last executing test programs: 2m14.166417676s ago: executing program 2 (id=414): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r2, 0x303, 0x4, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r4, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x0, 0x18, {0x10, @bearer=@l2={'eth', 0x3a, 'wlan1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4004810) 2m14.107566256s ago: executing program 2 (id=415): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000080)) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)={0x7, 0x6, 0x9, 0x7, 0x8, 0x40, 0xdaea}, 0xc) (async, rerun: 64) r1 = eventfd2(0x9, 0x80000) (rerun: 64) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000100)={0x1, r1}) inotify_init() (async) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r2, 0x4000000) (async) r3 = eventfd2(0x7fffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x1, r3}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f00000001c0)={0xffff, 0x8}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000200), 0xa900, 0x0) (async) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, &(0x7f0000000240)={0x5, 0x2}) (async) fcntl$setlease(r2, 0x400, 0x1) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) (async) close(r3) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) close_range(r6, r7, 0x2) (async, rerun: 64) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) (rerun: 64) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file0', [{}, {0x20, '/dev/vhost-vsock\x00'}, {0x20, '+'}], 0xa, "97a5a096457514006503e1c93fe48f6a"}, 0x30) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r2, r8, &(0x7f0000000380), 0x8f8) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r9, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4041}, 0x24004004) 2m14.106727786s ago: executing program 2 (id=416): syz_open_dev$evdev(&(0x7f0000000140), 0x3, 0x40) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_usb_connect$printer(0x4, 0x0, 0x0, &(0x7f0000001880)={0x0, 0x0, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}}) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x64542, 0x0) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x101) (async) prctl$PR_GET_NAME(0x10, &(0x7f0000000cc0)=""/142) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) (async) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x800, 0x8) timerfd_gettime(0xffffffffffffffff, 0x0) (async, rerun: 32) getdents64(r2, 0x0, 0x11) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, 0xffffffffffffffff, 0x8fe69000) (async, rerun: 32) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) (async, rerun: 32) syz_clone(0x80000, 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)="45aaf38e8b38135232e8ac6c9fc5a7cbd0da5fa9e4599fe1e60bff1a25585ee6f73d40c3dbb9e16cbe7ca5c321025e93440b045ea642877874ccf6f92beaa8b8cfc1992d4bb1f1d6a99190970a61c8d648") open(0x0, 0x345002, 0x140) (async, rerun: 64) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) write(r0, &(0x7f0000000400)="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", 0x1f000) 2m14.092258217s ago: executing program 2 (id=417): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000340)) r2 = getpid() fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00fb15050d6e2194616a5da7db7d35cec7ccf564d3be4114596b3fa4be6fbebf3ff12b128590e04376adbd155a6669041ffa27d3cf1294903e83be4d9cb4d12618c6145148c9af6db4b8a6bd852d5834883dad92b5565a3c77e2aec49b2aa7e773b289a90dc4fe67e5e3e9435626b0d4e7f653f34a9ec33a36c945cfa0f738f0ff611223fbcab05bcfc4"], 0x15, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x92) capget(&(0x7f0000002580)={0x19980330, r2}, &(0x7f00000025c0)={0x0, 0x2, 0x0, 0x4, 0x1, 0x101}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) bind$packet(r6, &(0x7f0000000300)={0x11, 0x18, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) 2m14.028462417s ago: executing program 2 (id=418): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) (async) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/keycreate\x00', 0x2, 0x0) read(r1, 0x0, 0x0) (async) preadv2(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}], 0x1, 0xffffffff, 0x8, 0xd) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0', [{0x20, '/proc/self/attr/keycreate\x00'}, {0x20, '*{(\\^'}, {0x20, '/dev/rnullb0\x00'}, {0x20, '.'}, {0x20, '/dev/rnullb0\x00'}, {0x20, '/dev/rnullb0\x00'}, {0x20, '*'}], 0xa, "2dfe132005998e8ee3d8aee39795538fe4750377e8a723"}, 0x71) 2m13.49485915s ago: executing program 2 (id=423): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xc40, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = dup(0xffffffffffffffff) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000000c0)={@ipv4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xfffffffffffffffe}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) fsopen(&(0x7f00000000c0)='efs\x00', 0x1) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f00000001c0)) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @remote, 0x690}, 0x1c) sendfile(r0, r1, 0x0, 0x45e3) 2m13.47197636s ago: executing program 32 (id=423): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xc40, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = dup(0xffffffffffffffff) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000000c0)={@ipv4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xfffffffffffffffe}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) fsopen(&(0x7f00000000c0)='efs\x00', 0x1) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f00000001c0)) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @remote, 0x690}, 0x1c) sendfile(r0, r1, 0x0, 0x45e3) 8.406350093s ago: executing program 0 (id=1806): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7.471362398s ago: executing program 0 (id=1806): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6.207594905s ago: executing program 0 (id=1806): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4.833324723s ago: executing program 3 (id=1883): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/ip6_tables_matches\x00') pread64(r0, &(0x7f0000001b80)=""/4084, 0xff4, 0x7f) read$FUSE(r0, &(0x7f0000002b80)={0x2020}, 0x2020) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100003ac9a3325b00b602a4"], 0x54}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, 0x0) 4.745187803s ago: executing program 3 (id=1884): capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000080)={0x0, 0xbb2, 0x0, 0xe, 0x0, 0x9}) socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000300)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000001640)) mount$fuse(0x0, 0x0, &(0x7f0000000600), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x2}) r4 = syz_open_procfs(r2, &(0x7f00000003c0)='setgroups\x00') preadv(r4, &(0x7f0000000280)=[{&(0x7f0000002a00)=""/4096, 0x1000}], 0x1, 0x1fa, 0x201) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d3, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=""/8, &(0x7f0000000240)=""/161, &(0x7f0000000640)=""/4096, 0x4000}) read$eventfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) readv(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = open(&(0x7f0000000340)='./file0\x00', 0x280, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r6, &(0x7f0000000280)='./file0\x00', 0x200) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00009f4000/0x3000)=nil, 0x3000, 0x0, 0x100010, r7, 0xf648e000) 4.695992644s ago: executing program 0 (id=1806): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.426547641s ago: executing program 1 (id=1887): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = gettid() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) read$FUSE(r6, &(0x7f0000003440)={0x2020}, 0x2020) write$FUSE_NOTIFY_RETRIEVE(r6, 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r6, 0xaead) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x68, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x1}, @request_death={0x400c630e, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x0, 0x1}, @flat=@handle={0x73682a85, 0xa, 0x1}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 3.423253211s ago: executing program 3 (id=1889): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0x3, 0x0, {[0x6, 0xffffffffffffffff, 0x2, 0x7, 0x1, 0x8, 0x6, 0x800003]}}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x57, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x3000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) ioctl$sock_inet_SIOCSARP(r6, 0xc0046686, 0x0) 3.306789681s ago: executing program 4 (id=1891): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffd9f, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000000)="de547e22bade76f1a03b79e9546a58de45a57545563322ee20bc43f7fe47218a02ff8ba942478a7b69462fc2d196137252587ab17948adf2dcc5a03d2f3e276400"/79}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffd9f, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000000)="de547e22bade76f1a03b79e9546a58de45a57545563322ee20bc43f7fe47218a02ff8ba942478a7b69462fc2d196137252587ab17948adf2dcc5a03d2f3e276400"/79}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) pread64(r3, &(0x7f0000000480)=""/73, 0x49, 0x10000) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000100)={[{@subsystem='blkio'}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r5, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="00040800ed"], 0x2a) (async) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="00040800ed"], 0x2a) ioctl$int_out(r0, 0x2, &(0x7f00000001c0)) pwrite64(r0, &(0x7f00000000c0)="c1a9af6b17748b336bd1f9d8580fda9cbc1575ff145f142aa82300b22556fd5061b08f66043a93bf4b1e3f0662dcb969906b3ef2a0ffe21bfad771619ddc230e69157f92d4737d91fe6c8904cdccaf49cc4e45a9ec758b56e5a559c34e3bd79bab668bb6f530439d17f1aae5e58c9e78b6236c4cb86abe108f5f2fb46e48", 0x7e, 0x2) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/mem_sleep', 0x102, 0x4) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/mem_sleep', 0x102, 0x4) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_wolinfo={0x6, 0x2, 0x7, "50f1ff00"}}) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, &(0x7f0000000180)={0x9}) (async) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, &(0x7f0000000180)={0x9}) 3.236225132s ago: executing program 0 (id=1806): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.195204382s ago: executing program 4 (id=1892): mkdir(0x0, 0x32a) (async) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x7, 0x101341) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000004c0)=@ethtool_flash={0x33, 0xfd52, './file1/file0\x00'}}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0x8b, 0x1}) (async) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt(r3, 0x90, 0xfffffeff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fedbdf250300000014000180100001006574683a30d499579cd806d5"], 0x28}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="003942d22e616f8cc33b000000", @ANYRES16=r4, @ANYBLOB="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"], 0x2b8}, 0x1, 0x0, 0x0, 0x4040000}, 0x90) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x306, 0xfff9, 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/custom0\x00', 0x802, 0x0) (async) r6 = mmap$binder(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r6}, @decrefs], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file1/file0\x00', 0xa1) (async) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000440)={0x24, @none={0x0, 0x2}}, 0x14) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r0, &(0x7f00000010c0)={0x2020}, 0x2020) 1.77679298s ago: executing program 1 (id=1893): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x12, r0, 0x8fe69000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) fadvise64(r0, 0x81, 0xc, 0x2) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1802, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) poll(&(0x7f0000000180)=[{r1, 0x4}], 0x1, 0x9) r2 = socket$inet6(0xa, 0x3, 0x3a) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='fuseblk\x00', 0x2000, &(0x7f00000001c0)='\x00') connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @loopback, 0x9}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) sendto$inet6(r2, &(0x7f0000000080)="800037bb", 0x4, 0x0, 0x0, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) 1.77615852s ago: executing program 4 (id=1894): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x100000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) fremovexattr(r0, &(0x7f0000000040)=@random={'system.', 'mx\x00'}) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async, rerun: 64) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r2, &(0x7f0000000980)={{0x107, 0x7, 0x78, 0xd4, 0x2a7, 0x2, 0x2c7, 0x9}, "f05561f91f5fc24c6557aaa79cd05366c9d33d05c02be4a550f44bd53459ea73a974885c005f1a9025ec20b8c5f2d7ff762be276bf9ab2a193aa9d2352a469dc31e9b1c39cdda0a215dc460cce7cf9a99369aef0e2671c6ae7bfa3bf6b06fd363c9c7db4042d6e6529956db00246d8ef2f14bd1e3f744e823932aeb118929d19be2d7b35660dee03c5245a7fafce1bdac188ca1a5fb69982c0a1cc256972b55a387982ee72b59fe4228f3eddbbe7125279", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xad1) (async, rerun: 64) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)='./binderfs/binder1\x00') (rerun: 64) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10068, &(0x7f0000000180)={[{@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x4a2}}, {@readahead={'readahead', 0x3d, 0x8}}, {@rlog_pages={'rlog_pages', 0x3d, 0x9}}]}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000700)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) 1.77171723s ago: executing program 3 (id=1895): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000080)=""/49, 0x31) getdents(r5, 0xfffffffffffffffd, 0x58) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 1.700991851s ago: executing program 4 (id=1896): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x8001) r1 = userfaultfd(0x80000) read$hidraw(r0, &(0x7f0000000080)=""/117, 0x75) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r2 = eventfd2(0x9, 0x80001) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000100)={r2, 0xfd, 0x1, r0}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000180)=""/190) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000240)=""/222) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000340)={0x5, 0x101, 0x7fff, 0xed12, 0x6}) ioctl$KVM_RUN(r0, 0xae80, 0x0) write$P9_RSTAT(r0, &(0x7f0000000380)={0x5b, 0x7d, 0x1, {0x0, 0x54, 0x0, 0x81, {0x1, 0x0, 0x7}, 0x80000, 0x6, 0x6c0f, 0x0, 0x1, '\x00', 0x0, '', 0x1e, '/selinux/commit_pending_bools\x00', 0x2, '-}'}}, 0x5b) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000400)={[0xa, 0x930, 0x401, 0x2, 0x8001, 0x5, 0xfffffffe, 0x6, 0x2, 0x1, 0x2, 0x0, 0x1, 0x40, 0x1, 0x230, 0x80, 0x9, 0x6, 0x1, 0x9, 0x3, 0x2a, 0x9, 0x9, 0xa, 0x7, 0x1, 0x1, 0x5, 0x8, 0x10000, 0x2, 0x6, 0xffffffff, 0x1, 0x1000, 0x6, 0x0, 0x8, 0x5, 0x1d11, 0x8, 0x8, 0x2, 0x5, 0x9, 0x2, 0x6a, 0x3, 0x8, 0x1, 0x6, 0x5, 0x7, 0x1, 0x3, 0x1, 0x6, 0x6, 0x2, 0x7, 0xfffffff7, 0x1, 0x8001, 0x1, 0x5, 0x80000000, 0x3, 0x0, 0x9, 0x6, 0x7, 0x8, 0x4, 0x38000, 0x400, 0x1, 0x7, 0x7ce, 0x3, 0x9, 0xf1, 0x7fff, 0x4, 0xfea5, 0x9, 0x4, 0x61, 0x1, 0x7, 0x0, 0xe, 0x5, 0x7, 0x1ff, 0x0, 0x6, 0x0, 0x9, 0x8, 0x7, 0x6, 0x8, 0x682, 0x6, 0xbd8, 0xfffffffc, 0x5, 0x0, 0xdd, 0x2, 0x2000000, 0x1, 0x9, 0xc292, 0x0, 0xff, 0x1, 0x1ff, 0x5, 0x4, 0x1ff, 0x7, 0x250825ac, 0x2, 0x8, 0x8, 0x5, 0x8, 0x10001, 0x3, 0x7, 0x7, 0x4, 0xd, 0x3, 0xd81, 0x3, 0x8, 0xeb1, 0x2, 0x9, 0x6, 0x81, 0x58, 0x2, 0x3, 0x6, 0x1, 0x23, 0x1, 0x6, 0x7fffffff, 0x2, 0x0, 0x6, 0x8001, 0xf, 0x7, 0x21f3, 0x7, 0x6de1155c, 0x7f, 0x2, 0x8, 0x7, 0x1, 0x7, 0x3, 0x3, 0x9, 0xfffffff8, 0x1ff, 0x9, 0x7, 0x8, 0x5, 0x1, 0x1, 0x6, 0xf, 0x8, 0x5, 0x80000001, 0x6, 0x3, 0x0, 0x6, 0x0, 0x2, 0x7fff, 0x400, 0x4, 0x7fff, 0x8, 0x9, 0x5, 0xa6f1, 0x4, 0x2, 0x7, 0x9, 0x1, 0x800, 0x7fff, 0x2, 0x200, 0x1, 0x8, 0x4, 0xb, 0xb, 0x5, 0x8, 0x9, 0x2, 0x8, 0x3, 0x9, 0x8, 0x6, 0x6, 0x8, 0x65ea, 0x5, 0xffffffff, 0xf2d8, 0x0, 0x2, 0x7, 0x100, 0x85, 0x1000, 0x8, 0x4, 0x6, 0x8, 0x7, 0x4c759813, 0x10000, 0x3ff, 0x2, 0x3, 0x5, 0x1, 0x4e2, 0x8, 0x1, 0xae06, 0x8, 0x4, 0x6, 0x6, 0x9, 0x1, 0x8, 0xfff, 0x4, 0x2, 0x5, 0xfffffffd, 0x4, 0x0, 0x8, 0x5, 0xf, 0x3, 0x5, 0xc5a, 0x98, 0x4, 0xfffffff9, 0x8000, 0x9, 0xffffff81, 0xfffffffa, 0x3, 0x102, 0xfffffffc, 0x6, 0x0, 0x5, 0x9ed, 0x9, 0x7, 0x984c, 0x9, 0x3, 0xfb7, 0x4, 0x7, 0x92, 0x1, 0x5, 0xffffff01, 0x749f, 0x520, 0x7fffffff, 0x2, 0x0, 0x800, 0x3, 0xfffffffd, 0x3, 0x8, 0xff, 0x1, 0x5, 0x2, 0x6, 0x2126, 0x40, 0x7f, 0x4, 0x7, 0xfffffff7, 0x1, 0x4, 0x3ff, 0x1970, 0x26ce, 0x3, 0x7, 0x6, 0x10001, 0x573, 0x8, 0xfffffff3, 0x9, 0x7f6, 0x81, 0x1ff, 0x7, 0x8000, 0xf, 0x2, 0xc3, 0x7, 0xff, 0xfffff020, 0x5, 0xfffffffe, 0xfffffff7, 0x2, 0xfffffff7, 0x3, 0x3, 0x417606de, 0x7, 0x42, 0x4, 0x3, 0x2, 0x1ff, 0x80, 0x5, 0x1, 0x9, 0x200, 0x7, 0x6, 0xc2b, 0x800, 0x4, 0x0, 0x2, 0x5, 0x8001, 0x8, 0x200000, 0x401, 0x1bc9, 0x9, 0xe, 0x9, 0x3, 0x5, 0x0, 0xffffffff, 0x8, 0x0, 0x9, 0x5000000, 0xfffffffb, 0xe12, 0xffffffff, 0x8001, 0x1, 0x14, 0x4, 0xed, 0x101, 0x4, 0x45, 0x0, 0x9, 0x7, 0x3c6f, 0x8, 0x4, 0x7, 0x0, 0xb, 0xc, 0x8, 0x0, 0x9, 0x7, 0x0, 0x7, 0x3, 0x8, 0xf, 0xa30b, 0xe240, 0x1, 0x5, 0x9, 0x0, 0x0, 0x7, 0x2, 0x2, 0x3, 0x0, 0x10, 0x4, 0xe, 0x9, 0xce, 0xb3f, 0xfffffffc, 0x6, 0x10, 0xf, 0x9, 0xd, 0x7f, 0x0, 0x80, 0xf, 0x3, 0xfff, 0x16b, 0x1ff, 0x5e, 0x94, 0x8, 0x0, 0x6, 0x5, 0x2242feb, 0x270f, 0xba7, 0x9, 0xcfa6, 0x8000, 0x8, 0x6, 0x6, 0x6, 0x80, 0x1, 0x200, 0x5, 0x1, 0xa, 0x3, 0xd3ba, 0x872, 0x10001, 0x8000, 0x0, 0x2, 0x2, 0x6415f19b, 0x400, 0x3, 0x5, 0x6, 0x5, 0x2, 0x4, 0x5, 0x0, 0x13e1, 0xff, 0x3, 0x1, 0xa, 0x221e, 0x101, 0x7, 0x0, 0xdd, 0xec0, 0xa, 0x8, 0x1, 0x8, 0x7, 0x1, 0x0, 0x9, 0xfffffffb, 0x4, 0x7fff, 0x9, 0x9, 0xfffffff7, 0xffffffff, 0xffff, 0x5, 0x2, 0x3, 0xaa9f, 0x3, 0x80, 0x80000000, 0x808000, 0x400, 0x10001, 0x681, 0xfffff3c9, 0x4, 0x3, 0xb88, 0x10000, 0x10000, 0x7ff, 0xffff, 0x7d, 0x7fff, 0x6, 0x4, 0x93f, 0x5, 0x0, 0x4, 0xbf56, 0x6, 0x9, 0x7d11, 0x4, 0x1, 0x8, 0xc, 0x6, 0x7, 0x7, 0x80000000, 0x0, 0x258f, 0x1ff, 0x3546, 0xc, 0x1, 0x0, 0x7f, 0x6, 0x5, 0x1, 0x7, 0x5b9, 0x2, 0x23b, 0x8, 0x1, 0x5, 0x4, 0xca74, 0xff, 0x279a, 0x3, 0x325, 0x0, 0x6, 0x7, 0x8, 0x101, 0x8, 0x452d617f, 0x401, 0xc0, 0x8, 0x4, 0x1, 0x1, 0x7, 0xfff, 0x1, 0x7fff, 0x9, 0x2, 0x1, 0x5, 0x3, 0x8, 0x1, 0x44d, 0x5, 0x3, 0xef, 0x8, 0x4, 0x7d12a391, 0x8, 0xfffff0e3, 0x3, 0x81, 0x6, 0x2, 0x1, 0x1, 0x1, 0xbd400000, 0x4, 0x1, 0x5, 0x1, 0x5, 0x4, 0x1, 0x7fff, 0x0, 0x2, 0x1d, 0x6, 0x6d, 0xfffffff8, 0x3, 0xfb92, 0x6, 0x8, 0x400, 0x3, 0x1, 0xcde, 0x5, 0x4, 0x7, 0x5, 0x401, 0x7f, 0x8, 0x8000, 0x7, 0x5, 0x8, 0x1, 0x9a2, 0x4, 0x8000, 0xc, 0x7, 0x4, 0x5, 0x5, 0x3, 0x1ff, 0x10, 0x1, 0x6, 0x16e, 0x5, 0x6d, 0x2, 0x6, 0x7, 0xfffffe16, 0x2, 0x2, 0x5, 0xbc1b, 0x0, 0x4, 0x2, 0x12be, 0xb, 0xea63, 0x3, 0xc, 0x1, 0x5, 0xdc, 0x6, 0xdd4a, 0x7, 0x9, 0x10001, 0x6, 0x2, 0x1, 0x9, 0x2, 0x8, 0xffffffff, 0x9, 0xc, 0x2, 0xffff, 0x8, 0xfff, 0x0, 0x3, 0xedfc, 0x618, 0x7, 0x7, 0x2, 0x10b0, 0x97, 0x1, 0x100, 0x9, 0x8c9e, 0x7, 0xf, 0x6, 0x8, 0x5, 0xd4, 0x3, 0x7ff, 0x3, 0x7, 0xa68e9df, 0x1a46, 0x7fff, 0xffffff81, 0x7fff, 0x6, 0x8000, 0x4, 0x3, 0xc8d, 0x32, 0xfa, 0x80000001, 0x7f, 0xb62, 0x1, 0x213, 0xac7, 0x3, 0x2, 0xa000, 0x5, 0x7, 0x1ff, 0x8001, 0xfffffffb, 0x400, 0x0, 0x9, 0x0, 0xac0, 0x9, 0x6, 0x4, 0x92d, 0x9, 0x8, 0x8, 0x6, 0x3, 0x4, 0x80000000, 0xb, 0xfff, 0x6, 0x4, 0xd, 0xfffffffa, 0x5, 0x8b76, 0x8, 0xcf0, 0x0, 0xfffffff7, 0x1, 0x3, 0x12bb, 0x6, 0x3, 0x10001, 0x0, 0x4, 0x4, 0x0, 0x2, 0x1, 0x6, 0x1000, 0x2, 0xffffffff, 0x81, 0x6, 0x16, 0x4, 0xfffff801, 0xfffffbff, 0xd, 0x6, 0x3, 0x4800000, 0x9, 0x7ff, 0x1, 0x6, 0x6, 0x2, 0xd, 0x8, 0x3ff, 0xffff, 0x8, 0x10, 0x101, 0x0, 0x4, 0x4, 0xc5e9, 0x80000001, 0x101, 0x10, 0x594a, 0x6, 0x8, 0x7, 0x4de, 0xfffffff8, 0x2, 0xf5, 0x6, 0x9b, 0xc1, 0x0, 0x3, 0x2, 0x7fffffff, 0xe, 0x8, 0x7, 0x6, 0xfffffff9, 0x2, 0x1, 0x9, 0x2, 0xfffffffe, 0x2, 0x6, 0x0, 0x80, 0x3, 0x4, 0x1, 0xfffffffe, 0x0, 0x0, 0xfffffff0, 0x0, 0x6, 0x200, 0x6, 0x9, 0xecf, 0x8, 0xa, 0x2f04, 0x9, 0x2, 0x8001, 0x180, 0x339b35c3, 0xfffeffff, 0x8, 0x4, 0xb, 0x100, 0x8, 0x8, 0x100, 0x2, 0x9fb, 0x1, 0x1, 0x6, 0x5, 0x0, 0x101, 0x3, 0x5, 0xebdc, 0xa2d1, 0x6, 0x6, 0x2, 0x1000, 0x495, 0xfffffffc, 0xfffffff8, 0x81, 0x3, 0x1, 0x91f, 0x5, 0xce83, 0x3, 0x3, 0x4, 0x1, 0x1, 0x1, 0x7, 0x2f, 0x5, 0xac3, 0x1, 0x9, 0x0, 0xfffffffc, 0xb, 0x4, 0x0, 0xffffff80, 0x3, 0x8, 0x2, 0x101, 0x1, 0x6, 0x101, 0x10, 0x3, 0x100, 0xfffff000, 0x9, 0x0, 0x9, 0x5, 0x5, 0x1000, 0xffffffff, 0x0, 0x0, 0x8000, 0x8, 0x7, 0x0, 0x8, 0x6, 0x200000, 0x5, 0x0, 0x3, 0x101, 0x8, 0x4, 0x8, 0xd12, 0x10, 0x8, 0x2, 0x0, 0x3ff, 0xff, 0x0, 0x3, 0x1, 0xb, 0x6, 0x8, 0x4, 0x2, 0x15358237, 0x5, 0x8001, 0x3, 0x9, 0xffffffff, 0xd, 0x7, 0x8, 0x0, 0xffffffff, 0x8, 0x7fffffff, 0x2, 0x1a, 0x5a722132, 0x9, 0x3, 0x4, 0x7, 0x5, 0x4, 0xe, 0x8, 0x3de3, 0xa8, 0xffffffff, 0x7fff, 0x4, 0x2, 0xf, 0x2, 0xbf, 0x100, 0x8, 0x75ec, 0x7, 0x6, 0xf, 0x5, 0x8, 0x2, 0x55e1dc4b, 0xfffffffa, 0x9, 0x3, 0x80]}) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001400)=""/214) write$cgroup_pressure(r0, &(0x7f0000001500)={'full', 0x20, 0x36, 0x20, 0x9}, 0x2f) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001540)=""/200) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001640), 0x44000, 0x0) bind$bt_hci(r0, &(0x7f0000001680)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$KVM_X86_SET_MSR_FILTER(r0, 0x4188aec6, &(0x7f0000004ec0)={0x1, [{0x0, 0x8000, 0x8, &(0x7f00000016c0)="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"}, {0x5, 0x498, 0x8, &(0x7f00000026c0)="64bc6dab6de509789f28472d69437ac41019fd3b3ba10ff28879f89e35092aea5922cba925ebd28e2b9438cfae7e9a84bd7eee22b181c0296b89f2bd96cb73266884a0175604f276a3c63f9d62cbec6d8d73ef378fb00f3a27f6f008e1b042b4eecc194e55e1b3395e9411dce2f3e30f7638763d18113592c85e033a24d60cfcc25da32cab22e8f5f81aad1d43b7c9af8030a8"}, {0x1, 0x8000, 0x4, &(0x7f0000002780)="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"}, {0x1, 0x3f8, 0x3, &(0x7f0000003780)="f45d6640e664611420aed578aa5649ef3c290c740fc64718aac14ac480c6e881b6b6aca139015b1f5c28392edb315fd589e9b8838577e0336fddbc898236a0e89ec38384ae3ec8ce2d82ed9c8ee8b3778ed5b506a16267ffc197b269b02ae650c8bd902eb21dea5924a2b1f51b0c0c6b9a015b209bf39debb24cd9da818c5c"}, {0x2, 0x638, 0x1d3, &(0x7f0000003800)="ddd8f7a61cd4cbdeaa6e1290186a44b5c47b6cca689184beda2845a25f21f7688ea9d99500d9f522f872ec69be4da26f40e970dd899bde43f618ed9a1cbdc438c821f5fc2347d5a3c9a2b5110c08e6378298031a9433b6bcea0ae82910535bfcc14d8c5e8871efa43750cc7745cf92cc5251d70a8cbaa93ad15c1e8fef185709c8f2bcfa509601ce3e93c8630174805cc89ce5676e1a58a0f4b549ef0cb0fd81881a89db5e519278b6f4367ac4f147f60cee13b6bd41a51e7ba416fd21f4a1b3b8219c3f50a2ca"}, {0x0, 0x6d0, 0x2, &(0x7f0000003900)="1e43fe24b167cdfe057c72eb7966c67d08997a2264a0d4326f4e019d3a0ff408d22083a7be8aabaa1e575838740504213adebaeedeead47ed5158496eb7bea9440b56570b69932712aa2fae84c7060e299d14ad6e6dcbefcd1d51a0c6a5d1536b2c158005953dceaf9ed139c824c955afdd8c24bdb3f75c6b3c97e350b9e5b23c4679e0ea9d5db2e61802b84c306a82e1527e48b2830ca3dc4a047b5301642f3a4a97e7ba8c7740d4bcc41b8859651aadd0542f164644f02668352b3cc8ea2f5bc1b5701626b56ecf5e261d213c154cac04c74e82d4b296c0356"}, {0x2, 0x160, 0x4, &(0x7f0000003a00)="6278e52e8ccbd61a7b71d96e2be9e8925be42b7fdb67136f3707d89147a1a0f4593af950ab4d5857b8e62f35"}, {0x2, 0x6d8, 0xe0000000, &(0x7f0000003a40)="20387d8358822e54446b9cb639732a6124478c530dee2155fda5ddb670e737de97c47306beb637efb83f1e8fadf1677720d8bc6e3f219f0f0bc0897454ed6da931247ac110d27b331b6b8472d9887f4941f29995c879cb249ae08f7610e70af28366ff69ac99a4eccc39a95771cac0e7fab48a8f5af4d73a1bbb8fddd0a75a67ef019f0f770457c3eab93e9ed60635f9a206ef6ab94a44edcddbe1a89eea3534542c670d05329a37c9063497f162aa3232cf9238edeefd6e706a9a2ddfec6f697df1f790694b6b6ae95cc87b305b0a6ae3df724eee87b18577c253"}, {0x1, 0x120, 0x1, &(0x7f0000003b40)="034d8e32ab217c0325ba9141c7021164fdb146577e14c819ae153cef7333fc23204b6d76"}, {0x3, 0x4b0, 0x2, &(0x7f0000003b80)="3205bad36c29ef78c84256441aa62d9961ad15b3be0a103be7dd1a599b86ce791030744442d9eec5af685e296c43beb6bb663cfb66bce881db3a0c0cfaaaec3cdbe505285b64f5e5b77552cee3dcc89e736ac6c1cf57ad253903ab4db5b9d40d510ddbef4fd513de076a1d466e0e316e36abaed2281c2a88c7e874b235977acd8bb37162795a14b1660ad86928f9d49ce2982347253e"}, {0x1, 0x7f0, 0xc, &(0x7f0000003c40)="912eeed6ecd0a4c41f0b402785405e2be78747004d45b1860f435172d2ecab819002e75f2072d149617906d267a33756bcc5895c99f78dcdcc999b85c8047679a01ec45fbabd69bfb63f45118d221e00ffd33e9bbc47e4e58e0ab8b830c2c26ab43175a937b5287aa75ac7c563e8c8748faf9cd28d5dcf6ec5e0314914d0a72d5f2789f4e3eea0772767e4f2fc7ff72d1cff048d7c3b3a13e96a4fab27843714ae366e1ef27890e8d3277e590ad39c275c8aac7ba13ba43220feb18897ccb5e7f413c5d592917c912e7bff5a959c525b588bef9f33ac2f467d2a064387affba171f4fc76891362542c3c87133aa32876f1e35bab60d4058e31c834f2778a"}, {0x3, 0x18, 0x9, &(0x7f0000003d40)="902da6"}, {0x0, 0x8000, 0xfd, &(0x7f0000003d80)="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"}, {0x3, 0x3b0, 0xc34, &(0x7f0000004d80)="4ec68c0a825aa4ffce8893de9d0451b1ef359f8bc2f460434c691fd82d166964eb700a7243fd9d77805ba365c6c6a19eb5ddd8baf0ef18d7d863b8aef4e7f19f3e0c68bdb2fbde35e10f2cf2d94fd935c278c5b1d7ed663638cb1bb0e939fe894e6aad1b12bbad6e66477f6fde3d0fc4f6b6ab5523c9"}, {0x2, 0x298, 0x6, &(0x7f0000004e00)="ee699fee3fc265fa926d4e30aa80c869f2fe3e6f34abefb3564e9a573eb02669712adeb16cd86208e66a2e10490858b30c9d809731af46b525d7d0c79a406795336c37c07fdf6c35977dbd9facfca24606caf8"}, {0x3, 0xc0, 0x2, &(0x7f0000004e80)="fc64eb2c93b8507b3418695b1dce5266b92caa285766b9d0"}]}) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000005080)={0xb, 0x7fff, 0x5, 0x1, 0x9, 0x7}) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f00000050c0)={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000052c0)={0x3, 0x1, &(0x7f0000005100)=""/184, &(0x7f00000051c0)=""/172, &(0x7f0000005280)=""/2, 0x4}) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000005300), 0x105882, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000005340)={0x7, 0x6d, 0x2}, 0x7) r4 = eventfd2(0xa78, 0x800) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000005380)={r4, 0xa, 0x3, r2}) io_pgetevents(0x0, 0x9, 0x3, &(0x7f00000053c0)=[{}, {}, {}], &(0x7f0000005440), 0x0) 1.6986954s ago: executing program 1 (id=1897): r0 = socket$inet(0x2, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100)=0xffffffff, 0x4) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0xffffffffffffffaa, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1.69692705s ago: executing program 4 (id=1898): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)=ANY=[@ANYBLOB='dirsy\x00']) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = fsopen(&(0x7f0000000200)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\xc7-P\xbf\r\x02/_\xba\xd0D\x89M;\x99\xd6\x8e?]U\xbfG\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-\xde3\xb28\xb8#UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa8ca3411d2c2600f, 0x13, r0, 0x22e80000) 1.620020801s ago: executing program 4 (id=1899): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) getpid() futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffa) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000040)) readv(r1, &(0x7f0000000140), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) 1.619657041s ago: executing program 1 (id=1900): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) 1.612961571s ago: executing program 1 (id=1901): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) read$FUSE(r1, &(0x7f0000003800)={0x2020}, 0x2020) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a2000000202000000000000240009801c00000008000000140016"], 0x40}], 0x1}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0xc02, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000027c0), r4) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002800)={0x20, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xd0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) read$FUSE(r1, &(0x7f0000003800)={0x2020}, 0x2020) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a2000000202000000000000240009801c00000008000000140016"], 0x40}], 0x1}, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0xc02, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000027c0), r4) (async) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002800)={0x20, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xd0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) (async) 1.611291171s ago: executing program 3 (id=1902): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0010302e75000000000000000000"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c0002, 0x0) close(r4) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2cba50646e6f3d", @ANYRESHEX=r3, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',noxattr,version=9p2000.L,k']) (async, rerun: 64) setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000000)=0x42291672, 0x4) (async, rerun: 64) r5 = gettid() ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) (async) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f00000000c0)=""/74, 0x4a}], 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0']) (async) tkill(r5, 0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0x2}) (async, rerun: 64) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1c1000, 0x0) (rerun: 64) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc4, 0x0, &(0x7f0000000540)=[@release={0x40046306, 0x2}, @release, @clear_death, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@fda={0x66646185, 0x6, 0x0, 0x3f}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x6, 0x0, 0x27}}, &(0x7f0000000100)={0x0, 0x20, 0x38}}, 0x400}, @exit_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r11}, @fda={0x66646185, 0x7, 0x2, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/1, 0x1, 0x2, 0x14}}, &(0x7f0000000640)={0x0, 0x18, 0x38}}}], 0x9a, 0x0, &(0x7f0000000440)="1f0260d4815f1e000000004350487489d3e64622b80fb48bf3806f438cae047640b5d10804b76398771d9abb2778c1ad087f1800c1704cf974ce47fda4a7907a8ff2e54a6c7a79a067663690edbcb99eb756e9614f534bb498e155a058991cf255392a7c3f4fef324fcdf508c9de1d216981ee1cb824df926ca68f50b3945da58a9ec43c699dc92e635dfe04d081660855e24796efb44103b42a"}) 1.578670261s ago: executing program 3 (id=1903): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095"], 0x0}, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffe000/0x2000)=nil) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x9, 0x100) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cc, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x80, 0xf7, 0x0, 0x7}]}, 0x10) r4 = dup(0xffffffffffffffff) write$char_usb(r4, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x165342, 0x0) ioctl$HIDIOCGNAME(r1, 0x80404806, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x1d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x2}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r7, &(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x10) bind$tipc(r8, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x3}}, 0x10) bind$tipc(r7, 0x0, 0x0) 1.552453681s ago: executing program 0 (id=1806): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=1904): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x40000107}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000380)={0x0, 0x5, 0x1, 0x2000, &(0x7f0000fef000/0x2000)=nil}) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) (async) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000082505a8a440000102030109021b00010100a0000904"], 0x0) (async, rerun: 64) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x81400, 0x0) (async, rerun: 64) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1c1000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000500)="ba2100b80400ef66b9800000c00f326635008000000f30c4e35d4450880af2f32e65a2000066b9800000c00f326635000800000f3066b9090b00000f32660f3823c8660f388138baf80c9a4e00000166efbafc0cec0f0f66c3aa", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) keyctl$link(0x8, r5, 0xffffffffffffffff) (async) futex(&(0x7f0000000140), 0x80, 0x100000, 0x0, &(0x7f0000000340), 0xffffffff) (async, rerun: 64) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x1002, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000001c0)={[0xb92]}, &(0x7f0000000200), &(0x7f0000000300)={r9, r10+10000000}, 0x8) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r11 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r11, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/247, 0xf7}], 0x1) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "764dd0dd3793cdaa", "c0019fafe80f1e49467822bd2df667752f1de314b2f6b68bc3a0eb23a5960e7c", "d37552e0", "0987655e53b10eb6"}, 0x38) (async, rerun: 32) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 32) kernel console output (not intermixed with test programs): EPLY { source: EINVAL } my_pid:571 [ 91.843119][ T31] usb 5-1: device descriptor read/64, error -71 [ 91.971114][ T31] usb usb5-port1: attempt power cycle [ 92.081581][ T3014] 9pnet_fd: Insufficient options for proto=fd [ 92.333442][ T31] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 92.355761][ T31] usb 5-1: device descriptor read/8, error -71 [ 92.447986][ T3029] rust_binder: 713: no such ref 0 [ 92.497431][ T31] usb 5-1: device descriptor read/8, error -71 [ 92.512765][ T3045] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.828'. [ 92.538386][ T3050] netlink: 51 bytes leftover after parsing attributes in process `syz.3.829'. [ 92.575829][ T3056] 9pnet_fd: Insufficient options for proto=fd [ 92.774785][ T31] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 92.803652][ T31] usb 5-1: device descriptor read/8, error -71 [ 92.839699][ T36] audit: type=1400 audit(1761749588.671:412): avc: denied { listen } for pid=3068 comm="syz.3.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.842731][ T3069] rust_binder: Error while translating object. [ 92.859589][ T3069] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.865779][ T3069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:592 [ 92.904228][ T3073] fuse: Unknown parameter '017777777777777777777770x0000000000000003' [ 92.942070][ T31] usb 5-1: device descriptor read/8, error -71 [ 92.991120][ T3081] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 92.998305][ T3081] rust_binder: Write failure EINVAL in pid:604 [ 93.039087][ T36] audit: type=1326 audit(1761749588.858:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3080 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1c58efc9 code=0x7ffc0000 [ 93.069000][ T31] usb usb5-port1: unable to enumerate USB device [ 93.075889][ T36] audit: type=1326 audit(1761749588.858:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3080 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9c1c58efc9 code=0x7ffc0000 [ 93.099505][ T36] audit: type=1326 audit(1761749588.858:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3080 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1c58efc9 code=0x7ffc0000 [ 93.139108][ T3083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:606 [ 93.139171][ T3083] rust_binder: Read failure Err(EFAULT) in pid:606 [ 93.750982][ T543] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 93.922578][ T543] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.933550][ T543] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.943369][ T543] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 93.952504][ T543] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.961366][ T543] usb 2-1: config 0 descriptor?? [ 94.060067][ T839] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 94.221094][ T839] usb 5-1: config 200 has too many interfaces: 160, using maximum allowed: 32 [ 94.230094][ T839] usb 5-1: config 200 has an invalid descriptor of length 0, skipping remainder of the config [ 94.240402][ T839] usb 5-1: config 200 has 0 interfaces, different from the descriptor's value: 160 [ 94.251205][ T839] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 94.260295][ T839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.268349][ T839] usb 5-1: Product: syz [ 94.272535][ T839] usb 5-1: Manufacturer: syz [ 94.277197][ T839] usb 5-1: SerialNumber: syz [ 94.394939][ T543] konepure 0003:1E7D:2DBE.0009: unknown main item tag 0x2 [ 94.403055][ T543] konepure 0003:1E7D:2DBE.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.1-1/input0 [ 94.617095][ T3099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.850'. [ 94.633157][ T839] usb 5-1: USB disconnect, device number 21 [ 94.710169][ T543] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 94.870022][ T543] usb 4-1: Using ep0 maxpacket: 8 [ 94.876343][ T543] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 94.884826][ T543] usb 4-1: config 0 has no interface number 0 [ 94.892626][ T543] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 94.901877][ T543] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.910213][ T543] usb 4-1: Product: syz [ 94.914670][ T543] usb 4-1: Manufacturer: syz [ 94.919578][ T543] usb 4-1: SerialNumber: syz [ 94.926898][ T543] usb 4-1: config 0 descriptor?? [ 94.939855][ T839] usb 2-1: USB disconnect, device number 19 [ 95.277400][ T3111] rust_binder: Error while translating object. [ 95.277448][ T3111] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 95.283693][ T3111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:164 [ 95.321976][ T543] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 95.337761][ T543] usb 4-1: No streaming interface found for terminal 6. [ 95.345096][ T543] usb 4-1: Failed to create links for entity 5 [ 95.351515][ T543] usb 4-1: Failed to register entities (-22). [ 95.364852][ T543] usb 4-1: USB disconnect, device number 23 [ 95.807915][ T839] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 95.895495][ T3149] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 95.902688][ T3149] rust_binder: Write failure EINVAL in pid:629 [ 95.903370][ T3147] netlink: 72 bytes leftover after parsing attributes in process `syz.4.866'. [ 95.927484][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 95.927501][ T36] audit: type=1400 audit(1761749591.570:438): avc: denied { setopt } for pid=3146 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.971281][ T839] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 95.985451][ T839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.996860][ T839] usb 2-1: config 0 descriptor?? [ 96.015277][ T338] Bluetooth: hci0: Frame reassembly failed (-84) [ 96.234863][ T3141] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.234923][ T3141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:742 [ 96.257498][ T839] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 96.298203][ T839] asix 2-1:0.0: probe with driver asix failed with error -71 [ 96.310076][ T839] usb 2-1: USB disconnect, device number 20 [ 96.508823][ T36] audit: type=1400 audit(1761749592.105:439): avc: denied { lock } for pid=3196 comm="syz.3.878" path="socket:[21006]" dev="sockfs" ino=21006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 96.618591][ T36] audit: type=1400 audit(1761749592.217:440): avc: denied { connect } for pid=3198 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 96.732551][ T36] audit: type=1326 audit(1761749592.321:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3209 comm="syz.0.884" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa61ff8efc9 code=0x0 [ 97.150825][ T543] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 97.193415][ T31] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 97.289317][ T543] usb 4-1: device descriptor read/64, error -71 [ 97.353261][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 97.359617][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.369887][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 97.380211][ T31] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 97.389302][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.397323][ T31] usb 2-1: Product: syz [ 97.401560][ T31] usb 2-1: Manufacturer: syz [ 97.406153][ T31] usb 2-1: SerialNumber: syz [ 97.411435][ T31] usb 2-1: config 0 descriptor?? [ 97.555772][ T543] usb 4-1: device descriptor read/64, error -71 [ 97.662938][ T3236] sock: sock_set_timeout: `syz.0.893' (pid 3236) tries to set negative timeout [ 97.768092][ T3249] netlink: 'syz.0.899': attribute type 27 has an invalid length. [ 97.812867][ T543] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 97.837810][ T36] audit: type=1400 audit(1761749593.362:442): avc: denied { associate } for pid=3255 comm="syz.0.901" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 97.859270][ T3228] rust_binder: Write failure EINVAL in pid:755 [ 97.860016][ T31] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 97.860279][ T3254] netlink: 'syz.0.901': attribute type 16 has an invalid length. [ 97.875642][ T31] asix 2-1:0.0: probe with driver asix failed with error -71 [ 97.878839][ T3254] netlink: 'syz.0.901': attribute type 3 has an invalid length. [ 97.887583][ T31] usb 2-1: USB disconnect, device number 21 [ 97.892113][ T3254] netlink: 64054 bytes leftover after parsing attributes in process `syz.0.901'. [ 97.950137][ T543] usb 4-1: device descriptor read/64, error -71 [ 98.205904][ T627] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 98.212093][ T543] usb 4-1: device descriptor read/64, error -71 [ 98.333906][ T543] usb usb4-port1: attempt power cycle [ 98.503631][ T3265] overlay: ./file0 is not a directory [ 98.696142][ T543] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 98.719404][ T543] usb 4-1: device descriptor read/8, error -71 [ 98.779172][ T3282] __vm_enough_memory: pid: 3282, comm: syz.4.910, bytes: 18014402804453376 not enough memory for the allocation [ 98.859492][ T543] usb 4-1: device descriptor read/8, error -71 [ 98.869040][ T3287] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 98.876233][ T3287] rust_binder: Write failure EINVAL in pid:183 [ 99.122461][ T543] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 99.136398][ T466] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 99.166145][ T543] usb 4-1: device descriptor read/8, error -71 [ 99.305007][ T543] usb 4-1: device descriptor read/8, error -71 [ 99.314911][ T466] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 99.321272][ T3318] random: crng reseeded on system resumption [ 99.324103][ T466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.338485][ T466] usb 5-1: Product: syz [ 99.342679][ T466] usb 5-1: Manufacturer: syz [ 99.347530][ T466] usb 5-1: SerialNumber: syz [ 99.392645][ T36] audit: type=1400 audit(1761749594.816:443): avc: denied { bpf } for pid=3315 comm="syz.0.921" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.421066][ T543] usb usb4-port1: unable to enumerate USB device [ 99.429942][ T3322] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3322 comm=syz.0.921 [ 99.443459][ T3322] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=3322 comm=syz.0.921 [ 99.456308][ T3322] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3322 comm=syz.0.921 [ 99.655469][ T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 99.815173][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 99.821518][ T31] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 99.829756][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.840108][ T31] usb 2-1: config 0 has no interface number 0 [ 99.847750][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 99.856789][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.864815][ T31] usb 2-1: Product: syz [ 99.869053][ T31] usb 2-1: Manufacturer: syz [ 99.873645][ T31] usb 2-1: SerialNumber: syz [ 99.879225][ T31] usb 2-1: config 0 descriptor?? [ 100.026153][ T3326] __vm_enough_memory: pid: 3326, comm: syz.3.925, bytes: 18014402804453376 not enough memory for the allocation [ 100.081275][ T3328] binder: Unknown parameter 'e' [ 100.100801][ T3324] incfs: ino conflict with backing FS 1 [ 100.106755][ T3324] incfs: ino conflict with backing FS 2 [ 100.112420][ T3324] incfs: ino conflict with backing FS 3 [ 100.118197][ T3324] incfs: ino conflict with backing FS 1 [ 100.135797][ T31] usb 2-1: USB disconnect, device number 22 [ 100.153968][ T3333] fuse: Unknown parameter '' [ 100.159603][ T3333] fuse: blksize only supported for fuseblk [ 100.165477][ T36] audit: type=1326 audit(1761749595.539:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3315 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61ff8efc9 code=0x7fc00000 [ 100.181943][ T3335] incfs: Error accessing: ./file0. [ 100.189352][ T36] audit: type=1400 audit(1761749595.539:445): avc: denied { mounton } for pid=3334 comm="syz.0.928" path="/239/file0" dev="tmpfs" ino=1328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.195045][ T3335] incfs: mount failed -20 [ 100.253093][ T3344] tipc: Started in network mode [ 100.258005][ T3344] tipc: Node identity , cluster identity 4711 [ 100.266458][ T3344] tipc: Failed to obtain node identity [ 100.271952][ T3344] tipc: Enabling of bearer rejected, failed to enable media [ 100.281061][ T3344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:694 [ 100.281141][ T3344] rust_binder: Read failure Err(EFAULT) in pid:694 [ 100.331603][ T3346] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 100.338276][ T3346] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:696 [ 100.383290][ T36] audit: type=1400 audit(1761749595.745:446): avc: denied { bind } for pid=3355 comm="syz.0.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.785029][ T63] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 100.934233][ T839] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 100.966194][ T63] usb 4-1: Using ep0 maxpacket: 16 [ 100.977596][ T63] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 100.998165][ T63] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.019339][ T63] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.039393][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.051440][ T63] usb 4-1: Product: syz [ 101.054884][ T3364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.937'. [ 101.055715][ T63] usb 4-1: Manufacturer: syz [ 101.079974][ T63] usb 4-1: SerialNumber: syz [ 101.094090][ T839] usb 2-1: Using ep0 maxpacket: 8 [ 101.106430][ T839] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 101.126076][ T839] usb 2-1: config 179 has no interface number 0 [ 101.136927][ T839] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 101.159850][ T839] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 101.171630][ T839] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 101.183251][ T839] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 101.195080][ T839] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 101.208701][ T839] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 101.230821][ T839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.243919][ T3361] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 101.309694][ T3373] GUP no longer grows the stack in syz.0.941 (3373): 200000001000-200000c01000 (200000000000) [ 101.320236][ T3373] CPU: 1 UID: 0 PID: 3373 Comm: syz.0.941 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 101.320282][ T3373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 101.320307][ T3373] Call Trace: [ 101.320316][ T3373] [ 101.320345][ T3373] __dump_stack+0x21/0x30 [ 101.320379][ T3373] dump_stack_lvl+0x10c/0x190 [ 101.320407][ T3373] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.320434][ T3373] ? find_vma+0xcd/0x110 [ 101.320459][ T3373] dump_stack+0x19/0x20 [ 101.320487][ T3373] __get_user_pages+0x1e34/0x22d0 [ 101.320515][ T3373] ? __kasan_check_write+0x18/0x20 [ 101.320550][ T3373] ? down_read_killable+0x79/0xf0 [ 101.320573][ T3373] ? populate_vma_page_range+0x230/0x230 [ 101.320602][ T3373] ? kernel_text_address+0xa9/0xe0 [ 101.320650][ T3373] ? unwind_get_return_address+0x51/0x90 [ 101.320680][ T3373] __gup_longterm_locked+0xcb1/0x1580 [ 101.320713][ T3373] ? stack_depot_save_flags+0x38/0x800 [ 101.320741][ T3373] gup_fast_fallback+0x12ae/0x14a0 [ 101.320771][ T3373] ? kasan_save_track+0x3e/0x80 [ 101.320794][ T3373] ? __kmalloc_cache_noprof+0x24c/0x490 [ 101.320817][ T3373] ? futex_lock_pi+0x77a/0xa10 [ 101.320849][ T3373] ? get_user_pages_fast_only+0xc0/0xc0 [ 101.320883][ T3373] get_user_pages_fast+0x73/0xb0 [ 101.320912][ T3373] get_futex_key+0x24d/0x930 [ 101.320933][ T3373] ? __cfi_get_futex_key+0x10/0x10 [ 101.320955][ T3373] ? futex_lock_pi+0x77a/0xa10 [ 101.320983][ T3373] ? futex_setup_timer+0xb4/0xd0 [ 101.321004][ T3373] futex_lock_pi+0x1c0/0xa10 [ 101.321032][ T3373] ? __cfi_futex_lock_pi+0x10/0x10 [ 101.321059][ T3373] ? __kasan_check_write+0x18/0x20 [ 101.321094][ T3373] ? wake_up_q+0x10f/0x1c0 [ 101.321129][ T3373] ? __cfi_futex_wake_mark+0x10/0x10 [ 101.321160][ T3373] ? __seccomp_filter+0x433/0x1a70 [ 101.321182][ T3373] do_futex+0x25c/0x500 [ 101.321204][ T3373] ? __cfi_do_futex+0x10/0x10 [ 101.321225][ T3373] ? vm_mmap_pgoff+0x145/0x4e0 [ 101.321247][ T3373] __se_sys_futex+0x28f/0x300 [ 101.321271][ T3373] ? __x64_sys_futex+0x110/0x110 [ 101.321297][ T3373] __x64_sys_futex+0xe9/0x110 [ 101.321320][ T3373] x64_sys_call+0x227f/0x2ee0 [ 101.321364][ T3373] do_syscall_64+0x58/0xf0 [ 101.321393][ T3373] ? clear_bhb_loop+0x50/0xa0 [ 101.321420][ T3373] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.321443][ T3373] RIP: 0033:0x7fa61ff8efc9 [ 101.321470][ T3373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.321492][ T3373] RSP: 002b:00007fa620db4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.321517][ T3373] RAX: ffffffffffffffda RBX: 00007fa6201e5fa0 RCX: 00007fa61ff8efc9 [ 101.321537][ T3373] RDX: 0000000000000001 RSI: 000000000000000d RDI: 0000200000000b00 [ 101.321552][ T3373] RBP: 00007fa620011f91 R08: 0000000000000000 R09: 0000000000000002 [ 101.321566][ T3373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.321578][ T3373] R13: 00007fa6201e6038 R14: 00007fa6201e5fa0 R15: 00007ffd09752108 [ 101.321598][ T3373] [ 101.323563][ T63] usb 4-1: 0:2 : does not exist [ 101.350721][ T3375] mmap: syz.0.942 (3375) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.381544][ T63] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 101.420577][ T36] audit: type=1400 audit(1761749596.721:447): avc: denied { execute } for pid=3376 comm="syz.0.943" path="/249/cpuacct.usage_percpu" dev="tmpfs" ino=1382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.459529][ T63] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 101.693733][ T839] usb 2-1: USB disconnect, device number 23 [ 101.693786][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 101.708058][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 101.899918][ T63] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 101.917860][ T63] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 101.940107][ T63] usb 4-1: USB disconnect, device number 28 [ 101.955838][ T418] udevd[418]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.077119][ T839] usb 5-1: USB disconnect, device number 22 [ 102.103866][ T3384] rust_binder: 185: no such ref 2 [ 102.143219][ T3386] /dev/rnullb0: Can't open blockdev [ 102.175752][ T3388] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.230970][ T3389] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:189 [ 102.238114][ T3389] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:189 [ 102.483069][ T3406] fuse: Bad value for 'fd' [ 102.564692][ T3409] rust_binder: Write failure EINVAL in pid:792 [ 102.585098][ T3414] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 102.618004][ T3416] random: crng reseeded on system resumption [ 102.871496][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.871533][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.880317][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.887020][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.893613][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.900815][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.900824][ T3436] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 102.914119][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.922786][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.929578][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.936122][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.943316][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.949968][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.956551][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.963296][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.970049][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.976555][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.984446][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.991078][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.998001][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.004996][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.011590][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.018439][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.025199][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.031811][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.038668][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.045428][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.060026][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.082713][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.102625][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.109378][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.116777][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.129753][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.138892][ T3435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.149048][ T3444] 9pnet_fd: Insufficient options for proto=fd [ 103.185997][ T3450] netlink: 104 bytes leftover after parsing attributes in process `syz.1.967'. [ 103.210086][ T3452] netlink: 104 bytes leftover after parsing attributes in process `syz.1.967'. [ 103.245506][ T36] audit: type=1400 audit(1761749598.429:448): avc: denied { unmount } for pid=1820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 103.274937][ T3458] __vm_enough_memory: pid: 3458, comm: syz.4.969, bytes: 18014402804453376 not enough memory for the allocation [ 103.287313][ T3456] overlayfs: failed to clone upperpath [ 103.322087][ T3460] fuse: Bad value for 'fd' [ 103.398455][ T36] audit: type=1400 audit(1761749598.579:449): avc: denied { mount } for pid=3469 comm="syz.1.970" name="/" dev="ramfs" ino=22303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 103.423643][ T3471] overlayfs: failed to resolve './file2': -2 [ 103.637314][ T3474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.646168][ T3474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.654348][ T3474] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 103.886423][ T63] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 103.971551][ T36] audit: type=1400 audit(1761749599.104:450): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 104.047609][ T63] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.059264][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 104.070288][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 104.080113][ T63] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.093136][ T63] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.099267][ T3492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:832 [ 104.102355][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.121217][ T63] usb 4-1: config 0 descriptor?? [ 104.297168][ T3498] rust_binder: Read failure Err(EAGAIN) in pid:207 [ 104.344919][ T63] usbhid 4-1:0.0: can't add hid device: -71 [ 104.357479][ T63] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 104.366156][ T63] usb 4-1: USB disconnect, device number 29 [ 104.375771][ T3501] netlink: 16 bytes leftover after parsing attributes in process `syz.4.986'. [ 104.387738][ T45] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 104.548464][ T45] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 104.556703][ T45] usb 2-1: config 0 has no interface number 0 [ 104.563014][ T45] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 104.575844][ T45] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 104.584938][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.593072][ T45] usb 2-1: Product: syz [ 104.597281][ T45] usb 2-1: Manufacturer: syz [ 104.601902][ T45] usb 2-1: SerialNumber: syz [ 104.607139][ T45] usb 2-1: config 0 descriptor?? [ 104.643293][ T543] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 104.824509][ T543] usb 5-1: Using ep0 maxpacket: 32 [ 104.830294][ T3496] fuse: Bad value for 'fd' [ 104.830910][ T543] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.845712][ T543] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.852438][ T543] usb 5-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 104.861578][ T543] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.870447][ T543] usb 5-1: config 0 descriptor?? [ 105.008849][ T45] usb 2-1: invalid MIDI out EP 0 [ 105.016764][ T45] snd-usb-audio 2-1:0.151: probe with driver snd-usb-audio failed with error -22 [ 105.027233][ T45] usb 2-1: USB disconnect, device number 24 [ 105.035835][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.310304][ T543] wacom 0003:056A:009F.000A: item fetching failed at offset 5/6 [ 105.325712][ T543] wacom 0003:056A:009F.000A: parse failed [ 105.331602][ T543] wacom 0003:056A:009F.000A: probe with driver wacom failed with error -22 [ 105.401456][ T3530] netlink: 36 bytes leftover after parsing attributes in process `syz.0.994'. [ 105.444394][ T3532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.452976][ T3532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.461983][ T3532] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 105.462010][ T3532] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:843 [ 105.524030][ T466] usb 5-1: USB disconnect, device number 23 [ 105.808108][ T3536] /dev/rnullb0: Can't open blockdev [ 105.830547][ T3543] netlink: 72 bytes leftover after parsing attributes in process `syz.3.999'. [ 105.852558][ T3548] serio: Serial port ptm0 [ 105.911248][ T3549] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.952459][ T3549] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.959341][ T3549] rust_binder: Error while translating object. [ 105.965844][ T3549] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 105.972147][ T3549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:718 [ 106.033293][ T3551] input: syz1 as /devices/virtual/input/input18 [ 106.116970][ T36] audit: type=1400 audit(1761749601.131:451): avc: denied { getopt } for pid=3554 comm="syz.1.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.186430][ T36] audit: type=1400 audit(1761749601.187:452): avc: denied { search } for pid=3560 comm="syz.0.1005" name="/" dev="configfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.234344][ T3568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=3568 comm=syz.0.1007 [ 106.402196][ T466] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 106.562091][ T466] usb 2-1: Using ep0 maxpacket: 16 [ 106.568478][ T466] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.579462][ T466] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.589276][ T466] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 106.602155][ T466] usb 2-1: New USB device found, idVendor=045e, idProduct=00da, bcdDevice= 0.90 [ 106.611285][ T466] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.620010][ T466] usb 2-1: config 0 descriptor?? [ 106.845813][ T466] hid-generic 0003:045E:00DA.000B: ignoring exceeding usage max [ 106.863037][ T466] hid-generic 0003:045E:00DA.000B: unbalanced collection at end of report description [ 106.873315][ T466] hid-generic 0003:045E:00DA.000B: probe with driver hid-generic failed with error -22 [ 106.882044][ T3581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:856 [ 106.883928][ T36] audit: type=1400 audit(1761749601.844:453): avc: denied { write } for pid=3580 comm="syz.1.1012" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 106.887073][ T466] usb 2-1: USB disconnect, device number 25 [ 107.279804][ T3601] 9pnet_fd: Insufficient options for proto=fd [ 107.533873][ T45] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 107.693102][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.706058][ T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 107.715143][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.723791][ T45] usb 2-1: config 0 descriptor?? [ 108.028103][ T3627] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1026'. [ 108.158252][ T45] apple 0003:05AC:027B.000C: unknown main item tag 0x2 [ 108.166438][ T45] apple 0003:05AC:027B.000C: hidraw0: USB HID v1.01 Device [HID 05ac:027b] on usb-dummy_hcd.1-1/input0 [ 108.372369][ T466] usb 2-1: USB disconnect, device number 26 [ 108.438330][ T45] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 108.598209][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 108.604501][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.615551][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.625442][ T45] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 108.634535][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.643280][ T45] usb 5-1: config 0 descriptor?? [ 108.649156][ T45] hub 5-1:0.0: USB hub found [ 108.867244][ T45] hub 5-1:0.0: 1 port detected [ 109.016409][ T36] audit: type=1400 audit(1761749603.851:454): avc: denied { setopt } for pid=3658 comm="syz.1.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.035812][ T36] audit: type=1400 audit(1761749603.851:455): avc: denied { ioctl } for pid=3658 comm="syz.1.1036" path="socket:[23181]" dev="sockfs" ino=23181 ioctlcmd=0x1501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.397684][ T466] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 109.511019][ T45] hub 5-1:0.0: activate --> -90 [ 109.520008][ T36] audit: type=1400 audit(1761749604.320:456): avc: denied { create } for pid=3682 comm="syz.0.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.539764][ T466] usb 2-1: device descriptor read/64, error -71 [ 109.586225][ T36] audit: type=1400 audit(1761749604.376:457): avc: denied { write } for pid=3691 comm="syz.0.1047" path="socket:[23229]" dev="sockfs" ino=23229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.792129][ T466] usb 2-1: device descriptor read/64, error -71 [ 110.047958][ T466] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 110.186526][ T466] usb 2-1: device descriptor read/64, error -71 [ 110.363435][ T3647] rust_binder: Error while translating object. [ 110.363490][ T3647] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 110.369773][ T3647] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:224 [ 110.380043][ T63] usb 5-1: USB disconnect, device number 24 [ 110.381524][ T45] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 110.453037][ T466] usb 2-1: device descriptor read/64, error -71 [ 110.570538][ T466] usb usb2-port1: attempt power cycle [ 110.871571][ T3722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.932803][ T466] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 110.933642][ T3725] netlink: 'syz.4.1059': attribute type 4 has an invalid length. [ 110.966355][ T3725] netlink: 'syz.4.1059': attribute type 4 has an invalid length. [ 110.984994][ T466] usb 2-1: device descriptor read/8, error -71 [ 111.018310][ T3735] rust_binder: Write failure EFAULT in pid:228 [ 111.125774][ T466] usb 2-1: device descriptor read/8, error -71 [ 111.226295][ T3758] /dev/rnullb0: Can't lookup blockdev [ 111.295183][ T45] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 111.348524][ T66] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 111.391191][ T466] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 111.413768][ T466] usb 2-1: device descriptor read/8, error -71 [ 111.455068][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 111.461795][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 111.470214][ T45] usb 5-1: config 1 has an invalid interface number: 4 but max is 2 [ 111.478270][ T45] usb 5-1: config 1 has an invalid interface descriptor of length 6, skipping [ 111.487199][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.497357][ T45] usb 5-1: config 1 has no interface number 1 [ 111.503644][ T45] usb 5-1: config 1 interface 4 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 111.516567][ T45] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.527567][ T45] usb 5-1: config 1 interface 4 has no altsetting 0 [ 111.530919][ T66] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.535713][ T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.546222][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.554798][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.566261][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 111.573702][ T45] usb 5-1: Product: syz [ 111.583915][ T66] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.587785][ T45] usb 5-1: Manufacturer: syz [ 111.601013][ T466] usb 2-1: device descriptor read/8, error -71 [ 111.605438][ T45] usb 5-1: SerialNumber: syz [ 111.611511][ T66] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.625168][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.633984][ T66] usb 4-1: config 0 descriptor?? [ 111.721698][ T466] usb usb2-port1: unable to enumerate USB device [ 111.835599][ T3740] netlink: 12824 bytes leftover after parsing attributes in process `syz.4.1064'. [ 111.848042][ T3740] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 111.853447][ T36] audit: type=1400 audit(1761749606.506:458): avc: denied { read } for pid=3745 comm="syz.3.1067" name="/" dev="configfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 111.854560][ T3746] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.861744][ T45] usb 5-1: 2:1 : invalid UAC_AS_GENERAL desc [ 111.894572][ T66] usbhid 4-1:0.0: can't add hid device: -71 [ 111.896045][ T36] audit: type=1400 audit(1761749606.506:459): avc: denied { open } for pid=3745 comm="syz.3.1067" path="/" dev="configfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 111.912158][ T66] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 111.933620][ T45] usb 5-1: USB disconnect, device number 25 [ 111.984460][ T3768] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.990649][ T66] usb 4-1: USB disconnect, device number 30 [ 112.003100][ T3768] rust_binder: Error while translating object. [ 112.003124][ T3768] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 112.009305][ T3768] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:760 [ 112.033788][ T36] audit: type=1400 audit(1761749606.675:460): avc: denied { ioctl } for pid=3769 comm="syz.3.1074" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 112.406880][ T3783] netlink: 'syz.1.1079': attribute type 4 has an invalid length. [ 112.416376][ T3784] netlink: 'syz.1.1079': attribute type 4 has an invalid length. [ 112.508092][ T3789] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.508965][ T3790] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 112.515276][ T3789] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 112.515554][ T3790] rust_binder: Error while translating object. [ 112.524896][ T3789] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 112.532700][ T3790] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 112.539924][ T3789] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:233 [ 112.548055][ T3790] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:233 [ 112.566857][ T66] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 112.617510][ T3798] fuse: Bad value for 'fd' [ 112.734291][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 112.740584][ T66] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 112.748780][ T66] usb 4-1: config 0 has no interface number 0 [ 112.754893][ T66] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.765863][ T66] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.775648][ T66] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 112.784754][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.793703][ T66] usb 4-1: config 0 descriptor?? [ 112.997159][ T36] audit: type=1326 audit(1761749607.575:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61ff8efc9 code=0x7ffc0000 [ 113.022011][ T36] audit: type=1326 audit(1761749607.575:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61ff8efc9 code=0x7ffc0000 [ 113.051822][ T36] audit: type=1326 audit(1761749607.575:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa61ff8efc9 code=0x7ffc0000 [ 113.075199][ T36] audit: type=1326 audit(1761749607.575:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61ff8efc9 code=0x7ffc0000 [ 113.098707][ T36] audit: type=1326 audit(1761749607.575:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61ff8efc9 code=0x7ffc0000 [ 113.108709][ T3811] /dev/rnullb0: Can't open blockdev [ 113.122367][ T36] audit: type=1326 audit(1761749607.575:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa61ff8efc9 code=0x7ffc0000 [ 113.150681][ T36] audit: type=1326 audit(1761749607.575:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61ff8efc9 code=0x7ffc0000 [ 113.174196][ T36] audit: type=1326 audit(1761749607.575:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61ff8efc9 code=0x7ffc0000 [ 113.197548][ T36] audit: type=1326 audit(1761749607.575:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa61ff8efc9 code=0x7ffc0000 [ 113.210001][ T3817] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1090'. [ 113.228982][ T36] audit: type=1326 audit(1761749607.575:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61ff8efc9 code=0x7ffc0000 [ 113.236147][ T3816] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 113.260493][ T3816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:912 [ 113.273618][ T3821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=3821 comm=syz.1.1091 [ 113.311490][ T3823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1092'. [ 113.377273][ T3825] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 113.377298][ T3825] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:921 [ 113.407338][ T3825] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 113.443799][ T66] uclogic 0003:28BD:0071.000D: pen parameters not found [ 113.452627][ T66] uclogic 0003:28BD:0071.000D: interface is invalid, ignoring [ 113.462282][ T66] usb 4-1: USB disconnect, device number 31 [ 113.586856][ T3838] rust_binder: 3830 RLIMIT_NICE not set [ 113.633687][ T3848] __vm_enough_memory: pid: 3848, comm: syz.1.1101, bytes: 18014402804453376 not enough memory for the allocation [ 113.687805][ T3852] rust_binder: Error while translating object. [ 113.687833][ T3852] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 113.694061][ T3852] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:246 [ 113.703493][ T3852] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 113.712729][ T3852] rust_binder: Read failure Err(EFAULT) in pid:246 [ 113.721611][ T3853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.742521][ T3857] 9pnet_fd: Insufficient options for proto=fd [ 114.002381][ T3863] rust_binder: 769: no such ref 1 [ 114.007524][ T3863] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:769 [ 114.045478][ T45] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 114.197663][ T3879] netlink: 'syz.0.1113': attribute type 1 has an invalid length. [ 114.216413][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 114.229265][ T45] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 114.245509][ T45] usb 5-1: config 0 has no interface number 0 [ 114.251935][ T45] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 114.263678][ T45] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 48 [ 114.269373][ T66] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 114.284560][ T45] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 114.293871][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.302219][ T45] usb 5-1: Product: syz [ 114.306501][ T45] usb 5-1: Manufacturer: syz [ 114.311295][ T45] usb 5-1: SerialNumber: syz [ 114.316596][ T45] usb 5-1: config 0 descriptor?? [ 114.322037][ T3861] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 114.329345][ T3861] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 114.440988][ T66] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 114.449662][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.459777][ T66] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 114.468805][ T66] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.479811][ T66] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.490602][ T66] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 114.499769][ T66] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 114.507905][ T66] usb 4-1: Product: syz [ 114.512181][ T66] usb 4-1: Manufacturer: syz [ 114.518411][ T66] cdc_wdm 4-1:1.0: skipping garbage [ 114.523676][ T66] cdc_wdm 4-1:1.0: skipping garbage [ 114.529583][ T66] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 114.535549][ T66] cdc_wdm 4-1:1.0: Unknown control protocol [ 114.552151][ T66] usb 5-1: USB disconnect, device number 26 [ 114.733448][ T3865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.742029][ T3865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.750640][ T3865] rust_binder: Write failure EINVAL in pid:771 [ 114.751278][ T3865] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 114.757492][ T3865] rust_binder: Error in use_page_slow: EFAULT [ 114.767940][ T3865] rust_binder: use_range failure EFAULT [ 114.774098][ T3865] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 114.779644][ T3865] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 114.787703][ T3865] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:771 [ 114.797855][ T66] usb 4-1: USB disconnect, device number 32 [ 141.391079][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 141.391099][ T36] audit: type=1400 audit(1761749634.217:507): avc: denied { remove_name } for pid=3894 comm="syz.1.1120" name="binder0" dev="binder" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.393395][ T3902] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 246) [ 141.397969][ T36] audit: type=1400 audit(1761749634.217:508): avc: denied { unlink } for pid=3894 comm="syz.1.1120" name="binder0" dev="binder" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 141.420704][ T3901] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.463453][ T3906] tipc: Started in network mode [ 141.475323][ T3906] tipc: Node identity ac14140f, cluster identity 4711 [ 141.477827][ T3902] rust_binder: Error while translating object. [ 141.482131][ T3902] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 141.482227][ T3906] tipc: New replicast peer: 255.255.255.255 [ 141.491479][ T3902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:773 [ 141.500480][ T3906] tipc: Enabled bearer , priority 10 [ 141.520070][ T3905] tipc: Enabling of bearer rejected, already enabled [ 141.539102][ T3914] rust_binder: Write failure EFAULT in pid:778 [ 141.573047][ T3922] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1129'. [ 141.597637][ T3924] SELinux: security_context_str_to_sid () failed with errno=-22 [ 141.611020][ T3922] /dev/rnullb0: Can't lookup blockdev [ 141.617869][ T3927] rust_binder: 782: no such ref 6 [ 141.624506][ T3927] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 141.653605][ T3931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1132'. [ 141.659932][ T3932] SELinux: unknown common r [ 141.662920][ T36] audit: type=1400 audit(1761749634.470:509): avc: denied { load_policy } for pid=3930 comm="syz.3.1133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 141.667418][ T3932] SELinux: failed to load policy [ 141.707521][ T3932] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.860777][ T392] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 141.869248][ T3950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=3950 comm=syz.3.1138 [ 141.887798][ T3949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=3949 comm=syz.3.1138 [ 142.017562][ T543] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 142.035507][ T3959] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=3959 comm=syz.3.1140 [ 142.041593][ T392] usb 2-1: Using ep0 maxpacket: 32 [ 142.054746][ T392] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 142.069239][ T392] usb 2-1: config 0 has no interface number 0 [ 142.075718][ T392] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 142.084522][ T3966] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.088177][ T3966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:807 [ 142.092013][ T392] usb 2-1: config 0 interface 196 has no altsetting 0 [ 142.114908][ T392] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 142.124768][ T392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.132844][ T392] usb 2-1: Product: syz [ 142.137506][ T392] usb 2-1: Manufacturer: syz [ 142.142130][ T392] usb 2-1: SerialNumber: syz [ 142.155998][ T392] usb 2-1: config 0 descriptor?? [ 142.161506][ T3924] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 142.188074][ T543] usb 5-1: Using ep0 maxpacket: 16 [ 142.194331][ T543] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 142.210170][ T543] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.234311][ T543] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.257598][ T543] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.278364][ T543] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.298180][ T543] usb 5-1: Product: syz [ 142.308461][ T543] usb 5-1: Manufacturer: syz [ 142.313790][ T3974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=3974 comm=syz.0.1145 [ 142.319852][ T543] usb 5-1: SerialNumber: syz [ 142.326990][ T3974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=3974 comm=syz.0.1145 [ 142.343980][ T3974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=3974 comm=syz.0.1145 [ 142.359240][ T3974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=3974 comm=syz.0.1145 [ 142.372268][ T3974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=3974 comm=syz.0.1145 [ 142.389644][ T3974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=3974 comm=syz.0.1145 [ 142.403203][ T3974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=3974 comm=syz.0.1145 [ 142.465477][ T36] audit: type=1326 audit(1761749635.230:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.0.1150" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa61ff8efc9 code=0x0 [ 142.689162][ T66] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 142.699783][ T45] tipc: Node number set to 2886997007 [ 142.787104][ T543] usb 5-1: 0:2 : does not exist [ 142.794405][ T543] usb 5-1: USB disconnect, device number 27 [ 142.803408][ T3982] udevd[3982]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 142.819499][ T392] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 142.829242][ T392] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 142.845100][ T36] audit: type=1400 audit(1761749635.577:511): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 142.867704][ T36] audit: type=1400 audit(1761749635.577:512): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.871736][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.889020][ T36] audit: type=1400 audit(1761749635.577:513): avc: denied { read } for pid=150 comm="dhcpcd" name="n15" dev="tmpfs" ino=3673 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.908000][ T66] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.923789][ T36] audit: type=1400 audit(1761749635.577:514): avc: denied { open } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3673 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.943877][ T66] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.952571][ T36] audit: type=1400 audit(1761749635.577:515): avc: denied { getattr } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3673 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.965623][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.984753][ T36] audit: type=1400 audit(1761749635.605:516): avc: denied { ioctl } for pid=3979 comm="syz.3.1148" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.993966][ T66] usb 4-1: Product: syz [ 143.022027][ T66] usb 4-1: Manufacturer: syz [ 143.026664][ T66] usb 4-1: SerialNumber: syz [ 143.043991][ T543] usb 2-1: USB disconnect, device number 31 [ 143.096277][ T543] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 143.455077][ T4026] /dev/rnullb0: Can't open blockdev [ 143.467608][ T66] usb 4-1: 0:2 : does not exist [ 143.640081][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.640112][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.657433][ T4045] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:946 [ 143.668159][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.689444][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.697225][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.704249][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.710749][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.717286][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.724010][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.730511][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.739924][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.755150][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.768314][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.785552][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.796282][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.809858][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.816306][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.831072][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.837815][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.844347][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.850849][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.858790][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.865369][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.871867][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.882294][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.888850][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.895440][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.924615][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.938575][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.951836][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.965314][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.978686][ T4044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.990115][ T4053] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 144.095754][ T4059] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 144.141827][ T4063] overlay: ./file0 is not a directory [ 144.357975][ T66] usb 4-1: USB disconnect, device number 33 [ 144.437376][ T543] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 144.586621][ T543] usb 5-1: device descriptor read/64, error -71 [ 144.842566][ T543] usb 5-1: device descriptor read/64, error -71 [ 145.101762][ T4086] rust_binder: 958: no such ref 3 [ 145.107111][ T4086] rust_binder: 958: no such ref 1 [ 145.109096][ T543] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 145.112450][ T4086] rust_binder: Write failure EFAULT in pid:958 [ 145.112512][ T4087] rust_binder: 958: no such ref 3 [ 145.112529][ T4087] rust_binder: 958: no such ref 1 [ 145.112542][ T4087] rust_binder: Write failure EFAULT in pid:958 [ 145.238152][ T4089] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 145.312113][ T543] usb 5-1: device descriptor read/64, error -71 [ 145.341302][ T4103] netlink: 'syz.1.1183': attribute type 4 has an invalid length. [ 145.349181][ T4103] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1183'. [ 145.388992][ T4108] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 145.620996][ T543] usb 5-1: device descriptor read/64, error -71 [ 145.753059][ T543] usb usb5-port1: attempt power cycle [ 145.966179][ T4143] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 145.966207][ T4143] rust_binder: Error in use_page_slow: EBUSY [ 145.976661][ T4143] rust_binder: use_range failure EBUSY [ 145.982705][ T4143] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 145.988476][ T4143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 145.996424][ T4143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:986 [ 146.134014][ T543] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 146.165433][ T543] usb 5-1: device descriptor read/8, error -71 [ 146.292242][ T45] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 146.314626][ T543] usb 5-1: device descriptor read/8, error -71 [ 146.454637][ T45] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 146.463780][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.471805][ T45] usb 2-1: Product: syz [ 146.476039][ T45] usb 2-1: Manufacturer: syz [ 146.480652][ T45] usb 2-1: SerialNumber: syz [ 146.486038][ T45] usb 2-1: config 0 descriptor?? [ 146.580170][ T543] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 146.602527][ T543] usb 5-1: device descriptor read/8, error -71 [ 146.741081][ T543] usb 5-1: device descriptor read/8, error -71 [ 146.857299][ T543] usb usb5-port1: unable to enumerate USB device [ 146.937483][ T4204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1216'. [ 146.982000][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 146.982035][ T36] audit: type=1326 audit(1761749639.461:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.3.1218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c1c58efc9 code=0x0 [ 147.037120][ T4209] 9pnet_fd: Insufficient options for proto=fd [ 147.887599][ T4228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.887629][ T4228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.896050][ T4228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.902569][ T4228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.909053][ T4228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.915557][ T4228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.922061][ T4228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.928553][ T4228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.935376][ T4228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.941894][ T4228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.948416][ T4228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.022799][ T4242] kvm: emulating exchange as write [ 148.359220][ T4251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.367892][ T4251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.620901][ T4262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 148.621035][ T4262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:311 [ 148.735160][ T4272] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:321 [ 148.814301][ T4276] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1240'. [ 148.890442][ T36] audit: type=1400 audit(1761749641.252:535): avc: denied { shutdown } for pid=4275 comm="syz.4.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.970658][ T36] audit: type=1400 audit(1761749641.327:536): avc: denied { create } for pid=4277 comm="syz.4.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 149.232601][ T45] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 149.244516][ T45] asix 2-1:0.0: probe with driver asix failed with error -71 [ 149.252407][ T4288] netlink: 'syz.1.1245': attribute type 4 has an invalid length. [ 149.254512][ T839] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 149.268494][ T45] usb 2-1: USB disconnect, device number 32 [ 149.276622][ T4288] rust_binder: Error while translating object. [ 149.276659][ T4288] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 149.283094][ T4288] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:993 [ 149.293035][ T4290] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.404982][ T839] usb 5-1: device descriptor read/64, error -71 [ 149.671505][ T839] usb 5-1: device descriptor read/64, error -71 [ 149.703457][ T45] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 149.864631][ T45] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 149.872834][ T45] usb 2-1: config 0 has no interface number 1 [ 149.879114][ T45] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 149.889089][ T45] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 149.900540][ T45] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 149.909670][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 149.917698][ T45] usb 2-1: SerialNumber: syz [ 149.922911][ T45] usb 2-1: config 0 descriptor?? [ 149.928055][ T839] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 150.008868][ T4316] /dev/rnullb0: Can't lookup blockdev [ 150.030932][ T4318] fuse: Bad value for 'group_id' [ 150.035950][ T4318] fuse: Bad value for 'group_id' [ 150.058878][ T4320] /dev/rnullb0: Can't lookup blockdev [ 150.065931][ T839] usb 5-1: device descriptor read/64, error -71 [ 150.106981][ T4327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1259'. [ 150.129879][ T4329] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1260'. [ 150.178978][ T4295] rust_binder: Write failure EINVAL in pid:998 [ 150.249863][ T45] usb 2-1: Found UVC 0.00 device (0002:0000) [ 150.263172][ T45] usb 2-1: No valid video chain found. [ 150.270322][ T45] usb 2-1: USB disconnect, device number 33 [ 150.321745][ T839] usb 5-1: device descriptor read/64, error -71 [ 150.439152][ T839] usb usb5-port1: attempt power cycle [ 150.804910][ T839] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 150.819529][ T36] audit: type=1400 audit(1761749643.053:537): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 150.840502][ T839] usb 5-1: device descriptor read/8, error -71 [ 150.849862][ T4345] __vm_enough_memory: pid: 4345, comm: syz.1.1266, bytes: 18014402804453376 not enough memory for the allocation [ 150.928397][ T4349] selinux_netlink_send: 26 callbacks suppressed [ 150.928420][ T4349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=4349 comm=syz.1.1267 [ 150.972053][ T4357] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1269'. [ 150.981807][ T4357] rust_binder: Fixups oob 178 180 369 186 [ 150.981824][ T4357] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 150.987754][ T4357] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 150.996265][ T4357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1021 [ 151.006461][ T839] usb 5-1: device descriptor read/8, error -71 [ 151.030999][ T4359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1023 [ 151.100574][ T36] audit: type=1400 audit(1761749643.325:538): avc: denied { setattr } for pid=4360 comm="syz.1.1271" name="" dev="pipefs" ino=26859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 151.145148][ T36] audit: type=1400 audit(1761749643.363:539): avc: denied { mounton } for pid=4370 comm="syz.1.1273" path="/syzcgroup/unified/syz1" dev="pstore" ino=1358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 151.145260][ T4372] /dev/rnullb0: Can't open blockdev [ 151.270600][ T839] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 151.302962][ T4382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1044 [ 151.303566][ T839] usb 5-1: device descriptor read/8, error -71 [ 151.304461][ T4382] rust_binder: 1044: no such ref 1 [ 151.452799][ T839] usb 5-1: device descriptor read/8, error -71 [ 151.494524][ T36] audit: type=1400 audit(1761749643.701:540): avc: denied { execute } for pid=4390 comm="syz.1.1280" path="/memory.events.local" dev="ramfs" ino=26479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 151.579909][ T839] usb usb5-port1: unable to enumerate USB device [ 152.377420][ T4415] SELinux: Context KNDd5Q3Bkٔybӭs,~;c3poͺfPҸ62Ai] is not valid (left unmapped). [ 152.400493][ T36] audit: type=1400 audit(1761749644.536:541): avc: denied { create } for pid=4414 comm="syz.3.1287" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0D3ADFCA373D0FFBF84012C9D7EFAD43B6333981F70086F9AB9CDBAD06650D7D2B83632F2F94169AE115DDD [ 152.450562][ T4425] input: syz1 as /devices/virtual/input/input19 [ 152.463587][ T36] audit: type=1400 audit(1761749644.536:542): avc: denied { associate } for pid=4414 comm="syz.3.1287" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0D3ADFCA373D0FFBF84012C9D7EFAD43B6333981F70086F9AB9CDBAD06650D7D2B83632F2F94169AE115DDD [ 152.470913][ T4426] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1288'. [ 152.519594][ T36] audit: type=1400 audit(1761749644.536:543): avc: denied { write open } for pid=4414 comm="syz.3.1287" path="/283/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0D3ADFCA373D0FFBF84012C9D7EFAD43B6333981F70086F9AB9CDBAD06650D7D2B83632F2F94169AE115DDD [ 152.585748][ T36] audit: type=1400 audit(1761749644.536:544): avc: denied { rename } for pid=4414 comm="syz.3.1287" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0D3ADFCA373D0FFBF84012C9D7EFAD43B6333981F70086F9AB9CDBAD06650D7D2B83632F2F94169AE115DDD [ 152.642675][ T36] audit: type=1400 audit(1761749644.536:545): avc: denied { mounton } for pid=4414 comm="syz.3.1287" path="/283/file0" dev="tmpfs" ino=1538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0D3ADFCA373D0FFBF84012C9D7EFAD43B6333981F70086F9AB9CDBAD06650D7D2B83632F2F94169AE115DDD [ 152.672595][ T4432] random: crng reseeded on system resumption [ 152.690218][ T4434] /dev/rnullb0: Can't open blockdev [ 152.691500][ T36] audit: type=1400 audit(1761749644.545:546): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=1538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0D3ADFCA373D0FFBF84012C9D7EFAD43B6333981F70086F9AB9CDBAD06650D7D2B83632F2F94169AE115DDD [ 152.731215][ T36] audit: type=1400 audit(1761749644.564:547): avc: denied { accept } for pid=4421 comm="syz.3.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 152.751555][ T36] audit: type=1400 audit(1761749644.564:548): avc: denied { getopt } for pid=4421 comm="syz.3.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.770961][ T36] audit: type=1326 audit(1761749644.676:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.0.1288" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa61ff8efc9 code=0x0 [ 152.794887][ T839] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 152.911082][ T4452] rust_binder: Write failure EFAULT in pid:1076 [ 152.938330][ T36] audit: type=1400 audit(1761749645.052:550): avc: denied { append } for pid=4456 comm="syz.1.1298" name="pfkey" dev="proc" ino=4026532475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 152.966775][ T839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.981242][ T839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.991017][ T839] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.004077][ T839] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.013187][ T839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.025203][ T839] usb 5-1: config 0 descriptor?? [ 153.876284][ T4466] __vm_enough_memory: pid: 4466, comm: syz.1.1300, bytes: 18014402804453376 not enough memory for the allocation [ 153.953498][ T4474] /dev/rnullb0: Can't lookup blockdev [ 154.214786][ T839] usbhid 5-1:0.0: can't add hid device: -71 [ 154.221071][ T839] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 154.232186][ T839] usb 5-1: USB disconnect, device number 36 [ 154.235064][ T4477] netlink: 'syz.4.1305': attribute type 1 has an invalid length. [ 154.363654][ T4485] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=983953270 (1967906540 ns) > initial count (914717820 ns). Using initial count to start timer. [ 154.691043][ T4512] /dev/rnullb0: Can't lookup blockdev [ 154.741991][ T4514] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0001 [ 154.750211][ T4514] tipc: Enabled bearer , priority 10 [ 154.757977][ T4516] tipc: Enabling of bearer rejected, already enabled [ 154.787438][ T4521] /dev/rnullb0: Can't lookup blockdev [ 154.898103][ T4528] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 154.905809][ T4528] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 154.912919][ T4528] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 154.955361][ T4535] rust_binder: Write failure EFAULT in pid:1098 [ 154.955369][ T4536] rust_binder: Write failure EFAULT in pid:1098 [ 155.081918][ T4547] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 155.093460][ T4553] fuse: Bad value for 'group_id' [ 155.100550][ T4545] input: syz1 as /devices/virtual/input/input20 [ 155.102445][ T4553] fuse: Bad value for 'group_id' [ 155.254310][ T4562] netlink: 'syz.1.1332': attribute type 1 has an invalid length. [ 155.287633][ T4566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1112 [ 155.388448][ T4573] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1337'. [ 156.222861][ T4622] input: syz1 as /devices/virtual/input/input21 [ 156.369785][ T4639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'. [ 156.379215][ T4639] rust_binder: Error while translating object. [ 156.379252][ T4639] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 156.385485][ T4639] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:910 [ 156.496751][ T4651] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.768640][ T4668] netlink: 'syz.0.1371': attribute type 32 has an invalid length. [ 156.799237][ T4670] fuse: Bad value for 'group_id' [ 156.804305][ T4670] fuse: Bad value for 'group_id' [ 157.347702][ T4675] rust_binder: Write failure EFAULT in pid:921 [ 157.437829][ T4691] __vm_enough_memory: pid: 4691, comm: syz.3.1378, bytes: 18014402804453376 not enough memory for the allocation [ 157.607305][ T4711] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1375'. [ 157.702594][ T4724] SELinux: Context system_u:object_r:crack_db_t:s0 is not valid (left unmapped). [ 157.744156][ T4727] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.744251][ T4728] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 157.781241][ T4734] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.790118][ T4734] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 157.814668][ T4736] /dev/rnullb0: Can't open blockdev [ 157.829334][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 157.829351][ T36] audit: type=1400 audit(1761749649.639:560): avc: denied { mounton } for pid=4735 comm="syz.1.1394" path="/388/file0" dev="ramfs" ino=28267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 157.858707][ T4738] /dev/rnullb0: Can't open blockdev [ 158.007668][ T66] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 158.060645][ T4745] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.061099][ T4745] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 158.104262][ T4749] rust_binder: Write failure EINVAL in pid:1183 [ 158.178229][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 158.190961][ T66] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 158.199183][ T66] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 158.206874][ T66] usb 4-1: config 0 has no interface number 0 [ 158.214549][ T66] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 158.223685][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.231723][ T66] usb 4-1: Product: syz [ 158.235986][ T66] usb 4-1: Manufacturer: syz [ 158.240581][ T66] usb 4-1: SerialNumber: syz [ 158.245910][ T66] usb 4-1: config 0 descriptor?? [ 158.251853][ T66] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 158.258270][ T66] usb 4-1: No valid video chain found. [ 158.359453][ T839] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 158.465883][ T36] audit: type=1326 audit(1761749650.230:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4729 comm="syz.3.1390" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c1c58efc9 code=0x0 [ 158.519347][ T839] usb 2-1: Using ep0 maxpacket: 8 [ 158.526441][ T839] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 158.536708][ T839] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 158.547871][ T839] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.556961][ T839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.564999][ T839] usb 2-1: Product:  [ 158.569173][ T839] usb 2-1: Manufacturer: ᆯ蘊췾袻࢒紦ﲏ윕霴ꈜ瓫㓩萠꯬䶻껨⼶켁笼ꣴ﯍盧嵆봮ﾁ풸왑ᯭ셝䙒廄騂舧瀪꛴꿷竩竁볉쒖⯕桠剕 [ 158.586082][ T839] usb 2-1: SerialNumber: syz [ 158.806350][ T4749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1183 [ 158.806405][ T4749] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 158.816037][ T4749] rust_binder: Read failure Err(EFAULT) in pid:1183 [ 158.828326][ T839] cdc_ncm 2-1:1.0: bind() failure [ 158.841534][ T839] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 158.848342][ T839] cdc_ncm 2-1:1.1: bind() failure [ 158.856019][ T839] usb 2-1: USB disconnect, device number 34 [ 159.020588][ T4761] /dev/rnullb0: Can't lookup blockdev [ 159.386077][ T4768] 8021q: VLANs not supported on lo [ 159.705583][ T36] audit: type=1400 audit(1761749651.402:562): avc: denied { lock } for pid=4793 comm="syz.4.1413" path="socket:[28505]" dev="sockfs" ino=28505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 159.793870][ T4807] binder: Bad value for 'stats' [ 159.881362][ T4809] kvm: kvm [4808]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 159.890559][ T4809] kvm: kvm [4808]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 159.902257][ T4809] kvm: kvm [4808]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 159.914476][ T4809] kvm: kvm [4808]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 159.923785][ T4809] kvm: kvm [4808]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 159.991501][ T36] audit: type=1400 audit(1761749651.665:563): avc: denied { setattr } for pid=4814 comm="syz.4.1418" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 160.015234][ T4815] /dev/rnullb0: Can't open blockdev [ 160.306986][ T36] audit: type=1400 audit(1761749651.956:564): avc: denied { map } for pid=4829 comm="syz.4.1422" path="socket:[28606]" dev="sockfs" ino=28606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 160.345393][ T36] audit: type=1400 audit(1761749651.956:565): avc: denied { read } for pid=4829 comm="syz.4.1422" path="socket:[28606]" dev="sockfs" ino=28606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 160.620271][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.620305][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.626932][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.633976][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.640155][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.648269][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.653314][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.659848][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.676440][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.676468][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.685214][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.691747][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.698592][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.705135][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.711690][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.718238][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.724893][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.731411][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.737938][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.744709][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.751430][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.757994][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.764534][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.771084][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.777617][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.784213][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.790830][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.797333][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.803876][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.807244][ T36] audit: type=1400 audit(1761749652.434:566): avc: denied { map } for pid=4856 comm="syz.0.1430" path="socket:[29739]" dev="sockfs" ino=29739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 160.810361][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.834381][ T36] audit: type=1400 audit(1761749652.444:567): avc: denied { mount } for pid=4858 comm="syz.0.1431" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 160.839823][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.868445][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.874958][ T4845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.887545][ C1] af_packet: tpacket_rcv: packet too big, clamped from 4 to 4294967272. macoff=96 [ 160.928752][ T839] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 160.975494][ T543] usb 4-1: USB disconnect, device number 34 [ 161.039060][ T4876] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1437'. [ 161.049077][ T4876] syz.0.1437 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 161.070863][ T4863] /dev/rnullb0: Can't open blockdev [ 161.097551][ T839] usb 2-1: Using ep0 maxpacket: 32 [ 161.115829][ T839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.118027][ T4892] tmpfs: Unknown parameter '' [ 161.130496][ T839] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 161.144358][ T36] audit: type=1400 audit(1761749652.734:568): avc: denied { write } for pid=4890 comm="syz.3.1442" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 161.170931][ T839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.183250][ T839] usb 2-1: config 0 descriptor?? [ 161.364752][ T4913] netlink: 'syz.4.1448': attribute type 4 has an invalid length. [ 161.372603][ T4913] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1448'. [ 161.402723][ T4850] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 161.426553][ T4920] binder: Unknown parameter 'defcontext01777777777777777777777' [ 161.472088][ T4926] fuse: Bad value for 'fd' [ 161.493506][ T543] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 161.620512][ T839] usbhid 2-1:0.0: can't add hid device: -71 [ 161.626886][ T839] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 161.638172][ T839] usb 2-1: USB disconnect, device number 35 [ 161.653394][ T543] usb 4-1: Using ep0 maxpacket: 8 [ 161.659643][ T543] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 161.668011][ T543] usb 4-1: config 179 has no interface number 0 [ 161.674493][ T543] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 161.685700][ T543] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 161.697119][ T543] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 161.708436][ T543] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 161.720033][ T543] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 161.733563][ T543] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 161.742666][ T543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.758066][ T4892] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 161.823815][ T4936] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1456'. [ 161.835120][ T36] audit: type=1400 audit(1761749653.400:569): avc: denied { accept } for pid=4935 comm="syz.0.1456" path="socket:[29612]" dev="sockfs" ino=29612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 161.920835][ T4940] overlayfs: failed to clone upperpath [ 161.984796][ T543] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input22 [ 162.096360][ T4948] veth0: entered promiscuous mode [ 162.101738][ T4948] veth0: left promiscuous mode [ 162.171915][ T45] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 162.185167][ T45] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 162.200274][ T543] usb 4-1: USB disconnect, device number 35 [ 162.206242][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 162.206281][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 162.241805][ T543] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 162.783235][ T4978] tipc: Can't bind to reserved service type 0 [ 163.113820][ T466] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 163.182040][ T5014] 9pnet_fd: Insufficient options for proto=fd [ 163.264474][ T5022] tipc: Trying to set illegal importance in message [ 163.285451][ T466] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.310163][ T466] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 163.330055][ T466] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.330177][ T5030] SELinux: Context system_u:object_r:anacron_exec_t:s0 is not valid (left unmapped). [ 163.355257][ T466] usb 4-1: config 0 descriptor?? [ 163.365063][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 163.365081][ T36] audit: type=1400 audit(1761749654.826:575): avc: denied { relabelto } for pid=5029 comm="syz.0.1492" name="file0" dev="tmpfs" ino=2537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:anacron_exec_t:s0" [ 163.402230][ T36] audit: type=1400 audit(1761749654.826:576): avc: denied { associate } for pid=5029 comm="syz.0.1492" name="file0" dev="tmpfs" ino=2537 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:anacron_exec_t:s0" [ 163.429985][ T36] audit: type=1400 audit(1761749654.864:577): avc: denied { mounton } for pid=5029 comm="syz.0.1492" path="/464/file0" dev="tmpfs" ino=2537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:anacron_exec_t:s0" [ 163.458745][ T36] audit: type=1400 audit(1761749654.920:578): avc: denied { getopt } for pid=5038 comm="syz.1.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 163.502521][ T5046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.511175][ T5046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.519825][ T5046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1496'. [ 163.583519][ T36] audit: type=1400 audit(1761749655.042:579): avc: denied { map } for pid=5044 comm="syz.1.1496" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.726560][ T5052] rust_binder: Write failure EFAULT in pid:1247 [ 163.753437][ T839] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 163.821083][ T466] zeroplus 0003:0C12:0005.000F: item fetching failed at offset 0/3 [ 163.829245][ T466] zeroplus 0003:0C12:0005.000F: parse failed [ 163.835559][ T466] zeroplus 0003:0C12:0005.000F: probe with driver zeroplus failed with error -22 [ 163.942571][ T36] audit: type=1400 audit(1761749655.370:580): avc: denied { unlink } for pid=545 comm="syz-executor" name="file0" dev="tmpfs" ino=2537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:anacron_exec_t:s0" [ 163.991281][ T5062] fuse: Bad value for 'fd' [ 163.996165][ T5062] fuse: Unknown parameter 'f[[Ţs>m?`aho&Lo1Ո?c!7^*RL$H(AJY)"qpKmsÖl' [ 163.996198][ T5063] fuse: Unknown parameter 'f[[Ţs>m?`aho&Lo1Ո?c!7^*RL$H(AJY)"qpKmsÖl' [ 164.061573][ T36] audit: type=1400 audit(1761749655.474:581): avc: denied { setcheckreqprot } for pid=4986 comm="syz.3.1475" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 164.063400][ T466] usb 4-1: USB disconnect, device number 36 [ 164.231070][ T5077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1505'. [ 164.532836][ T5079] IPv6: A: Disabled Multicast RS [ 164.821285][ T36] audit: type=1400 audit(1761749656.196:582): avc: denied { ioctl } for pid=5107 comm="syz.3.1516" path="mnt:[4026532297]" dev="nsfs" ino=4026532297 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 164.851416][ T5108] rust_binder: Error while translating object. [ 164.851460][ T5108] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 164.857707][ T5108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:981 [ 165.118973][ T5122] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 165.128177][ T5122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:987 [ 165.209139][ T36] audit: type=1400 audit(1761749656.562:583): avc: denied { mounton } for pid=5124 comm="syz.3.1523" path="/320/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 165.209152][ T5125] fuse: Bad value for 'rootmode' [ 165.439841][ T5132] overlayfs: failed to clone upperpath [ 166.386938][ T36] audit: type=1326 audit(1761749657.669:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.0.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61ff8efc9 code=0x7fc00000 [ 166.510258][ T5171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1542'. [ 166.706794][ T5187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1548'. [ 166.906127][ T5222] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 166.906164][ T5222] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1017 [ 166.996020][ T5237] incfs: Error accessing: ./file0. [ 167.011186][ T5237] incfs: mount failed -20 [ 167.187311][ T5247] /dev/nbd1: Can't lookup blockdev [ 167.206324][ T5249] binder: Bad value for 'max' [ 167.348498][ T5255] rust_binder: Error while translating object. [ 167.348548][ T5255] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 167.354793][ T5255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1026 [ 167.482857][ T543] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 167.499593][ T466] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 167.527910][ T543] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 167.594445][ T5284] netlink: 8540 bytes leftover after parsing attributes in process `syz.0.1582'. [ 167.604350][ T5284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1582'. [ 167.614439][ T5284] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1582'. [ 167.687059][ T466] usb 2-1: Using ep0 maxpacket: 32 [ 167.693341][ T466] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.704336][ T466] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.714386][ T466] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 167.728229][ T466] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 167.747041][ T466] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.760936][ T466] usb 2-1: config 0 descriptor?? [ 168.203786][ T466] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0011/input/input23 [ 168.216539][ T466] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0011/input/input24 [ 168.234355][ T466] kye 0003:0458:5011.0011: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 168.598437][ T5304] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 168.598499][ T5304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1044 [ 168.623246][ T5306] netlink: 'syz.3.1589': attribute type 13 has an invalid length. [ 168.645263][ T5306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1589'. [ 168.654668][ T5306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5306 comm=syz.3.1589 [ 168.970722][ T5327] overlayfs: failed to clone lowerpath [ 169.307337][ T66] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 169.382145][ C0] kye 0003:0458:5011.0011: usb_submit_urb(ctrl) failed: -1 [ 169.469694][ T66] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 169.478850][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.486856][ T66] usb 4-1: Product: syz [ 169.491079][ T66] usb 4-1: Manufacturer: syz [ 169.495686][ T66] usb 4-1: SerialNumber: syz [ 169.520557][ T466] usb 2-1: reset high-speed USB device number 37 using dummy_hcd [ 170.048044][ T5354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1273 [ 170.048905][ T5354] rust_binder: Read failure Err(EFAULT) in pid:1273 [ 170.185982][ T5366] overlay: Unknown parameter 'subj_type' [ 170.342037][ T63] usb 2-1: USB disconnect, device number 37 [ 171.110403][ T5425] overlayfs: failed to clone upperpath [ 171.116169][ T5426] overlayfs: failed to clone upperpath [ 171.146006][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 171.146026][ T36] audit: type=1400 audit(1761749662.125:599): avc: denied { mount } for pid=5430 comm="syz.0.1632" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 171.497581][ T36] audit: type=1400 audit(1761749662.462:600): avc: denied { create } for pid=5466 comm="syz.4.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 171.668207][ T5492] 9pnet_fd: Insufficient options for proto=fd [ 172.170788][ T5511] 9pnet: Unknown protocol version 9p2000. [ 172.200201][ T5516] /dev/sg0: Can't lookup blockdev [ 172.268855][ T466] usb 4-1: USB disconnect, device number 37 [ 172.687702][ T5554] rust_binder: Failed copying remainder into alloc: EFAULT [ 172.687727][ T5554] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 172.695071][ T5554] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 172.703449][ T5554] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1068 [ 172.727693][ T5556] netlink: 37 bytes leftover after parsing attributes in process `syz.3.1674'. [ 172.747283][ T36] audit: type=1400 audit(1761749663.635:601): avc: denied { append } for pid=5555 comm="syz.3.1674" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 172.748399][ T5556] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 172.770882][ T5556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1070 [ 173.009711][ T5569] rust_binder: got new transaction with bad transaction stack [ 173.019208][ T5569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1083 [ 173.190105][ T5586] No source specified [ 173.208167][ T5586] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 173.217305][ T5586] /dev/rnullb0: Can't lookup blockdev [ 173.256256][ T5595] /dev/rnullb0: Can't lookup blockdev [ 173.262048][ T5595] /dev/rnullb0: Can't lookup blockdev [ 173.279502][ T5599] netlink: 'syz.0.1690': attribute type 1 has an invalid length. [ 173.326218][ T466] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 173.491311][ T466] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 173.499725][ T5610] rust_binder: 1291: no such ref 6 [ 173.500786][ T466] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.505620][ T5610] rust_binder: 1291: no such ref 3 [ 173.515001][ T466] usb 4-1: config 0 descriptor?? [ 173.519353][ T5610] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 173.680910][ T5623] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5623 comm=syz.4.1700 [ 173.957309][ T466] samsung 0003:0419:0001.0012: unknown main item tag 0x7 [ 173.965297][ T466] samsung 0003:0419:0001.0012: hidraw0: USB HID v0.05 Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0 [ 174.171593][ T466] usb 4-1: USB disconnect, device number 38 [ 174.967833][ T466] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 175.106411][ T466] usb 4-1: device descriptor read/64, error -71 [ 175.362270][ T466] usb 4-1: device descriptor read/64, error -71 [ 175.421315][ T36] audit: type=1400 audit(1761749666.140:602): avc: denied { create } for pid=5650 comm="syz.0.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 175.618089][ T466] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 175.756689][ T466] usb 4-1: device descriptor read/64, error -71 [ 176.012534][ T466] usb 4-1: device descriptor read/64, error -71 [ 176.028122][ T5662] VFS: Mount too revealing [ 176.067379][ T5666] netlink: 'syz.0.1714': attribute type 46 has an invalid length. [ 176.086004][ T5666] netlink: 'syz.0.1714': attribute type 28 has an invalid length. [ 176.129993][ T466] usb usb4-port1: attempt power cycle [ 176.492216][ T466] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 176.514834][ T466] usb 4-1: device descriptor read/8, error -71 [ 176.653194][ T466] usb 4-1: device descriptor read/8, error -71 [ 176.907971][ T466] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 176.935451][ T5680] 9pnet: Unknown protocol version 9p2HZgE Ml<{5 [ 176.951625][ T466] usb 4-1: device descriptor read/8, error -71 [ 176.960182][ T36] audit: type=1400 audit(1761749667.575:603): avc: denied { setattr } for pid=5681 comm="syz.0.1721" name="/" dev="configfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.022962][ T5686] fuse: Unknown parameter 'So' [ 177.028639][ T5680] netlink: 'syz.4.1720': attribute type 4 has an invalid length. [ 177.100836][ T466] usb 4-1: device descriptor read/8, error -71 [ 177.217230][ T466] usb usb4-port1: unable to enumerate USB device [ 177.379692][ T5707] TCP: TCP_TX_DELAY enabled [ 177.384608][ T5707] netlink: 'syz.1.1730': attribute type 11 has an invalid length. [ 177.393145][ T5707] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1315 [ 177.393258][ T5707] rust_binder: Read failure Err(EFAULT) in pid:1315 [ 178.050023][ T5740] rust_binder: Write failure EFAULT in pid:1100 [ 178.241712][ T36] audit: type=1400 audit(1761749668.785:604): avc: denied { sqpoll } for pid=5793 comm="syz.3.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 178.267673][ T36] audit: type=1326 audit(1761749668.785:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5793 comm="syz.3.1760" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c1c58efc9 code=0x0 [ 178.321139][ T5801] /dev/rnullb0: Can't open blockdev [ 178.336040][ T5801] /dev/rnullb0: Can't open blockdev [ 178.336761][ T5805] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 178.341803][ T5801] /dev/rnullb0: Can't open blockdev [ 178.357993][ T5801] /dev/rnullb0: Can't open blockdev [ 178.366704][ T5801] /dev/rnullb0: Can't open blockdev [ 178.373818][ T5801] /dev/rnullb0: Can't open blockdev [ 178.379544][ T5801] /dev/rnullb0: Can't open blockdev [ 178.385202][ T5801] /dev/rnullb0: Can't open blockdev [ 178.399676][ T5801] /dev/rnullb0: Can't open blockdev [ 178.405361][ T5801] /dev/rnullb0: Can't open blockdev [ 178.410880][ T5801] /dev/rnullb0: Can't open blockdev [ 178.416595][ T5801] /dev/rnullb0: Can't open blockdev [ 178.422280][ T5801] /dev/rnullb0: Can't open blockdev [ 178.427772][ T5801] /dev/rnullb0: Can't open blockdev [ 178.433518][ T5801] /dev/rnullb0: Can't open blockdev [ 178.438998][ T5801] /dev/rnullb0: Can't open blockdev [ 178.440201][ T5829] 9pnet_fd: Insufficient options for proto=fd [ 178.444869][ T5801] /dev/rnullb0: Can't open blockdev [ 178.455944][ T5801] /dev/rnullb0: Can't open blockdev [ 178.461408][ T5801] /dev/rnullb0: Can't open blockdev [ 178.466950][ T5801] /dev/rnullb0: Can't open blockdev [ 178.472537][ T5801] /dev/rnullb0: Can't open blockdev [ 178.478102][ T5801] /dev/rnullb0: Can't open blockdev [ 178.483541][ T5801] /dev/rnullb0: Can't open blockdev [ 178.489247][ T5801] /dev/rnullb0: Can't open blockdev [ 178.494721][ T5801] /dev/rnullb0: Can't open blockdev [ 178.502159][ T5801] /dev/rnullb0: Can't open blockdev [ 178.507874][ T5801] /dev/rnullb0: Can't open blockdev [ 178.513345][ T5801] /dev/rnullb0: Can't open blockdev [ 178.519052][ T5801] /dev/rnullb0: Can't open blockdev [ 178.524564][ T5801] /dev/rnullb0: Can't open blockdev [ 178.530249][ T5801] /dev/rnullb0: Can't open blockdev [ 178.535730][ T5801] /dev/rnullb0: Can't open blockdev [ 178.541445][ T5801] /dev/rnullb0: Can't open blockdev [ 178.579566][ T5843] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 178.579605][ T5843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1116 [ 178.606446][ T36] audit: type=1326 audit(1761749669.132:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.0.1769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fa61ff85e67 code=0x0 [ 178.639958][ T839] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 178.645173][ T5848] netlink: 'syz.3.1772': attribute type 4 has an invalid length. [ 178.783654][ T5857] netlink: 316 bytes leftover after parsing attributes in process `syz.4.1775'. [ 178.793271][ T5857] netlink: 316 bytes leftover after parsing attributes in process `syz.4.1775'. [ 178.806543][ T839] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 178.821514][ T839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.833598][ T839] usb 2-1: config 0 descriptor?? [ 178.845390][ T5859] batadv_slave_1: entered promiscuous mode [ 178.853675][ T5859] batadv_slave_1: left promiscuous mode [ 178.944090][ T66] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 179.030122][ T5866] netlink: 'syz.4.1779': attribute type 1 has an invalid length. [ 179.115683][ T66] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 179.124471][ T66] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 179.135315][ T66] usb 4-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 179.148358][ T66] usb 4-1: config 220 has no interface number 2 [ 179.156020][ T66] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 179.169881][ T66] usb 4-1: config 220 interface 0 has no altsetting 0 [ 179.177134][ T66] usb 4-1: config 220 interface 76 has no altsetting 0 [ 179.184386][ T66] usb 4-1: config 220 interface 1 has no altsetting 0 [ 179.193314][ T66] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 179.202648][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.210857][ T66] usb 4-1: Product: syz [ 179.215099][ T66] usb 4-1: Manufacturer: syz [ 179.219726][ T66] usb 4-1: SerialNumber: syz [ 179.270382][ T839] ryos 0003:1E7D:3138.0013: item fetching failed at offset 4/5 [ 179.285345][ T839] ryos 0003:1E7D:3138.0013: parse failed [ 179.295825][ T839] ryos 0003:1E7D:3138.0013: probe with driver ryos failed with error -22 [ 179.377580][ T5879] fuse: Unknown parameter 'rogtmode' [ 179.386458][ T5879] fuse: Unknown parameter 'rogtmode' [ 179.486110][ T5808] 9pnet_fd: Insufficient options for proto=fd [ 179.494324][ T839] usb 2-1: USB disconnect, device number 38 [ 179.520042][ T5905] sit0: entered promiscuous mode [ 179.526408][ T5905] netlink: 'syz.0.1790': attribute type 1 has an invalid length. [ 179.534251][ T5905] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1790'. [ 179.564325][ T5911] 9pnet_fd: Insufficient options for proto=fd [ 180.056370][ T5934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 180.056406][ T5934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1324 [ 180.135060][ T5943] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 180.454774][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.454802][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.467893][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.467923][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.468686][ T5948] rust_binder: Error in use_page_slow: ESRCH [ 180.474451][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.486902][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.493329][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.499848][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.506260][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.506785][ T5948] rust_binder: use_range failure ESRCH [ 180.512900][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.531238][ T5948] rust_binder: Failed to allocate buffer. len:72, is_oneway:true [ 180.531262][ T5948] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 180.539099][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.548368][ T5948] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1332 [ 180.554912][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.564019][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.570538][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.576966][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.583477][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.590126][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.596651][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.603084][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.609594][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.616005][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.622555][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.628981][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.635545][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.651264][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.651315][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.657903][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.664745][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.700002][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.712280][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.723197][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.734478][ T5947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.807434][ T5956] 9pnet_fd: Insufficient options for proto=fd [ 180.891663][ T5965] /dev/rnullb0: Can't open blockdev [ 181.002192][ T5971] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1342 [ 181.268589][ T5992] rust_binder: Write failure EFAULT in pid:1352 [ 181.704997][ T839] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 181.875620][ T839] usb 2-1: Using ep0 maxpacket: 16 [ 181.881990][ T839] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 181.894814][ T66] usb 4-1: selecting invalid altsetting 0 [ 181.900493][ T839] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 181.900766][ T66] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 181.909769][ T839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.916453][ T66] usb 4-1: No valid video chain found. [ 181.924010][ T839] usb 2-1: Product: syz [ 181.933657][ T839] usb 2-1: Manufacturer: syz [ 181.938295][ T839] usb 2-1: SerialNumber: syz [ 181.939170][ T66] usb 4-1: USB disconnect, device number 43 [ 181.944314][ T839] usb 2-1: config 0 descriptor?? [ 181.955260][ T839] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 181.963144][ T839] usb 2-1: Detected FT232R [ 182.168379][ T839] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 182.344608][ T66] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 182.401872][ T839] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 182.506262][ T66] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 182.520803][ T66] usb 4-1: New USB device found, idVendor=046d, idProduct=c29a, bcdDevice= 0.40 [ 182.529893][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.537963][ T66] usb 4-1: Product: ꟲ [ 182.542124][ T66] usb 4-1: Manufacturer: ﶷ藖䏝꿰䌥গ䋒咦熜汰׵쵐隷䵚玝頏噙얢육ᇱ㗒뾀豟❛䩆⿊뻬凈쳀嬨ꡁ環ᆴ⽡댒凴ﾫ▉猖ⴍ㐍빵䁹櫚蠛捡亏狛쓚㕚괭薂ꤛ璎䬊⋻俔㩎⾸낶皔ᆦq垨幞젌눌⅕╙茗秭퉲ᬌᾞẚﾁ！℣ἧࡧꞨꞹ咏ᒵࠅ볨㾹숔䵊桯蕀₩ [ 182.573184][ T66] usb 4-1: SerialNumber: 聣ꡉ펈ꄁ쌛⊆顰덊喝扔퉐ⷰ纉韁戯郻䩰ɐ繊ꊇ⨪춰Ͱ㴼殔ഓ︞♰ [ 182.755775][ T6036] fuse: Bad value for 'fd' [ 182.774613][ T6041] incfs: Error accessing: ./file0. [ 182.779796][ T6041] incfs: mount failed -20 [ 183.161928][ T63] usb 2-1: USB disconnect, device number 39 [ 183.171753][ T63] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 183.181783][ T63] ftdi_sio 2-1:0.0: device disconnected [ 183.228629][ T66] usbhid 4-1:1.0: can't add hid device: -71 [ 183.234906][ T66] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 183.243918][ T66] usb 4-1: USB disconnect, device number 44 [ 183.544215][ T6048] __vm_enough_memory: pid: 6048, comm: syz.1.1836, bytes: 18014402804453376 not enough memory for the allocation [ 183.561562][ T6048] __vm_enough_memory: pid: 6048, comm: syz.1.1836, bytes: 18014402804453376 not enough memory for the allocation [ 183.615411][ T6060] rust_binder: Write failure EFAULT in pid:1373 [ 183.652391][ T6065] netlink: 'syz.4.1842': attribute type 27 has an invalid length. [ 183.681980][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.697410][ T6065] bridge_slave_1: left allmulticast mode [ 183.890213][ T392] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 184.051104][ T392] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.062055][ T392] usb 2-1: config 0 interface 0 has no altsetting 0 [ 184.068709][ T392] usb 2-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 184.078056][ T392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.086792][ T392] usb 2-1: config 0 descriptor?? [ 184.517366][ T6072] kvm: pic: non byte write [ 184.522813][ T6072] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 184.523123][ T6072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1132 [ 184.531853][ T392] wacom 0003:056A:00FA.0014: hidraw0: USB HID v0.01 Device [HID 056a:00fa] on usb-dummy_hcd.1-1/input0 [ 184.612778][ T6084] random: crng reseeded on system resumption [ 184.737956][ T66] usb 2-1: USB disconnect, device number 40 [ 185.544634][ T36] audit: type=1400 audit(1761749675.633:607): avc: denied { map } for pid=6090 comm="syz.3.1851" path="pipe:[33706]" dev="pipefs" ino=33706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 185.601344][ T36] audit: type=1400 audit(1761749675.633:608): avc: denied { execute } for pid=6090 comm="syz.3.1851" path="pipe:[33706]" dev="pipefs" ino=33706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 186.754162][ T36] audit: type=1400 audit(1761749676.769:609): avc: denied { getattr } for pid=6118 comm="syz.1.1857" path="socket:[34631]" dev="sockfs" ino=34631 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 186.805514][ T36] audit: type=1400 audit(1761749676.769:610): avc: denied { accept } for pid=6118 comm="syz.1.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 186.834137][ T6129] __vm_enough_memory: pid: 6129, comm: syz.1.1861, bytes: 18014402804453376 not enough memory for the allocation [ 186.888688][ T36] audit: type=1400 audit(1761749676.900:611): avc: denied { setattr } for pid=6134 comm="syz.1.1863" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 186.911502][ T6135] can: request_module (can-proto-3) failed. [ 186.921849][ T36] audit: type=1400 audit(1761749676.928:612): avc: denied { getattr } for pid=6134 comm="syz.1.1863" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 187.066258][ T36] audit: type=1326 audit(1761749677.059:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6141 comm="syz.1.1865" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5766f8efc9 code=0x0 [ 187.109106][ T66] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 187.270157][ T66] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 187.280942][ T66] usb 4-1: config 0 interface 0 has no altsetting 0 [ 187.287570][ T66] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 187.296694][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.305592][ T66] usb 4-1: config 0 descriptor?? [ 187.310861][ T6132] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 187.794956][ T66] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 187.802424][ T66] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 187.809781][ T66] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 187.817119][ T66] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 187.824503][ T66] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 187.832508][ T66] dragonrise 0003:0079:0011.0015: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0 [ 188.008844][ T6132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.017539][ T6132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.025897][ T6132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.034445][ T6132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.060496][ T63] usb 4-1: USB disconnect, device number 45 [ 188.086847][ T6150] /dev/rnullb0: Can't open blockdev [ 188.117683][ T6152] rust_binder: 1395: no such ref 0 [ 188.163265][ T6152] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 188.170664][ T6152] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 189.548049][ T6190] rust_binder: Error while translating object. [ 189.548084][ T6190] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 189.554607][ T36] audit: type=1400 audit(1761749679.386:614): avc: denied { lock } for pid=6187 comm="syz.3.1881" path="socket:[35050]" dev="sockfs" ino=35050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 189.584974][ T6193] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1883'. [ 189.598232][ T6195] ./cgroup: Can't lookup blockdev [ 189.602023][ T6190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1406 [ 189.603347][ T6190] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 189.612859][ T6190] rust_binder: Read failure Err(EFAULT) in pid:1406 [ 189.669953][ T6203] rust_binder: Write failure EINVAL in pid:1408 [ 189.694768][ T6203] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 189.701135][ T6203] rust_binder: Read failure Err(EFAULT) in pid:1408 [ 189.779852][ T36] audit: type=1400 audit(1761749679.611:615): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 191.069761][ T6211] overlayfs: failed to resolve './file0': -2 [ 191.123499][ T6219] 9pnet_fd: Insufficient options for proto=fd [ 191.259561][ T36] audit: type=1400 audit(1761749681.000:616): avc: granted { setsecparam } for pid=6208 comm="syz.1.1887" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 191.272401][ T6221] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 191.285941][ T6221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1410 [ 192.664998][ T6238] rust_binder: Write failure EINVAL in pid:1175 [ 192.679635][ T6238] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 192.694248][ T6238] rust_binder: Error in use_page_slow: EFAULT [ 192.704726][ T6238] rust_binder: use_range failure EFAULT [ 192.705784][ T6242] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 192.725308][ T6242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1417 [ 192.726234][ T6238] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 192.768874][ T6238] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 192.776972][ T6238] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1175 [ 192.833243][ T6252] IPv6: NLM_F_CREATE should be specified when creating new route [ 192.871495][ T6252] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 192.871532][ T6252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1421 [ 193.099291][ T63] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 193.271192][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.282262][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.292050][ T63] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.305008][ T63] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.314097][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.323221][ T63] usb 4-1: config 0 descriptor?? [ 193.757302][ T63] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 193.764819][ T63] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 193.772295][ T63] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 193.779700][ T63] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 193.787204][ T63] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 193.794651][ T63] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 193.802073][ T63] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 193.809698][ T63] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 193.818788][ T63] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 193.973024][ T63] usb 4-1: USB disconnect, device number 46 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=0 req=1806 state=3 status=67 (errno 9: Bad file descriptor) [ 206.566822][ T36] audit: type=1400 audit(1761749695.354:617): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[2888]" dev="pipefs" ino=2888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 206.775806][ T5822] bridge_slave_1: left allmulticast mode [ 206.781507][ T5822] bridge_slave_1: left promiscuous mode [ 206.795757][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.808748][ T5822] bridge_slave_0: left allmulticast mode [ 206.814434][ T5822] bridge_slave_0: left promiscuous mode [ 206.820269][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.023433][ T5822] veth1_macvtap: left promiscuous mode [ 207.028952][ T5822] veth0_vlan: left promiscuous mode [ 207.320106][ T5822] bridge_slave_0: left allmulticast mode [ 207.325779][ T5822] bridge_slave_0: left promiscuous mode [ 207.331478][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state