last executing test programs: 4.747417931s ago: executing program 3 (id=263): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc38c405d31f5136}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000080)) syz_clone(0x4000080, &(0x7f00000000c0), 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="d343fc740f5415ed795da178e409296b31a8282890712b151e8c6ecbc19a5c81bceb951e1136d38129c2c94a31e25c07d03877807380d35327db0283304db8b1beb7c0cf852695844fa87ed90f614b77c7b1e753b0e7c838bfb2e4d83e5de62c7a4f42218b09fb8fc613ab861128e08926ea40bb1787c3f99d993fa576305fb27a6fbb8675db9e4005d8fd8c4621f265e8a6a226ca071446e5c0a7fa78fd7b85d0b8774c3ccd647336e0d43d966a81e0cb82f73a") r2 = syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x10000) r3 = signalfd4(r0, &(0x7f0000000280)={[0x6]}, 0x8, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x5ace000, {0x0, 0x0, 0x0, 0x6, 0x71, 0x0, 0xa, 0x6, 0x1, "00b80640664c91da363c570ab8d9f05a85cde145cd7ffbdacb23b0b3f8c75d7a11b96f206a2e320bfa91f507a2ebf4fd4ecb4a959f813c0fee2d4bd41b6efd9b", "4461e00319276604a70466d7f0eff07f2ee246c05d8f9ea9c0e371d4af3e03315e3236985329a07cc8b9334cd066bd23c052bafc9980bc433e27951de84f78d7", "0836544abee4e2c5c285b44a5b59f339dafc7b57005069fa330d27169d264d62", [0x8b8]}}) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000400)=0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000006c0)={{r2}, r4, 0x2, @inherit={0x80, &(0x7f0000000640)={0x0, 0x7, 0x5, 0x5, {0x8, 0x7fffffffffffffff, 0x7, 0x6, 0x5}, [0x7, 0x7ff, 0x40, 0x5, 0x6, 0xfffffffffffffff9, 0xfff]}}, @devid}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001740)={{r2}, r5, 0x0, @inherit={0x78, &(0x7f00000016c0)={0x0, 0x6, 0x0, 0x8e7, {0x10, 0xfffffffffffffffe, 0x8001, 0x8, 0x1}, [0x4, 0x6a8, 0x7f, 0xffffffff, 0x8, 0x1fa3b9ad]}}, @subvolid=0xe1}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000027c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f00000028c0)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002880)={&(0x7f0000002800)={0x50, r7, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000002940), r6) sendmsg$NFC_CMD_GET_SE(r6, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x9000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x14, r9, 0x1, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) ftruncate(r2, 0x28aeb89c) write$binfmt_elf64(r3, &(0x7f0000002a40)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x4, 0x8, 0x8, 0x2, 0x3, 0x3e, 0x7059, 0xff, 0x40, 0x3b8, 0x4, 0x8, 0x38, 0x2, 0x81, 0x6, 0x8}, [{0x1, 0x8, 0x7fffffffffffffff, 0x7, 0x8, 0x4, 0x5, 0x3}, {0x60000000, 0x8, 0x9, 0x3, 0x1e320e6f, 0xfffffffffffffff7, 0x8000000000000000, 0x6}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x19b0) r10 = inotify_add_watch(r3, &(0x7f0000004400)='./file0\x00', 0x40) inotify_rm_watch(r3, r10) prctl$PR_SET_TSC(0x1a, 0x3) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000004440)=0x0) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000700, r11, &(0x7f0000004480)) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000004500)={0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x18, 0x7, 0x19, "db75cec8f1d48e396285699935eb55e2d1c9680c17a13b49cf93d44579cd8e5bd4d3a96c26d6c74ab3bd3cb7c843d0b34c8f199ea3b567be3f5af0693c3cd68e", "2fc65f5ae0c5c82d9cca43c732ec11e3d3c638e710a6de949c325d4db425260333db4bf47a80d8d028cd097551566a7e318e6e5d572528e9229d787221943c09", "41fd5296c83e326a98de628e49bc9a8530068db46624ec0cf945351930605079", [0x9, 0x8]}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000004600)={r3, 0x40, 0x2, 0x7}) read$FUSE(r3, &(0x7f0000004640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r12, &(0x7f0000006680)={0x50, 0x0, r13, {0x7, 0x2b, 0x0, 0x1, 0x3, 0x3, 0x7, 0xf, 0x0, 0x0, 0x1, 0x8}}, 0x50) 4.580192033s ago: executing program 3 (id=264): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x700000000000000, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r2, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3b5, 0x1fd}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="980000000201010000000000000000000700000a74000680080001000a01010214000400ffc4691b01000000000000000000000000000154000380060002001d2fd4026d368c06fe534e200000060001004e2200230000060002004e2100f4060001004e240000060001004e230000060001004ed44400060002004e210000060001004e240000060002004e210000083147f263fc000000"], 0x98}, 0x1, 0x0, 0x0, 0x4044810}, 0x0) 4.516421214s ago: executing program 3 (id=265): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="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", 0x1000, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000001080)={r0, 0x16, 0x2b}, 0x0, &(0x7f00000010c0)="96a396b0cf92a15b84b788166a9ed8c2489c3837031c", &(0x7f0000001100)="877b1f587e40d0a14c47ef23bc159ca12b3f021f3eede4d8390bd66a88ec49557d79a2494d0ee43933770c") r1 = syz_usb_connect(0x0, 0xb32, &(0x7f0000001140)={{0x12, 0x1, 0x201, 0xa9, 0xb1, 0xa5, 0xff, 0xd49, 0x7310, 0x5280, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb20, 0x4, 0x1e, 0x52, 0x80, 0xff, [{{0x9, 0x4, 0xf2, 0xc, 0x0, 0xc0, 0xd8, 0x9a, 0x3, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "fe"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x401, 0x4, 0x1}}]}}, {{0x9, 0x4, 0xbf, 0x6, 0xa, 0xc7, 0x30, 0x56, 0x30, [], [{{0x9, 0x5, 0x9, 0xc, 0x10, 0x7f, 0x5, 0xd6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x9bd6}, @generic={0x2c, 0xd, "c49147d0d689dcf1324842e8213a4719a876ff00ac1be501378237739e7d5855621404e3c4b9bf90cd02"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xdc, 0x9, 0x2, [@generic={0xa7, 0x3, "40f530b3ab258638a652ab8fbb9e8a676ecf4f83bffcbb847accd936febc50c333f90b4f32b1865b7064d41aa5d74efda1744749615fdf7573b38d0ecf50092960f33c86489c62d407dbcdd611bce9e23c67f3cfc373aef30e5f723dc4137102c7aa61f57b1a7029e9bb91a814152ddff181f6dd3e6744039c504797bd884003f70b511a09b54c50287ca5f83091dc0d8d4858e4943bd69e966c407613b3e304e4bd85b3fe"}, @generic={0xd8, 0x9, "238546dd89e62b50d21cd12afc7d878fe77d05199b18994d1c6ca32e4301f50ba14036a7e55845d04a822bededabcf22eebd58afa5e454526011966c8ba695493074fb3665a3daccd6d82a51f7d35781903a49d7e0d830288ffb2dcf32f21cff5868684654cc1be31e48b35d1948c1255e353b370170ab077784d2ee18a59b7f9bf588c74febed7bba2ca5b4eea4a5bbf21e3d205e89e4ea8d9fe194b2a072e7095be093e9e085dbc516051e54eab1104433f6f6ed3badf7e75779fcc21d789fa8855e4144270a8ac6eef70a51125ef03aff3a51a8d9"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x7, 0x0, 0xd7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x55}, @generic={0x94, 0x9, "32cea286052a5a0afa46f4c8f85243dadf4dcceb30ef2860ce938a1393aa2c2df15557c4867409304a0fb27f5f248b622e067c79ec1b763d58b51b12d70b2060bcca6370d2e44f09790cc476586914613ace536555bb52db719e2339631900f1c001790a4674653f153a07dcadf619f8f0f9d10c2194d850fa9e9d64efefbec1273c2b992ed98a8808057975309cd5c49c8c"}]}}, {{0x9, 0x5, 0x4, 0x14, 0x20, 0x7, 0x80, 0x5, [@generic={0x10, 0x6, "4be5119144d14d80e7a637d51660"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x68, 0xeb, 0xb6, [@generic={0xe, 0xa, "1063456546935237ddbb3977"}, @generic={0x7d, 0x7, "efd72ea7ff032bd8d0d6859b9bbe7389a28ac65b69d6e2476e177767b1e0ef71cff867b1af57c43338c53cae728e7fd8984a1717f4c5e79c9918f1a639fa0ae7cf14002750ff85ad05ac004f6ca70b18d59043a9fdab948de19213bee54513618aa0b3ff0bd45e6b7cd8e45cbcd2bdd0aa37738caca77b2fd8aec7"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0xa, 0x8, 0x4, [@generic={0x6c, 0xa, "78722e855aeaeb7277b729783308423a0e15e8b6d64eff8427aa547d57ff387ddcc836c1f55cf3bdcd1aec246537606d81fdec1b7f4c206d6cd4a3370cb1b29605edbb8ae50b4f8e6ed19e9bc0bb7704f76ebe333b97b0bb75ce3bc4037cea4763309ce65129781ef5e2"}, @generic={0xa9, 0x21, "734ac6b425b35a5e60e0cbc5de8c2168c3742e58c16ea25ff712b1ef9367abf7cdb1c34331d5b39716c7dfc2b571900e8f80e03a93e3511c966e9748d9079d91ecfa6f0b2297f34ea557efda2eba74f649c4b9a4779135a7208bbf40b03a9cd7e7ffa9e34a1b87decaa164468ac34e36bcc5aeb0e461c38e07e3ce288c6255c09e0b16078589697eb64bf2d92a7034e500ae6737483faf44679fd6d564366a82b9a3ea99ff257a"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x40, 0x7, 0x3, 0xe0, [@generic={0x6d, 0x5, "8145fc5222ad3fb8598dd0bb036cc35e3d57f20d4fd2c008901d8e1a0369f1b505dc739c6e25df4391463a9c0f89b03ab4b2d8cbb706de3b286b808210b5229b732557b4d3e5ef33500ca64427ea87dfde6e61ab5c3a37e728124e1fc8c4123c4aebd8ef25fbd7d6a2e2b7"}, @generic={0x7b, 0x23, "67ba148a8c681ba26f0e4d6fc3242af28b99a24417800f20227a5ad8a3bf98f371209fab6ccf4fb0593b0e4ebfa4074fd6d5099ce781d3dca276ccfe5da7f88a0723964925d59e3366060a366e2ab69b5f8035880976445765e2ddcc90d67b5ebb1a7798f5236ca3f56e5e91f62c487c4efdb60cb552aa093b"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x20, 0x4a, 0x7}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x2, 0x7f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x1}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x9, 0x7, 0x3, [@generic={0x82, 0x11, "d2abbd3517f6d396bc257a9f2ad8b053a8f61a64aaffda3e934e004d67c337882c73bdf30c30dcebb0bf7637991d71e0dcfed62fcfc82268acd0a3eff0d117ba0a078baf68e1901dbad0b6718786d8cb97791d9392e12eeea6648783c9044765182b67620d7085c7e894cb3e41640ec028362044a955fefa58dcc61a91ca19f4"}]}}]}}, {{0x9, 0x4, 0x70, 0x2d, 0xe, 0x1, 0x8f, 0x33, 0xf6, [@hid_hid={0x9, 0x21, 0x100, 0x2, 0x1, {0x22, 0x517}}], [{{0x9, 0x5, 0x0, 0xc, 0x20, 0x7, 0xfb, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x40}, @generic={0xce, 0x21, "b42dc0b7ae896e770321c2c0e52550040826901fef255843bd25521dff74caf1e867ad850b0bcfd2f9b78a922c388ef11b6296f5f97c6dac7aaa705c3914a97ead68ccf3982b73ead6e917ccbdbaf78f1cba8c2564724f0251244f1c056957b1e07d45031ff5fba4c4b607ed5b1432f38fcc18fd983f171de3c110b2c08c6cb35aa6412af0505f73ee001f3cbb0d1f20033ee0e63c1c19a6fb79994d9051c2b3b7a26dbd7c07b9a52a6c5e0bace1ef526329d0bb44850f07dbaea1231ecfa5268bfc5fb5e163e6666511ae34"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x5, 0x3, 0x9}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x9, 0xb2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x2}]}}, {{0x9, 0x5, 0x7, 0x10, 0x38, 0x9d, 0x6, 0x8}}, {{0x9, 0x5, 0xd, 0x2, 0x3ff, 0x0, 0xb, 0xe, [@generic={0xec, 0xa, "25e9f95e29847d5b893c8a281a73ad20f8a15d080bd69fcc05ee9d89b2ab912c29c726883d77376af0cd376a06cd24366b8e99398f2b3eb823ab772c92f9ae1a50fdeeee9f5d74b63717dc569724c0208ad5204e3e616cf78abde57765975b4ad1e281e4a072b50d96dfa7451a40b261875579a3c43c652cebaeca2ad99cd1aac82a9aa22fba380fcd1f6e5eb5a7502763b7fd0465c13055c98c10056717dec4e1bd892b0c32ed694f660c1282990f95a22fb014cf368c6092cae6fb4883cd261c25eccbd198fb9a3c77e4b1416c4fd7e26cb3608b0c544e43018e48531878e6be314ba464d318ab416b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x8}]}}, {{0x9, 0x5, 0x5, 0x8, 0x20, 0x5, 0x1, 0x80}}, {{0x9, 0x5, 0x2, 0x8, 0x10, 0x1, 0x0, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd4, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0x4}]}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x5, 0xf7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xc, 0xfff8}]}}, {{0x9, 0x5, 0x0, 0x18, 0x200, 0x2c, 0x6, 0x7f}}, {{0x9, 0x5, 0xb, 0x4, 0x218, 0x1, 0x6, 0x1, [@generic={0x2e, 0x24, "813a38d5f186a258de99933b6fdbc9215a01eed210296becbf80841c662e914046840ba7895a957100949b85"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x61, 0x4, 0x5}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x3, 0xe, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9}, @generic={0x38, 0x2, "6825cfd2ccbf849318600094010cef9cf4aadd53030bf6e79c4fdfb027f4d9ff54631dee64059465ae50b30e93d813a8ef2eb7259ed8"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x200, 0x8, 0x5, 0xe1, [@generic={0x13, 0x6, "bfd8925c71a7a5d6537b22feeed6f40bfc"}, @generic={0x53, 0x5, "0b18ef02048d60459812709ef03faeb88740dcd2eba28a167479322f7cd5754dd537e4c52e7075a8233c542eae4f32d49e72bf043767434db2d2f6145e2f4c134e0d477bf8c1c3b36b4720731df4cd9d1d"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0x6, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x88, 0xac}, @generic={0xe0, 0x30, "7f751ba9f3db992d14debc66129dcdc0ec4ee23be06efb5bcc47d703adf0d238167ab047bc8acb0b675ee0f8505b2227fcf423c3977aff1f46593881ca7d5e6d750e266c0d41f88f30c44648ca1d4970f4213fd5683e347bf57097b339732e3eaaa612583c6adeb814e372c2b27c12c6e3e49413c9ec7e250c3e97d448f5061b178a2700edd5ddc061f83b4941413aaeffd4fe08a3bce4055230a2abc1ad5d9a61d7503fd130881de94341f6a440364c039fd2b3a33b75b94e6b766aee2f76c0a89d13ce0829e72f5180b8023f3a0ea8c253d3abff8f0b9512316c2c5a05"}]}}]}}, {{0x9, 0x4, 0xf7, 0x2, 0x5, 0x88, 0x45, 0x3b, 0x1, [@generic={0xac, 0x21, "47a2b0502efa2e97c60f5965a387a847480a20b6e98914fe3f8bcd915703968b6370ea42366aa9ae4c8c7d3dba9504a22c290bb037eb315706f968802e48172ac07e9dece04c0171cf35860c1a1ed297ddfe7810d0b7e67070756d9c471c2157bb98b7f2bc6e72a7363dc65d470fa835feb90e0ed098473b7f1eda9e50efac3f75d5a0b1325172d971ecc63848b1012df2138bba8e4ae3dbcd1ac406b8df268cadb1aca41cab2df507c6"}], [{{0x9, 0x5, 0xb, 0x0, 0x20, 0x8, 0x8, 0x4}}, {{0x9, 0x5, 0xe12eb38bb15bff88, 0x0, 0x200, 0x8, 0x2, 0x6}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0x3, 0x6, 0x7}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x4, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x81}]}}, {{0x9, 0x5, 0x1, 0x1, 0x40, 0x2, 0x0, 0x7f, [@generic={0x7, 0x2, "679ab03731"}]}}]}}]}}]}}, &(0x7f0000001fc0)={0xa, &(0x7f0000001c80)={0xa, 0x6, 0x211, 0x9, 0x6, 0x4c, 0x40, 0x4}, 0x36, &(0x7f0000001cc0)={0x5, 0xf, 0x36, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "3c58c741494328eb73c6201e1bdd76f3"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x9, 0x62e}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x5, 0x5, 0x5, 0x2}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x5, 0x9, 0x6}]}, 0x7, [{0x30, &(0x7f0000001d00)=@string={0x30, 0x3, "f0f5bd367894d3a89fae3f812953d5f94ebadcdb222cc6c27386b78cfd62a85582b1d6fa63e2ce07e5dc112f3d9f"}}, {0x4, &(0x7f0000001d40)=@lang_id={0x4, 0x3, 0x380a}}, {0xe2, &(0x7f0000001d80)=@string={0xe2, 0x3, "32fb257bd28812fcd45d986d02fa64c3cb6c0d8f4e958e53915d53f124034c62f5eed3c889bcbaf5073c4fd99e085d7db55f8ba331af592b80438cdbc75b2b6f12addf027c58cce560463e9dcaaacd9b7b38d143d68f13dc16c6d2fd373af5e8ca14ccaaf47cca8879fa09ce7709ffc5483d7a22c938b7b6e07008941ddbb7d3d032615f8dffb42c5a2f96bfc5de528dcac8c51af84d33699af02fde44c6f1d8c5c997f17c4204193a236aabf222edfad89616298e2861c359b5a95f742946f193ec22e0a60507c3dc4fe1426af407dab0761ae5203e6fc5cabca374f793877c"}}, {0xd, &(0x7f0000001e80)=@string={0xd, 0x3, "72cb1ee4b520366b3e90f7"}}, {0x43, &(0x7f0000001ec0)=@string={0x43, 0x3, "9d1bf7bbab7db2e86fa5424f4ccd36093ae4bf590a3c5bf199f03dbe403a3e7961a67ef37bc0e3f8b864624f517fac3c99b0977b0f4fa4f9481e8e840421065e64"}}, {0x4, &(0x7f0000001f40)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000001f80)=@lang_id={0x4, 0x3, 0x804}}]}) r2 = add_key$keyring(&(0x7f0000002040), &(0x7f0000002080)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r2) keyctl$search(0xa, 0x0, &(0x7f00000020c0)='user\x00', &(0x7f0000002100)={'syz', 0x2}, r2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x74, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x62fd}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb33d}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffeff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x24040840}, 0x8000) newfstatat(0xffffffffffffff9c, &(0x7f00000022c0)='./file0\x00', &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) read$FUSE(0xffffffffffffffff, &(0x7f0000002380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, r0, r4, r5) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000004400), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000004440)={0x0, @multicast1, @multicast1}, &(0x7f0000004480)=0xc) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000004580)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004540)={&(0x7f00000044c0)={0x48, r6, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x33}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044004}, 0x4) r8 = add_key$user(&(0x7f00000045c0), &(0x7f0000004600)={'syz', 0x3}, &(0x7f0000004640)="238d1df262dbe3a5", 0x8, 0xffffffffffffffff) keyctl$setperm(0x5, r8, 0x1000000) keyctl$KEYCTL_MOVE(0x1e, r0, r2, r2, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r9, &(0x7f0000004740)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004700)={&(0x7f00000046c0)={0x30, 0x1, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000850}, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000004800)={'syzkaller1\x00', &(0x7f0000004780)=@ethtool_perm_addr={0x20, 0x3f, "39095bd4f7d6488b57241fc40239d140e86fd2dfb355d431d5284ea822cc7b072328df3ec5ce71a6b8b03d5265ac00efb47e550e4b0d4e76f616fa4882ea55"}}) syz_usb_connect$uac1(0x0, 0x114, &(0x7f0000004840)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x102, 0x3, 0x1, 0xd8, 0xc0, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xee}, [@feature_unit={0xb, 0x24, 0x6, 0x5, 0x3, 0x2, [0x2, 0x7], 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x307, 0x3, 0x1, 0x10}, @extension_unit={0xd, 0x24, 0x8, 0x5, 0x6, 0x9, "83a58464cad8"}, @processing_unit={0x7, 0x24, 0x7, 0x4, 0x4, 0x2}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x85}, @extension_unit={0xb, 0x24, 0x8, 0x1, 0x5, 0xfd, "82ed5d03"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x4, 0x98, 0xb6}, @as_header={0x7, 0x24, 0x1, 0x2, 0x2, 0x4}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x100, 0xb4}, @as_header={0x7, 0x24, 0x1, 0x3, 0x0, 0x1001}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x1, 0x7f, 0x6, "843e88a9e4feba34cd"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x2, 0x6, {0x7, 0x25, 0x1, 0x2, 0x7, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x3, 0x2, 0x4, "50c618f06792eca9c1"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x2, 0x2, 0x6, 0x0, "ee"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x2, 0x7, 0x6, "eeda", "f65f3d"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xf, 0x2, 0x1, 0x6, "c5c2", "abcc5d"}, @as_header={0x7, 0x24, 0x1, 0x68, 0xf1}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x6, 0x7f, {0x7, 0x25, 0x1, 0x81, 0xb, 0x8}}}}}}}]}}, &(0x7f0000004ac0)={0xa, &(0x7f0000004980)={0xa, 0x6, 0x300, 0xe, 0x6, 0x5, 0x20, 0x3}, 0x36, &(0x7f00000049c0)={0x5, 0xf, 0x36, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0xa, 0x40}, @generic={0x5, 0x10, 0x4, "cb26"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x8, 0xfff9}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xb, 0x6, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x2, 0xf00f, 0x0, [0x17, 0xff00]}]}, 0x3, [{0x4, &(0x7f0000004a00)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000004a40)=@lang_id={0x4, 0x3, 0x407}}, {0x2, &(0x7f0000004a80)=@string={0x2}}]}) syz_usb_connect$cdc_ncm(0x4, 0xb5, &(0x7f0000004b00)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x2, 0x1, 0x86, 0x40, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "76b9"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x6, 0xa8}, {0x6, 0x24, 0x1a, 0x401, 0x2}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @mdlm_detail={0x14, 0x24, 0x13, 0xcb, "ebe3ebc95d1b25435c4d08d1ce2e02ce"}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x1, 0x58, 0x4, 0xffff, 0x3}, @country_functional={0x10, 0x24, 0x7, 0x1, 0x4, [0x5, 0x1, 0x1, 0x7, 0x4]}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x3, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x8, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x5ff, 0x7f, 0xfc, 0x7f}}}}}}}]}}, &(0x7f0000004ec0)={0xa, &(0x7f0000004bc0)={0xa, 0x6, 0x300, 0x0, 0xfd, 0x4, 0x10, 0x83}, 0xe3, &(0x7f0000004c00)={0x5, 0xf, 0xe3, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0xa, 0x9}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x0, 0x34, 0x9, 0x3}, @ptm_cap={0x3}, @generic={0xc6, 0x10, 0x1, "96c16be46878a2088713061a37061e4d3f2c38c863c6aa073994e102636f985d1638a65adceb5839e75d6f14f0a8b53b2d59c5f528a9600402bf2277190b8a207c880dfd8aa14ba940c4e6833acffddf84e9a525effc01232442c5223bedfe6e265dee88d4fcaf517204fb61821b9fbb13b0049250355acb2ede08739c827b0d8e95919ec10a3b401507bb61ca0335e36acf723f15ca10b1a26bb7ef4ef2a01d0d076be6f9231c2bf96eaecda4bcc53d1abf61c7ccadd0e2addc5dfbab0b18e24c30ee"}]}, 0x5, [{0xaf, &(0x7f0000004d00)=@string={0xaf, 0x3, "f9b880da7e4896d2a1a129c4f10638f37be331b8f615e186a293ce750466cabc0291e5ecf26208f3edd2e0f41a5da031219f73565415ef515219d5bc444a26db660aa3657389627141df53d9bb7adfc460667959e7824de1b6e55519c7e005a45b4ba8f879c7ea411027dbba33c7f29c97082dca2cb2852865a2ee15b15999dac0cf8d0cf7b4a1d653491ed7f064368d2c8d439e5f125a2d8dba7353f2ca252a9d9f0cdce00464c23371d419de"}}, {0x2a, &(0x7f0000004dc0)=@string={0x2a, 0x3, "203d457051986bb830a6c8f29c3682063568ddf526a308b479766c3b3fc67e558f54f13294a48e49"}}, {0x39, &(0x7f0000004e00)=@string={0x39, 0x3, "6e93aa72852440b71f79057d5bacfa3d247a71ad1230bb076e0258467535de210b77f8bfeb8f96f8f16df8a1839a73c895ec1f1da62ef3"}}, {0x4, &(0x7f0000004e40)=@lang_id={0x4, 0x3, 0xc04}}, {0x7, &(0x7f0000004e80)=@string={0x7, 0x3, "fd6163e214"}}]}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000004f40)={r8, 0x51, 0xe6}, 0x0, &(0x7f0000004f80)="16900b46ffd7496ce9e992150de1087992d4a063daf0a777c2b4aa2f4fe60c018fb08ff82b0516b8993059f35b25e92d968b4ca838c766854ede89bcacd82ac876a4d18251ce332f1e8a2cba5ddc3fad8c", &(0x7f0000005000)=""/230) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r10, &(0x7f0000005380)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005340)={&(0x7f0000005180)={0x184, r11, 0x20, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4690}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe9, 0x3, "47b9991b5bcb25bf58874bd078aafe07c8a30adb5cbe0ccd7ab6fb872a9aed9360474e3a1db459e857d1768e8dcd442616d6f322c42488450edc7fd3339983f8b2ad77f0ea030a00ef3c8b4395126d1159bd4cb00da0accc0a8e086cbb70e61b039e5f06b5997c445f7f2bc44349828763b37647aa7ab67a77aa034c4c769233a0a7b52be60617f594d5c5f7cfdd2f7ff8a4a891f0a1ee72acfd4438bd072bdb9c61795c4193c663e8559a87e21bb771ec0b09db4019393904843a70a33b716f6c378e06495372368c402d42fc8226e7fea10725e0a2db5370b7ecbeb4b6cc98de1af96379"}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x40018}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r10, &(0x7f00000054c0)={&(0x7f00000053c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000005480)={&(0x7f0000005400)={0x50, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}}, 0x84) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xcb, &(0x7f0000005500)=@generic={0x8, 0x0, 0xc3, "c15d92e2", "fea96657286b4339ef563a5e9bc433639a57f80524df576d1a5ebd07047e85be29d6a18ccf502c88b965080cbad7aee29b527d423e64c7918826894671a83bf0338116443c63024e09b540f4ac0aef01a0f6c52d03739b4faf49d84c05fbd12d9caaaf65123218ff1cc6dca4190e65b5c80cce6918ff4319a175a44daf0f0b40af7551ae6edc7e2ef4a35add0d77da24caa9c73051260d1f3a5591c49f425e7dcdd3fa3fe480e87f37a483a51d9f3d0c53700901dd141a00d14ec0b6d9a79a285559bd"}) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000005600)={0x1, 0x8}, 0x8) 1.898582779s ago: executing program 0 (id=316): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x2, 0x0) 1.885087849s ago: executing program 0 (id=317): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, 0x0, 0x20000000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x4a, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x80, 0x20}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c8e}, 0x4050) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, 0x0) syz_clone(0x20040000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 1.8120002s ago: executing program 0 (id=318): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) prctl$PR_SET_VMA(0x48, 0x0, &(0x7f0000332000/0x4000)=nil, 0x4000, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup2(r1, r1) keyctl$set_reqkey_keyring(0xe, 0x2) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000640)={@remote, @private0={0xfc, 0x0, '\x00', 0x10}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40000, 0x40, 0x5, 0x100, 0x0, 0x40180043}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004e4, 0x62, 0x0, 0x0, 0x0, 0x0, 0x3], 0x10000, 0x2011c0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000000007508000000000000030000000000000061f57c86d97816"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x39000, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x0, 0x0) syz_clone(0x1000000, &(0x7f0000002640)="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", 0x11b1, &(0x7f0000000180), &(0x7f0000000040), &(0x7f00000014c0)="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") ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) ioctl$BINDER_THREAD_EXIT(r9, 0x40046208, 0x0) 1.78871196s ago: executing program 0 (id=319): mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x400408, &(0x7f0000000cc0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00]) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000e80)={0x0, 0x2710}, 0x10) connect$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0x10001, 0x0) 1.757656431s ago: executing program 0 (id=320): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1900, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0011029}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@subsystem='net_prio'}]}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000c00)={0x1, 0x0, [{0x3a, 0x0, 0xec}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1.519430575s ago: executing program 0 (id=321): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5423, &(0x7f0000007000)) ioprio_set$pid(0x1, 0x0, 0x0) (async) ioprio_set$pid(0x1, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x1000, 0x9) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0xc9) r2 = open(&(0x7f00000000c0)='./file0\x00', 0xa85, 0x4) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000240)=0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000000c0)={0xfffffffffffffe43, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x56, @string={0x0, 0x3, "60d672bf8d87e139b9f22df40178fe570a156066a34493b7308f574a42f5d86ca9beb80fb99350bc3e0a96dbedc12a5a4846ea1ea9da35ac03bb928fdf6b4f2cc31847d6ee859b52c771fbfd79379b11c6414e0c76a92896698073ca3008da48b4a48a90dba85bbd13a0a048dc6627a6e8cf5b6963"}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f00000000c0)={0xfffffffffffffe43, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x56, @string={0x0, 0x3, "60d672bf8d87e139b9f22df40178fe570a156066a34493b7308f574a42f5d86ca9beb80fb99350bc3e0a96dbedc12a5a4846ea1ea9da35ac03bb928fdf6b4f2cc31847d6ee859b52c771fbfd79379b11c6414e0c76a92896698073ca3008da48b4a48a90dba85bbd13a0a048dc6627a6e8cf5b6963"}}, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010300000a"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, r1, 0x69994000) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(r3, 0xe, &(0x7f0000000140)={0x7, 0x8d}, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r5, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(r5, 0x1, &(0x7f0000000080)=0x7) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r6, 0x125f, 0x0) (async) ioctl$BLKRRPART(r6, 0x125f, 0x0) 1.450059376s ago: executing program 3 (id=322): ioprio_set$pid(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x2, 0x1a, 0xb, 0x2}, {0x8, 0x6, 0x0, 0x8}, {0x694f, 0x9, 0x0, 0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000100)={r2, 0x300000000000000, 0x1}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1.435304126s ago: executing program 3 (id=323): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) ioctl$BLKGETNRZONES(r0, 0x80041285, &(0x7f0000000040)=0x3c180) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x6ac1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') close(r2) mmap(&(0x7f00006c4000/0x4000)=nil, 0x4000, 0x3000001, 0x110, r1, 0x91b2f000) getresgid(&(0x7f0000002e00), &(0x7f0000002e40), &(0x7f0000002e80)) io_setup(0x4, &(0x7f0000000100)) 1.332210908s ago: executing program 3 (id=324): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x931766f6319eed40) shutdown(0xffffffffffffffff, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xf, &(0x7f00000003c0)={0x4000200004, 0x5}, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f0000000240)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x9, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xff2d, 0x0, &(0x7f0000000000)=[@register_looper={0x40086315}], 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x543e83, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r7 = dup(r6) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000002c0)=0x10000) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', r7, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0xc4) 452.489873ms ago: executing program 2 (id=332): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000005c0)={0x2}) 451.937763ms ago: executing program 1 (id=333): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000020000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x400, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 447.051443ms ago: executing program 2 (id=334): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xfe, 0x0, 0x10000}]}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) 423.154773ms ago: executing program 1 (id=335): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xd66, 0x101002) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e21e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f00000004c0)={0x1, {{0x2, 0xfffc, @multicast2}}, {{0x2, 0xfffc, @local}}}, 0x108) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/144) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000002c0)=[@acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) 312.157355ms ago: executing program 1 (id=336): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(r1, 0xfffffffffffff000, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) futex(&(0x7f0000000100)=0x6, 0x4, 0x4, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008f"]) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x20) (async) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40600, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000040)={0x4, 0xeeee8000, 0x1, 0xffffffffffffffff, 0x20}) (async) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8d04"]) close_range(r0, 0xffffffffffffffff, 0x0) 217.141807ms ago: executing program 2 (id=337): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x5, 0x0, 0xffffffff}}) r1 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8f04"]) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000040)={0x1, 0x4}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) close(r4) 216.374627ms ago: executing program 2 (id=338): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @fda={0x66646185, 0x5, 0x0, 0x34}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 175.455197ms ago: executing program 1 (id=339): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x400000a, 0xfffffefc, 0x6}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000160071827efde4be701161000a04"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) 158.320558ms ago: executing program 1 (id=340): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x8, 0x3, 0xd, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x6) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)={@flat=@handle={0x73682a85, 0x100, 0x1}, @ptr={0x73622a85, 0x0, 0x0, 0x0, 0x0, 0x23}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x48}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 28.26921ms ago: executing program 2 (id=341): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xd, 0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/201, 0xc9, 0x0, 0x8}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 27.99408ms ago: executing program 1 (id=342): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1188}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x18, 0x0, &(0x7f0000000080)=[@request_death={0x400c6313}, @decrefs], 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=343): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40600, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x8001) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x4, 0xeeee8000, 0x4, r6, 0x5}) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0xa, 0x3, 0x3a) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000000104050000000000000000000a000000060006400005000005000100010000000a000200000000a202"], 0x3c}}, 0x80) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, r11}, 0xc) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r13 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r12, 0x7, 0x810, r13, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r15, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r14, 0x0}]) close_range(r14, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x7, 0x0, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts. [ 22.955151][ T36] audit: type=1400 audit(1750780619.090:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.956662][ T281] cgroup: Unknown subsys name 'net' [ 22.977844][ T36] audit: type=1400 audit(1750780619.090:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.005676][ T36] audit: type=1400 audit(1750780619.110:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.006122][ T281] cgroup: Unknown subsys name 'devices' [ 23.146335][ T281] cgroup: Unknown subsys name 'hugetlb' [ 23.152006][ T281] cgroup: Unknown subsys name 'rlimit' [ 23.246859][ T36] audit: type=1400 audit(1750780619.380:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.270107][ T36] audit: type=1400 audit(1750780619.380:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.294942][ T36] audit: type=1400 audit(1750780619.380:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.307403][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.326899][ T36] audit: type=1400 audit(1750780619.460:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.353801][ T36] audit: type=1400 audit(1750780619.460:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.384530][ T36] audit: type=1400 audit(1750780619.520:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.410148][ T36] audit: type=1400 audit(1750780619.520:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.410218][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.266300][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.273467][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.280571][ T289] bridge_slave_0: entered allmulticast mode [ 24.287110][ T289] bridge_slave_0: entered promiscuous mode [ 24.293780][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.300906][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.308126][ T289] bridge_slave_1: entered allmulticast mode [ 24.314479][ T289] bridge_slave_1: entered promiscuous mode [ 24.332531][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.339638][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.347039][ T288] bridge_slave_0: entered allmulticast mode [ 24.353456][ T288] bridge_slave_0: entered promiscuous mode [ 24.376555][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.383747][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.390861][ T288] bridge_slave_1: entered allmulticast mode [ 24.397305][ T288] bridge_slave_1: entered promiscuous mode [ 24.447921][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.455099][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.462198][ T290] bridge_slave_0: entered allmulticast mode [ 24.468701][ T290] bridge_slave_0: entered promiscuous mode [ 24.484223][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.491299][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.498483][ T290] bridge_slave_1: entered allmulticast mode [ 24.505035][ T290] bridge_slave_1: entered promiscuous mode [ 24.538870][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.545986][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.553059][ T291] bridge_slave_0: entered allmulticast mode [ 24.559437][ T291] bridge_slave_0: entered promiscuous mode [ 24.565878][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.572925][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.580085][ T291] bridge_slave_1: entered allmulticast mode [ 24.586428][ T291] bridge_slave_1: entered promiscuous mode [ 24.681768][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.688863][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.696181][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.703243][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.757119][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.764227][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.771514][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.778578][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.787405][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.794498][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.801780][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.808839][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.841801][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.848902][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.856216][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.863265][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.884857][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.892447][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.900043][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.907727][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.915426][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.922706][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.930484][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.937758][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.951981][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.959088][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.971390][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.978485][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.000170][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.007263][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.024770][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.031858][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.062078][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.069264][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.077273][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.084369][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.092375][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.099445][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.118749][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.125847][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.156939][ T288] veth0_vlan: entered promiscuous mode [ 25.166023][ T289] veth0_vlan: entered promiscuous mode [ 25.186190][ T290] veth0_vlan: entered promiscuous mode [ 25.205182][ T289] veth1_macvtap: entered promiscuous mode [ 25.218623][ T288] veth1_macvtap: entered promiscuous mode [ 25.237448][ T291] veth0_vlan: entered promiscuous mode [ 25.256723][ T290] veth1_macvtap: entered promiscuous mode [ 25.272524][ T291] veth1_macvtap: entered promiscuous mode [ 25.291659][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.390724][ T313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 25.426609][ T318] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.462094][ T320] rust_binder: 307 RLIMIT_NICE not set [ 25.464507][ T307] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 25.495122][ T318] FAT-fs (rnullb0): bogus number of reserved sectors [ 25.511539][ T318] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 25.875909][ T337] kvm: pic: non byte write [ 25.881221][ T337] random: crng reseeded on system resumption [ 26.019342][ T344] rust_binder: Error while translating object. [ 26.019370][ T344] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 26.025973][ T344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:20 [ 26.193320][ T63] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 26.304842][ T351] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.333281][ T63] usb 2-1: device descriptor read/64, error -71 [ 26.340206][ T349] rust_binder: 348 RLIMIT_NICE not set [ 26.341462][ T348] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:24 [ 26.573265][ T63] usb 2-1: device descriptor read/64, error -71 [ 26.588701][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.743542][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 26.750180][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.753257][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.760711][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 26.778643][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 26.787883][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.796293][ T10] usb 3-1: Product: syz [ 26.800617][ T10] usb 3-1: Manufacturer: syz [ 26.805452][ T10] usb 3-1: SerialNumber: syz [ 26.833319][ T63] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 26.923264][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 26.929660][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.941556][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.950953][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.959679][ T31] usb 4-1: Product: syz [ 26.963272][ T63] usb 2-1: device descriptor read/64, error -71 [ 26.963930][ T31] usb 4-1: Manufacturer: syz [ 26.974803][ T31] usb 4-1: SerialNumber: syz [ 26.982302][ T31] cdc_ncm 4-1:1.0: skipping garbage [ 26.987834][ T31] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 26.995691][ T31] cdc_ncm 4-1:1.0: bind() failure [ 27.017370][ T31] usb 3-1: USB disconnect, device number 2 [ 27.203297][ T63] usb 2-1: device descriptor read/64, error -71 [ 27.313391][ T63] usb usb2-port1: attempt power cycle [ 27.534461][ T363] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 27.541680][ T363] rust_binder: Write failure EINVAL in pid:8 [ 27.653310][ T63] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 27.684287][ T63] usb 2-1: device descriptor read/8, error -71 [ 27.695380][ T322] usb 4-1: USB disconnect, device number 2 [ 27.793416][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.814306][ T63] usb 2-1: device descriptor read/8, error -71 [ 27.943257][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 27.949512][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.962371][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 27.971513][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.980679][ T9] usb 3-1: config 0 descriptor?? [ 28.053303][ T63] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 28.074288][ T63] usb 2-1: device descriptor read/8, error -71 [ 28.190344][ T9] kye 0003:0458:4018.0001: unbalanced collection at end of report description [ 28.200062][ T9] kye 0003:0458:4018.0001: parse failed [ 28.206427][ T9] kye 0003:0458:4018.0001: probe with driver kye failed with error -22 [ 28.217264][ T63] usb 2-1: device descriptor read/8, error -71 [ 28.227494][ T9] usb 3-1: USB disconnect, device number 3 [ 28.338221][ T63] usb usb2-port1: unable to enumerate USB device [ 28.349667][ T36] kauditd_printk_skb: 87 callbacks suppressed [ 28.349686][ T36] audit: type=1400 audit(1750780624.480:161): avc: denied { getopt } for pid=390 comm="syz.3.29" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.390677][ T36] audit: type=1400 audit(1750780624.500:162): avc: granted { setsecparam } for pid=390 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 28.414591][ T36] audit: type=1400 audit(1750780624.550:163): avc: denied { map } for pid=392 comm="syz.3.30" path="socket:[4700]" dev="sockfs" ino=4700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.423577][ T386] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:15 [ 28.437503][ T36] audit: type=1400 audit(1750780624.550:164): avc: denied { write } for pid=392 comm="syz.3.30" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.466710][ T36] audit: type=1400 audit(1750780624.550:165): avc: denied { execute } for pid=392 comm="syz.3.30" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 28.628415][ T36] audit: type=1400 audit(1750780624.750:166): avc: denied { unlink } for pid=408 comm="syz.2.36" name="#1" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 28.666929][ T36] audit: type=1400 audit(1750780624.750:167): avc: denied { mount } for pid=408 comm="syz.2.36" name="/" dev="overlay" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.693260][ T36] audit: type=1400 audit(1750780624.790:168): avc: denied { create } for pid=408 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 28.713137][ T36] audit: type=1400 audit(1750780624.790:169): avc: denied { create } for pid=408 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.755863][ T36] audit: type=1400 audit(1750780624.790:170): avc: denied { setopt } for pid=408 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.798339][ T418] rust_binder: Write failure EINVAL in pid:29 [ 29.428386][ T432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:38 [ 29.587324][ T437] random: crng reseeded on system resumption [ 29.605138][ T441] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.617598][ T440] overlayfs: failed to resolve './file0': -2 [ 29.733242][ T63] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 29.765106][ T458] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 29.765164][ T458] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:23 [ 29.775090][ T458] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 29.784317][ T458] rust_binder: Read failure Err(EFAULT) in pid:23 [ 29.831581][ T465] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 29.845565][ T465] rust_binder: Write failure EINVAL in pid:31 [ 29.845697][ T465] rust_binder: Write failure EFAULT in pid:31 [ 29.845717][ T466] rust_binder: Write failure EFAULT in pid:31 [ 29.896976][ T63] usb 3-1: not running at top speed; connect to a high speed hub [ 29.920298][ T63] usb 3-1: config 1 interface 0 has no altsetting 0 [ 29.946718][ T63] usb 3-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.40 [ 29.963045][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.971194][ T63] usb 3-1: Product: syz [ 29.975587][ T63] usb 3-1: Manufacturer: syz [ 29.980211][ T63] usb 3-1: SerialNumber: syz [ 30.010347][ T482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 30.010390][ T482] rust_binder: Read failure Err(EFAULT) in pid:46 [ 30.019975][ T482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.278233][ T488] rust_binder: Error while translating object. [ 30.285444][ T488] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.292054][ T488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:40 [ 30.341964][ T490] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=55466 sclass=netlink_xfrm_socket pid=490 comm=syz.0.64 [ 30.373713][ T63] usbhid 3-1:1.0: can't add hid device: -71 [ 30.388784][ T494] capability: warning: `syz.0.66' uses deprecated v2 capabilities in a way that may be insecure [ 30.392375][ T63] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 30.401458][ T494] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:54 [ 30.417915][ T63] usb 3-1: USB disconnect, device number 4 [ 30.477864][ T506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:61 [ 30.604727][ T513] input: syz1 as /devices/virtual/input/input5 [ 30.912287][ T516] rust_binder: Error in use_page_slow: ESRCH [ 30.912309][ T516] rust_binder: use_range failure ESRCH [ 30.918710][ T516] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 30.924746][ T516] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 30.932832][ T516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:44 [ 31.158290][ T523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 31.380019][ T533] incfs: Backing dir is not set, filesystem can't be mounted. [ 31.396693][ T533] incfs: mount failed -2 [ 31.430433][ T541] netlink: 80 bytes leftover after parsing attributes in process `syz.1.81'. [ 31.457815][ T545] rust_binder: Write failure EINVAL in pid:40 [ 31.509790][ T547] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 31.560584][ T549] rust_binder: Read failure Err(EAGAIN) in pid:40 [ 31.753230][ T451] Bluetooth: hci0: command 0x1003 tx timeout [ 31.753247][ T450] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 31.974937][ T554] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 31.982346][ T554] rust_binder: Write failure EINVAL in pid:53 [ 31.982650][ T554] rust_binder: Write failure EFAULT in pid:53 [ 32.243239][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.292504][ T561] rust_binder: Error while translating object. [ 32.292539][ T561] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 32.299005][ T561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:74 [ 32.302486][ T562] rust_binder: Error while translating object. [ 32.323974][ T562] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 32.336361][ T562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:73 [ 32.354740][ T566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 32.360318][ T565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 32.364085][ T566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 32.423217][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 32.436097][ T45] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 32.449633][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.458114][ T45] usb 3-1: Product: syz [ 32.462421][ T45] usb 3-1: Manufacturer: syz [ 32.467107][ T45] usb 3-1: SerialNumber: syz [ 32.472430][ T45] usb 3-1: config 0 descriptor?? [ 32.478717][ T45] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 32.486609][ T45] usb 3-1: Detected FT4233HP [ 32.583222][ T63] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.633212][ T352] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 32.680000][ T45] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 32.682216][ T588] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 32.688268][ T45] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 32.696566][ T588] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock [ 32.743305][ T63] usb 4-1: Using ep0 maxpacket: 16 [ 32.750069][ T63] usb 4-1: config 0 has an invalid interface number: 27 but max is 0 [ 32.758388][ T63] usb 4-1: config 0 has no interface number 0 [ 32.764766][ T63] usb 4-1: config 0 interface 27 has no altsetting 0 [ 32.773523][ T63] usb 4-1: New USB device found, idVendor=04d2, idProduct=4027, bcdDevice=f2.12 [ 32.782707][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.790930][ T63] usb 4-1: Product: syz [ 32.795449][ T63] usb 4-1: Manufacturer: syz [ 32.804216][ T352] usb 1-1: No LPM exit latency info found, disabling LPM. [ 32.811579][ T63] usb 4-1: SerialNumber: syz [ 32.818053][ T63] usb 4-1: config 0 descriptor?? [ 32.823561][ T352] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 32.839892][ T352] usb 1-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.852996][ T352] usb 1-1: config 1 interface 0 has no altsetting 0 [ 32.861991][ T352] usb 1-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.40 [ 32.871190][ T352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.879376][ T352] usb 1-1: Manufacturer: 塱픐맧숷朌㲄箰뼾툜 [ 32.886691][ T352] usb 1-1: SerialNumber: 獈픂覰鱯氳핲锩途쑭꘰Ⰹ맊⯐삳⥾᰼ꭡ饚馧⵳뽤뙶兣漩쮀삛薪饲㙌呛嵊ᑞᖠ嫤㲻没酿颶䓨斵喨ṱ䫱쒷纞鷰窺豦⩿Ჭ琥ߣ౰쎪춒黛窪㉓ߓ☩㎫嗁댭ↀ㘚㰮꙱டڜ棱靋쐣ꝫ⽻줟쁰껾⩃Ź繦ᗋ퉽义霎㰌硢ꍚ䪤糺㞡뚦藮\桓ᷤ鉝ﴯ [ 32.891625][ T556] rust_binder: Error while translating object. [ 32.919907][ T556] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 32.921898][ T595] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.926497][ T571] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 32.936823][ T556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:55 [ 32.955344][ T548] usb 3-1: USB disconnect, device number 5 [ 32.966097][ T595] input: syz0 as /devices/virtual/input/input6 [ 32.973108][ T548] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 32.983306][ T548] ftdi_sio 3-1:0.0: device disconnected [ 33.487585][ T604] rust_binder: Write failure EINVAL in pid:58 [ 33.595249][ T63] usb 4-1: USB disconnect, device number 3 [ 33.663733][ T36] kauditd_printk_skb: 58 callbacks suppressed [ 33.663810][ T36] audit: type=1400 audit(1750780629.800:229): avc: denied { create } for pid=610 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.690099][ T36] audit: type=1400 audit(1750780629.800:230): avc: denied { setopt } for pid=610 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.773295][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 33.780971][ T548] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 33.913229][ T31] usb 2-1: device descriptor read/64, error -71 [ 33.919616][ T548] usb 3-1: device descriptor read/64, error -71 [ 34.107826][ T36] audit: type=1400 audit(1750780630.240:231): avc: denied { bind } for pid=623 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.128323][ T36] audit: type=1400 audit(1750780630.240:232): avc: denied { listen } for pid=623 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.149273][ T36] audit: type=1400 audit(1750780630.250:233): avc: denied { accept } for pid=623 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.163361][ T548] usb 3-1: device descriptor read/64, error -71 [ 34.176889][ T31] usb 2-1: device descriptor read/64, error -71 [ 34.178647][ T627] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 34.240949][ T629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.110'. [ 34.383118][ T636] Zero length message leads to an empty skb [ 34.423230][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 34.430870][ T548] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 34.563305][ T548] usb 3-1: device descriptor read/64, error -71 [ 34.569667][ T31] usb 2-1: device descriptor read/64, error -71 [ 34.653280][ T609] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.783282][ T609] usb 4-1: device descriptor read/64, error -71 [ 34.803318][ T548] usb 3-1: device descriptor read/64, error -71 [ 34.813588][ T31] usb 2-1: device descriptor read/64, error -71 [ 34.913367][ T548] usb usb3-port1: attempt power cycle [ 34.923356][ T31] usb usb2-port1: attempt power cycle [ 35.023279][ T609] usb 4-1: device descriptor read/64, error -71 [ 35.253344][ T548] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 35.263355][ T609] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 35.271032][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 35.279727][ T548] usb 3-1: device descriptor read/8, error -71 [ 35.295113][ T31] usb 2-1: device descriptor read/8, error -71 [ 35.409170][ T352] usbhid 1-1:1.0: can't add hid device: -71 [ 35.413364][ T609] usb 4-1: device descriptor read/64, error -71 [ 35.422251][ T352] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 35.427287][ T548] usb 3-1: device descriptor read/8, error -71 [ 35.432342][ T352] usb 1-1: USB disconnect, device number 2 [ 35.448285][ T31] usb 2-1: device descriptor read/8, error -71 [ 35.459509][ T648] rust_binder: Write failure EINVAL in pid:82 [ 35.499692][ T36] audit: type=1400 audit(1750780631.630:234): avc: denied { mounton } for pid=649 comm="syz.0.117" path="/proc/84/cgroup" dev="proc" ino=6487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 35.569274][ T655] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 35.569296][ T655] rust_binder: Read failure Err(EFAULT) in pid:89 [ 35.663368][ T609] usb 4-1: device descriptor read/64, error -71 [ 35.693226][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 35.701289][ T548] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 35.724423][ T31] usb 2-1: device descriptor read/8, error -71 [ 35.730731][ T548] usb 3-1: device descriptor read/8, error -71 [ 35.783401][ T609] usb usb4-port1: attempt power cycle [ 35.854358][ T31] usb 2-1: device descriptor read/8, error -71 [ 35.864387][ T548] usb 3-1: device descriptor read/8, error -71 [ 35.963487][ T31] usb usb2-port1: unable to enumerate USB device [ 35.973571][ T548] usb usb3-port1: unable to enumerate USB device [ 36.124361][ T609] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 36.154775][ T609] usb 4-1: device descriptor read/8, error -71 [ 36.294364][ T609] usb 4-1: device descriptor read/8, error -71 [ 36.535378][ T609] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 36.594198][ T609] usb 4-1: device descriptor read/8, error -71 [ 36.603374][ T36] audit: type=1400 audit(1750780632.720:235): avc: denied { execute } for pid=663 comm="syz.1.122" path=2F6465762F6173686D656D202864656C6574656429 dev="tmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.735017][ T609] usb 4-1: device descriptor read/8, error -71 [ 36.762187][ T674] ======================================================= [ 36.762187][ T674] WARNING: The mand mount option has been deprecated and [ 36.762187][ T674] and is ignored by this kernel. Remove the mand [ 36.762187][ T674] option from the mount to silence this warning. [ 36.762187][ T674] ======================================================= [ 36.798629][ T36] audit: type=1400 audit(1750780632.890:236): avc: denied { remount } for pid=673 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 36.799670][ T674] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 36.852188][ T36] audit: type=1400 audit(1750780632.980:237): avc: denied { ioctl } for pid=675 comm="syz.0.125" path="socket:[5559]" dev="sockfs" ino=5559 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 36.888934][ T680] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.889301][ T680] rust_binder: Write failure EINVAL in pid:100 [ 36.903300][ T609] usb usb4-port1: unable to enumerate USB device [ 36.923667][ T686] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 36.923694][ T686] rust_binder: Read failure Err(EFAULT) in pid:102 [ 36.957354][ T688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:104 [ 36.966441][ T36] audit: type=1400 audit(1750780633.100:238): avc: denied { name_bind } for pid=682 comm="syz.1.128" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 37.023353][ T695] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 37.086808][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.086840][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.093649][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.100087][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.100106][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.114504][ T704] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 37.120311][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.128743][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.134878][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.151143][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.151166][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.166794][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.178094][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.184729][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.191271][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.197878][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.204794][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.211325][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.217875][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.224821][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.231292][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.237807][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.244285][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.250733][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.257225][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.263699][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.270137][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.277414][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.284353][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.290815][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.297615][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.304112][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.310650][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.317352][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.324044][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.330539][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.337130][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.343643][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.350551][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.358140][ T352] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 37.373291][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.374485][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.381550][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.388163][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.395232][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.402152][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.408677][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.415498][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.422466][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.429034][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.435561][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.443241][ T9] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 37.443618][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.459477][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.466390][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.472916][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.479963][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.487446][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.496315][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.506757][ T377] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.519246][ T720] can0: slcan on ttyS3. [ 37.521870][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.521899][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.521918][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.528827][ T352] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 37.533868][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.545811][ T352] usb 3-1: config 1 interface 0 has no altsetting 0 [ 37.563266][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.570088][ T352] usb 3-1: New USB device found, idVendor=045e, idProduct=0713, bcdDevice= 0.40 [ 37.574016][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.580935][ T352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.589763][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.599110][ T352] usb 3-1: Product: ы [ 37.613274][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.615691][ T706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.616400][ T352] usb 3-1: Manufacturer: 䴃崼腹롒棻䳖撌唍ऴ긴ᑠ米᝽ [ 37.640236][ T9] usb 2-1: config 9 has an invalid interface number: 51 but max is 0 [ 37.653424][ T9] usb 2-1: config 9 has no interface number 0 [ 37.666821][ T719] can0 (unregistered): slcan off ttyS3. [ 37.679452][ T352] usb 3-1: SerialNumber: 荱홯⻗ᚤꔊ잽巺⹚Ő䩨輬쮎誅ࡂ픒玜獱煙락ᑼ䒓曕ⲏ蝚䞙鿗郇ⴹ쵡ᆂゾ萊ꑯ띎ᓩꭈ绮切쥤蜼켻㳾梺墣ປ㶞犂龩䜀䏯ᑀ묞⥝峞踵㔑醅攚⍶䝡㡹铵汸➯앿핶롻ꚬ엪䅑直쩇尕崽ߜ琂શ易헲냛덴羯咔 [ 37.714179][ T9] usb 2-1: string descriptor 0 read error: -22 [ 37.720904][ T9] usb 2-1: New USB device found, idVendor=07a6, idProduct=07c2, bcdDevice=37.12 [ 37.736069][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.765638][ T737] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.766192][ T737] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 37.799575][ T741] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118 [ 37.828307][ T744] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.950942][ T712] overlayfs: conflicting lowerdir path [ 37.974806][ T712] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 38.024579][ T9] usb 2-1: USB disconnect, device number 10 [ 38.083296][ T646] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 38.167575][ T701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.176299][ T701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.233282][ T646] usb 1-1: Using ep0 maxpacket: 8 [ 38.240006][ T646] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 38.249284][ T646] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.258258][ T646] usb 1-1: config 0 descriptor?? [ 38.394787][ T352] usbhid 3-1:1.0: can't add hid device: -71 [ 38.403687][ T352] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 38.415195][ T352] usb 3-1: USB disconnect, device number 10 [ 38.465415][ T646] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 38.475554][ T646] asix 1-1:0.0: probe with driver asix failed with error -32 [ 38.543542][ T759] SELinux: security_context_str_to_sid (u6Q rejected, failed to enable media [ 43.443012][ T939] binder: Bad value for 'stats' [ 43.885629][ T45] ftdi_sio 4-1:81.1: FTDI USB Serial Device converter detected [ 43.903411][ T45] ftdi_sio ttyUSB0: unknown device type: 0x990d [ 43.919731][ T45] usb 4-1: USB disconnect, device number 9 [ 43.931278][ T45] ftdi_sio 4-1:81.1: device disconnected [ 44.033227][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 44.113441][ T961] rust_binder: Error while translating object. [ 44.113494][ T961] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 44.119896][ T961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:156 [ 44.204547][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 44.225151][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 44.236930][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 44.248315][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 44.263238][ T45] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 44.263467][ T9] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 44.281344][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.290500][ T9] usb 1-1: Product: syz [ 44.295017][ T9] usb 1-1: Manufacturer: syz [ 44.300434][ T9] usb 1-1: SerialNumber: syz [ 44.307681][ T9] usb 1-1: config 0 descriptor?? [ 44.313627][ T954] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 44.323055][ T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 44.393244][ T45] usb 4-1: device descriptor read/64, error -71 [ 44.527168][ T954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.537062][ T954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.550130][ T9] usb 1-1: USB disconnect, device number 4 [ 44.633254][ T45] usb 4-1: device descriptor read/64, error -71 [ 44.883258][ T45] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 44.983194][ T966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:162 [ 44.984626][ T966] rust_binder: Read failure Err(EFAULT) in pid:162 [ 45.023224][ T45] usb 4-1: device descriptor read/64, error -71 [ 45.089049][ T970] batadv_slave_0: entered promiscuous mode [ 45.099264][ T970] syzkaller0: entered allmulticast mode [ 45.107167][ T969] syzkaller0: left allmulticast mode [ 45.113114][ T969] batadv_slave_0: left promiscuous mode [ 45.137289][ T973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.137382][ T973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:171 [ 45.144567][ T973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:171 [ 45.282496][ T980] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.290044][ T45] usb 4-1: device descriptor read/64, error -71 [ 45.344126][ T980] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 45.413386][ T45] usb usb4-port1: attempt power cycle [ 45.763258][ T45] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 45.784362][ T45] usb 4-1: device descriptor read/8, error -71 [ 45.911603][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 45.911625][ T36] audit: type=1400 audit(1750780642.040:295): avc: denied { mount } for pid=983 comm="syz.2.216" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 45.914764][ T45] usb 4-1: device descriptor read/8, error -71 [ 45.947148][ T36] audit: type=1400 audit(1750780642.080:296): avc: denied { read append } for pid=983 comm="syz.2.216" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 45.973335][ T36] audit: type=1400 audit(1750780642.080:297): avc: denied { open } for pid=983 comm="syz.2.216" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 46.011471][ T36] audit: type=1400 audit(1750780642.140:298): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 46.040800][ T986] binfmt_misc: register: failed to install interpreter file ./file0 [ 46.135192][ T994] rust_binder: Error while translating object. [ 46.135241][ T994] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 46.141574][ T994] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:174 [ 46.159462][ T36] audit: type=1400 audit(1750780642.290:299): avc: denied { write } for pid=995 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 46.193309][ T45] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 46.214587][ T45] usb 4-1: device descriptor read/8, error -71 [ 46.344221][ T45] usb 4-1: device descriptor read/8, error -71 [ 46.473651][ T45] usb usb4-port1: unable to enumerate USB device [ 47.129411][ T1019] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.155079][ T1019] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 47.163328][ T1017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'. [ 47.183221][ T36] audit: type=1400 audit(1750780643.290:300): avc: denied { bind } for pid=1016 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.343241][ T1031] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.368867][ T1034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.376067][ T1034] rust_binder: Write failure EINVAL in pid:199 [ 47.384435][ T1035] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.398921][ T1035] rust_binder: Write failure EINVAL in pid:199 [ 47.447744][ T1038] random: crng reseeded on system resumption [ 47.466151][ T45] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 47.498461][ T1045] FAT-fs (rnullb0): bogus number of reserved sectors [ 47.531387][ T1045] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 47.596938][ T36] audit: type=1400 audit(1750780643.730:301): avc: denied { map } for pid=1054 comm="syz.1.238" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 47.667406][ T45] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 47.677140][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.686725][ T45] usb 3-1: config 0 descriptor?? [ 47.782411][ T36] audit: type=1400 audit(1750780643.910:302): avc: denied { setattr } for pid=1054 comm="syz.1.238" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.905576][ T45] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 47.924729][ T1071] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.930792][ T1071] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 47.933664][ T1074] rust_binder: Error while translating object. [ 47.963234][ T1074] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 47.984561][ T1074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:181 [ 47.994531][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.015356][ T1077] rust_binder: Write failure EINVAL in pid:217 [ 48.033372][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.050696][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.063270][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.089633][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.099682][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.109916][ T36] audit: type=1400 audit(1750780644.240:303): avc: denied { connect } for pid=1078 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.143582][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.143618][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.171151][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.179298][ T36] audit: type=1400 audit(1750780644.310:304): avc: denied { write } for pid=1080 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 48.185319][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.223264][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.230066][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.243303][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.256894][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.292141][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.301975][ T1083] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 48.313298][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.322165][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.333231][ T1083] rust_binder: Read failure Err(EFAULT) in pid:189 [ 48.353357][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.360303][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.394829][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.413394][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.433240][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.449608][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.473240][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.499341][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.506359][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.519087][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.533263][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.553220][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.560149][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.578718][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.588775][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.606170][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.614269][ T1099] rust_binder: Error while translating object. [ 48.620913][ T1099] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 48.635318][ T1099] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:140 [ 48.646879][ T1099] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 48.656089][ T1099] rust_binder: Read failure Err(EFAULT) in pid:140 [ 48.716433][ T45] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 48.745767][ T45] asix 3-1:0.0: probe with driver asix failed with error -71 [ 48.764332][ T1111] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.773348][ T45] usb 3-1: USB disconnect, device number 13 [ 48.820213][ T1112] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 48.820448][ T1112] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.846393][ T1112] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 48.863539][ T1116] process 'syz.3.261' launched './file0' with NULL argv: empty string added [ 49.124672][ T1125] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 49.163233][ T1125] rust_binder: Write failure EINVAL in pid:152 [ 49.164124][ T1125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.264'. [ 49.483204][ T713] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 49.507448][ T1136] binder: Unknown parameter 'subj_type' [ 49.614314][ T1140] incfs: Error accessing: ./file0. [ 49.619878][ T1140] incfs: mount failed -20 [ 49.623437][ T713] usb 4-1: device descriptor read/64, error -71 [ 49.750527][ T1151] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=26 [ 49.750559][ T1151] rust_binder: Error while translating object. [ 49.763283][ T1151] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.769544][ T1151] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:208 [ 49.833681][ T1154] rust_binder: Write failure EINVAL in pid:210 [ 49.863252][ T713] usb 4-1: device descriptor read/64, error -71 [ 49.904203][ T1157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:211 [ 49.923289][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 50.068039][ T1167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=1167 comm=syz.1.278 [ 50.114464][ T31] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 50.132579][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.153456][ T713] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 50.156777][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.191833][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 50.221110][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 50.231602][ T31] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 50.252019][ T31] usb 1-1: Manufacturer: syz [ 50.264319][ T31] usb 1-1: config 0 descriptor?? [ 50.303230][ T713] usb 4-1: device descriptor read/64, error -71 [ 50.313424][ T1175] tipc: Enabling of bearer rejected, failed to enable media [ 50.408796][ T1184] kvm: pic: non byte write [ 50.414167][ T1184] random: crng reseeded on system resumption [ 50.471865][ T31] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 50.479773][ T31] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 50.492607][ T31] appleir 0003:05AC:8243.0003: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 50.507010][ T31] usb 1-1: USB disconnect, device number 5 [ 50.544554][ T713] usb 4-1: device descriptor read/64, error -71 [ 50.544989][ T1190] fido_id[1190]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 50.555878][ T1192] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:237 [ 50.573415][ T1193] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.581461][ T1197] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 50.663394][ T713] usb usb4-port1: attempt power cycle [ 50.822751][ T1222] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 50.822782][ T1222] rust_binder: Read failure Err(EFAULT) in pid:255 [ 50.888833][ T1234] netlink: 244 bytes leftover after parsing attributes in process `syz.0.295'. [ 50.913879][ T1234] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.917651][ T36] kauditd_printk_skb: 53 callbacks suppressed [ 50.917674][ T36] audit: type=1400 audit(1750780647.050:358): avc: denied { create } for pid=1233 comm="syz.0.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 50.991709][ T1245] fuse: Unknown parameter 'romode' [ 51.013231][ T713] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 51.013269][ T1247] rust_binder: Write failure EINVAL in pid:227 [ 51.024516][ T1247] rust_binder: Read failure Err(EAGAIN) in pid:227 [ 51.044269][ T713] usb 4-1: device descriptor read/8, error -71 [ 51.058682][ T1250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:257 [ 51.059486][ T36] audit: type=1400 audit(1750780647.190:359): avc: denied { ioctl } for pid=1249 comm="syz.0.301" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 51.109790][ T1252] can0: slcan on ttyS3. [ 51.163231][ T31] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 51.184328][ T713] usb 4-1: device descriptor read/8, error -71 [ 51.203812][ T1252] can0 (unregistered): slcan off ttyS3. [ 51.315708][ T36] audit: type=1400 audit(1750780647.450:360): avc: denied { getopt } for pid=1270 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.336607][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 51.347543][ T31] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 51.367166][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.379241][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.398534][ T31] usb 3-1: Product: 칣禳籭콽懎缮逬䫴빤斅暪쩖庹蟈捴箂쟕鑅戮흇♞狩馒雯싒壿⠄뱝Νઓ繽򐞭鵶ҫ᪐拢䷺⚼滲ঽ떚뿟렋궴ˬﵸࢰ껷᯦៖誺薠᯳渆፞뮼夝둣ꕖ难㉌⁽귋ό춪疨끚಴蘒쳱ࢮ宀⏦蜣扑촩直霦비洯뎃倲쉼猬ﴉ탃강뇰ⶈ紿袼비苋벑߲좦ᡖ챆蒴僔竅臇粪㥛 [ 51.434962][ T31] usb 3-1: Manufacturer: 䊸 [ 51.439723][ T31] usb 3-1: SerialNumber: ⵁ瀤ﲴ鮨罷槰꩞⃚䧬苮舊叶瀈눅㌖튨눗薩⬡ຘ骫췘볥㰂輪쥙炬똞糶翖ᙽ὆繽崍亠脋짾池셀棩쓥萔䘂唧菋賮垏裖덡ￃꯂ븏ꁤ㻾뛹咶칍峆匋䒠씘⸾罕ﻻ祉䀯잃剴躿樂鍧禧ඈ둒⪉啿῭̋砷嶄䥿ﾙᩩ焙퐛⼥驰폌ốአ∎♇掘ࡻ깎輲ᣉฌ⑎ [ 51.444067][ T713] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 51.530949][ T1293] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.530999][ T1293] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.544367][ T713] usb 4-1: device descriptor read/8, error -71 [ 51.626927][ T1300] rust_binder: Write failure EINVAL in pid:248 [ 51.684485][ T713] usb 4-1: device descriptor read/8, error -71 [ 51.783633][ T1310] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.803493][ T713] usb usb4-port1: unable to enumerate USB device [ 51.844591][ T1320] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.850232][ T1320] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 51.871668][ T1323] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.892826][ T1323] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 51.899510][ T1323] rust_binder: Read failure Err(EFAULT) in pid:274 [ 51.973213][ T713] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 51.988332][ T1329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.994187][ T1330] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 51.995005][ T1332] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 52.133267][ T713] usb 2-1: Using ep0 maxpacket: 8 [ 52.153452][ T713] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 52.162304][ T713] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 52.175710][ T713] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.188783][ T713] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.199839][ T713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.209695][ T713] usb 2-1: Product: 뀆蒟䕀搸魾ܞ쿵狱៞ܷօ쾟礟硋Ꝛ瞝迩ʋ헣ภש柃萣앟䷊摉౮ꚣ몴౞ஐ沂銣髑脔᪷喾ฝᶞ윣荏赚뷨핺᪗㼵蚐㤷㿊￞᪶蔉䓃凱텐䨇␶鍽儼⫃閮㥄᳦೭⇹훎똪贶쬢跞䥇媲䷥囦厭뚖턿⛑簖ᷣ⛅䷡悴쒸뒑蔸䭿᮳뿥㼣甦ޛ▙厏옉㹅씓攮韣 [ 52.244740][ T713] usb 2-1: Manufacturer: ᐊ [ 52.249737][ T713] usb 2-1: SerialNumber: 对縭ⵃꑢ徺䁭䦴铀࣒鷄鏗蛢Л湒텗㔷Ẳ彟儕ᶅ⬦Ұ᲏茶1츙꼰⬒╂鸷描胅髉㇪펀ﭹ톮훳꽳폜⭑䥄᜺쁲柚焵陷쇏딒銃⣒䥽ந脹 [ 52.403378][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 52.422476][ T31] cdc_ncm 3-1:1.0: bind() failure [ 52.429126][ T31] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 52.436418][ T31] cdc_ncm 3-1:1.1: bind() failure [ 52.443905][ T31] usb 3-1: USB disconnect, device number 14 [ 52.465281][ T1344] rust_binder: Error while translating object. [ 52.465330][ T1344] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.471931][ T1344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:261 [ 52.476312][ T1308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.503549][ T1308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.517891][ T713] usb 2-1: 0:2 : does not exist [ 52.525552][ T713] usb 2-1: USB disconnect, device number 12 [ 52.536117][ T495] udevd[495]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.573915][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.581535][ T1347] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.587441][ T1347] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 52.593668][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.594648][ T1347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 52.603901][ T45] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 52.615339][ T1347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:264 [ 52.628035][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.654019][ T609] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 52.666827][ T45] usb 1-1: config 0 descriptor?? [ 52.675641][ T36] audit: type=1400 audit(1750780648.810:361): avc: denied { write } for pid=1351 comm="syz.2.327" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 52.701605][ T1352] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.701640][ T1352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:266 [ 52.804614][ T609] usb 4-1: config 0 has no interfaces? [ 52.821629][ T609] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.831343][ T609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 52.839954][ T609] usb 4-1: SerialNumber: syz [ 52.846176][ T609] usb 4-1: config 0 descriptor?? [ 53.056190][ T609] usb 4-1: USB disconnect, device number 18 [ 53.070550][ T1357] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 53.070585][ T1357] rust_binder: Read failure Err(EFAULT) in pid:258 [ 53.124658][ T1362] netlink: 'syz.2.330': attribute type 29 has an invalid length. [ 53.143737][ T1362] netlink: 'syz.2.330': attribute type 29 has an invalid length. [ 53.152375][ T36] audit: type=1400 audit(1750780649.280:362): avc: denied { bind } for pid=1365 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.152478][ T1366] rust_binder: Error while translating object. [ 53.173555][ T1366] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.180483][ T1366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:262 [ 53.183815][ T36] audit: type=1400 audit(1750780649.280:363): avc: denied { name_bind } for pid=1365 comm="syz.1.331" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 53.228781][ T36] audit: type=1400 audit(1750780649.280:364): avc: denied { node_bind } for pid=1365 comm="syz.1.331" saddr=fe80::bb src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 53.266486][ T1371] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 53.279692][ T45] usb 1-1: string descriptor 0 read error: -22 [ 53.303714][ T1373] rust_binder: Write failure EINVAL in pid:278 [ 53.310764][ T1375] rust_binder: inc_ref_done called when no active inc_refs [ 53.312158][ T45] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0004/input/input12 [ 53.339131][ T45] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0004/input/input13 [ 53.361808][ T45] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0004/input/input14 [ 53.402585][ T45] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0004/input/input15 [ 53.422258][ T45] uclogic 0003:256C:006D.0004: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 53.508893][ T1334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.533763][ T1334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.657073][ T1395] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 168, size: 201) [ 53.657099][ T1395] rust_binder: Error while translating object. [ 53.667785][ T1395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.674223][ T1395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:284 [ 53.696094][ T1397] rust_kernel: panicked at drivers/android/binder/node.rs:877:13: [ 53.696094][ T1397] attempt to subtract with overflow [ 53.719045][ T1397] ------------[ cut here ]------------ [ 53.724890][ T1397] kernel BUG at rust/helpers/bug.c:7! [ 53.730973][ T1397] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 53.731776][ T36] audit: type=1400 audit(1750780649.860:365): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 53.738082][ T1397] CPU: 0 UID: 0 PID: 1397 Comm: syz.1.342 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270 [ 53.738118][ T1397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.738133][ T1397] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 53.761729][ T36] audit: type=1400 audit(1750780649.860:366): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.775696][ T1397] Code: 3e ca e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 cd 0b 73 49 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 87 cf 3a c5 90 90 90 90 90 90 90 90 90 [ 53.775729][ T1397] RSP: 0018:ffffc900117ada90 EFLAGS: 00010246 [ 53.775769][ T1397] RAX: 0000000000000061 RBX: 1ffff920022f5b54 RCX: 026c6af2274b3d00 [ 53.775788][ T1397] RDX: ffffc90001a32000 RSI: 00000000000041e5 RDI: 00000000000041e6 [ 53.775805][ T1397] RBP: ffffc900117ada90 R08: ffffc900117ad787 R09: 1ffff920022f5af0 [ 53.786690][ T36] audit: type=1400 audit(1750780649.860:367): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.791294][ T1397] R10: dffffc0000000000 R11: fffff520022f5af1 R12: 0000000000000000 [ 53.896219][ T1397] R13: dffffc0000000000 R14: ffffc900117adac0 R15: ffffc900117adaf0 [ 53.904396][ T1397] FS: 00007fed3dcd36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 53.913794][ T1397] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.921190][ T1397] CR2: 00007fed3dcd2f98 CR3: 00000001383de000 CR4: 00000000003526b0 [ 53.929635][ T1397] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.937842][ T1397] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.946197][ T1397] Call Trace: [ 53.950337][ T1397] [ 53.953701][ T1397] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 53.961772][ T1397] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 53.971187][ T1397] ? unwind_get_return_address+0x51/0x90 [ 53.977881][ T1397] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 53.992808][ T1397] ? stack_trace_save+0x9d/0xe0 [ 53.998154][ T1397] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 54.006450][ T1397] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 54.016047][ T1397] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 54.027564][ T1397] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 54.038899][ T1397] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 54.049286][ T1397] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.056032][ T1397] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 54.067924][ T1397] ? __cfi__raw_spin_lock+0x10/0x10 [ 54.073817][ T1397] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 54.084490][ T1397] ? _RNvMs6_NtCs43vyB533jt3_6kernel4listINtB5_4ListINtCshgDM7dBCdno_11rust_binder7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x3c7/0x4d0 [ 54.099843][ T1397] ? _raw_spin_unlock+0x45/0x60 [ 54.105022][ T1397] ? rust_helper_spin_unlock+0x19/0x30 [ 54.111033][ T1397] ? _RNvMs_NtCshgDM7dBCdno_11rust_binder7processNtB4_12ProcessInner9push_work+0x93c/0xb30 [ 54.121533][ T1397] ? __cfi__raw_spin_lock+0x10/0x10 [ 54.127311][ T1397] ? __cfi__RNvMs_NtCshgDM7dBCdno_11rust_binder7processNtB4_12ProcessInner9push_work+0x10/0x10 [ 54.138244][ T1397] ? krealloc_noprof+0xfa/0x130 [ 54.143848][ T1397] ? _raw_spin_unlock+0x45/0x60 [ 54.149218][ T1397] ? __kasan_check_write+0x18/0x20 [ 54.154595][ T1397] ? _raw_spin_lock+0x8c/0x120 [ 54.159524][ T1397] ? __cfi__raw_spin_lock+0x10/0x10 [ 54.165117][ T1397] ? mutex_unlock+0x8b/0x240 [ 54.169860][ T1397] ? __kasan_check_write+0x18/0x20 [ 54.175727][ T1397] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 54.185694][ T1397] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 54.196142][ T1397] ? is_bpf_text_address+0x17b/0x1a0 [ 54.201747][ T1397] ? kernel_text_address+0xa9/0xe0 [ 54.206885][ T1397] ? unwind_get_return_address+0x51/0x90 [ 54.212729][ T1397] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 54.219037][ T1397] ? arch_stack_walk+0x10b/0x170 [ 54.224810][ T1397] ? stack_depot_save_flags+0x38/0x800 [ 54.230492][ T1397] ? kasan_save_alloc_info+0x40/0x50 [ 54.236108][ T1397] ? kasan_save_track+0x4f/0x80 [ 54.241193][ T1397] ? kasan_save_track+0x3e/0x80 [ 54.246162][ T1397] ? kasan_save_alloc_info+0x40/0x50 [ 54.251753][ T1397] ? __kasan_kmalloc+0x96/0xb0 [ 54.256768][ T1397] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 54.264408][ T1397] ? krealloc_noprof+0x8d/0x130 [ 54.269315][ T1397] ? rust_helper_krealloc+0x33/0xd0 [ 54.274845][ T1397] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 54.284703][ T1397] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 54.295711][ T1397] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20 [ 54.305398][ T1397] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 54.314433][ T1397] ? __se_sys_ioctl+0x135/0x1b0 [ 54.319610][ T1397] ? __x64_sys_ioctl+0x7f/0xa0 [ 54.324749][ T1397] ? do_syscall_64+0x58/0xf0 [ 54.329476][ T1397] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.335945][ T1397] ? __kasan_kmalloc+0x96/0xb0 [ 54.341144][ T1397] ? kasan_save_alloc_info+0x40/0x50 [ 54.346569][ T1397] ? __kasan_kmalloc+0x96/0xb0 [ 54.351376][ T1397] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 54.358218][ T1397] ? __kasan_check_write+0x18/0x20 [ 54.363556][ T1397] ? _raw_spin_lock+0x8c/0x120 [ 54.368823][ T1397] ? __cfi__raw_spin_lock+0x10/0x10 [ 54.374170][ T1397] ? resched_curr+0x113/0x430 [ 54.378977][ T1397] ? cgroup_rstat_updated+0x132/0x7f0 [ 54.384467][ T1397] ? __cfi_resched_curr+0x10/0x10 [ 54.389549][ T1397] ? _raw_spin_unlock+0x45/0x60 [ 54.394450][ T1397] ? rust_helper_spin_unlock+0x19/0x30 [ 54.400063][ T1397] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 54.410698][ T1397] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 54.422223][ T1397] ? xfd_validate_state+0x68/0x150 [ 54.427379][ T1397] ? save_fpregs_to_fpstate+0x196/0x230 [ 54.432963][ T1397] ? __kasan_check_write+0x18/0x20 [ 54.438185][ T1397] ? __switch_to+0xc7b/0x1310 [ 54.442886][ T1397] ? pick_next_task_fair+0x870/0x900 [ 54.448290][ T1397] ? _raw_spin_unlock+0x45/0x60 [ 54.453210][ T1397] ? finish_task_switch+0x13a/0x780 [ 54.458434][ T1397] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 54.467583][ T1397] ? __schedule+0x1463/0x1f10 [ 54.472379][ T1397] ? avc_has_extended_perms+0x7c7/0xdd0 [ 54.478017][ T1397] ? __asan_memcpy+0x5a/0x80 [ 54.482661][ T1397] ? avc_has_extended_perms+0x921/0xdd0 [ 54.488244][ T1397] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 54.497819][ T1397] ? do_vfs_ioctl+0xeda/0x1e30 [ 54.502609][ T1397] ? preempt_schedule_common+0x2d/0x60 [ 54.508086][ T1397] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 54.514103][ T1397] ? __cfi_preempt_schedule+0x10/0x10 [ 54.521016][ T1397] ? preempt_schedule_thunk+0x1a/0x40 [ 54.526658][ T1397] ? try_to_wake_up+0xe17/0x1aa0 [ 54.532422][ T1397] ? ioctl_has_perm+0x384/0x4d0 [ 54.538682][ T1397] ? has_cap_mac_admin+0xd0/0xd0 [ 54.544069][ T1397] ? futex_wake+0x63a/0x900 [ 54.549237][ T1397] ? __cfi_futex_wake+0x10/0x10 [ 54.554952][ T1397] ? selinux_file_ioctl+0x6e0/0x1360 [ 54.561034][ T1397] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 54.567056][ T1397] ? do_futex+0x356/0x500 [ 54.572755][ T1397] ? __cfi_do_futex+0x10/0x10 [ 54.577722][ T1397] ? __fget_files+0x2c5/0x340 [ 54.582890][ T1397] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 54.592137][ T1397] ? __se_sys_ioctl+0x114/0x1b0 [ 54.597217][ T1397] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 54.606552][ T1397] __se_sys_ioctl+0x135/0x1b0 [ 54.611465][ T1397] __x64_sys_ioctl+0x7f/0xa0 [ 54.616815][ T1397] x64_sys_call+0x1878/0x2ee0 [ 54.621531][ T1397] do_syscall_64+0x58/0xf0 [ 54.626170][ T1397] ? clear_bhb_loop+0x50/0xa0 [ 54.631080][ T1397] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.637386][ T1397] RIP: 0033:0x7fed3cd8e929 [ 54.642163][ T1397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.663409][ T1397] RSP: 002b:00007fed3dcd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.672160][ T1397] RAX: ffffffffffffffda RBX: 00007fed3cfb5fa0 RCX: 00007fed3cd8e929 [ 54.680535][ T1397] RDX: 0000200000000640 RSI: 00000000c0306201 RDI: 0000000000000004 [ 54.689430][ T1397] RBP: 00007fed3ce10b39 R08: 0000000000000000 R09: 0000000000000000 [ 54.698233][ T1397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.706868][ T1397] R13: 0000000000000000 R14: 00007fed3cfb5fa0 R15: 00007fffd4936ab8 [ 54.715072][ T1397] [ 54.718204][ T1397] Modules linked in: [ 54.723938][ T1397] ---[ end trace 0000000000000000 ]--- [ 54.732178][ T1401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.343'. [ 54.742124][ T1401] bridge0: entered allmulticast mode [ 54.757099][ T1400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'. [ 54.766042][ T1397] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 54.769415][ T1400] bridge_slave_1: left allmulticast mode [ 54.771656][ T1397] Code: 3e ca e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 cd 0b 73 49 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 87 cf 3a c5 90 90 90 90 90 90 90 90 90 [ 54.771683][ T1397] RSP: 0018:ffffc900117ada90 EFLAGS: 00010246 [ 54.777572][ T1400] bridge_slave_1: left promiscuous mode [ 54.798259][ T1397] [ 54.804692][ T1400] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.811433][ T1397] RAX: 0000000000000061 RBX: 1ffff920022f5b54 RCX: 026c6af2274b3d00 [ 54.827857][ T1397] RDX: ffffc90001a32000 RSI: 00000000000041e5 RDI: 00000000000041e6 [ 54.828248][ T1400] bridge_slave_0: left allmulticast mode [ 54.836403][ T1397] RBP: ffffc900117ada90 R08: ffffc900117ad787 R09: 1ffff920022f5af0 [ 54.846621][ T1400] bridge_slave_0: left promiscuous mode [ 54.850507][ T1397] R10: dffffc0000000000 R11: fffff520022f5af1 R12: 0000000000000000 [ 54.860681][ T1400] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.867768][ T1397] R13: dffffc0000000000 R14: ffffc900117adac0 R15: ffffc900117adaf0 [ 54.880546][ T1397] FS: 00007fed3dcd36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 54.890066][ T1397] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.896924][ T1397] CR2: 00007ff2ab70a000 CR3: 00000001383de000 CR4: 00000000003526b0 [ 54.897385][ T1400] bridge0 (unregistering): left allmulticast mode [ 54.905185][ T1397] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.905214][ T1397] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.928214][ T1397] Kernel panic - not syncing: Fatal exception [ 54.934692][ T1397] Kernel Offset: disabled [ 54.939383][ T1397] Rebooting in 86400 seconds..