socket:[8890]" dev="sockfs" ino=8890 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.677198][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.689243][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.696977][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.706449][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.715028][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.722889][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.730591][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.734283][ T1158] binder: Bad value for 'stats' [ 50.743165][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.750762][ T1158] tipc: Started in network mode [ 50.751046][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.755926][ T1158] tipc: Node identity ac14142f, cluster identity 4711 [ 50.769670][ T1158] tipc: New replicast peer: 2.0.0.0 [ 50.769889][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.775051][ T1158] tipc: Enabled bearer , priority 10 [ 50.789670][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.797430][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.805071][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.812616][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.820267][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.827934][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.835509][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.842706][ T36] audit: type=1400 audit(1757124477.060:44781): avc: denied { watch } for pid=1157 comm="syz.3.277" path="pipe:[8910]" dev="pipefs" ino=8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 50.865801][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.873154][ T1129] overlay: filesystem on ./bus not supported as upperdir [ 50.938388][ T1161] cgroup: Bad value for 'name' [ 50.945101][ T1161] rust_binder: 141: no such ref 2 [ 50.950193][ T1161] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:141 [ 50.985982][ T1164] rust_binder: Read failure Err(EAGAIN) in pid:143 [ 51.025078][ T1168] 9pnet_fd: Insufficient options for proto=fd [ 51.243002][ T36] audit: type=1400 audit(1757124477.460:44782): avc: denied { connect } for pid=1167 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.262855][ T36] audit: type=1400 audit(1757124477.480:44783): avc: denied { write } for pid=1167 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.402939][ T1171] rust_binder: Failed to allocate buffer. len:192, is_oneway:false [ 51.402963][ T1171] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 51.411025][ T1171] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 51.425578][ T638] rust_binder: 1170: removing orphan mapping 0:96 [ 51.437081][ T1175] 9pnet_fd: Insufficient options for proto=fd [ 51.448869][ T1174] 9pnet_fd: Insufficient options for proto=fd [ 51.455773][ T1177] netlink: 'syz.1.284': attribute type 14 has an invalid length. [ 51.463644][ T1178] netlink: 'syz.1.284': attribute type 14 has an invalid length. [ 51.510508][ T1189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.288'. [ 51.579183][ T1196] fuse: Bad value for 'rootmode' [ 51.611482][ T1202] netlink: 'syz.0.293': attribute type 4 has an invalid length. [ 51.619581][ T1202] netlink: 'syz.0.293': attribute type 4 has an invalid length. [ 51.669664][ T36] audit: type=1400 audit(1757124477.890:44784): avc: denied { bind } for pid=1208 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.712190][ T1215] netlink: 'syz.3.299': attribute type 12 has an invalid length. [ 51.748520][ T36] audit: type=1400 audit(1757124477.970:44785): avc: denied { create } for pid=1222 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 51.771698][ T36] audit: type=1400 audit(1757124477.970:44786): avc: denied { write } for pid=1222 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 51.832691][ T1227] netlink: 8568 bytes leftover after parsing attributes in process `syz.0.302'. [ 51.896556][ T36] audit: type=1400 audit(1757124478.120:44787): avc: denied { write } for pid=1233 comm="syz.3.307" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.920206][ T937] tipc: Node number set to 2886997039 [ 51.930205][ T1234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1234 comm=syz.0.306 [ 52.234839][ T36] audit: type=1400 audit(1757124478.460:44788): avc: denied { load_policy } for pid=1243 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 52.259861][ T1244] SELinux: failed to load policy [ 52.266118][ T1244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:235 [ 52.322380][ T1248] SELinux: Context ϧ-):E2٢ؾ)đJu36ޢ{@m[ is not valid (left unmapped). [ 52.342175][ T1248] random: crng reseeded on system resumption [ 52.436272][ T1251] SELinux: ebitmap: truncated map [ 52.443195][ T1251] SELinux: failed to load policy [ 52.683577][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 52.833620][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 52.840132][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 52.848627][ T31] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 52.856774][ T31] usb 2-1: config 0 has no interface number 0 [ 52.862857][ T31] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 52.872761][ T31] usb 2-1: config 0 interface 88 has no altsetting 0 [ 52.881680][ T31] usb 2-1: string descriptor 0 read error: -22 [ 52.887954][ T31] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 52.897029][ T31] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 52.905823][ T31] usb 2-1: config 0 descriptor?? [ 52.915260][ T31] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input4 [ 52.935348][ T341] udevd[341]: Error opening device "/dev/input/event3": Input/output error [ 52.944054][ T341] udevd[341]: Unable to EVIOCGABS device "/dev/input/event3" [ 52.951454][ T341] udevd[341]: Unable to EVIOCGABS device "/dev/input/event3" [ 53.115543][ T1251] rust_binder: Error while translating object. [ 53.115595][ T1251] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 53.121796][ T1251] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 53.131162][ T1251] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:242 [ 53.143486][ T638] usb 2-1: USB disconnect, device number 12 [ 53.146218][ T937] rust_binder: 1250: removing orphan mapping 0:24 [ 68.034708][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 68.034727][ T36] audit: type=1400 audit(1757124494.260:44793): avc: denied { mounton } for pid=1256 comm="syz.1.315" path="/proc/245/cgroup" dev="proc" ino=9774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 68.074950][ T36] audit: type=1400 audit(1757124494.290:44794): avc: denied { setcheckreqprot } for pid=1258 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 68.313653][ T396] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 68.343614][ T937] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 68.464682][ T396] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.474888][ T396] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.485337][ T396] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.494465][ T396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.502513][ T396] usb 4-1: Product: syz [ 68.503573][ T937] usb 2-1: Using ep0 maxpacket: 32 [ 68.506734][ T396] usb 4-1: Manufacturer: syz [ 68.513759][ T937] usb 2-1: config 0 has an invalid descriptor of length 219, skipping remainder of the config [ 68.516493][ T396] usb 4-1: SerialNumber: syz [ 68.527147][ T937] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 68.541819][ T937] usb 2-1: New USB device found, idVendor=0424, idProduct=b315, bcdDevice=69.ee [ 68.551138][ T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.559211][ T937] usb 2-1: Product: syz [ 68.563456][ T937] usb 2-1: Manufacturer: syz [ 68.568110][ T937] usb 2-1: SerialNumber: syz [ 68.573609][ T937] usb 2-1: config 0 descriptor?? [ 68.590481][ T1274] syz.0.320 uses obsolete (PF_INET,SOCK_PACKET) [ 68.689737][ T36] audit: type=1400 audit(1757124494.910:44795): avc: denied { create } for pid=1283 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 68.738919][ T396] usb 4-1: 0:2 : does not exist [ 68.747442][ T396] usb 4-1: USB disconnect, device number 12 [ 68.759594][ T1266] udevd[1266]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.144822][ T396] usb 2-1: USB disconnect, device number 13 [ 69.203559][ T374] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 69.204797][ T1294] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 69.283008][ T36] audit: type=1400 audit(1757124495.500:44796): avc: denied { setattr } for pid=1293 comm="syz.1.327" name="/" dev="9p" ino=2308094809027379202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.374982][ T374] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 69.384177][ T374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.395492][ T374] usb 3-1: config 0 descriptor?? [ 69.633361][ T36] audit: type=1400 audit(1757124495.850:44797): avc: denied { map } for pid=1301 comm="syz.0.329" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 69.663610][ T36] audit: type=1400 audit(1757124495.850:44798): avc: denied { read write } for pid=1301 comm="syz.0.329" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 69.811963][ T374] nintendo 0003:057E:200E.0004: unknown main item tag 0x0 [ 69.819451][ T374] nintendo 0003:057E:200E.0004: item fetching failed at offset 3/5 [ 69.827797][ T374] nintendo 0003:057E:200E.0004: HID parse failed [ 69.834399][ T374] nintendo 0003:057E:200E.0004: probe - fail = -22 [ 69.840960][ T374] nintendo 0003:057E:200E.0004: probe with driver nintendo failed with error -22 [ 70.009450][ T1286] netlink: 'syz.2.325': attribute type 4 has an invalid length. [ 70.017823][ T396] usb 3-1: USB disconnect, device number 15 [ 70.063624][ T638] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 70.123514][ T36] audit: type=1400 audit(1757124496.340:44799): avc: denied { read } for pid=1313 comm="syz.1.333" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 70.147916][ T36] audit: type=1400 audit(1757124496.350:44800): avc: denied { open } for pid=1313 comm="syz.1.333" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 70.172811][ T36] audit: type=1400 audit(1757124496.350:44801): avc: denied { ioctl } for pid=1313 comm="syz.1.333" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 70.237630][ T638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.253536][ T638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.263301][ T638] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.291796][ T638] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.301123][ T638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.310301][ T638] usb 4-1: config 0 descriptor?? [ 70.718257][ T638] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 70.727096][ T36] audit: type=1400 audit(1757124496.950:44802): avc: denied { relabelfrom } for pid=1329 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 70.746875][ T638] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 70.887987][ T1334] rust_binder: Write failure EFAULT in pid:167 [ 70.974878][ T638] usb 4-1: USB disconnect, device number 13 [ 71.122718][ T1344] usb usb9: usbfs: process 1344 (syz.1.341) did not claim interface 6 before use [ 71.132260][ T1344] rust_binder: 276: no such ref 3 [ 71.217902][ T1348] rust_binder: 280: no such ref 3 [ 71.223014][ T1348] rust_binder: 280: no such ref 1 [ 71.228189][ T1348] rust_binder: 280: no such ref 3 [ 71.233251][ T1348] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:280 [ 71.326406][ T1352] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 71.344061][ T1352] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 71.587373][ T1359] kvm: kvm [1357]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 71.596047][ T1359] kvm: kvm [1357]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 72.208267][ T1367] rust_binder: Write failure EFAULT in pid:288 [ 72.533605][ T374] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 72.583848][ T1380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197 [ 72.693631][ T374] usb 2-1: Using ep0 maxpacket: 8 [ 72.716463][ T374] usb 2-1: unable to get BOS descriptor or descriptor too short [ 72.725048][ T374] usb 2-1: config 1 has an invalid interface number: 84 but max is 0 [ 72.733198][ T374] usb 2-1: config 1 has no interface number 0 [ 72.741976][ T374] usb 2-1: config 1 interface 84 has no altsetting 0 [ 72.750557][ T374] usb 2-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=3f.09 [ 72.759913][ T374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.768178][ T374] usb 2-1: Product: syz [ 72.772632][ T374] usb 2-1: Manufacturer: syz [ 72.777823][ T374] usb 2-1: SerialNumber: syz [ 72.985789][ T1373] rust_binder: 294: no such ref 16387 [ 72.991284][ T1373] rust_binder: 294: no such ref 4 [ 72.996490][ T1373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:294 [ 72.997718][ T374] ums-cypress 2-1:1.84: USB Mass Storage device detected [ 73.055979][ T374] usb 2-1: USB disconnect, device number 14 [ 73.461873][ T1422] netlink: 'syz.0.365': attribute type 4 has an invalid length. [ 73.471037][ T1422] netlink: 'syz.0.365': attribute type 4 has an invalid length. [ 73.605706][ T1432] 9pnet_fd: Insufficient options for proto=fd [ 73.665844][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 73.665857][ T36] audit: type=1400 audit(1757124506.885:44809): avc: denied { map } for pid=1431 comm="syz.1.368" path="socket:[10641]" dev="sockfs" ino=10641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 73.803492][ T36] audit: type=1400 audit(1757124507.015:44810): avc: denied { write } for pid=1439 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.892731][ T1442] rust_binder: Write failure EFAULT in pid:308 [ 73.893480][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.337536][ T1453] netlink: 20 bytes leftover after parsing attributes in process `syz.3.374'. [ 74.347116][ T1453] overlayfs: missing 'workdir' [ 74.449061][ T1465] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 74.593572][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 74.744863][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.755893][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 74.764998][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.779161][ T9] usb 4-1: config 0 descriptor?? [ 74.856904][ T1474] ------------[ cut here ]------------ [ 74.862525][ T1474] WARNING: CPU: 1 PID: 1474 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 74.872441][ T1474] Modules linked in: [ 74.876412][ T1474] CPU: 1 UID: 0 PID: 1474 Comm: syz.1.382 Not tainted syzkaller #0 cbcc7fb1a3c48ec238a6a34dd578fa775d2dddba [ 74.887939][ T1474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 74.898067][ T1474] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 74.904046][ T1474] Code: 00 48 8b 5d a0 74 08 48 89 df e8 c2 4e 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 d0 20 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 74.923750][ T1474] RSP: 0018:ffffc9000f147c88 EFLAGS: 00010202 [ 74.929862][ T1474] RAX: 1ffffd1ffff86662 RBX: ffffc900102b08e8 RCX: ffffffff816dc9a9 [ 74.938120][ T1474] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc33310 [ 74.946339][ T1474] RBP: ffffc9000f147cf0 R08: ffffe8ffffc33317 R09: 1ffffd1ffff86662 [ 74.954388][ T1474] R10: dffffc0000000000 R11: fffff91ffff86663 R12: dffffc0000000000 [ 74.962398][ T1474] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc33310 [ 74.970459][ T1474] FS: 000055558c98c500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 74.979478][ T1474] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.986176][ T1474] CR2: 00007fc40a17bf98 CR3: 00000001195a6000 CR4: 00000000003526b0 [ 74.994260][ T1474] Call Trace: [ 74.997562][ T1474] [ 75.000517][ T1474] kvm_put_kvm+0x1100/0x12b0 [ 75.005184][ T1474] ? __cfi_kvm_vm_release+0x10/0x10 [ 75.010424][ T1474] kvm_vm_release+0x47/0x70 [ 75.015003][ T1474] __fput+0x1fe/0xa00 [ 75.019021][ T1474] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 75.024678][ T1474] ____fput+0x20/0x30 [ 75.028780][ T1474] task_work_run+0x1e3/0x250 [ 75.033586][ T1474] ? __cfi_task_work_run+0x10/0x10 [ 75.038744][ T1474] ? __kasan_check_write+0x18/0x20 [ 75.043945][ T1474] resume_user_mode_work+0x36/0x50 [ 75.049100][ T1474] syscall_exit_to_user_mode+0x64/0xb0 [ 75.054649][ T1474] do_syscall_64+0x64/0xf0 [ 75.059144][ T1474] ? clear_bhb_loop+0x50/0xa0 [ 75.063920][ T1474] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.069868][ T1474] RIP: 0033:0x7fbb14b8ebe9 [ 75.074362][ T1474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.094061][ T1474] RSP: 002b:00007ffefbf18008 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 75.102498][ T1474] RAX: 0000000000000000 RBX: 000000000001242b RCX: 00007fbb14b8ebe9 [ 75.110590][ T1474] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 75.118633][ T1474] RBP: 00007fbb14dc7da0 R08: 0000000000000001 R09: 0000000dfbf182ff [ 75.126693][ T1474] R10: 0000001b2dd20000 R11: 0000000000000246 R12: 00007fbb14dc5fac [ 75.134724][ T1474] R13: 00007fbb14dc5fa0 R14: ffffffffffffffff R15: 00007ffefbf18120 [ 75.142771][ T1474] [ 75.145847][ T1474] ---[ end trace 0000000000000000 ]--- [ 75.196208][ T9] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 75.207728][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0006/input/input7 [ 75.277708][ T36] audit: type=1400 audit(1757124508.495:44811): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=525 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.302918][ T9] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 75.397417][ T1453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.406043][ T1453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.502848][ T36] audit: type=1400 audit(1757124508.715:44812): avc: denied { read } for pid=1488 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Stopping sshd: [ 75.702204][ T1453] rust_binder: Error while translating object. [ 75.702292][ T1453] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } stopped /usr/sbin/sshd (pid 200) OK [ 75.708734][ T1453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:224 Stopping crond: [ 75.730775][ T9] usb 4-1: USB disconnect, device number 14 stopped /usr/sbin/crond (pid 193) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 147) [ 75.813530][ T36] audit: type=1400 audit(1757124509.025:44813): avc: denied { search } for pid=1499 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping network: [ 75.905653][ T36] audit: type=1400 audit(1757124509.125:44814): avc: denied { read write } for pid=1509 comm="ip" path="/dev/console" dev="rootfs" ino=1067 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 75.930870][ T36] audit: type=1400 audit(1757124509.125:44815): avc: denied { write } for pid=148 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.953115][ T36] audit: type=1400 audit(1757124509.125:44816): avc: denied { remove_name } for pid=148 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.975468][ T36] audit: type=1400 audit(1757124509.125:44817): avc: denied { unlink } for pid=148 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 75.997799][ T36] audit: type=1400 audit(1757124509.155:44818): avc: denied { unlink } for pid=148 comm="dhcpcd" name="pid" dev="tmpfs" ino=422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 OK Stopping iptables: OK Stopping system message bus: done killall: can't kill pid 1266: No such process killall: can't kill pid 1267: No such process killall: can't kill pid 1405: No such process Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 91) OK umount: can't remount debugfs read-only Connection to 10.128.1.225 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 77.677024][ T46] bridge_slave_1: left allmulticast mode [ 77.682728][ T46] bridge_slave_1: left promiscuous mode [ 77.688424][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.696151][ T46] bridge_slave_0: left allmulticast mode [ 77.701814][ T46] bridge_slave_0: left promiscuous mode [ 77.708148][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.845103][ T46] tipc: Left network mode [ 77.850775][ T46] veth1_macvtap: left promiscuous mode [ 77.856351][ T46] veth0_vlan: left promiscuous mode [ 78.164735][ T46] bridge_slave_1: left allmulticast mode [ 78.170451][ T46] bridge_slave_1: left promiscuous mode [ 78.176161][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.183808][ T46] bridge_slave_0: left allmulticast mode [ 78.189531][ T46] bridge_slave_0: left promiscuous mode [ 78.195245][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.203039][ T46] bridge_slave_1: left allmulticast mode [ 78.208803][ T46] bridge_slave_1: left promiscuous mode [ 78.214446][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.222053][ T46] bridge_slave_0: left allmulticast mode [ 78.227798][ T46] bridge_slave_0: left promiscuous mode [ 78.233399][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.416736][ T46] tipc: Disabling bearer [ 78.422084][ T46] tipc: Left network mode [ 78.428335][ T46] veth1_macvtap: left promiscuous mode [ 78.433936][ T46] veth0_vlan: left promiscuous mode [ 78.439621][ T46] veth1_macvtap: left promiscuous mode [ 78.445196][ T46] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 79.576859][ T1534] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 79.583729][ T1534] ACPI: PM: Preparing to enter system sleep state S5 [ 79.590585][ T1534] kvm: exiting hardware virtualization [ 79.596138][ T1534] reboot: Power down serialport: VM disconnected.