last executing test programs: 25.899599647s ago: executing program 0 (id=1390): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mount$tmpfs(0x0, &(0x7f00000004c0)='./cgroup\x00', &(0x7f0000000100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='usrquota_block_hardlimit=%,usrquota_inode_hardlimit=6ek5\x00mZ,inode32,uid=', @ANYRES64=r0, @ANYBLOB="2c6d6f64653d30303030303030303030303030303030303030303031362c005922587137866e1e453a541b2d39d9ebc25a8f61b9f0cf0c9706b199221f6cf84c37167d4c00af66d1fabc4b3767a70d0765438d069f3f47f895641b8c7a296ea8dada5c756651a766814d489aecd6b3ed3e37ee7e1cc3862ae7280802c1abbdbd8a1d8edfef8f5f0570390fad20059fdfe6e9be4b5de2f918d8b38b582d937392885ff29494dced000000000000005c6d7cfacc3ca6f4b4b18d86346e6513df3f3f5e4c9d78b63312616324b6540812571ecb5b1b"]) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=@updpolicy={0x23c, 0x19, 0x8, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@empty, 0x0, 0x40, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x2, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0xa, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in=@rand_addr=0x64010101, 0x0, 0x3c}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x5}, 0x0, 0x1, 0x3, 0x1, 0x0, 0x6}, {{@in6=@private1, 0x0, 0x3c}, 0x2, @in=@empty, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x0, 0x3c}, 0xa, @in=@broadcast, 0x0, 0x1}]}]}, 0x23c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) r4 = fsopen(&(0x7f0000000000)='ext2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='/dev/udmabuf\x00', &(0x7f0000000100)='ext2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c1000000a000000000000", 0x58}], 0x1) close_range(r4, 0xffffffffffffffff, 0x0) sendto$unix(r3, &(0x7f0000000280)="588f935b80e28468adecdc81e5e9b9f9fffba119471c1565b8da2f9ab6049795ad13b258f561af16e5188d3400ae5e5cc6cbdd2dd1fc971419e742b9fff61bf76f8aff95e5a8735deb187b75ab2f9bae76c5c60b02d6dad26502326d37a3bdb0c9d9b549c487556cea4f1c1782efec", 0x6f, 0x0, &(0x7f0000000380)=@file={0x1, './cgroup\x00'}, 0x6e) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source', 0x0, 0x0) r7 = fsopen(&(0x7f0000000080)='pstore\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f0000000040)='silent\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x14, r8, 0x1, 0x4000}, 0x14}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r9, 0x0, 0x42, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) bind$inet(r9, &(0x7f0000000300)={0x2, 0x4e24, @local}, 0x10) r10 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) sendfile(r10, r10, 0x0, 0x24002de8) r11 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="eb69aa0b90b971c1a6cf7a9553134de042afd905222f2d45df3bc80aabab7d1be139b8ea6424c8d41c2a67ac3a5f19580697a2cfa19318c9c5f6d7037ac33dc3dd3f104f9d64e85c6d9413e1d60ff5d9202dc6947a8c", 0x56) setsockopt$inet_tcp_int(r11, 0x6, 0x6, &(0x7f0000000240)=0xff, 0x4) fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x0) 25.880776328s ago: executing program 0 (id=1391): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000440)={0x1, 0x0, [{0x3f1, 0x0, 0x3}]}) sendmmsg$sock(r0, &(0x7f0000000440)=[{{&(0x7f0000000140)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}, 0x4}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)="98ef96d2f8daff81fa9faaad829d71b305a82644140a2d95457ad9efe54fb0c8bb34b48ebabe07f6f3e0dc2419fab872cbdb4366fcf845260f3db8b355c906e7341c8eb51d749f95b3f6a799f8ee28b9ef91eca30311a40a74cd29e567e6425a1ca201492e716855a5a6a36cdda3a2e4d494045c57114911b94701601db7ba2b3812313b02c066918039c855a6626b765b379395db2f86baf77c80627341aeabbf332c698701ea37178979", 0xab}, {&(0x7f0000000300)="356a0bd3abeed68b2dec94814c912b8f31cc3466dccc9fd6f7bf8f7d9d7dd8df26be2b94adc05b5cae9b2fd4db7b8e459a2d716c4d76b5039e48acfa3e5f1812bee467d399b65ee51215ddd748f23706b53c18313ad8d2f6a5af6c5b9b5c70672f3422b160e9f98697b56f00711ab5a23da5c21d8cc74e42ac969f9ab6c30327a94c50f0405d6e", 0x87}], 0x2, &(0x7f00000003c0)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x2a5}}, @mark={{0x14, 0x1, 0x24, 0x80}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x78}}], 0x1, 0x84) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x3d, 0x8}}], 0x18}}], 0x1, 0x20000844) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000640)=[@register_looper={0x40086315}], 0x0, 0x0, 0x0}) 25.723560211s ago: executing program 0 (id=1392): r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x80000) r1 = syz_open_procfs(0x0, &(0x7f0000002380)='net/udp\x00') pread64(r1, &(0x7f0000002240)=""/237, 0x131, 0x2) ioctl$EVIOCGABS0(r0, 0x80184520, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, 0x0) 25.723117801s ago: executing program 0 (id=1393): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) openat$rnullb(0xffffffffffffff9c, 0x0, 0x141342, 0x0) (async) openat$rnullb(0xffffffffffffff9c, 0x0, 0x141342, 0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x100) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x189, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0x40000008}) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0x40000008}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) inotify_init1(0x40000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 25.676649835s ago: executing program 0 (id=1396): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000180)=0x304120, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x80}}, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xffff7ffffffffffd, 0xfffffffffffffffd, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0x1a, 0x2, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0xfffffffffffffffc, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$can_bcm(r1, &(0x7f00000005c0), 0xffffffffffffff77) recvmmsg(r1, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010121, 0x0) r5 = fsopen(&(0x7f0000000040)='fusectl\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/psched\x00') getdents64(r6, &(0x7f00000002c0)=""/48, 0x30) getdents64(r6, 0xfffffffffffffffe, 0x64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000080)=',^\x00', &(0x7f00000000c0)='./file0\x00', r7) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) syz_io_uring_setup(0x3a6c, &(0x7f0000000000)={0x0, 0xae2b, 0x10, 0x0, 0x107, 0x0, r6}, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000001c0)) socket$key(0xf, 0x3, 0x2) 25.515501128s ago: executing program 0 (id=1397): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x4c, &(0x7f0000002900)=0x659c, 0x4) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000500)="00214717a70700000000030600710a5eebc4f4712000000053a4e37ac6bbf0bb9d05000000fa000000ff1687585382316f33ac", 0x33}], 0x1, 0xf2, 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x400) close_range(r0, 0xffffffffffffffff, 0x0) 25.509410468s ago: executing program 32 (id=1397): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x4c, &(0x7f0000002900)=0x659c, 0x4) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000500)="00214717a70700000000030600710a5eebc4f4712000000053a4e37ac6bbf0bb9d05000000fa000000ff1687585382316f33ac", 0x33}], 0x1, 0xf2, 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x400) close_range(r0, 0xffffffffffffffff, 0x0) 10.583881773s ago: executing program 4 (id=1398): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x8042, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async, rerun: 32) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) (rerun: 32) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) r3 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0)) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r3}, 0x0, 0x0) (async) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r3}, &(0x7f00000002c0), &(0x7f0000000300)) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0xeeee0000, 0x2000, &(0x7f000000f000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) 8.706385213s ago: executing program 4 (id=1398): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x8042, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async, rerun: 32) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) (rerun: 32) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) r3 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0)) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r3}, 0x0, 0x0) (async) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r3}, &(0x7f00000002c0), &(0x7f0000000300)) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0xeeee0000, 0x2000, &(0x7f000000f000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) 6.701877153s ago: executing program 4 (id=1398): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x8042, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async, rerun: 32) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) (rerun: 32) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) r3 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0)) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r3}, 0x0, 0x0) (async) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r3}, &(0x7f00000002c0), &(0x7f0000000300)) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0xeeee0000, 0x2000, &(0x7f000000f000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) 4.679221846s ago: executing program 1 (id=1544): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1, 0x4, 0x7fff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x1000000}) 4.674998836s ago: executing program 1 (id=1546): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000400)={[0x8]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000002080)={{}, "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"}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 4.674250816s ago: executing program 3 (id=1547): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="050000001000010000000000000000000000000a54008cb07b783a3221f800000000000002000000280004802400018009"], 0x7c}}, 0x4041) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) (rerun: 32) ioctl$KVM_CAP_XEN_HVM(r2, 0x4068aea3, &(0x7f0000000140)={0x26, 0x0, 0xe0}) (async, rerun: 64) write(r3, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) (rerun: 64) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 4.62769855s ago: executing program 1 (id=1549): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1101, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000002000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000007000/0x2000)=nil, &(0x7f0000000000)="b5a3b43e98a93c38158a3241074c0f9a1ea8171231bb53c46f6730fdf98c038de5c017", 0x23, r0}, 0x68) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 4.62660093s ago: executing program 1 (id=1551): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000300200000400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="56c3e736a097d6fb7578"], 0x6) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) socket(0x2c, 0x80000, 0x3) close_range(r2, 0xffffffffffffffff, 0x0) 4.596433872s ago: executing program 1 (id=1552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r2, 0x112, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000180)={0x0, 'veth0_vlan\x00', {0x4}, 0x3ff}) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000008c0)="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", 0xfc) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000000), 0x800, &(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRES64=r4]) 4.592972592s ago: executing program 4 (id=1398): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x8042, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async, rerun: 32) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) (rerun: 32) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) r3 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0)) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r3}, 0x0, 0x0) (async) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r3}, &(0x7f00000002c0), &(0x7f0000000300)) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0xeeee0000, 0x2000, &(0x7f000000f000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) 2.49325327s ago: executing program 1 (id=1553): ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dvmrp0\x00', 0x0}) r2 = syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x5, 0x30, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x56}, [@feature_unit={0x11, 0x24, 0x6, 0x5, 0x6, 0x5, [0x2, 0x4, 0x7, 0x4, 0x3], 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xe, 0x3, 0x0, {0x7, 0x25, 0x1, 0x1, 0x6, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7fff, 0x8, 0x6, "6cd890a8"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x3, 0xff, 0x7, "2fbcf4", '*O'}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x9, 0x2, 0x8, 0x1, "2b8a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x18, 0x6, 0x1, 0xc8, {0x7, 0x25, 0x1, 0x81, 0x1}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x1, 0x80, 0x8, 0x20, 0x6}, 0x74, &(0x7f0000000180)={0x5, 0xf, 0x74, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "3fbb9bd8041c78e33c8335b900dbdf49"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xc3, 0xdf, 0x8, 0x7, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0xfc, 0x3, 0x7}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x401, 0xff0f, 0xff, [0xff00c0, 0x7f8017, 0xc030]}, @ssp_cap={0x24, 0x10, 0xa, 0xd, 0x6, 0x5, 0x0, 0x2, [0xff00c0, 0xc0f0, 0x26219cdb43e442b8, 0xffe0b0, 0x30, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x7, 0x4, 0x8000}]}, 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3c01}}, {0x5b, &(0x7f0000000240)=@string={0x5b, 0x3, "8650ad5a079912594c845b507c0e43e8e81eb3e1233013bc4689b59dbd8dfd45a2d585ef3e04efed226cdff5e7441388e1793265c4a2b062a02a0cfa436a1c873dcb17066485b57148dbce34f42af894672575c52452f0568d"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x5400}}, {0x2b, &(0x7f0000000300)=@string={0x2b, 0x3, "fff15b65dd740c7d91eebc7562108a0274e3203779c9d3308d569217637be9a4397abfa59b65900bd0"}}, {0x1e, &(0x7f0000000340)=@string={0x1e, 0x3, "70e4f98d1e2ef8274999235bca134798d97a058a1c2b8c8ab8bfc399"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x40a}}, {0x72, &(0x7f00000003c0)=@string={0x72, 0x3, "cbe70a62fdc46987a6230ac0139eaa2a52c7e30261a80ea2e70f897f8814f7d6ed2919016408a43b6a4a6b0a6e338cf5520593240ac73a70d44b46af620e4b1a0a77b01d4f6a1490348f8a6f22276eabe711584d7280756ad614e21ce223e44efe83c022d059076c97f1ff8a907d079c"}}]}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000004c0)=r0) r3 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x40, 0x40, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x7, 0x1, 0x1, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x5, 0x7, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x248, 0x3f, 0x80, 0x5}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x200, 0x1, 0x3, 0x59, 0x10, 0x2}, 0xa0, &(0x7f0000000580)={0x5, 0xf, 0xa0, 0x4, [@generic={0x72, 0x10, 0xa, "c5e8e31afb6571d1a249496231b459b7ee7f7345854e74bc7b4d72076a04fffd2351963150f745dfb917d0279e5a5a4cc4a44e726c7fe663ed0d96f9c522d0971c23021f41e2e69a08a3cfb5fa49dc6faf03862ce71f8aa551809dbb33430c7b031cbefa95f2687869ae826112110d"}, @ssp_cap={0x18, 0x10, 0xa, 0xc, 0x3, 0x7f, 0x0, 0xbf, [0xc000, 0xff00f0, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x27, 0x6b, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x1, 0x5, 0x8001}]}, 0x3, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x428}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000840)={0x14, &(0x7f0000000740)={0x40, 0x7, 0xa9, {0xa9, 0x23, "c9ca93e2868c7f6cfe8659ed4b106b9f48060532ca04d9383b01a2038910fc173385ffda8a9b1ec4d36bc858327f1d918e40d479fc26cade3a03328b9ecaf7de70f6cce9b75e5181aa1a4df2365653179aa48531df3d0a46ecd76805a9f701b3927426337f617c21f1af804a12bb5edfc57205f0611c18476047f26043f90f393db8d04fdd07c6dd9027594c590ae2661284b9c9e72381093252b83b63c48df8110aac2d5c0764"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}}, &(0x7f0000000a80)={0x34, &(0x7f0000000880)={0x40, 0x6, 0x38, "d8dda82290adec5fa8cf23b31a3956f26e94dc7c2d74fe37b1b6d829aeb0d4a8745e4c3b616b90bc22c08b3ca145f1ba5f412f1b3cd502ba"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000940)={0x20, 0x0, 0x9b, {0x99, "c38f65446bbbaeeb57c446dd9cb32622267f1f5b3b24dfee55d26da5360d05378bbfc4bdb744de47c248c9fe24ec206d330f43fe379185875676833a4c5dfd8d5ddd4edcd12a90c71d1e2df0109b9927ba58fd9e10153f001d60d340aa12ce640dabf035df3a2e978209b8fdefd6bbcb639bc48dd9ad41c63f22eccaf91e4cec5c6ccb1232b4356a636734432a9418dc0d6eca98ba7675e016"}}, &(0x7f0000000a00)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000a40)={0x20, 0x0, 0x1, 0x3}}) r4 = accept4$inet6(r0, &(0x7f0000000ac0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000b00)=0x1c, 0x40800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b40)={'xfrm0\x00', 0x0}) sendto$inet6(r4, &(0x7f0000000b80)="a3c0e7f93bf2ee051389a3211c10475bb7ca9a9e666ecf4bb21868421bd146a520fcb7e418e58b176feb4f5e04ea957dfe1f99aac4a6c254e0345003d1bc6858b89458b005296e6c5df8c6244d4f170d016e1f73b885e713db4b0972051ae7f3e14c04d41af7420e976428dfb5fce967327ebab9da0bd6411b374b4c377e8c691fe633b574b06563bb9cde891e7d14c6590babe3ab4a5bd56a3f76f40f17752f3a", 0xa1, 0x1, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c40)={'syz0\x00', {0x2, 0x59bb, 0x2, 0x28}, 0x18, [0xa556, 0x3, 0x2, 0x9, 0xfffffffd, 0x3, 0x7, 0x6, 0x83c, 0xc, 0x10001, 0x1, 0x9, 0x5, 0x3, 0x80000001, 0x0, 0x8, 0x2, 0x3ff, 0x8, 0x6, 0x3, 0x4, 0x2d4, 0xf7, 0x6, 0xfe, 0x55e3, 0x9, 0x897b, 0xf84b, 0xffffc89e, 0x0, 0xb6, 0x7, 0x0, 0x2, 0x51, 0x6957, 0x6, 0x4, 0xe827, 0x1603, 0xfffffff0, 0x5, 0x9d8, 0xd68, 0x7be8, 0xa, 0x1, 0x466, 0xffffffff, 0x10001, 0x9, 0x8, 0x10000, 0x10, 0x80, 0x7, 0x100, 0x1, 0x2, 0x4], [0x9, 0xffff, 0x7, 0x9, 0xb1c, 0x8, 0x2, 0x2, 0x0, 0xff, 0x2d, 0x3, 0x10, 0x3cb, 0x6, 0x630, 0xfff, 0x0, 0xe0, 0x5, 0x7, 0x9, 0x7f7e, 0x4, 0x71, 0x0, 0x40, 0x6, 0xfffffbef, 0x11bd, 0x5, 0x4, 0x1, 0xfffffff8, 0xf38, 0xd5, 0x3, 0x8, 0xb1af, 0x2, 0x10, 0x2, 0xb, 0x400, 0x40, 0x9, 0x8d0, 0x9, 0x407, 0x0, 0x7fff, 0x1, 0x5, 0x5, 0x8, 0x1000, 0xfffffffd, 0x2, 0x5, 0x13, 0xf, 0x7, 0x8ac3, 0x34], [0x1, 0x0, 0x8, 0x0, 0x47, 0x7f, 0x94, 0x7bfe5f2d, 0x401, 0x6, 0x8001, 0x0, 0xfff, 0x2, 0x4, 0x1000, 0x6, 0xfffffff9, 0x0, 0xffffff81, 0x6, 0x1, 0x6, 0x7, 0x8001, 0x100, 0x7, 0x60, 0x9, 0x4, 0x10000, 0x5, 0xfffffffd, 0x3, 0x34, 0x8eb1, 0x7, 0x798ef2e, 0x100, 0x6, 0x8, 0x80000001, 0x8, 0x5, 0x0, 0x7, 0xffffffff, 0x1ff, 0x9, 0x7, 0x1e, 0x7, 0x570000, 0xfffffffe, 0xf, 0xfa, 0x6, 0x40, 0x4, 0x0, 0x7, 0x2, 0x0, 0xffffff91], [0xffff, 0x2, 0x0, 0x2, 0xd08, 0xfff, 0x5, 0x0, 0x5, 0x3, 0x5, 0x4, 0x6, 0x1, 0x7ff, 0x32, 0x2, 0x8, 0xfffffff9, 0xed2a, 0x2fbf, 0x80000000, 0x6, 0x226, 0x2, 0x3, 0xc105, 0xad36, 0x5, 0x7, 0x0, 0x592, 0x7fffffff, 0x4680000, 0x7, 0xb, 0x1, 0x2, 0x4, 0x80, 0x4, 0x100, 0x40, 0xb, 0x8, 0x3, 0x1ff, 0x6, 0x1, 0xe, 0x4, 0x7fff, 0x9, 0x10, 0x78, 0x8, 0x1, 0x8, 0x5, 0x101, 0x7, 0x1, 0x3ff, 0x989]}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f00000010c0)='syz1\x00') r6 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000014c0)={0xec, 0x0, &(0x7f0000001340)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001100)={@fda={0x66646185, 0x5, 0x1, 0x2}, @fd, @flat=@binder={0x73622a85, 0x100, 0x2}}, &(0x7f0000001180)={0x0, 0x20, 0x38}}}, @free_buffer={0x40086303, r6}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000011c0)={@fda={0x66646185, 0x4, 0x2, 0x23}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x8, 0x2, 0x2a}}, &(0x7f0000001240)={0x0, 0x20, 0x38}}}, @enter_looper, @request_death={0x400c630e, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001280)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x3, 0x0, 0xd}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000001300)={0x0, 0x18, 0x38}}}], 0x41, 0x0, &(0x7f0000001440)="456ca783c66b84092e86ceeeff8da8fa867dbc3af32add2f5bf1ac68fd31237c5e2443c96d822bac59df1c8fbc7131065f49c342d28adb5b46818119b0b830eb69"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500), 0x14, 0x0, &(0x7f0000001540)="0b35a130b56cfc53d6c29199b208fdd3e312c217"}) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000015c0)={0x1000, 0x1, 0x0, [{0x1, 0xe46, 0x3c, 0x2, 0x8, 0x3, 0x68, '\x00', 0x5}]}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001680), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x58, r7, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0xc004) syz_usb_control_io$uac1(r2, &(0x7f00000018c0)={0x14, &(0x7f00000017c0)={0x0, 0x22, 0x22, {0x22, 0x23, "d223d096be1a68e9f69346f1939554070dce3f15db9fca4ef7f94389566f263e"}}, &(0x7f0000001800)={0x0, 0x3, 0x81, @string={0x81, 0x3, "6061803b1ab91700edc03e102a5a204db3046448d33cafb70d2dda4eca64958c186dfcffbfba0f894fcbf15d035edbf50c983ee036068a329f8cea50e0741920492132c9bcb87be28cdd40b6282ef185e9f75fc9d0fd8d66fa39a2405ad82ad1fb7476d05cc56ee51f80e3162a37b2115efaa968f1f4a5bff4dd2e5ef36091"}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001900)={0x0, 0x1, 0x81, "52c3ec82e19cef9ce421e60bcc2c807709a1301c6d646f9a828d4356e6ff3a6108bbb31e765018c9571797d5c9bf8713b070ebab521e652877b794cc38b933676317815a69d2d388d752542ffd88eda08bc2bd1d2bb377d167256bc7adbde0568abd463c21f7d66aa7c9ea33d802fb8bd439c31e0a26993df787eb83dcece37849"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x18}, &(0x7f0000001a00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001a40)={0x20, 0x81, 0x3, "9321f4"}, &(0x7f0000001a80)={0x20, 0x82, 0x3, "1757f1"}, &(0x7f0000001ac0)={0x20, 0x83, 0x2, "f1d3"}, &(0x7f0000001b00)={0x20, 0x84, 0x1, 'x'}, &(0x7f0000001b40)={0x20, 0x85, 0x3, "e6418b"}}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000001c00)={0x1d, r1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000001cc0)={'sit0\x00', &(0x7f0000001c40)={@multicast1, 0x1, 0x0, 0x40, 0x0, [{@multicast2}, {@private}, {@remote}, {@empty}]}}) socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x0, 0xcdd, &(0x7f0000001d00)={{0x12, 0x1, 0x250, 0xc8, 0xb6, 0xce, 0x10, 0x499, 0x100e, 0x4b18, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xccb, 0x4, 0x8, 0x8, 0x0, 0x7f, [{{0x9, 0x4, 0x62, 0xc, 0xf, 0xf5, 0x0, 0xb2, 0x6, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "2ec7d030"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x4, 0x8e3, 0x7}, [@acm={0x4, 0x24, 0x2, 0x5}, @mdlm_detail={0x5d, 0x24, 0x13, 0x5, "8c7b4ca84dd08cb1b6af6c497528e60b68cedc30e17c97cb91d7a00ea1df3aa97c0057152cb8241d862aec7e2b143bafda7b6569ec5e0575d67c63e0ba0647a7a9bfdcddafcbb2062097597334e2be68d230dbe5d609772914"}]}], [{{0x9, 0x5, 0x3, 0x0, 0x660, 0x56, 0x7f, 0x2, [@generic={0x6c, 0x21, "e5549f6ef04574ce9ec930a05fb96574c6e5d979307d398e43c9c869c7bfbb6dc072e5e41a86a780117b9187707a4f582a1a327eb20487d7d09b6780cafa8f3b29656fb371370255335898cca5daa65bb23365a9d5c1e6127ecdfe45a0ff73034db249044dce19f830de"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x9, 0x5, 0x80, [@generic={0x2d, 0xc, "f6113316e1b7f8d34d8bbf85f2f8030094972ddeec3f37cef71698d04a7a6326911031a2a6926cd8edfebd"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x81, 0x4, 0x9, [@generic={0x32, 0xe, "26374b46d5e3824a852aee44be58019691d8024b1727f166fe4912fbb8ab9284de944b5a0ecdc03dfcfec6e2bc97e012"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xfb, 0x1ff}]}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0x5, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x6d}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0xfa, 0x5}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x4, 0xa, 0x0, [@generic={0xed, 0x31, "75ac32822910ec8dd884450d806710e5c8fe13c0343015900551108aa408cd99f00f84cf6679004ce868484ec2a23db854c4878a6929dfd87d664bcba460dc67e97002fd2cca9f85f3c25ead287d1f2a5f7ba655e0d6d26ffbac268f60728d08a0d1af176d6fd394b1700c3e6b38752c673d7bacf3b5bef2392e9d712809da80c65e945839169e5648e4c25b732a142eeff6504c363914bfc9cf2bb7f7302fc519cb4064505af82135c33b5aac5b51b39031672d093307fa0354bb2d3599cddd6ebb63446ab7793d2f898988c3f718204e430f00285ba90f97ceac618555c86fbfeee99dac44c43fdc447b"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x10, 0x9, 0x9}}, {{0x9, 0x5, 0xe, 0x2, 0x420, 0x4, 0x9, 0x80}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x1, 0x11, 0x5}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0xd2, 0x6, 0xef, [@generic={0xb8, 0x1, "bc3f5ecc3f6ec8c5af3eb94df8d8021c6f0ede07983f2a796a3d4298c2b72ab07d034193d35741e9ced8fef8e618dc5eff06bffefda4c8853f6a8b44e5011b718cdbb3794a44ba8423a95b8eb20dc68771d34db8b1da4463e6b4c58cd8989f153c03590bda6d82460102978bcfb017dd937abdfa83e366edbb2b95f6deacba5d415118e02e84ef68997a980d1ca3a6d19cc907357f2b856e87fe9df28bb5181b7aa29e62a7a4a90d33e9bfe56de692ef9126f481966f"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x10, 0x8, 0x80, 0x5, [@generic={0xb7, 0x11, "2f3645698de8252d072f7a4912504fda9d26f2f273727cbb4c8d39d7f12327d536f3fe6229f6ce1c8386e4c78ad94fdbc43d2f3fb08aa2b64026c5beadc632cb20ca93a34916bffe0e83cf115a6b2a03d5546eb36d5df1ba44c504dc1e311f7aa3f9a95b12d986f00c907ce319e3534afa5c28f4f63d0dffbe4c31bfe700b4f52c873718a4a7febb7609c81f1683206a6ec5bc5ca059e070910c8a08a7a9adf0d42f9c26cfeb5ec60963b18e701632ab6ee840c292"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0xf, 0x7, 0x9}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x7, 0x3, 0xd5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x1}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x8b, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x53f}, @generic={0x99, 0x0, "8b371a2896c2164303c15fc24c7e0a1ce68785af885995391a1111bca8e8ec88d6ceccb8db5358a4647273b4a5433af5545244d50d0f24dc4c8230cb4dbb42e523c213bf0c66ad4336e502dabb3f9eef99f420a6f1755a3c6ab6e62686cc61aa5777ac5794945b983ff94df00b91c7a6a651b9596f06b213d160e17aef8d41ea617666f30ce91e214ddb97df6e267aa62e72ab4a3f4366"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x400, 0x39, 0xea, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x8}]}}]}}, {{0x9, 0x4, 0x60, 0x9, 0xe, 0xff, 0xff, 0xff, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x7f}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x202, 0x1, 0x1, 0x8, 0x9, 0x4}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x2, 0x3, [0x3, 0x6, 0x8], 0xf3}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x204, 0x6, 0x3, 0x7fff, 0x9}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "01f24c5283"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x4, 0x9, 0x80}, {0x6, 0x24, 0x1a, 0x4, 0xa}, [@obex={0x5, 0x24, 0x15, 0xec}]}], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x4, 0xd, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x8}, @generic={0xee, 0x1, "8137d1155c90b7bc900062bbf17b6aace9cd9b7368c94e7b31ce944266f46cb038843c9dce304796718bc65786f39aa53c9915added26be6395108a673c7c7a36ecf8144f03e1b286dde4dfa93bb215af1c1561e9d36a652896b85527600109f5a56651ca2f9ba6a75ffcab61664a3affd20c9dc1096051500f512593a5946a485ec584069470dde74a62b4c34e29d24680e5a7ae5a76e63a657bfc63765950720163965205972da5e2dbb35aa3e1aa0ee9357481cdff595465d1122e6e3083d45bf23bc01ea58bd20551abc6fc87bdce02ba66a1fd3f20922ae36f777b7a2a45020a44ef8c6cd6d0ed44b1c"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x40, 0x1, 0xad, 0xfe}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x2, 0x7f}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x40, 0x0, 0x3b}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x7f, 0xba, 0x10, [@generic={0xc5, 0x21, "5095e728c696ecce45835862a55f79361129da51a4c8580efbdc3d7a958c664652e401160a835d5099dbc86bd83a9cd661cc834f3990f633390608bf72c3fcfc69eba27fa7579077cd57fdc44b3c16ae32b07b578b1b9be7e640d51eea7f4d0f0e0079e1704a25e4d75bce5472a7a8b3688e5873852bd5e5567532f54a43e1658a716af0b1ad47aea512b23c7b40c7461de28afd5b4bebccd7abdb07e172dc31f3fa2bb6873cb0f75d2c5c5efe2335add9ffa3f0cf15d116519f0e4cfa6d9dc462e552"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xe, 0x8}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x4, 0x3}}, {{0x9, 0x5, 0xa, 0x4, 0x10, 0x8, 0x81, 0x8}}, {{0x9, 0x5, 0x80, 0x1a, 0x20, 0x5e, 0x4, 0x2, [@generic={0x53, 0x31, "c083625653ce08447962c20576980e1328eeec14cffb8c8bee91309cddf89a0f773124d2fb6640e2297d29998a03a7023710cc11c1c3093e1af38f7c3c153b695adf4b027cc4d68b492387a5db61475c7b"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0x39, 0x3, 0x5}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x7, 0xe2, 0xb, [@generic={0x78, 0x10, "4bc829a6ca9d0f3d19a19b6960ddd3444982668955d44d26212a1b71abbc302ea4d14626d999f4e73303b2c0cd677e453af893fc6e923ab4df9d05aabfc9ade0b5b068d821469a5c708b726b00654f2e6d8c3b9a9d7475433fbdb6d0ae460fc80c4d864c58d15ff2fd52c7fc8f5a54f185a6c54d51ec"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0xffff}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x7c, 0xff, 0xb, [@generic={0x52, 0x0, "dd441343ce1127c88345d5ae2d56dcb4ed1e437de2d99b55fdd92592999144136756ccb5c27839c672ff08b94139f9bd216af92676c7c3d22c1bcd5b73cf2d69a432f3eeef9aa67569f77ce1cae5029c"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x3, 0x4, 0xfb}}, {{0x9, 0x5, 0x0, 0x2, 0x48, 0x9, 0x40, 0x2e, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xe, 0x10}]}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0xb, 0xf, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xc6, 0x7c33}]}}]}}, {{0x9, 0x4, 0x4, 0xfc, 0x4, 0x78, 0x3b, 0x3d, 0xf0, [@hid_hid={0x9, 0x21, 0x2, 0x5, 0x1, {0x22, 0x296}}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x8, 0x1, 0xd3}, {0x6, 0x24, 0x1a, 0x7}, [@dmm={0x7, 0x24, 0x14, 0x8, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x3f, 0x7, 0x0, 0x60}]}], [{{0x9, 0x5, 0x80, 0x10, 0x20, 0x2d, 0xe, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x9}]}}, {{0x9, 0x5, 0x8, 0x4, 0x8, 0xff, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xffff}]}}, {{0x9, 0x5, 0x9, 0x2, 0x40, 0xd, 0x9, 0x8}}, {{0x9, 0x5, 0x8b, 0x3, 0x400, 0x40, 0x8, 0xfc, [@generic={0x5e, 0x11, "e2bd5c253601e61f8d31323dab5d62dcc2f3a0adb2a87263d7a044555ad8526cbe333ff13e200847992960548e2d9dcad49ca4b2bd1aa3d5fdbe5c89625a9c0faec326ec9a1d8402cc0f6acf478da2b363d6863d5875ff57d581ce8e"}, @generic={0xe0, 0x4, "7c29d19e160758ca1e02009a2f335a90922582028ce7c23a95211d9c9104e3d0eddbb9a950b8d5d486236706fe65869be6f5c5596edb019cdd7007b359491ab0d698dca5b3c5670e540983903f194943b86a8c2506d6a49440c5c3736d20e94147baca75b39a4a1ec013e4a51f02892430b04c4bde028c8742621a5001d7de7a8c9204441e386e4eddd5e943292e43bc4bf093d52a2ab03cfd5c7f2d84b55bcaa247e69cc3cc8e37b3d8499ca8f620cd663ad9e64f8afde8c9770fef28a1e4721fc4f9700c234fdad02c39d0528798d915f0b3cfcf75edf5861edacd4eca"}]}}]}}, {{0x9, 0x4, 0x6a, 0x9, 0xd, 0xa1, 0xd0, 0xb3, 0x4, [@uac_as={[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x54, 0x1, 0x9, 0x2, "", "cd"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x1, 0x7, 0x4, "8af6c7dd881b2935"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x2, 0x9, 0x10, "32e008", "ff45ec"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xee, 0x2, 0x8, 0x6, "14", "e2"}]}], [{{0x9, 0x5, 0x3, 0x2, 0x200, 0x3, 0x1, 0x4}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x2, 0x5, 0x1}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0x0, 0xe0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xcc, 0x2}, @generic={0xeb, 0xd, "f72c017fb161617237c88f3e84a4126396abc90c9cb26ce26c7bc6dce219acc0ccf416ca481d895c8a7873d651545badee71fffaab4cb89f8429bf0c4f8843d9de8910f85d28febf1c9f17ccb53ce82325950c12e62ea1164d1db477a69f2c02d8763605b81f2fcaa91b529faad5c273ae292f813133ef0a9000a553d3ad9d5bf4da6638870dec0a9a4d7d453b3ee8d5f05cb8e6563b93dc9b7214a179cd2214f6b79d60717357affba5fa449c965b4435445c690a44fed0e1baf97b56e983a7bff8daf69f55a2dccc1b91a2d51232cc9d5414bedf9593fd3c8a4cb563547f75b0725d407fd9d8ab3f"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x4, 0xfd, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x81}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x8, 0x2, 0x1}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0xe, 0xe, 0x18, [@generic={0x61, 0x0, "05d93aeedbf761f1b251b60790cdc433978123ef1e4dfc29cc1184d9d85d2e244e1363c6185d0af16c718de76fa9e8165860a52258a1e84b78bec68aa478fb2fcaaf962d7bb4e21adcd746ebc442dad1af3ac2b5e5aa762d9bf576ded8b864"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x3, 0x4, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x9, 0x6c}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7}]}}, {{0x9, 0x5, 0xb, 0x2, 0x8, 0x4, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x87, 0x7}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x7, 0x9, 0xc0}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x70, 0x1d, 0x5}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x6, 0x4, 0x6}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0x80, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6}]}}, {{0x9, 0x5, 0x7, 0x8, 0x10, 0x9, 0x3, 0x0, [@generic={0x1d, 0x7, "c66c8c71f30b2903d5e06f4907c7955691a02f503c8819daec30dc"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0xc42}]}}]}}]}}]}}, &(0x7f0000002c40)={0xa, &(0x7f0000002a00)={0xa, 0x6, 0x110, 0xe6, 0xc, 0x7, 0x10, 0x4}, 0x68, &(0x7f0000002a40)={0x5, 0xf, 0x68, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0xf4, 0x4, 0xa855, 0xff0f, 0x1b0, [0xff0000, 0xc030, 0x0, 0xffcf]}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x3, 0xff0f, 0xde7e, [0xc0c0, 0xf0, 0xf, 0xf, 0x18]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0x3, 0xe0}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x8, 0x7f, 0x3, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x48, 0x0, 0x2, 0xc000, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0xf, 0xffff}]}, 0x6, [{0x4, &(0x7f0000002ac0)=@lang_id={0x4, 0x3, 0x445}}, {0xd, &(0x7f0000002b00)=@string={0xd, 0x3, "0313e3ef76dbef989c7e7b"}}, {0x8, &(0x7f0000002b40)=@string={0x8, 0x3, "b55067fbc586"}}, {0x4, &(0x7f0000002b80)=@lang_id={0x4, 0x3, 0x4409}}, {0x4, &(0x7f0000002bc0)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000002c00)=@lang_id={0x4, 0x3, 0x4ff}}]}) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000002cc0)=0x3, 0x4) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002d40), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000002e80)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002d80)={0xa4, r9, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x200}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x24}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf16}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb892}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8820}, 0x40) recvmsg$can_bcm(r8, &(0x7f00000031c0)={&(0x7f0000002ec0)=@tipc, 0x80, &(0x7f0000003180)=[{&(0x7f0000002f40)=""/158, 0x9e}, {&(0x7f0000003000)=""/200, 0xc8}, {&(0x7f0000003100)=""/110, 0x6e}], 0x3}, 0x12001) r10 = signalfd(r4, &(0x7f0000003200)={[0x8]}, 0x8) sendmsg$IPVS_CMD_DEL_SERVICE(r10, &(0x7f0000003340)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003300)={&(0x7f0000003280)={0x78, r9, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5838}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010101}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6b7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x404c8c4) 2.419993526s ago: executing program 3 (id=1555): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) clock_adjtime(0x4, &(0x7f00000001c0)={0x6, 0x7, 0x3, 0x6, 0x1, 0x0, 0x84fa, 0x401, 0x7ff, 0x7, 0x2, 0x1ff, 0x699, 0x2, 0xffffffffffffff03, 0x81, 0x3, 0x174, 0xffff, 0x2, 0x7, 0x8001, 0xd9, 0xa60, 0x80000000, 0x5}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f0000000380)=[@dead_binder_done, @exit_looper, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0x10a, 0x0, &(0x7f0000000640)="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"}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000080)={0x0, 0x2710}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000001180)={{r3}, "15ae7062eec9244260e3888f9ae95c854c85a1570da8db887f02ccdb9b5352d33d124903b13b2a02f1d996e3fc60910890c287e59fd1cd7e3087aa1b91237cba7a4143cf1b84c9868991924c9b84f1630fe5d95a4846bf66cf808b8cfef77a81e229b56b71834e2398095f1cd8509a7a77f422ae48ebb4c30d2b2aee1e5641a5593ebed8fa7efbcdd1c2a6c521c7eca3ddc80989c1ead3f674483e5d8dfcbcb2bcbb523975e1da1e6c92b5de83b879063dde27daa38fae01babc7832f088c16e66f058ba817cc7c95681d339932c4d8aea9ca6288d3cb295a1efc10abee4da69728a2653c072cf7481e70be685ed67367228140a4d0040ed9c31f4cfc2063367d69b32b10091c13ce6680912ba5759f0d6e4a58f1dfcf3b9938bffdcb7dfc0b1833689113fb961e42e023f2bc8c054a031a8c8b2f0e7c7e40d7f256ecb165e492de3673cd4a70c11a8b338526a34c594a43e981009254251ef300daae9ca6f0d97aaedb958a6036ff4ca279c60274f985f87fb396a5830c15821a2082e1414ad66ae1cb045ca41c0992b8adc48c8262fbce4334caff6268701164188c8344bd91268c95f1f628ee9c0ec6a5d7dad3bf121f8b96048da0590da375a690da7f1f5ae22ddf1b621f0edc4ee64ec234c84eaa40c84739090f2551c64c09b901a2b4e06a56d3fdf3c9f44083c8ec93e382a5fb8ebddc79d384abff0058e524d6e6db4db00ad6f027d817bb79a1b150ba2f6760bf8f12e1dc3a2ad66da542e703acb90bc36cba016bf5bfcc9f437032989d8aa6611fc7a7a71ebb3fb027027cd5c3f73c404de263df6d7ea4242269cc70639c711d2bbece486e098bd875be656d66edb4315a187da2e68a23578bfa7934650bb923901fa61332f8272c1a5c3f0b3fa8daaa88bac74945a219bef059f69c01da570ed93bb821248724844471bffc582a07100b34ed1797caf189362dc0cba975bbfecc212a5dfc85e6a4b796955f82e1d1bd6632ae396fd9d9a3a5333b9a72268e9d0d126dd6ae4fe19efdd834264f2de2962e47ef18b5dc418c229e2637cbe08160f2f2e29b333148c479a1cc5fbeae61a0b2553a87757b751a6e3120ac775ab9202db51feb17f3b3730cd0c9dcd115c6764b373aae48df82e3a13e75bbdc5b52d625f58dcc854fdec8bfef6e803f24a348d64bdec49e66c9a07e8f5153493b29bd90e2c267ee3741c3611e8a3fb6d0f624384bc7da5c3c700c699163eb0c744bfe8a5bf83cde7fb2e3454768654f7d3f21c4a41b4c3185d85b2ec6e8345532c35735a7b943b7968a1c05dd0b5c7094b88d82a68638e24f0268097b150c45927df0910bd7413cb6ce0263e4ca77bc72f05ada51bb9a94fbd2891e8da90a5908da5160fce83135856be3d438247ce558816058116f01e2b7e2aa3cb264c6994aec25caf947518135fda594af216ae56d070e06e4f90b89cf401f6a417c901ec0bdfd36b6d2dad0832eeab0ff1b9fbbc23ce70f39172ef9e432a9c1df15922b7b569ebd743039c3aa95cefd6a301860ccb5b9aa23f957c0c5d3a7b543d2f1263aa36125401f53708d772295a366482e86eb3484811a9a8fa9b0e384b1c8b997279085371a1801f522aa154f50a500a41837b8a88bb7edfcab0f066387dff5ffe5ee4ef96c4b3a0761460f5dabacbc3b81730139998716c26bbaac75c25d7ef8e1a1d44c40eef4426e1788167ee88bfa09c3d8191eaebddb600e49fcdd192f737596807a8074fe82cc27ece55d98d8a323b3630c28463de35f346c3dcac426574c575aac10328389173c372bfcaebcf0a05af76ab800ef2c72bf23d3657acae0915bd33f3142e5916063f7b5ffa10f81f07e243fe4f032b4aa36d42dfc999db64a6f39f96d0fc57eeb732081f5f564b00e0174e6ac8cf6161526c86d1391fbf8f23db8bc9cbf2c89198a4d4971a3819f97db65b65fc794def597d563b65fed92e7b708e9947c228e431ccdc45e9ea9cf5d9ddbbc61b850d178164b53c50c816c06ee6dbe36583d3dcb63cef5d2081f2aa33eb49ac830e990d111c49ebefee5e7553f13f40c01755e042f1bcb0002145fff05da20141b4b20b27a71297a69e50045f84e24015b8d3d9e535391654268acb2a76b3485cca6746b1746b3dd81ee1b667af91ac57c0dc46d6b3a49492744cb0fc9e9f1225914c29b7f45a230f8f45f7ea0ebf342094d95fa7513089ddd273dd0fc2624eacbe7d173f982855ef9fa186c41df21181625b8109e0b0c52797ee637bac74b587ef27d6185bfd2e6bc9eafac33dc7e3e0e0e2c03babb778e7e8759000044ada5a848ebc938e49ec611b2525d85121c992a98280dd058d47f561bbfdfcec64200c36616c0fcde9cd9e0ba2525fc5b4ffcab8bfb774703b583dd7d4e21c08881a79e18f301731902c8c32e49de045404ba2bb17707f3a77804f72d7cd299c3950e96811f0ef7a3dd83c9993be0744cf43816007dcac7c9c1ce8b1dfd37fea0d9ebff48284c94c6db716b425e9b0190d78fcfc417ca6a64f25089cd6f9e77b482a1dc3e697f19e10c96c820366cd4162ae0169b82ea1385b48acce2fe1346ca0aa20fd4bd943471f021cd50acd46166b6a9d94ea3f960eee02e27ad2dcbcf5e0767460984ec7cdbd5d088c0bb4d9256d78debf809a998a1ac81a3ad3efa939e848f1d2a80eb379e10e2595f18b4e33f75f09b39a95fc0eee43fc593a2c081c5070ccbdf425ee20e556e0d0c562f09c83351c6324189f17ed4924e90c826aad307dce2b191123fa427478fd66f8bda7d1540c417328d5ecc9aa65a62c62533caa3dc4f0aa71eed576dc7f29a0533eb7358013124d43bccbbf27c3d88f6d9cc30beac98f78884162b8ede4fe714dba5ace722193d139c0b9a98d38085e58d4f9c5918696095298f0923e13671229ea26bb094172a32989ad4e10eab281f3c47042a462b474dfd5b3d002e7fcd28f6617acb563f3d6300e7c5d7329a7a03444f95fc73405da9bb4014bc620c331398b4da1373751a76e026b624fd1543c08527938920a2be9388ef3ae29575f32befe696e08dccb325060e402bfe19873014eb182a31d86cbda2e2563dde39ddfff4afa2ed2d3283ffe069fe50deece34400e65520a25433a3d749c4659120ee3cfc03190105eb1ec55bdda73295cee8e66fc08822bd99bfe06b61ed82bc68acc04b474053de6477088777b1d6b3d3a269d3fa2d742b7747f5c11a5995e32652bee3251c2d5a38846edf97cbaf6c4b9e18e5643754754b1c3e96b50e536bf1da53f9e1544684c9e07898d0f70e1b0eb353bc62377a571536392a4c7868aa97e70893893b3c4056a90215c72d0b8b3c6d0527973b56caae5779f7c7b3473284f90504d51725bc47581814203265463f7bc18b5d477bffa1ee9980c1335ced2d4ba0a49b4273afbc2598a71ea3c5bf78741662a9f138e0527a575987fe71f94eb66ba17b91b203708c661e81c274658b57a9cf42a71a3326b7706cbc3fced99f9830e667cde30caa6ded3c88e656094e6fe8d09a87982e307bf9fce9fe998bf4e79dc9af3678bdf7430fa14a462d58400b7d42104e5d2fbdb6c5fa95cd2fd3b029c1739c3d8f4a6dc8d1e74feeebd473fe8959b63cf9101bc9a6ae73bf033f42bb19e3528988188c7d999d534fb4bdcec7ff87b49520958f610f55e03ecef0b513e73f2fba48ab8bf96205e63ee496338eb0c4c437e7c537df2d283145fb4b725148bad48e6d6ff7c1e375826096c7b86a8654a13e2f9f1cdc81a71d4423abb7521a73e71ddb9319d4772465b23208054c87f7a8c598aee70a22f3e41ed2357ca16a87dd7547681dc58b4f2f5f310c6341faab377814f2511a47b6234e3470a89ef06ea9661a8f4d9da7a722d13ce42d602d5879e0ee85cb3de6dc776b8bdc0c6a4fdf677b1564d15581f84d05fca31334fc78d1c968512ab4e5f2078824673640001cf4fd6b9fb3ad973fe8f69c0cc7043aa7d8bcdfd37e01902bbba5801cc2b0ea8c72c732d42ee1158445a654c218291ada6b853711c87ce90b7ad5fc1d5a8f0346d81863950c97f87717c6e292a32ef7e16ca3e5bff381ba7c5f7c121af8e271e5e0f1921059a6aec4e3e0b246e98b36acf228f3a88c36589883e5cc98a21c5467a8e7b2f97f8575529e1b6f325f0b0e7cab5174f0c9530eb3acde5cd9ef1dd01122e505ef47f91fea20efaa0ea281c901b3243ff5cf87bd53026691b6057856dfc25d345c5a692e67e8988463ec7a1a4db62555cc6dd72e68da8fce5a3fce14c8aafd80aaab63e4f5803d1b044022dcf9c0905b77ef28bf09f6bf0f3b697ed6781a83cce8ed90c377c47bfdafbed01f52b40f209247341a536fa7d03ba4f7ea9265bbc98a316b3e190201bede7cab8185141ae5735018ddff82ef3259b9b5f2ba00e4433e64d81e3351983e4c28d7d123852548214bd2828e34379aa2cc7492941eebee4378d5690a6b4b509609724c2812da01adea00452283e71ff4f1f37e99267a31802615c3abe838a38b50a194190cd98d325a7eeb55815d1c2456464a3e36e40d00fa3b58e4f281749068afe2a4491aba3dbe751151302c3b2c6feb4c9d80109437b7b30d4fb3993e5a208bdcf80df1ec5138dc104bbc1c444bc5f6edf16b81b87fa0e50b842b0c87d3a6c7c5cd8e33ac77a4de67c904526297a5aaaaaa6f1808793d7a77de5927cb728d542a1de02f861e032546f6c608fca63ebf3eb8b8de9e7e3feedb3d34ac9bfd9bc2506483544194c81837a5848dedbb38cc7ae8f0397fc6d8d2111b057f82458ea63ec48379457de34ada25cb860f649c28e4c610f0b4fbcee3026b74d03461a6f72c7b50fecf6c5518f124affb582356f3febeff55be208eff849ad8e8b9381e1cddea1e6d9bf9fd0f213e81e4560e1a53e86c31606e89da52f5f32c73ffcf434e27a6d21ca3f082b4b7a86114ac6d72da85c395db2b13e46d49f531e27314b796983eb683c9106e004b81358021d06684f375efc0eb6be6ae3eae571b4e9356c4739952d08281c2bf98a86277e676e176d8e8b29412f460c4b888b8be5115296ebc5ddeaf0dc7f0facd7a44faedc0ead433fc7b248be087219d3f9f5a6ce920590ce4de1eab0c455e57a5bcf306cbbbb09afb62140eecf8ad1db7e2af822dde05c64b894ba15eff87dc17da14aaebc4552e49584052230eb6c29e91b925be34ab8ba8d541930c2fd9367213451bd969919992271a78f0d78331f3365ec9d4cee87912c9e4d90e496cff077a0b3272ee00c6eede61abf0d21b3272d6b0307ed5fb876d917991ba6c5cd13a2ac716bc33d5d24692c0502cd5ebbf22f3c1aab5dfcf02a89da7890524298fcdec51d76518363fceb8f803ef3621bc33c9d91b72820aadf05f6d0345eac203b00b734f94e9a0f2aa8d6fd17ccd1ba48b29d7184f16d42b12036cd1d1797225f8b4e3dac100660c3c7e72d6b57b0e4a810373550e4cb7dc41ee6775b4bc977d494bd3a632e00e5a6876968e5be140e272b244d6ad83717e292f0e8bb3cb5076221a554727d878b0255381c4eec96766354f9587284fee631e78ee6e554855ad98979e6f647d7354348763bfc2fb0b167b1eaf32b7abba062ce668af31190f38b681140a02a149c1794c49bba1d06a880486fc40c1292cd55a5813df9f4bac30fdf8d614cca7bab1986e567550ad6eb8560a6f28cdb350512335523cb545c7105f1e5be501a9de8df20e4bd81804b8b458a6a599f571f6105e3c44f200fe57603e181fe725d66a76df50bde6dd98d0c5203"}) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400000003000000500011"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r1) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000180)=0x10, 0x4) ioctl$UI_DEV_CREATE(r2, 0x5501) r5 = dup(r2) read$FUSE(r5, 0x0, 0x0) openat$incfs(r5, &(0x7f0000000000)='.pending_reads\x00', 0x82000, 0x9) r6 = ioctl$USERFAULTFD_IOC_NEW(r4, 0xaa00) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x206}) 2.354529581s ago: executing program 2 (id=1558): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f0000000080)={'U-', 0x7}, 0x16, 0x2) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) (rerun: 32) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x5, 0x13, 0x1, 0x10000}, {0x100, 0x40, 0xc, 0x1ff}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000001c0)={0x3, 0xed, "075b02b30f2b9c7eab66adc8069e658fc3726ed737ee2365f28807874f0f699e0084a6a1288e6ccd77ee53e9ae9c7ad3c7f72615d69d6517579644a722151e0421c1bd1cd3eb8c7906f9815cc8870dc24da37a91b6b1ab8668e1ebfeabc729220c1e5915bea25d35887a8c3498ffadbfae196a2440541eba89908914f4f9216ba3297b2b585214bd135bc433a8e651854904f639685562f4e6804d101f10781225785d9ca0aa6914434fb020aa2c8ee1f497813f6c1009d494cf34854fd5c376dec5e0af9328e9f3c7c86210f33693356984cf71d7a947ba780e5a9095d8135e91cdb101af1f021f49eee27638"}) (async, rerun: 32) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000002c0)=0x7) (async, rerun: 32) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1a253398357e186f) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x38}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000804) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000400)={0x57}) (async, rerun: 64) bind$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (rerun: 64) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r2) (async) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000500), 0x4040, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x2080, 0x0) flistxattr(r4, &(0x7f0000000580)=""/187, 0xbb) (async) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000026c0)={0x477ccc4d, 0x10, '\x00', 0x0, &(0x7f0000002680)=[0x0, 0x0]}) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002700)='./binderfs/custom1\x00', 0x802, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002740)={'wlan1\x00'}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000002780)={0x10000000}) sendmsg$inet(r2, &(0x7f0000002dc0)={&(0x7f00000027c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000002c40)=[{&(0x7f0000002800)="ec9112c27c5f0ade2d3bb70a7ec3714b13ea6cfa96f71218633ea2067fa48c866b1d296c245e910ed121339dbea70cf2e8d082ca927e88b7141aff3bbe7f82e10d31f7d0530fc6a528452fe16423bb7a579718dc990683d8f4e7aaa9308a18cab924a83894a92c085e8139975cd148d3cbc182b0a5414705a84f4d9168e124281a6e10140a0831dbcedc290b28fbe77e583eaf0c7f40e822292cebcd2b9dba211ce0c6807d0b08649264018f7d59e36dead518e8dc9eba2486ba77736d92d21544c7e33cb4ad3d494b97acec9f2bf4255765a65f75d13821b9154a9d25ddaf94f35f59", 0xe3}, {&(0x7f0000002900)="2b325217305695d79065d69736e676574e4a21111a180270fea1882ffd02985801f9219ab4d787dccfb37ae94129603b0eafe1786cdb3e3001e7d82df7e67eb7d3fe8a5f7b", 0x45}, {&(0x7f0000002980)="86e36c1931378b7c1e0620946f0f7bf9d125d63a60a10f7df63a031df3bfd66a7df08edc254e53e12d98bd31404cb187a83919da3ebc0603cc47a7336f2920e157cfdb", 0x43}, {&(0x7f0000002a00)="2381653036da7d23877bcd8cdc8f5a7fdb94ce5542966a5282943daa9981e035dc04694ce8a322f3b1e4b02161ad5e295bbf35220d24430bc1b602c10fcce5e59891716832869857abf7d29032861f94fd3960b8ecce1e625e2c57de3271509e5d6f6ca06031484b367dd9c8c121963628edcfd62a92a96618d9e98686df0d30c4c602cdbd03cfa88a6f997b8af8aa7290a8a8758b2bfadd7a3f0b7eca4cd550af4ccb86487b6c2fcafd14323b907031ea49a3fd54ae18a7887a702b302b8e5b6c857a", 0xc3}, {&(0x7f0000002b00)="8ed0c9d48160f8cf9c08551137298e1f5e19ee0d4327db3936566e1c6f0c52dee93fed494d6a81a09ea2ae5dbf5bd4753bbe1022d2bb2486d4d4b3191c30854939eecdad67c3ec053ad721b58f37516a773bca936eb55d5e59ecfe634ce36f41d129d104764bdb91513344a3a99192178587166d5f07b87989f82fdf982a09b8cd7495d981bbe5b8057a8ec599d0e96c1df428f3cb9e52b536c5d5453f09073a6087448255724c", 0xa7}, {&(0x7f0000002bc0)="a78e4a3b7c8a3d70461efb3207702e1677100ff802155fd503d2fa06674c5f8b3ccd2b9532be934c026edd8451a2e187114acd2e2f039f676f4c544f45ae8889feec96161ef5680c5abe226c98e1f0e502236a5c129f4b3d84380f", 0x5b}], 0x6, &(0x7f0000002cc0)=[@ip_retopts={{0x80, 0x0, 0x7, {[@generic={0x82, 0x10, "a7593958f72fb6135fa35b583aa8"}, @noop, @timestamp_prespec={0x44, 0x3c, 0x3a, 0x3, 0x3, [{@empty, 0x5}, {@broadcast, 0x2}, {@local, 0x1}, {@rand_addr=0x64010100}, {@broadcast, 0x289}, {@local, 0x1000}, {@empty, 0x589d}]}, @noop, @generic={0x44, 0xd, "00686af49e4f016300a893"}, @timestamp_prespec={0x44, 0x14, 0xe1, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x19}, 0x6}, {@broadcast, 0xfffffffa}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x16}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa96}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffb04d}}], 0xf8}, 0x40000) (async) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000002e00), 0x404840, 0x0) ioctl$RNDADDENTROPY(r6, 0x40085203, &(0x7f0000002e40)={0xc1d, 0xff, "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"}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f0000002f80)={0xf, 0x3}) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000002fc0)=0x1) (async, rerun: 32) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000003000)=0x6, 0x4) (async, rerun: 32) r7 = dup3(r5, r3, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003080), r7) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000003140)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003100)={&(0x7f00000030c0)={0x1c, r8, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x8040) 2.353604732s ago: executing program 2 (id=1559): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r1) accept4(r1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) pselect6(0x40, &(0x7f0000000080)={0x75, 0x0, 0xfffffffffffffffa, 0xfffffffffffff5e8, 0x5, 0x3, 0xfffffffffffffffa, 0x331}, 0x0, 0x0, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) 2.338617723s ago: executing program 2 (id=1560): getpid() r0 = socket$netlink(0x10, 0x3, 0x4) r1 = getpid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) sendmsg$netlink(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001180)={0x10, 0x2c, 0x200, 0x70bd27, 0x25dfdbfd}, 0x10}], 0x1, &(0x7f0000000cc0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20, 0x10014}, 0x8a0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="28000000180015002abd7000fffffffe0a00000002020000000000000c000980080070ae06"], 0x28}], 0x1}, 0x0) 2.338441113s ago: executing program 4 (id=1398): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x8042, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async, rerun: 32) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) (rerun: 32) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) r3 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0)) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r3}, 0x0, 0x0) (async) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r3}, &(0x7f00000002c0), &(0x7f0000000300)) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0xeeee0000, 0x2000, &(0x7f000000f000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) 2.338304433s ago: executing program 2 (id=1561): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x12, r0, 0x5f875000) (async) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) (async) setregid(0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x12c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_TUPLE={0x84, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x29}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4c080}, 0x40004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x42) readlinkat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/47, 0x2f) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x2, 0x2}, 0x10) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000440)) (async) syz_clone(0x20186a00, &(0x7f00000000c0)="b2205f", 0x3, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="93acfe07fb49eca061c3482e8e2b9d4913af69fb35567d69814622fc1bfa66ca47da61681d3b52272408") 150.546238ms ago: executing program 2 (id=1562): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x1f048e83907ec8f}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x77682a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 150.274408ms ago: executing program 3 (id=1563): ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0xa3, 0x0, &(0x7f0000000080)}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x204800, &(0x7f0000000000)={[], [{@flag='rw'}]}) 75.606864ms ago: executing program 2 (id=1564): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x20, 0xee, 0x97, 0x40, 0x7ab, 0xfc01, 0x6406, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x20, 0x0, 0x0, 0x6, 0xd9, 0x4b}}]}}]}}, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x64a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe306e000) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f000016c000/0x1000)=nil, 0x1000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.31342ms ago: executing program 3 (id=1565): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000004c0)="3e262e470f01c3b9800000c00f326201008e7300d70000d700640f008cc4e3710aa6006000002cc4617d11ad8d41f090f20f01f866baf80cb81667858cef66bafc0c66ed410f01c50f21a5a1305caa8ad5a75818", 0x54}], 0x1, 0xb, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) rt_sigprocmask(0x2, &(0x7f0000000400)={[0x78e437d9]}, 0x0, 0x8) r2 = gettid() setrlimit(0xb, &(0x7f0000000000)) tkill(r2, 0xb) io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={[0x2368e8fe]}, 0x8}) sendmsg$inet(r1, &(0x7f0000009380)={0x0, 0x0, 0x0}, 0x44080) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000400)={0x34, 0x0, [{0x86956090991702cc, 0xfffffed6, &(0x7f0000001e80)=""/133}, {0x0, 0xfffffffffffffdd3, &(0x7f0000000500)=""/10}]}) close_range(r3, 0xffffffffffffffff, 0x0) 994.68µs ago: executing program 3 (id=1566): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4d4402, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x20003) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x480, 0x0) preadv(r4, &(0x7f0000001640)=[{&(0x7f00000004c0)=""/77, 0x4d}], 0x1, 0x0, 0xfffffffd) r5 = eventfd2(0x1ff, 0x80800) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="2d667fc4af"], 0x15) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) r8 = gettid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r8}) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b0f, &(0x7f0000000000)={'wg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket(0xa, 0x5, 0x0) connect$inet(r10, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r9, 0x10, &(0x7f0000000640)={0x4}) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000200)={0x7, 0x4000, 0x0, r5, 0x7}) close_range(r0, 0xffffffffffffffff, 0x0) 630.45µs ago: executing program 3 (id=1567): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x1000000, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) ioctl$KVM_CAP_HYPERV_VP_INDEX(r1, 0x4068aea3, &(0x7f00000005c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$incfs(r2, &(0x7f0000000340)='.log\x00', 0x9002, 0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000000540)={0x50f, 0x38, [0x2, 0x4, 0x7f, 0x8001], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x290, r6, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2040}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xd}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x66}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x230, 0x84, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x3d3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7fff}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x101}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xff}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xa}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8ae}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x80}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6400000}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_60GHZ={0x8}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xb}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x400}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x7ff}]}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="729727417f8e"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xc}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x272}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x78, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x62}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x1000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1a}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xac9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xf}]}]}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x80}, 0x44800) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x7c, 0x1e, 0xa6, 0x8, 0x1c04, 0x15, 0xcd63, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0xfa, 0xa0, 0xbf, [{{0x9, 0x4, 0x5d, 0x7b, 0x0, 0x2, 0x6, 0x0, 0x8}}]}}]}}, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) 0s ago: executing program 4 (id=1398): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x8042, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async, rerun: 32) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) (rerun: 32) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) r3 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0)) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r3}, 0x0, 0x0) (async) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r3}, &(0x7f00000002c0), &(0x7f0000000300)) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0xeeee0000, 0x2000, &(0x7f000000f000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) kernel console output (not intermixed with test programs): device syz (046d:08c3) [ 41.326107][ T10] usb 2-1: No streaming interface found for terminal 6. [ 41.333158][ T10] usb 2-1: Failed to create links for entity 5 [ 41.345779][ T10] usb 2-1: Failed to register entities (-22). [ 41.357323][ T10] usb 2-1: USB disconnect, device number 7 [ 41.405520][ T1130] binder: Unknown parameter '18446744073709551615' [ 41.483139][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 41.483156][ T36] audit: type=1400 audit(1755896214.929:310): avc: denied { write } for pid=1139 comm="syz.2.269" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 41.483642][ T1140] 9p: Unknown access argument : -22 [ 41.499061][ T36] audit: type=1400 audit(1755896214.929:311): avc: denied { mount } for pid=1141 comm="syz.0.270" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 41.548650][ T1142] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.552486][ T36] audit: type=1400 audit(1755896214.989:312): avc: denied { search } for pid=1141 comm="syz.0.270" name="/" dev="configfs" ino=2512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 41.585093][ T36] audit: type=1400 audit(1755896215.029:313): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.616371][ T36] audit: type=1400 audit(1755896215.059:314): avc: denied { accept } for pid=1144 comm="syz.3.271" path="socket:[12360]" dev="sockfs" ino=12360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 41.656275][ T36] audit: type=1400 audit(1755896215.099:315): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 41.679475][ T36] audit: type=1400 audit(1755896215.119:316): avc: denied { ioctl } for pid=1149 comm="syz.0.273" path="socket:[12435]" dev="sockfs" ino=12435 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.712153][ T36] audit: type=1400 audit(1755896215.159:317): avc: denied { mount } for pid=1151 comm="syz.0.274" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.734467][ T1152] veth0_to_team: entered promiscuous mode [ 41.749611][ T1152] veth0_to_team: entered allmulticast mode [ 41.749655][ T36] audit: type=1400 audit(1755896215.199:318): avc: denied { view } for pid=1153 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 41.790832][ T1156] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:254 [ 41.794250][ T36] audit: type=1400 audit(1755896215.239:319): avc: denied { setattr } for pid=1155 comm="syz.0.276" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 41.816252][ T1162] input: syz1 as /devices/virtual/input/input7 [ 41.901993][ T1170] capability: warning: `syz.1.283' uses 32-bit capabilities (legacy support in use) [ 42.898448][ T1193] SELinux: security_context_str_to_sid () failed with errno=-22 [ 42.930107][ T1197] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 42.949595][ T1199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'. [ 43.059690][ T63] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 43.210647][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.221637][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.231522][ T63] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 43.240673][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.249188][ T63] usb 1-1: config 0 descriptor?? [ 43.658361][ T63] hid-steam 0003:28DE:1142.0002: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 43.719623][ T63] hid-steam 0003:28DE:1142.0002: Steam wireless receiver connected [ 43.729464][ T63] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 43.860317][ T1187] overlay: Unknown parameter 'subj_user' [ 43.866957][ T10] usb 1-1: USB disconnect, device number 6 [ 43.875507][ T10] hid-steam 0003:28DE:1142.0002: Steam wireless receiver disconnected [ 43.914920][ T1208] rust_binder: Error while translating object. [ 43.914945][ T1208] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.921169][ T1208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:194 [ 44.169605][ T63] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 44.330659][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 44.340739][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 44.353232][ T63] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 44.362456][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.370521][ T63] usb 2-1: Product: syz [ 44.375304][ T63] usb 2-1: Manufacturer: syz [ 44.379931][ T63] usb 2-1: SerialNumber: syz [ 44.385489][ T63] usb 2-1: config 0 descriptor?? [ 44.396273][ T1210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'. [ 44.406178][ T1210] 9pnet_fd: Insufficient options for proto=fd [ 44.533286][ T1213] rust_binder: Error while translating object. [ 44.533329][ T1213] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 44.539517][ T1213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:269 [ 44.640459][ T63] usb 2-1: USB disconnect, device number 8 [ 44.667059][ T1225] rust_binder: Write failure EFAULT in pid:277 [ 44.827439][ T1234] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.833683][ T1234] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:199 [ 44.847721][ T63] rust_binder: 1233: removing orphan mapping 0:24 [ 44.871862][ T1237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'. [ 44.881945][ T1237] 9pnet_fd: Insufficient options for proto=fd [ 44.984187][ T1250] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 44.984213][ T1250] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 44.992829][ T1250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:207 [ 45.051032][ T1253] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 45.060286][ T1253] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:227 [ 45.085741][ T1258] netlink: 84 bytes leftover after parsing attributes in process `syz.2.316'. [ 45.249628][ T507] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 45.270602][ T1276] input: syz1 as /devices/virtual/input/input8 [ 45.379621][ T507] usb 4-1: device descriptor read/64, error -71 [ 45.419464][ T1295] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 45.569612][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 45.619989][ T507] usb 4-1: device descriptor read/64, error -71 [ 45.669609][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 45.709601][ T9] usb 2-1: device descriptor read/64, error -71 [ 45.719679][ T331] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 45.820790][ T10] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 45.828960][ T10] usb 3-1: config 0 has no interface number 0 [ 45.836566][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 45.845621][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.853661][ T10] usb 3-1: Product: syz [ 45.857849][ T10] usb 3-1: Manufacturer: syz [ 45.862442][ T10] usb 3-1: SerialNumber: syz [ 45.867476][ T10] usb 3-1: config 0 descriptor?? [ 45.869597][ T507] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 45.873773][ T331] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 45.888093][ T331] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 45.898055][ T331] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.905965][ T331] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 45.915042][ T331] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 45.923203][ T331] usb 1-1: Product: syz [ 45.927366][ T331] usb 1-1: Manufacturer: syz [ 45.931964][ T331] usb 1-1: SerialNumber: syz [ 45.937048][ T331] usb 1-1: config 0 descriptor?? [ 45.943171][ T331] hub 1-1:0.0: bad descriptor, ignoring hub [ 45.949096][ T331] hub 1-1:0.0: probe with driver hub failed with error -5 [ 45.956275][ T9] usb 2-1: device descriptor read/64, error -71 [ 45.962872][ T331] usb 1-1: selecting invalid altsetting 0 [ 46.009631][ T507] usb 4-1: device descriptor read/64, error -71 [ 46.148076][ T1308] SELinux: security_context_str_to_sid () failed with errno=-22 [ 46.199607][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 46.249644][ T507] usb 4-1: device descriptor read/64, error -71 [ 46.249703][ T331] usb 1-1: USB disconnect, device number 7 [ 46.329596][ T9] usb 2-1: device descriptor read/64, error -71 [ 46.359720][ T507] usb usb4-port1: attempt power cycle [ 46.569621][ T9] usb 2-1: device descriptor read/64, error -71 [ 46.679702][ T9] usb usb2-port1: attempt power cycle [ 46.699621][ T507] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 46.720637][ T507] usb 4-1: device descriptor read/8, error -71 [ 46.850644][ T507] usb 4-1: device descriptor read/8, error -71 [ 47.019627][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 47.040554][ T9] usb 2-1: device descriptor read/8, error -71 [ 47.089631][ T507] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 47.110653][ T507] usb 4-1: device descriptor read/8, error -71 [ 47.170628][ T9] usb 2-1: device descriptor read/8, error -71 [ 47.240618][ T507] usb 4-1: device descriptor read/8, error -71 [ 47.349705][ T507] usb usb4-port1: unable to enumerate USB device [ 47.419615][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 47.440615][ T9] usb 2-1: device descriptor read/8, error -71 [ 47.540894][ T1318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=1318 comm=syz.0.338 [ 47.570604][ T9] usb 2-1: device descriptor read/8, error -71 [ 47.679736][ T9] usb usb2-port1: unable to enumerate USB device [ 47.695015][ T1332] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.695044][ T1332] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.701598][ T1332] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.708056][ T1332] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.714571][ T1332] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.721039][ T1332] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.727654][ T1332] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.734119][ T1332] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.740610][ T1332] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.747026][ T1332] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.776308][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 47.776324][ T36] audit: type=1326 audit(1755896221.219:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabaf8ebe9 code=0x7ffc0000 [ 47.814308][ T36] audit: type=1326 audit(1755896221.219:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7feabafc3449 code=0x7ffc0000 [ 47.837624][ T36] audit: type=1326 audit(1755896221.219:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabaf8ebe9 code=0x7ffc0000 [ 47.860880][ T36] audit: type=1326 audit(1755896221.219:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7feabaf46207 code=0x7ffc0000 [ 47.884039][ T36] audit: type=1326 audit(1755896221.219:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7feabaf45917 code=0x7ffc0000 [ 47.907257][ T36] audit: type=1326 audit(1755896221.219:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabaf8ebe9 code=0x7ffc0000 [ 47.930565][ T36] audit: type=1326 audit(1755896221.219:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7feabaf45976 code=0x7ffc0000 [ 47.953696][ T36] audit: type=1326 audit(1755896221.219:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabaf8ebe9 code=0x7ffc0000 [ 47.976920][ T36] audit: type=1326 audit(1755896221.219:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feabaf8ebe9 code=0x7ffc0000 [ 48.000079][ T36] audit: type=1326 audit(1755896221.219:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabaf8ebe9 code=0x7ffc0000 [ 48.042458][ T1340] random: crng reseeded on system resumption [ 48.084608][ T1342] rust_binder: 210: no such ref 0 [ 48.454002][ T10] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 48.466051][ T10] usb 3-1: No valid video chain found. [ 48.478673][ T10] usb 3-1: USB disconnect, device number 6 [ 48.492637][ T1366] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.513923][ T1366] rust_binder: Write failure EINVAL in pid:265 [ 48.667922][ T1395] binder: Unknown parameter 'dirsync ' [ 48.702732][ T1403] fuse: Bad value for 'fd' [ 48.702736][ T1402] fuse: Bad value for 'fd' [ 48.711931][ T1402] 9pnet_fd: p9_fd_create_unix (1402): problem connecting socket: ./file0: -111 [ 48.839651][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 48.886723][ T1423] tracefs: Unknown parameter 'ÊžlÙ%[âÃ' [ 48.928526][ T1433] netlink: 'syz.1.372': attribute type 4 has an invalid length. [ 48.936246][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 48.945624][ T1433] netlink: 'syz.1.372': attribute type 4 has an invalid length. [ 49.000642][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.010970][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 49.020824][ T9] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 49.035879][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.051138][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.063543][ T9] usb 4-1: Product: syz [ 49.067728][ T9] usb 4-1: Manufacturer: syz [ 49.072391][ T9] usb 4-1: SerialNumber: syz [ 49.083947][ T1451] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 49.099619][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 49.105806][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.116809][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 49.129753][ T10] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 49.138807][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.138864][ T1449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:330 [ 49.147774][ T10] usb 3-1: config 0 descriptor?? [ 49.567432][ T10] nintendo 0003:057E:2019.0004: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 49.650977][ T1459] /dev/rnullb0: Can't lookup blockdev [ 49.650981][ T1460] /dev/rnullb0: Can't lookup blockdev [ 49.701834][ T9] cdc_ncm 4-1:1.0: bind() failure [ 49.713832][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 49.720785][ T9] cdc_ncm 4-1:1.1: bind() failure [ 49.728552][ T9] usb 4-1: USB disconnect, device number 17 [ 49.765404][ T1397] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 49.766022][ T1472] rust_binder: 239: no such ref 2 [ 49.779288][ T1472] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:239 [ 49.787246][ T331] rust_binder: 1470: removing orphan mapping 0:24 [ 49.812942][ T1476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.860964][ T1488] overlayfs: failed to clone upperpath [ 49.864138][ T1489] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 49.872940][ T1489] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 49.881090][ T1489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:242 [ 49.920265][ T9] rust_binder: 1448: removing orphan mapping 0:112 [ 50.131014][ C0] usb 3-1: input irq status -75 received [ 50.332071][ T1496] incfs: Can't find or create .index dir in ./file0 [ 50.338754][ T1496] incfs: mount failed -1 [ 50.344580][ T1496] input: syz1 as /devices/virtual/input/input10 [ 50.654603][ T1498] /dev/rnullb0: Can't open blockdev [ 50.793262][ T1509] tipc: Enabling of bearer rejected, failed to enable media [ 50.976002][ T1513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:254 [ 50.976071][ T1513] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 50.992949][ T1513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:254 [ 50.993375][ T1517] tipc: Trying to set illegal importance in message [ 51.529767][ T1527] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.530304][ T1527] rust_binder: Failed to allocate buffer. len:4160, is_oneway:false [ 51.536759][ T1527] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 51.544884][ T1527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:260 [ 51.568603][ T1530] tmpfs: Invalid uid '0x00000000ffffffff' [ 51.597041][ T1534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.403'. [ 51.607177][ T1534] 9pnet_fd: Insufficient options for proto=fd [ 51.695684][ T1537] netlink: 188 bytes leftover after parsing attributes in process `syz.3.404'. [ 51.710664][ T1537] ./file0: Can't lookup blockdev [ 51.718289][ T1539] netlink: 24 bytes leftover after parsing attributes in process `syz.2.405'. [ 51.719278][ T10] nintendo 0003:057E:2019.0004: Failed to get joycon info; ret=-71 [ 51.735388][ T10] nintendo 0003:057E:2019.0004: Failed to retrieve controller info; ret=-71 [ 51.744169][ T10] nintendo 0003:057E:2019.0004: Failed to initialize controller; ret=-71 [ 51.776501][ T10] nintendo 0003:057E:2019.0004: probe - fail = -71 [ 51.783692][ T10] nintendo 0003:057E:2019.0004: probe with driver nintendo failed with error -71 [ 51.797063][ T10] usb 3-1: USB disconnect, device number 7 [ 51.814811][ T1549] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 51.895760][ T1572] incfs: Backing dir is not set, filesystem can't be mounted. [ 51.903318][ T1572] incfs: mount failed -2 [ 51.917419][ T1577] bridge0: port 3(veth1_macvtap) entered blocking state [ 51.926703][ T1577] bridge0: port 3(veth1_macvtap) entered disabled state [ 51.933739][ T1577] veth1_macvtap: entered allmulticast mode [ 51.942415][ T1577] veth1_macvtap: left allmulticast mode [ 51.976651][ T1593] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.976983][ T1593] rust_binder: Failed to allocate buffer. len:4160, is_oneway:false [ 51.983483][ T1593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 51.993933][ T1593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:285 [ 52.026726][ T1600] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.036652][ T1600] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 52.050935][ T1600] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 52.060703][ T1600] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:287 [ 52.119616][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 52.280681][ T45] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.291580][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 52.298176][ T45] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 52.307210][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.315765][ T45] usb 1-1: config 0 descriptor?? [ 52.528844][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 52.535178][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 52.544535][ T45] usb 1-1: USB disconnect, device number 8 [ 52.587310][ T1610] netlink: 'syz.3.429': attribute type 16 has an invalid length. [ 52.615447][ T1617] Dead loop on virtual device ip6_vti0, fix it urgently! [ 52.622709][ T1617] Dead loop on virtual device ip6_vti0, fix it urgently! [ 52.629940][ T1617] Dead loop on virtual device ip6_vti0, fix it urgently! [ 52.637149][ T1617] Dead loop on virtual device ip6_vti0, fix it urgently! [ 52.644331][ T1617] Dead loop on virtual device ip6_vti0, fix it urgently! [ 52.657012][ T1617] Dead loop on virtual device ip6_vti0, fix it urgently! [ 52.671783][ T1622] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.713966][ T1627] overlayfs: failed to clone upperpath [ 52.899599][ T427] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 52.919586][ T45] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 53.060695][ T427] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.070909][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 53.076055][ T427] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 53.086235][ T427] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.100006][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.111145][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.121366][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 53.130483][ T427] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.139877][ T427] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.147911][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.156161][ T427] usb 4-1: Product: syz [ 53.160478][ T427] usb 4-1: Manufacturer: syz [ 53.165488][ T427] usb 4-1: SerialNumber: syz [ 53.170557][ T45] usb 1-1: config 0 descriptor?? [ 53.187315][ T1617] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 53.509374][ T36] kauditd_printk_skb: 110 callbacks suppressed [ 53.509391][ T36] audit: type=1400 audit(1755896226.949:455): avc: denied { getopt } for pid=1632 comm="syz.2.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.580343][ T45] apple 0003:05AC:024B.0005: fixing up MacBook JIS keyboard report descriptor [ 53.593313][ T45] apple 0003:05AC:024B.0005: unknown global tag 0xe [ 53.600375][ T45] apple 0003:05AC:024B.0005: item 0 1 1 14 parsing failed [ 53.608212][ T36] audit: type=1400 audit(1755896227.049:456): avc: denied { create } for pid=1640 comm="syz.1.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 53.627657][ T45] apple 0003:05AC:024B.0005: parse failed [ 53.634155][ T45] apple 0003:05AC:024B.0005: probe with driver apple failed with error -22 [ 53.710106][ T1667] incfs: Backing dir is not set, filesystem can't be mounted. [ 53.729594][ T1667] incfs: mount failed -2 [ 53.783241][ T1615] fuseblk: Bad value for 'fd' [ 53.840060][ T1672] random: crng reseeded on system resumption [ 54.232119][ T1617] netlink: 'syz.3.431': attribute type 2 has an invalid length. [ 54.240299][ T1617] /dev/rnullb0: Can't open blockdev [ 54.246137][ T427] cdc_ncm 4-1:1.0: bind() failure [ 54.253700][ T427] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 54.262509][ T427] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 54.278479][ T427] usb 4-1: USB disconnect, device number 18 [ 54.299532][ T1679] /dev/rnullb0: Can't lookup blockdev [ 54.329337][ T36] audit: type=1400 audit(1755896227.769:457): avc: denied { remount } for pid=1686 comm="syz.2.455" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.344936][ T1692] /dev/rnullb0: Can't lookup blockdev [ 54.822571][ T1711] rust_binder: Error while translating object. [ 54.822600][ T1711] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 54.828895][ T1711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:304 [ 54.855375][ T1713] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:306 [ 54.903054][ T1718] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 54.921063][ T1718] overlayfs: conflicting options: userxattr,metacopy=on [ 54.938375][ T1720] netlink: 224 bytes leftover after parsing attributes in process `syz.2.468'. [ 55.099616][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 55.133975][ T1723] /dev/rnullb0: Can't lookup blockdev [ 55.146759][ T36] audit: type=1400 audit(1755896228.589:458): avc: denied { write } for pid=1724 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.167992][ T36] audit: type=1400 audit(1755896228.609:459): avc: denied { sqpoll } for pid=1724 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 55.270652][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 55.278928][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 55.289198][ T10] usb 4-1: config 220 has no interface number 2 [ 55.296065][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 55.309215][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 55.316001][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 55.322881][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 55.331034][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 55.340306][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.348312][ T10] usb 4-1: Product: syz [ 55.352668][ T10] usb 4-1: Manufacturer: syz [ 55.357255][ T10] usb 4-1: SerialNumber: syz [ 55.563636][ T1713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.572202][ T1713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.582565][ T10] usb 4-1: selecting invalid altsetting 0 [ 55.588348][ T10] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 55.594803][ T10] usb 4-1: No valid video chain found. [ 55.603871][ T10] usb 4-1: USB disconnect, device number 19 [ 55.618958][ T331] usb 1-1: USB disconnect, device number 9 [ 55.645404][ T36] audit: type=1400 audit(1755896229.089:460): avc: denied { nlmsg_write } for pid=1757 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 55.645690][ T1758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.482'. [ 55.726403][ T36] audit: type=1400 audit(1755896229.169:461): avc: denied { map } for pid=1761 comm="syz.0.484" path="socket:[15917]" dev="sockfs" ino=15917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.787980][ T36] audit: type=1400 audit(1755896229.229:462): avc: denied { setattr } for pid=1772 comm="syz.0.487" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.901344][ T36] audit: type=1400 audit(1755896229.349:463): avc: granted { setsecparam } for pid=1779 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 55.920871][ T1780] rust_binder: Error while translating object. [ 55.920914][ T1780] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 55.927093][ T1780] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:385 [ 55.946697][ T1782] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 55.955900][ T1782] rust_binder: Read failure Err(EFAULT) in pid:387 [ 56.087829][ T1804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 56.104908][ T1804] 9pnet_fd: Insufficient options for proto=fd [ 56.126636][ T1810] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.161511][ T36] audit: type=1400 audit(1755896229.609:464): avc: denied { map } for pid=1820 comm="syz.1.506" path="socket:[16019]" dev="sockfs" ino=16019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.181268][ T1822] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 56.190998][ T1822] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 56.198987][ T1822] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:310 [ 56.209615][ T427] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 56.211142][ T1822] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.228229][ T1822] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 56.234671][ T1822] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 56.242700][ T1822] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:310 [ 56.359583][ T427] usb 1-1: Using ep0 maxpacket: 16 [ 56.374852][ T427] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.385737][ T427] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.395483][ T427] usb 1-1: config 0 interface 0 has no altsetting 0 [ 56.402089][ T427] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 56.411123][ T427] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.419949][ T427] usb 1-1: config 0 descriptor?? [ 56.829145][ T1782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.838647][ T1782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.864708][ T427] hid-generic 0003:060B:500A.0006: unexpected long global item [ 56.872690][ T427] hid-generic 0003:060B:500A.0006: probe with driver hid-generic failed with error -22 [ 56.982877][ T1847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.515'. [ 56.992912][ T1847] 9pnet_fd: Insufficient options for proto=fd [ 57.011052][ T1849] /dev/rnullb0: Can't open blockdev [ 57.046898][ T1855] usb usb8: usbfs: process 1855 (syz.3.519) did not claim interface 0 before use [ 57.049424][ T1782] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 57.065495][ T456] usb 1-1: USB disconnect, device number 10 [ 57.309593][ T45] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 57.399821][ T1860] 9pnet_fd: p9_fd_create_tcp (1860): problem connecting socket to 127.0.0.1 [ 57.439589][ T45] usb 4-1: device descriptor read/64, error -71 [ 57.604786][ T1889] /dev/rnullb0: Can't lookup blockdev [ 57.615636][ T1894] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 57.644791][ T1902] 9pnet_fd: Insufficient options for proto=fd [ 57.679637][ T45] usb 4-1: device descriptor read/64, error -71 [ 57.749665][ T1916] rust_binder: Error while translating object. [ 57.749703][ T1916] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 57.755866][ T1916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:399 [ 57.919616][ T45] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 58.059621][ T45] usb 4-1: device descriptor read/64, error -71 [ 58.280831][ T1943] fuseblk: Unknown parameter '0xffffffffffffffff' [ 58.299619][ T45] usb 4-1: device descriptor read/64, error -71 [ 58.348444][ T1946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.551'. [ 58.390795][ T1954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.555'. [ 58.400257][ T1954] netlink: 40 bytes leftover after parsing attributes in process `syz.2.555'. [ 58.409726][ T45] usb usb4-port1: attempt power cycle [ 58.508852][ T1966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 58.527643][ T1968] fuse: Bad value for 'fd' [ 58.749615][ T45] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 58.770535][ T45] usb 4-1: device descriptor read/8, error -71 [ 58.900601][ T45] usb 4-1: device descriptor read/8, error -71 [ 59.139643][ T45] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 59.162349][ T45] usb 4-1: device descriptor read/8, error -71 [ 59.263133][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 59.263150][ T36] audit: type=1400 audit(1755896232.714:477): avc: denied { bind } for pid=1992 comm="syz.2.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.310595][ T45] usb 4-1: device descriptor read/8, error -71 [ 59.326648][ T36] audit: type=1400 audit(1755896232.774:478): avc: denied { create } for pid=2015 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 59.353930][ T36] audit: type=1400 audit(1755896232.804:479): avc: denied { read } for pid=2017 comm="syz.0.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.419995][ T45] usb usb4-port1: unable to enumerate USB device [ 59.640650][ T2028] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 59.640674][ T2028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:439 [ 59.659680][ T2030] 9pnet_fd: p9_fd_create_tcp (2030): problem connecting socket to 127.0.0.1 [ 59.842124][ T2038] netlink: 'syz.1.582': attribute type 11 has an invalid length. [ 59.860260][ T36] audit: type=1400 audit(1755896233.314:480): avc: denied { audit_write } for pid=2040 comm="syz.1.583" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 59.886457][ T2048] netlink: 'syz.1.584': attribute type 11 has an invalid length. [ 59.902958][ T2053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 59.912451][ T2053] netlink: 'syz.1.585': attribute type 1 has an invalid length. [ 59.920767][ T2053] /dev/rnullb0: Can't lookup blockdev [ 60.006169][ T2071] netlink: 92 bytes leftover after parsing attributes in process `syz.1.589'. [ 60.131448][ T2075] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 60.146506][ T36] audit: type=1400 audit(1755896233.594:481): avc: denied { write } for pid=2076 comm="syz.3.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.183373][ T36] audit: type=1400 audit(1755896233.634:482): avc: denied { mount } for pid=2078 comm="syz.3.592" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 60.205866][ T36] audit: type=1400 audit(1755896233.634:483): avc: denied { mounton } for pid=2078 comm="syz.3.592" path="/111/file0" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 60.206222][ T2079] /dev/rnullb0: Can't open blockdev [ 60.234624][ T2079] vfat: Unknown parameter 'lowerdir' [ 60.243334][ T36] audit: type=1400 audit(1755896233.694:484): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 60.269496][ T2084] netlink: 'syz.3.593': attribute type 4 has an invalid length. [ 60.277360][ T2084] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.593'. [ 60.520898][ T2101] random: crng reseeded on system resumption [ 60.542925][ T36] audit: type=1326 audit(1755896233.994:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2104 comm="syz.1.598" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60b8f8ebe9 code=0x0 [ 60.572421][ T36] audit: type=1400 audit(1755896234.024:486): avc: denied { audit_control } for pid=2106 comm="syz.3.599" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 60.572880][ T2107] binder: Unknown parameter 'seÑL@\cõæà' [ 60.616632][ T2112] rust_binder: Write failure EINVAL in pid:353 [ 60.704220][ T2119] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.710646][ T2119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:360 [ 60.720903][ T2119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:360 [ 60.781669][ T2125] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.794375][ T2125] rust_binder: 360: no such ref 1 [ 60.805981][ T2125] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 60.813246][ T2125] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 60.820464][ T2125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:360 [ 60.879481][ T2138] random: crng reseeded on system resumption [ 60.979179][ T2144] overlay: Unknown parameter 'dont_hash' [ 60.995046][ T2146] rust_binder: 476: no such ref 1 [ 61.388866][ T2160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 61.427380][ T2172] netlink: 'syz.1.620': attribute type 1 has an invalid length. [ 61.514350][ T456] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 61.679606][ T456] usb 1-1: Using ep0 maxpacket: 8 [ 61.690410][ T456] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 61.701407][ T456] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 61.710659][ T456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.799593][ T45] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 61.920254][ T2155] rust_binder: 485: no such ref 0 [ 61.925348][ T2155] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 61.934109][ T2155] rust_binder: 485: no such ref 0 [ 61.935329][ T2185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.626'. [ 61.939990][ T456] usb 1-1: string descriptor 0 read error: -71 [ 61.957385][ T456] hub 1-1:32.0: USB hub found [ 61.961150][ T45] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 61.963584][ T456] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 61.970683][ T45] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 61.988566][ T2188] /dev/rnullb0: Can't lookup blockdev [ 61.994061][ T45] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 62.003059][ T45] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 62.011339][ T456] usb 1-1: USB disconnect, device number 11 [ 62.014158][ T45] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 62.035120][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 62.046175][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 62.057095][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 62.072357][ T45] usb 4-1: string descriptor 0 read error: -22 [ 62.078546][ T45] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 62.087852][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.096593][ T45] usb 4-1: config 0 descriptor?? [ 62.101892][ T2181] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 62.109365][ T45] hub 4-1:0.0: bad descriptor, ignoring hub [ 62.115319][ T45] hub 4-1:0.0: probe with driver hub failed with error -5 [ 62.123067][ T45] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 62.224494][ T2204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2204 comm=syz.2.633 [ 62.238156][ T2206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2206 comm=syz.2.633 [ 62.267398][ T2212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 62.314238][ T45] usb 4-1: USB disconnect, device number 24 [ 62.561312][ T2225] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 62.561330][ T2225] rust_binder: Error while translating object. [ 62.570083][ T2225] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.576268][ T2225] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:493 [ 62.999689][ T456] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 63.029751][ T2265] netlink: 188 bytes leftover after parsing attributes in process `syz.1.651'. [ 63.090486][ T2271] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 63.090506][ T2271] rust_binder: Read failure Err(EFAULT) in pid:386 [ 63.098821][ T2271] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 63.142696][ T2276] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.159599][ T456] usb 1-1: Using ep0 maxpacket: 16 [ 63.172194][ T456] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.182345][ T456] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.197347][ T456] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 63.206439][ T456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.214463][ T456] usb 1-1: Product: syz [ 63.218663][ T456] usb 1-1: Manufacturer: syz [ 63.223448][ T456] usb 1-1: SerialNumber: syz [ 63.272112][ T2289] rust_binder: Write failure EFAULT in pid:397 [ 63.272395][ T2288] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:397 [ 63.453400][ T456] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 63.473144][ T456] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 63.484489][ T456] usb 1-1: USB disconnect, device number 12 [ 63.488903][ T518] udevd[518]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.531778][ T2313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'. [ 63.556237][ T2315] input: syz1 as /devices/virtual/input/input12 [ 63.572216][ T2313] kvm: pic: level sensitive irq not supported [ 63.572276][ T2313] kvm: pic: non byte read [ 63.587655][ T2322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.588626][ T2313] kvm: pic: non byte read [ 63.588966][ T2322] option changes via remount are deprecated (pid=2320 comm=syz.3.673) [ 63.608146][ T2322] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 63.617843][ T2322] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 63.669178][ T2327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:414 [ 63.675673][ T2326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.674'. [ 63.733208][ T2329] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 63.733255][ T2329] rust_binder: Read failure Err(EFAULT) in pid:520 [ 63.741760][ T2329] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 64.142970][ T2365] /dev/rnullb0: Can't lookup blockdev [ 64.309613][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 64.431857][ T2427] fuse: Bad value for 'rootmode' [ 64.459616][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 64.465895][ T31] usb 1-1: config 2 has an invalid interface number: 194 but max is 0 [ 64.474306][ T31] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 64.484682][ T31] usb 1-1: config 2 has no interface number 0 [ 64.490986][ T31] usb 1-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 64.503119][ T31] usb 1-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 64.516210][ T31] usb 1-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 64.525300][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.536550][ T2442] netlink: 'syz.3.702': attribute type 1 has an invalid length. [ 64.537970][ T2356] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.544326][ T2442] netlink: 44 bytes leftover after parsing attributes in process `syz.3.702'. [ 64.562561][ T2442] rust_binder: Error while translating object. [ 64.562590][ T2442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.568759][ T2442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:432 [ 64.755936][ T2356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=2356 comm=syz.0.683 [ 64.777788][ T2356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=2356 comm=syz.0.683 [ 64.790315][ T2356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.683'. [ 64.801588][ T31] usb 1-1: string descriptor 0 read error: -71 [ 64.814262][ T31] usb 1-1: USB disconnect, device number 13 [ 64.829612][ T427] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 64.924096][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 64.924112][ T36] audit: type=1400 audit(2000000004.209:496): avc: denied { getopt } for pid=2476 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.980918][ T427] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.995455][ T427] usb 4-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 65.007933][ T427] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.017202][ T427] usb 4-1: config 0 descriptor?? [ 65.069490][ T36] audit: type=1400 audit(2000000004.349:497): avc: denied { create } for pid=2492 comm="syz.2.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 65.116220][ T36] audit: type=1400 audit(2000000004.399:498): avc: denied { create } for pid=2499 comm="syz.2.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.135553][ T36] audit: type=1400 audit(2000000004.409:499): avc: denied { create } for pid=2499 comm="syz.2.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 65.177804][ T2506] netlink: 'syz.2.724': attribute type 16 has an invalid length. [ 65.185620][ T2506] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.724'. [ 65.230694][ T36] audit: type=1326 audit(2000000004.519:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2513 comm="syz.2.726" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43c758ebe9 code=0x0 [ 65.325910][ T36] audit: type=1400 audit(2000000004.609:501): avc: denied { setopt } for pid=2520 comm="syz.0.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.434357][ T427] wacom 0003:056A:00B5.0007: Unknown device_type for 'HID 056a:00b5'. Assuming pen. [ 65.457525][ T427] wacom 0003:056A:00B5.0007: hidraw0: USB HID v1.01 Device [HID 056a:00b5] on usb-dummy_hcd.3-1/input0 [ 65.491384][ T427] input: Wacom Intuos3 6x11 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B5.0007/input/input13 [ 65.636433][ T2444] incfs: Backing dir is not set, filesystem can't be mounted. [ 65.641201][ T2568] overlayfs: failed to clone upperpath [ 65.647027][ T2444] incfs: mount failed -2 [ 65.655182][ T427] usb 4-1: USB disconnect, device number 25 [ 65.675907][ T31] rust_binder: 2563: removing orphan mapping 0:24 [ 65.699727][ T2578] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 65.755436][ T2591] netlink: 'syz.1.752': attribute type 1 has an invalid length. [ 65.824086][ T2600] futex_wake_op: syz.1.755 tries to shift op by -1; fix this program [ 66.119843][ T2607] 9pnet_fd: Insufficient options for proto=fd [ 66.409601][ T456] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 66.561848][ T2634] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 66.561873][ T2634] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 66.563267][ T456] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.570051][ T2634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:572 [ 66.579407][ T456] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 66.609251][ T456] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.623708][ T456] usb 4-1: config 0 descriptor?? [ 66.776649][ T2656] /dev/rnullb0: Can't open blockdev [ 66.830980][ T456] prodikeys 0003:041E:2801.0008: item fetching failed at offset 3/7 [ 66.839283][ T456] prodikeys 0003:041E:2801.0008: hid parse failed [ 66.845806][ T456] prodikeys 0003:041E:2801.0008: probe with driver prodikeys failed with error -22 [ 66.858760][ T2665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.779'. [ 66.917506][ T2677] 9pnet_fd: Insufficient options for proto=fd [ 66.930575][ T2682] netlink: 'syz.1.783': attribute type 27 has an invalid length. [ 66.995308][ T2685] rust_binder: Failed copying remainder into alloc: EFAULT [ 66.995330][ T2685] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 67.004600][ T2685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 67.013275][ T2685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:603 [ 67.037044][ T36] audit: type=1400 audit(2000000006.319:502): avc: denied { associate } for pid=2687 comm="syz.1.785" name="file0" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 67.040174][ T2609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=2609 comm=syz.3.759 [ 67.051863][ T36] audit: type=1400 audit(2000000006.319:503): avc: denied { mounton } for pid=2687 comm="syz.1.785" path="/bus/file0" dev="rootfs" ino=19290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 67.067874][ T2609] netlink: 18868 bytes leftover after parsing attributes in process `syz.3.759'. [ 67.111764][ T2609] netlink: 4116 bytes leftover after parsing attributes in process `syz.3.759'. [ 67.119530][ T9] usb 4-1: USB disconnect, device number 26 [ 67.121155][ T2609] tc_dump_action: action bad kind [ 67.379878][ T31] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 67.530692][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.541561][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 67.552046][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 67.561355][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.569379][ T31] usb 1-1: Product: syz [ 67.573560][ T31] usb 1-1: Manufacturer: syz [ 67.578144][ T31] usb 1-1: SerialNumber: syz [ 67.710422][ T2712] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.710696][ T2712] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 67.711382][ T2713] /dev/loop1: Can't lookup blockdev [ 67.717151][ T2712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:442 [ 67.734573][ T2715] rust_binder: 444: no such ref 0 [ 67.736823][ T2713] fuse: Bad value for 'group_id' [ 67.754261][ T2713] fuse: Bad value for 'group_id' [ 67.774197][ T2720] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.774509][ T2720] rust_binder: Failed to allocate buffer. len:4200, is_oneway:false [ 67.780986][ T2720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 67.789031][ T2720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:449 [ 67.789677][ T31] usb 1-1: 0:2 : does not exist [ 67.815641][ T31] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 67.830667][ T31] usb 1-1: USB disconnect, device number 14 [ 67.844838][ T518] udevd[518]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 67.968553][ T36] audit: type=1400 audit(2000000007.249:504): avc: denied { map } for pid=2729 comm="syz.2.803" path="socket:[19360]" dev="sockfs" ino=19360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.998833][ T2734] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 68.009642][ T2734] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 68.018692][ T2734] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 68.032531][ T2734] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 68.044651][ T36] audit: type=1326 audit(2000000007.329:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2733 comm="syz.2.805" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43c758ebe9 code=0x0 [ 68.061627][ T2736] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 68.067299][ T2736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:459 [ 68.082471][ T10] rust_binder: 2735: removing orphan mapping 0:24 [ 68.232389][ T2751] tipc: Started in network mode [ 68.237309][ T2751] tipc: Node identity ac141413, cluster identity 4711 [ 68.244261][ T2751] tipc: Enabling of bearer rejected, failed to enable media [ 68.310828][ T2761] netlink: 'syz.0.814': attribute type 6 has an invalid length. [ 68.319388][ T2761] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 68.319404][ T2761] rust_binder: Error while translating object. [ 68.328188][ T2761] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 68.334727][ T2761] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:609 [ 68.502493][ T2780] incfs: Can't find or create .index dir in ./bus [ 68.518451][ T2780] incfs: mount failed -1 [ 68.523330][ T2780] incfs: Can't find or create .index dir in ./bus [ 68.529793][ T2780] incfs: mount failed -1 [ 68.769620][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 68.845144][ T2791] __nla_validate_parse: 1 callbacks suppressed [ 68.845166][ T2791] netlink: 56 bytes leftover after parsing attributes in process `syz.2.823'. [ 68.863463][ T2791] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 68.872532][ T2791] netlink: 388 bytes leftover after parsing attributes in process `syz.2.823'. [ 68.920709][ T31] usb 1-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 68.931348][ T31] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 68.942274][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.951630][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.959791][ T31] usb 1-1: Product: syz [ 68.964084][ T31] usb 1-1: Manufacturer: syz [ 68.968710][ T31] usb 1-1: SerialNumber: syz [ 69.198349][ T31] usb 1-1: USB disconnect, device number 15 [ 69.446316][ T2825] netlink: 'syz.1.837': attribute type 58 has an invalid length. [ 69.480770][ T2832] netlink: 'syz.1.840': attribute type 6 has an invalid length. [ 69.488509][ T2832] netlink: 'syz.1.840': attribute type 4 has an invalid length. [ 69.496436][ T2832] netlink: 'syz.1.840': attribute type 6 has an invalid length. [ 69.504130][ T2832] netlink: 'syz.1.840': attribute type 13 has an invalid length. [ 69.511914][ T2832] netlink: 'syz.1.840': attribute type 15 has an invalid length. [ 69.519982][ T2832] netlink: 3684 bytes leftover after parsing attributes in process `syz.1.840'. [ 69.529625][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 69.533564][ T2832] /dev/rnullb0: Can't lookup blockdev [ 69.689608][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 69.695686][ T10] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 69.703985][ T10] usb 4-1: config 0 has no interface number 1 [ 69.710097][ T10] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 69.721046][ T10] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 69.732682][ T10] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 69.743976][ T10] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 69.754151][ T10] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 69.767204][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 69.778708][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12592, setting to 1024 [ 69.789944][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 69.801478][ T10] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 69.810563][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.818591][ T10] usb 4-1: Product: syz [ 69.826341][ T10] usb 4-1: Manufacturer: syz [ 69.827527][ T2860] /dev/nullb0: Can't lookup blockdev [ 69.831079][ T10] usb 4-1: SerialNumber: syz [ 69.846809][ T10] usb 4-1: config 0 descriptor?? [ 69.852206][ T2797] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 69.950040][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 69.950057][ T36] audit: type=1400 audit(2000000009.239:522): avc: denied { block_suspend } for pid=2868 comm="syz.0.854" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 70.792667][ T36] audit: type=1400 audit(2000000010.079:523): avc: denied { getopt } for pid=2899 comm="syz.2.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.291623][ T10] usb 4-1: USB disconnect, device number 27 [ 72.359910][ T2945] validate_nla: 1 callbacks suppressed [ 72.359928][ T2945] netlink: 'syz.3.878': attribute type 4 has an invalid length. [ 72.375206][ T2945] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.375334][ T2945] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 238) [ 72.382043][ T2945] rust_binder: Error while translating object. [ 72.392639][ T2945] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.398827][ T2945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:485 [ 72.619577][ T36] audit: type=1400 audit(2000000011.899:524): avc: denied { map } for pid=2956 comm="syz.2.883" path="pipe:[20055]" dev="pipefs" ino=20055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 72.679616][ T36] audit: type=1400 audit(2000000011.959:525): avc: denied { getopt } for pid=2967 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.729157][ T2975] overlayfs: failed to clone upperpath [ 72.790880][ T2987] 9pnet_fd: Insufficient options for proto=fd [ 72.809030][ T2991] tipc: MTU too low for tipc bearer [ 72.826512][ T2993] overlayfs: failed to clone lowerpath [ 73.269702][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 73.421263][ T31] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 73.430137][ T31] usb 1-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 73.440815][ T31] usb 1-1: config 1 interface 0 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 73.453926][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 73.461857][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.470916][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.478909][ T31] usb 1-1: Product: Ë憒㑆ఠ㷆乖䢋듖略鲈䘈苬㿓鈓êŠÝœã„¿â†¦è£ŒèŽ¡ê‰³îµ°å’†çº¥ã‰¸å¾žà®´è®§ê±¿â¨”亓뉭얄슀葋ä¤ë¹—馿㞘톷注栴享◗◧報ꓨèŽè—·â¢žë¥ï¯•ì¢¢ë–¸æž±å˜¯ë–¦æ‘µï¹§ê²¥éˆáœ‡ä¤¬îªŠîŒ¹æ¼³ [ 73.500375][ T31] usb 1-1: SerialNumber: syz [ 73.680073][ T36] audit: type=1400 audit(2000000012.969:526): avc: denied { setopt } for pid=3024 comm="syz.1.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.680648][ T3025] netlink: 'syz.1.904': attribute type 27 has an invalid length. [ 73.715541][ T3025] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.722831][ T3025] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.785135][ T3029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3029 comm=syz.1.905 [ 73.874130][ T31] cdc_ether 1-1:1.0: skipping garbage [ 73.884936][ T31] cdc_ether 1-1:1.0: skipping garbage [ 73.890718][ T31] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 73.901535][ T31] usb 1-1: USB disconnect, device number 16 [ 73.926132][ T3033] kvm: pic: level sensitive irq not supported [ 73.926176][ T3033] kvm: pic: non byte read [ 73.936803][ T3033] kvm: pic: non byte read [ 74.083159][ T3039] /dev/rnullb0: Can't open blockdev [ 74.098791][ T3041] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:652 [ 74.123065][ T36] audit: type=1400 audit(2000000013.409:527): avc: denied { ioctl } for pid=3045 comm="syz.0.912" path="socket:[21140]" dev="sockfs" ino=21140 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.173925][ T3047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.174451][ T3047] rust_binder: Error while translating object. [ 74.180969][ T3047] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 74.187127][ T3047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:657 [ 74.355400][ T36] audit: type=1400 audit(2000000013.639:528): avc: denied { bind } for pid=3084 comm="syz.2.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.407195][ T36] audit: type=1400 audit(2000000013.689:529): avc: denied { create } for pid=3092 comm="syz.1.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.448993][ T36] audit: type=1400 audit(2000000013.729:530): avc: denied { map } for pid=3097 comm="syz.1.931" path="socket:[21209]" dev="sockfs" ino=21209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 74.880982][ T3107] cgroup: subsys name conflicts with all [ 74.905105][ T3114] overlayfs: failed to clone upperpath [ 74.960210][ T3129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.942'. [ 75.037570][ T3131] netlink: 328 bytes leftover after parsing attributes in process `syz.0.943'. [ 75.079388][ T36] audit: type=1400 audit(2000000014.359:531): avc: denied { setopt } for pid=3154 comm="syz.1.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.319086][ T3200] rust_binder: Error while translating object. [ 75.319114][ T3200] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 75.325488][ T3200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:488 [ 75.346150][ T3203] binder: Bad value for 'stats' [ 75.360634][ T3203] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.360658][ T3203] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.451227][ T3216] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.509995][ T3223] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 75.516594][ T3223] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 75.524778][ T3223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:504 [ 76.079606][ T36] audit: type=1400 audit(2000000015.359:532): avc: denied { create } for pid=3242 comm="syz.2.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 76.123317][ T36] audit: type=1400 audit(2000000015.359:533): avc: denied { write } for pid=3242 comm="syz.2.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 76.144402][ T36] audit: type=1400 audit(2000000015.359:534): avc: denied { ioctl } for pid=3242 comm="syz.2.974" path="socket:[21627]" dev="sockfs" ino=21627 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 76.294441][ T3250] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.346175][ T3251] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 76.352731][ T3251] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 76.357101][ T3253] tmpfs: Bad value for 'huge' [ 76.360956][ T3251] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:507 [ 76.486300][ T36] audit: type=1400 audit(2000000015.769:535): avc: denied { ioctl } for pid=3254 comm="syz.1.978" path="socket:[21456]" dev="sockfs" ino=21456 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.012959][ T3268] 9pnet_fd: Insufficient options for proto=fd [ 77.168819][ T36] audit: type=1326 audit(2000000016.449:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3285 comm="syz.3.988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f666878ebe9 code=0x0 [ 77.191593][ T36] audit: type=1326 audit(2000000016.449:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3285 comm="syz.3.988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f666878ebe9 code=0x0 [ 77.238604][ T36] audit: type=1400 audit(2000000016.519:538): avc: denied { ioctl } for pid=3290 comm="syz.1.990" path="socket:[21502]" dev="sockfs" ino=21502 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 77.268344][ T3294] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 77.279990][ T3294] overlayfs: missing 'lowerdir' [ 77.298161][ T36] audit: type=1400 audit(2000000016.579:539): avc: denied { append } for pid=3297 comm="syz.3.992" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 77.352055][ T3301] syz.3.992 (3301) used obsolete PPPIOCDETACH ioctl [ 77.824271][ T36] audit: type=1107 audit(2000000017.109:540): pid=3310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 78.198878][ T3349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:525 [ 78.205257][ T3351] netlink: 'syz.1.1013': attribute type 1 has an invalid length. [ 78.238941][ T3351] netlink: 'syz.1.1013': attribute type 2 has an invalid length. [ 78.294032][ T3368] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:529 [ 78.343076][ T3369] 9pnet_fd: Insufficient options for proto=fd [ 78.384347][ T3373] IPv6: NLM_F_CREATE should be specified when creating new route [ 78.499613][ T507] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 78.650666][ T507] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.660854][ T507] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.670408][ T507] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 78.679464][ T507] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 78.687479][ T507] usb 1-1: SerialNumber: syz [ 78.899600][ T507] usb 1-1: 0:2 : does not exist [ 78.906098][ T507] usb 1-1: USB disconnect, device number 17 [ 78.929318][ T518] udevd[518]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.079293][ T3400] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 79.113082][ T3409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=3409 comm=syz.2.1036 [ 79.136628][ T3412] netlink: 'syz.3.1033': attribute type 3 has an invalid length. [ 79.144459][ T3412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1033'. [ 79.160231][ T456] rust_binder: 3401: removing orphan mapping 0:24 [ 79.179626][ T3414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'. [ 79.220392][ T3416] 9p: Unknown Cache mode or invalid value OZ‡readahebÅê·¦kbï æ˜äP¦¾Ø‘$F¾éû¤¦"B‰¯ [ 79.268527][ T3416] rust_binder: Error while translating object. [ 79.268564][ T3416] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.275024][ T3416] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:537 [ 79.439358][ T3432] 9pnet_fd: Insufficient options for proto=fd [ 79.492263][ T3443] SELinux: security_context_str_to_sid () failed with errno=-22 [ 79.593874][ T3457] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.598670][ T3457] rust_binder: Write failure EINVAL in pid:681 [ 79.598752][ T3458] rust_binder: Write failure EINVAL in pid:681 [ 79.612494][ T3456] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 79.618714][ T3456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:681 [ 79.628434][ T3457] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 79.645108][ T3456] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 79.652477][ T3456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:681 [ 79.652530][ T3457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:681 [ 79.707051][ T3465] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3465 comm=syz.2.1055 [ 79.719608][ T456] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 79.890573][ T456] usb 4-1: No LPM exit latency info found, disabling LPM. [ 79.898443][ T456] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 79.909831][ T456] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.924667][ T456] usb 4-1: string descriptor 0 read error: -22 [ 79.930947][ T456] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.40 [ 79.940355][ T456] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.949716][ T3441] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 80.176790][ T3441] /dev/rnullb0: Can't open blockdev [ 80.221884][ T456] usbhid 4-1:1.0: can't add hid device: -71 [ 80.227815][ T456] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 80.236970][ T456] usb 4-1: USB disconnect, device number 28 [ 80.330048][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 80.330065][ T36] audit: type=1400 audit(2000000019.619:548): avc: denied { create } for pid=3505 comm="syz.2.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 80.724072][ T3513] netlink: 'syz.0.1074': attribute type 4 has an invalid length. [ 80.738142][ T3513] netlink: 'syz.0.1074': attribute type 27 has an invalid length. [ 80.750414][ T3513] netlink: 3609 bytes leftover after parsing attributes in process `syz.0.1074'. [ 80.751888][ T3518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.763747][ T3518] rust_binder: Write failure EFAULT in pid:545 [ 80.979222][ T3554] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:708 [ 81.038789][ T36] audit: type=1326 audit(2000000020.319:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3555 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabaf8ebe9 code=0x7ffc0000 [ 81.071409][ T36] audit: type=1326 audit(2000000020.319:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3555 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabaf8ebe9 code=0x7ffc0000 [ 81.094849][ T36] audit: type=1326 audit(2000000020.319:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3555 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feabaf8ebe9 code=0x7ffc0000 [ 81.118140][ T36] audit: type=1326 audit(2000000020.319:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3555 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabaf8ebe9 code=0x7ffc0000 [ 81.141498][ T36] audit: type=1326 audit(2000000020.319:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3555 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabaf8ebe9 code=0x7ffc0000 [ 81.167520][ T36] audit: type=1326 audit(2000000020.319:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3555 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7feabaf8ebe9 code=0x7ffc0000 [ 81.190953][ T36] audit: type=1326 audit(2000000020.319:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3555 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabaf8ebe9 code=0x7ffc0000 [ 81.217633][ T3560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.219352][ T36] audit: type=1326 audit(2000000020.319:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3555 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7feabaf8ebe9 code=0x7ffc0000 [ 81.249717][ T3560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.249912][ T36] audit: type=1326 audit(2000000020.329:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3555 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabaf8ebe9 code=0x7ffc0000 [ 81.449601][ T507] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 81.599594][ T507] usb 1-1: Using ep0 maxpacket: 16 [ 81.605960][ T507] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 81.614805][ T507] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.625016][ T507] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.635480][ T507] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.644612][ T507] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.652740][ T507] usb 1-1: Product: syz [ 81.656953][ T507] usb 1-1: Manufacturer: syz [ 81.661604][ T507] usb 1-1: SerialNumber: syz [ 82.068513][ T507] usb 1-1: 0:2 : does not exist [ 82.120041][ T3618] cgroup: none used incorrectly [ 82.440809][ T3653] IPv6: NLM_F_CREATE should be specified when creating new route [ 82.484268][ T507] usb 1-1: USB disconnect, device number 18 [ 82.557150][ T3658] syz.3.1116 uses obsolete (PF_INET,SOCK_PACKET) [ 82.869622][ T45] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 83.022012][ T45] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 83.031294][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.034132][ T3671] ./file0: Can't lookup blockdev [ 83.039491][ T45] usb 4-1: Product: syz [ 83.048854][ T45] usb 4-1: Manufacturer: syz [ 83.053737][ T45] usb 4-1: SerialNumber: syz [ 83.074838][ T3677] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 83.074870][ T3677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:726 [ 83.130877][ T3685] SELinux: Context system_u:object_r:auditctl_exec_t:s0 is not valid (left unmapped). [ 83.155645][ T3686] overlayfs: disabling nfs_export due to verity=require [ 83.194866][ T3700] overlayfs: failed to clone upperpath [ 83.200979][ T3700] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49479 sclass=netlink_audit_socket pid=3700 comm=syz.2.1132 [ 83.261322][ T3714] sit0: entered promiscuous mode [ 83.267229][ T3714] netlink: 'syz.2.1137': attribute type 1 has an invalid length. [ 83.275057][ T3714] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1137'. [ 83.935123][ T3681] incfs_lookup_dentry err:-103 [ 83.935166][ T3686] overlayfs: statfs failed on './file0' [ 83.939984][ T3681] incfs: Can't find or create .index dir in ./file0 [ 83.952205][ T3681] incfs: mount failed -103 [ 84.004450][ T3740] rust_binder: Write failure EFAULT in pid:736 [ 84.048674][ T3742] kvm: emulating exchange as write [ 84.132358][ T3745] kvm: pic: non byte read [ 84.136983][ T3745] kvm: pic: non byte read [ 85.232258][ T3777] kvm: pic: non byte read [ 85.236896][ T3777] kvm: pic: non byte read [ 85.350023][ T3791] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.402313][ T3792] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:767 [ 85.640273][ T31] usb 4-1: USB disconnect, device number 29 [ 85.939898][ T31] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 86.090679][ T31] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 86.101574][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 86.113037][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 86.124224][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 86.138568][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.147864][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 86.156017][ T31] usb 4-1: SerialNumber: syz [ 86.161684][ T3800] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 86.168843][ T3800] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 86.179033][ T3802] cgroup: fork rejected by pids controller in /syz1 [ 86.283656][ T3841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.309718][ T3841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.393505][ T31] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 86.401671][ T31] usb 4-1: USB disconnect, device number 30 [ 86.519599][ T507] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 86.528880][ T3858] netlink: 'syz.2.1172': attribute type 2 has an invalid length. [ 86.605734][ T3860] fuseblk: Bad value for 'fd' [ 86.649619][ T507] usb 1-1: device descriptor read/64, error -71 [ 86.773019][ T328] tipc: Subscription rejected, illegal request [ 86.838574][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 86.838590][ T36] audit: type=1400 audit(2000000026.119:605): avc: denied { create } for pid=3881 comm="syz.1.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 86.910813][ T3889] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.919610][ T507] usb 1-1: device descriptor read/64, error -71 [ 87.169623][ T507] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 87.299624][ T507] usb 1-1: device descriptor read/64, error -71 [ 87.539668][ T507] usb 1-1: device descriptor read/64, error -71 [ 87.599646][ T3931] /dev/rnullb0: Can't lookup blockdev [ 87.649682][ T507] usb usb1-port1: attempt power cycle [ 87.762281][ T3949] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.762759][ T3949] rust_binder: Error while translating object. [ 87.769253][ T3949] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 87.775495][ T3949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:598 [ 87.803309][ T36] audit: type=1400 audit(2000000027.089:606): avc: denied { setattr } for pid=3950 comm="syz.3.1207" name="NETLINK" dev="sockfs" ino=24799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.918742][ T36] audit: type=1326 audit(2000000027.199:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c758ebe9 code=0x7fc00000 [ 88.009641][ T507] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 88.030571][ T507] usb 1-1: device descriptor read/8, error -71 [ 88.160666][ T507] usb 1-1: device descriptor read/8, error -71 [ 88.399630][ T507] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 88.420689][ T507] usb 1-1: device descriptor read/8, error -71 [ 88.472897][ T3966] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1211'. [ 88.482854][ T36] audit: type=1400 audit(2000000027.769:608): avc: denied { create } for pid=3964 comm="syz.1.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 88.486564][ T3966] syz.1.1211(3966): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 88.560627][ T507] usb 1-1: device descriptor read/8, error -71 [ 88.563326][ T3989] overlayfs: failed to clone upperpath [ 88.575606][ T3989] 9pnet_fd: Insufficient options for proto=fd [ 88.622825][ T4003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1225'. [ 88.669727][ T507] usb usb1-port1: unable to enumerate USB device [ 88.819178][ T4031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4031 comm=syz.2.1235 [ 88.832306][ T4031] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1235'. [ 88.841804][ T4031] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1235'. [ 89.180079][ T36] audit: type=1326 audit(2000000028.469:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4039 comm="syz.1.1238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60b8f8ebe9 code=0x0 [ 89.210305][ T4043] overlayfs: failed to clone lowerpath [ 89.322143][ T4054] kvm: pic: non byte read [ 89.326776][ T4054] kvm: pic: non byte read [ 89.339005][ T4063] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1245'. [ 89.348491][ T36] audit: type=1400 audit(2000000028.627:610): avc: denied { read } for pid=4062 comm="syz.1.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.374542][ T36] audit: type=1400 audit(2000000028.627:611): avc: denied { ioctl } for pid=4062 comm="syz.1.1245" path="socket:[24081]" dev="sockfs" ino=24081 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.429163][ T4076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1251'. [ 89.438251][ T4076] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1251'. [ 89.558963][ T4085] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.610745][ T4086] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:790 [ 89.702904][ T4088] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.712526][ T4088] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 89.719034][ T4088] rust_binder: Read failure Err(EFAULT) in pid:619 [ 90.219622][ T10] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 90.380628][ T10] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 90.389006][ T10] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 90.400749][ T10] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 90.410954][ T10] usb 4-1: config 8 has no interface number 0 [ 90.418535][ T10] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 90.429830][ T10] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.447465][ T10] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 90.456736][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.464788][ T10] usb 4-1: Product: syz [ 90.469161][ T10] usb 4-1: Manufacturer: syz [ 90.475029][ T10] usb 4-1: SerialNumber: syz [ 90.499819][ T4114] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1264'. [ 90.508938][ T4114] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1264'. [ 90.518396][ T4114] netlink: 'syz.1.1264': attribute type 6 has an invalid length. [ 90.526774][ T4114] netlink: 'syz.1.1264': attribute type 5 has an invalid length. [ 90.540551][ T4114] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1264'. [ 90.716026][ T4125] rust_binder: Failed copying into alloc: EFAULT [ 90.716046][ T4125] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 90.722454][ T4125] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 90.730739][ T4125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:804 [ 90.844743][ T4132] rust_binder: 808: no such ref 1 [ 91.190673][ T10] usb 4-1: USB disconnect, device number 31 [ 91.205575][ T4146] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.206764][ T4146] rust_binder: Error while translating object. [ 91.213267][ T4146] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 91.219444][ T4146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:623 [ 91.241305][ T36] audit: type=1400 audit(2000000030.527:612): avc: denied { accept } for pid=4148 comm="syz.3.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.346993][ T4162] overlayfs: failed to clone upperpath [ 91.390309][ T4168] netlink: 'syz.2.1282': attribute type 4 has an invalid length. [ 91.407184][ T4169] overlayfs: failed to clone upperpath [ 91.462656][ T4176] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.463105][ T4176] rust_binder: 637: no such ref 2 [ 91.484472][ T4176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:637 [ 91.510525][ T4181] /dev/rnullb0: Can't open blockdev [ 91.534520][ T4181] /dev/rnullb0: Can't open blockdev [ 91.540670][ T4181] /dev/rnullb0: Can't open blockdev [ 91.548493][ T4181] /dev/rnullb0: Can't open blockdev [ 91.554581][ T4181] /dev/rnullb0: Can't open blockdev [ 91.560169][ T4181] /dev/rnullb0: Can't open blockdev [ 91.565670][ T4181] /dev/rnullb0: Can't open blockdev [ 91.571704][ T4181] /dev/rnullb0: Can't open blockdev [ 91.578903][ T4181] /dev/rnullb0: Can't open blockdev [ 91.584868][ T4181] /dev/rnullb0: Can't open blockdev [ 91.590793][ T4181] /dev/rnullb0: Can't open blockdev [ 91.598477][ T4181] /dev/rnullb0: Can't open blockdev [ 91.608746][ T4181] /dev/rnullb0: Can't open blockdev [ 91.614354][ T4181] /dev/rnullb0: Can't open blockdev [ 91.620621][ T4181] /dev/rnullb0: Can't open blockdev [ 91.627325][ T4181] /dev/rnullb0: Can't open blockdev [ 91.639145][ T4181] /dev/rnullb0: Can't open blockdev [ 91.644875][ T4181] /dev/rnullb0: Can't open blockdev [ 91.650778][ T4181] /dev/rnullb0: Can't open blockdev [ 91.656152][ T4181] /dev/rnullb0: Can't open blockdev [ 91.661851][ T4181] /dev/rnullb0: Can't open blockdev [ 91.667296][ T4181] /dev/rnullb0: Can't open blockdev [ 91.676226][ T4181] /dev/rnullb0: Can't open blockdev [ 91.687274][ T4181] /dev/rnullb0: Can't open blockdev [ 91.693370][ T4181] /dev/rnullb0: Can't open blockdev [ 91.703412][ T4181] /dev/rnullb0: Can't open blockdev [ 91.708880][ T4181] /dev/rnullb0: Can't open blockdev [ 91.714480][ T4181] /dev/rnullb0: Can't open blockdev [ 91.724473][ T4181] /dev/rnullb0: Can't open blockdev [ 91.732184][ T4181] /dev/rnullb0: Can't open blockdev [ 91.740920][ T4181] /dev/rnullb0: Can't open blockdev [ 91.756425][ T4181] /dev/rnullb0: Can't open blockdev [ 91.773070][ T4181] /dev/rnullb0: Can't open blockdev [ 91.791830][ T4181] /dev/rnullb0: Can't open blockdev [ 91.811634][ T4181] /dev/rnullb0: Can't open blockdev [ 91.824652][ T4181] /dev/rnullb0: Can't open blockdev [ 91.837719][ T4181] /dev/rnullb0: Can't open blockdev [ 91.851519][ T4207] overlayfs: failed to clone upperpath [ 91.857271][ T4181] /dev/rnullb0: Can't open blockdev [ 91.869496][ T4181] /dev/rnullb0: Can't open blockdev [ 91.886917][ T4181] /dev/rnullb0: Can't open blockdev [ 91.895662][ T4181] /dev/rnullb0: Can't open blockdev [ 91.911131][ T4181] /dev/rnullb0: Can't open blockdev [ 91.925188][ T4181] /dev/rnullb0: Can't open blockdev [ 91.939654][ T4181] /dev/rnullb0: Can't open blockdev [ 91.956970][ T4181] /dev/rnullb0: Can't open blockdev [ 91.970682][ T4181] /dev/rnullb0: Can't open blockdev [ 91.986279][ T4181] /dev/rnullb0: Can't open blockdev [ 92.000677][ T4181] /dev/rnullb0: Can't open blockdev [ 92.009482][ T4181] /dev/rnullb0: Can't open blockdev [ 92.019441][ T4181] /dev/rnullb0: Can't open blockdev [ 92.028160][ T4181] /dev/rnullb0: Can't open blockdev [ 92.036710][ T4181] /dev/rnullb0: Can't open blockdev [ 92.045487][ T4181] /dev/rnullb0: Can't open blockdev [ 92.051097][ T4181] /dev/rnullb0: Can't open blockdev [ 92.056521][ T4181] /dev/rnullb0: Can't open blockdev [ 92.062153][ T4181] /dev/rnullb0: Can't open blockdev [ 92.067580][ T4181] /dev/rnullb0: Can't open blockdev [ 92.073221][ T4181] /dev/rnullb0: Can't open blockdev [ 92.078650][ T4181] /dev/rnullb0: Can't open blockdev [ 92.084303][ T4181] /dev/rnullb0: Can't open blockdev [ 92.089884][ T4181] /dev/rnullb0: Can't open blockdev [ 92.095648][ T4181] /dev/rnullb0: Can't open blockdev [ 92.101245][ T4181] /dev/rnullb0: Can't open blockdev [ 92.106709][ T4181] /dev/rnullb0: Can't open blockdev [ 92.112342][ T4181] /dev/rnullb0: Can't open blockdev [ 92.287276][ T4225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.318066][ T4229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.334935][ T4229] rust_binder: 657: no such ref 2 [ 92.542297][ T4238] kvm: pic: non byte read [ 92.547039][ T4238] kvm: pic: non byte read [ 92.647130][ T4243] tmpfs: Unknown parameter 'noswap¥½' [ 92.839605][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 92.989589][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 92.996875][ T10] usb 4-1: config 6 has an invalid interface number: 147 but max is 3 [ 93.005799][ T10] usb 4-1: config 6 has an invalid interface number: 184 but max is 3 [ 93.014040][ T10] usb 4-1: config 6 has an invalid interface number: 120 but max is 3 [ 93.022260][ T10] usb 4-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 93.030984][ T10] usb 4-1: config 6 has an invalid interface number: 56 but max is 3 [ 93.039046][ T10] usb 4-1: config 6 has no interface number 0 [ 93.045140][ T10] usb 4-1: config 6 has no interface number 1 [ 93.051225][ T10] usb 4-1: config 6 has no interface number 2 [ 93.057280][ T10] usb 4-1: config 6 has no interface number 3 [ 93.063884][ T10] usb 4-1: config 6 interface 147 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 93.074878][ T10] usb 4-1: config 6 interface 147 altsetting 15 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 93.085853][ T10] usb 4-1: config 6 interface 147 altsetting 15 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 93.096902][ T10] usb 4-1: config 6 interface 147 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 93.107681][ T10] usb 4-1: config 6 interface 147 altsetting 15 has an endpoint descriptor with address 0x26, changing to 0x6 [ 93.119324][ T10] usb 4-1: config 6 interface 147 altsetting 15 has a duplicate endpoint with address 0x6, skipping [ 93.130107][ T10] usb 4-1: config 6 interface 147 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 93.141055][ T10] usb 4-1: config 6 interface 147 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 93.151996][ T10] usb 4-1: config 6 interface 147 altsetting 15 has a duplicate endpoint with address 0x6, skipping [ 93.162766][ T10] usb 4-1: config 6 interface 147 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 93.173709][ T10] usb 4-1: config 6 interface 147 altsetting 15 has a duplicate endpoint with address 0xE, skipping [ 93.184478][ T10] usb 4-1: config 6 interface 147 altsetting 15 endpoint 0xA has an invalid bInterval 239, changing to 7 [ 93.195731][ T10] usb 4-1: config 6 interface 147 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 93.206524][ T10] usb 4-1: config 6 interface 147 altsetting 15 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 93.219838][ T10] usb 4-1: config 6 interface 184 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 93.230531][ T10] usb 4-1: config 6 interface 184 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 93.241227][ T10] usb 4-1: config 6 interface 184 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 93.251922][ T10] usb 4-1: config 6 interface 184 altsetting 8 endpoint 0x8 has invalid maxpacket 1040, setting to 64 [ 93.262895][ T10] usb 4-1: config 6 interface 184 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 93.273579][ T10] usb 4-1: config 6 interface 184 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 93.284285][ T10] usb 4-1: config 6 interface 120 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 93.295227][ T10] usb 4-1: config 6 interface 120 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 93.306141][ T10] usb 4-1: config 6 interface 120 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 93.317244][ T10] usb 4-1: config 6 interface 120 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 93.328164][ T10] usb 4-1: config 6 interface 120 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 93.338143][ T10] usb 4-1: config 6 interface 120 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 93.348851][ T10] usb 4-1: config 6 interface 120 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 93.359647][ T10] usb 4-1: config 6 interface 120 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 93.370381][ T10] usb 4-1: config 6 interface 56 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 93.381207][ T10] usb 4-1: config 6 interface 56 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 93.391845][ T10] usb 4-1: config 6 interface 56 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 93.402456][ T10] usb 4-1: config 6 interface 56 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 93.413060][ T10] usb 4-1: config 6 interface 147 has no altsetting 0 [ 93.419837][ T10] usb 4-1: config 6 interface 184 has no altsetting 0 [ 93.426610][ T10] usb 4-1: config 6 interface 120 has no altsetting 0 [ 93.433379][ T10] usb 4-1: config 6 interface 56 has no altsetting 0 [ 93.441447][ T10] usb 4-1: New USB device found, idVendor=0df6, idProduct=9712, bcdDevice=63.a0 [ 93.450516][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.458496][ T10] usb 4-1: Product: syz [ 93.462951][ T10] usb 4-1: Manufacturer: syz [ 93.467531][ T10] usb 4-1: SerialNumber: syz [ 93.536643][ T4254] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.536674][ T4254] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.543185][ T4254] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.550262][ T4254] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.556746][ T4254] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.563225][ T4254] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.569693][ T4254] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.576120][ T4254] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.582570][ T4254] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.674409][ T4241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.689394][ T4241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.706768][ T10] usb 4-1: USB disconnect, device number 32 [ 93.801271][ T4262] fuse: Invalid rootmode [ 93.806049][ T4262] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1315'. [ 93.814983][ T4262] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1315'. [ 93.823853][ T4262] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 93.874647][ T4276] netlink: 'syz.2.1320': attribute type 1 has an invalid length. [ 93.930276][ T4284] overlayfs: failed to resolve './file1': -2 [ 93.944717][ T4288] fuseblk: Bad value for 'fd' [ 94.225324][ T4302] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.277398][ T4303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:668 [ 94.462726][ T4307] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.523357][ T4308] /dev/rnullb0: Can't open blockdev [ 94.535444][ T4309] /dev/rnullb0: Can't open blockdev [ 94.718546][ T4315] virtio-fs: tag not found [ 94.778136][ T36] audit: type=1326 audit(2000000034.057:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.1.1335" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60b8f8ebe9 code=0x0 [ 95.128742][ T4322] netlink: 'syz.3.1336': attribute type 1 has an invalid length. [ 95.136535][ T4322] netlink: 'syz.3.1336': attribute type 2 has an invalid length. [ 95.350571][ T4330] kvm: pic: non byte read [ 95.355280][ T4330] kvm: pic: non byte read [ 95.429657][ T31] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 95.506031][ T4343] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.557217][ T4344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:849 [ 95.580786][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.600990][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.611033][ T31] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 95.620128][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.628859][ T31] usb 4-1: config 0 descriptor?? [ 95.642499][ T4356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1348'. [ 95.679498][ T4362] netlink: 'syz.1.1351': attribute type 4 has an invalid length. [ 95.687351][ T4362] netlink: 'syz.1.1351': attribute type 5 has an invalid length. [ 95.695112][ T4362] netlink: 'syz.1.1351': attribute type 1 has an invalid length. [ 95.705456][ T4362] 9pnet_fd: Insufficient options for proto=fd [ 95.837237][ T4328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.846645][ T4328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.257615][ T31] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 96.264513][ T31] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 96.271414][ T31] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 96.278193][ T31] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 96.284978][ T31] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 96.291771][ T31] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 96.298524][ T31] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 96.305963][ T31] arvo 0003:1E7D:30D4.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 96.349727][ T4378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1357'. [ 96.412070][ T4380] netlink: 'syz.0.1358': attribute type 7 has an invalid length. [ 96.419875][ T4380] netlink: 'syz.0.1358': attribute type 5 has an invalid length. [ 96.427613][ T4380] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1358'. [ 96.459920][ T31] arvo 0003:1E7D:30D4.0009: couldn't init struct arvo_device [ 96.467359][ T31] arvo 0003:1E7D:30D4.0009: couldn't install keyboard [ 96.474722][ T31] arvo 0003:1E7D:30D4.0009: probe with driver arvo failed with error -71 [ 96.484487][ T31] usb 4-1: USB disconnect, device number 33 [ 96.659724][ T4394] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 96.758342][ T4399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1366'. [ 96.767350][ T4399] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.830837][ T36] audit: type=1400 audit(2000000036.117:614): avc: denied { mounton } for pid=4400 comm="syz.0.1367" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 97.219620][ T31] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 97.370804][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 97.380567][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 253, changing to 7 [ 97.391570][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 25696, setting to 1024 [ 97.403947][ T31] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 97.413047][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.421089][ T31] usb 4-1: Product: syz [ 97.425263][ T31] usb 4-1: Manufacturer: syz [ 97.429882][ T31] usb 4-1: SerialNumber: syz [ 97.435003][ T31] usb 4-1: config 0 descriptor?? [ 97.440895][ T31] usb 4-1: 0:0 : invalid sync pipe. bmAttributes b9, bLength 9, bSynchAddress 64 [ 97.641573][ T36] audit: type=1400 audit(2000000036.927:615): avc: denied { execute_no_trans } for pid=4410 comm="syz.3.1370" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.716831][ T4416] random: crng reseeded on system resumption [ 97.724551][ T31] usb 4-1: USB disconnect, device number 34 [ 97.738534][ T377] udevd[377]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.786433][ T4418] SELinux: policydb string length 1952804360 does not match expected length 8 [ 97.786433][ T36] audit: type=1400 audit(2000000037.067:616): avc: denied { load_policy } for pid=4417 comm="syz.0.1373" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 97.815614][ T4418] SELinux: failed to load policy [ 97.928581][ T4427] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.930430][ T4427] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 97.937040][ T4427] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 97.945334][ T4427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:683 [ 98.698672][ T4436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'. [ 98.717686][ T4436] erspan0: entered promiscuous mode [ 98.728852][ T36] audit: type=1400 audit(2000000038.007:617): avc: denied { map } for pid=4435 comm="syz.0.1380" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 98.756572][ T4443] incfs: Options parsing error. -22 [ 98.762103][ T4443] incfs: mount failed -22 [ 98.819656][ T36] audit: type=1326 audit(2000000038.097:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4430 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c758ebe9 code=0x7fc00000 [ 98.863244][ T4456] Invalid logical block size (1748) [ 98.870337][ T4456] bridge0: port 3(erspan0) entered blocking state [ 98.876791][ T4456] bridge0: port 3(erspan0) entered disabled state [ 98.883292][ T4456] erspan0: entered allmulticast mode [ 98.889139][ T4456] bridge0: port 3(erspan0) entered blocking state [ 98.895604][ T4456] bridge0: port 3(erspan0) entered forwarding state [ 98.903074][ T4456] erspan0: left allmulticast mode [ 98.908138][ T4456] bridge0: port 3(erspan0) entered disabled state [ 98.952996][ T4466] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 98.975362][ T4469] rust_binder: Write failure EFAULT in pid:897 [ 99.003246][ T4470] netlink: 'syz.1.1389': attribute type 4 has an invalid length. [ 99.096404][ T4475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.292417][ T328] bridge_slave_1: left allmulticast mode [ 99.305368][ T328] bridge_slave_1: left promiscuous mode [ 99.311300][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.319386][ T328] bridge_slave_0: left allmulticast mode [ 99.325181][ T328] bridge_slave_0: left promiscuous mode [ 99.330923][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.409595][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 99.416337][ T36] audit: type=1400 audit(2000000038.697:619): avc: denied { mounton } for pid=4491 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 99.458386][ T328] tipc: Disabling bearer [ 99.464508][ T328] tipc: Left network mode [ 99.470491][ T328] veth1_macvtap: left promiscuous mode [ 99.476166][ T328] veth0_vlan: left promiscuous mode [ 99.561347][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 99.570269][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.581498][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.592930][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 99.608552][ T4503] veth0: mtu less than device minimum [ 99.618540][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 99.627665][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.639832][ T10] usb 4-1: config 0 descriptor?? [ 99.923312][ T4559] fuse: Unknown parameter '0x0000000000000003' [ 100.047266][ T10] logitech 0003:046D:C293.000A: unknown main item tag 0x0 [ 100.054489][ T10] logitech 0003:046D:C293.000A: unknown main item tag 0x0 [ 100.061704][ T10] logitech 0003:046D:C293.000A: unknown main item tag 0x0 [ 100.068846][ T10] logitech 0003:046D:C293.000A: unknown main item tag 0x0 [ 100.077120][ T10] logitech 0003:046D:C293.000A: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.3-1/input0 [ 100.088583][ T10] logitech 0003:046D:C293.000A: no inputs found [ 100.246761][ T507] usb 4-1: USB disconnect, device number 35 [ 100.413557][ T4570] IPv6: NLM_F_CREATE should be specified when creating new route [ 100.521734][ T36] audit: type=1400 audit(2000000039.807:620): avc: denied { create } for pid=4599 comm="syz.2.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.082554][ T4607] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.086199][ T4605] overlayfs: failed to clone upperpath [ 101.319695][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 101.470868][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.482398][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.493285][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 101.503039][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.515931][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.524969][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.533592][ T9] usb 4-1: config 0 descriptor?? [ 101.740908][ T9] plantronics 0003:047F:FFFF.000B: unknown global tag 0xc [ 101.748039][ T9] plantronics 0003:047F:FFFF.000B: item 0 1 1 12 parsing failed [ 101.755855][ T9] plantronics 0003:047F:FFFF.000B: parse failed [ 101.762161][ T9] plantronics 0003:047F:FFFF.000B: probe with driver plantronics failed with error -22 [ 101.980025][ T9] usb 4-1: USB disconnect, device number 36 [ 102.852895][ T4650] netlink: 'syz.1.1450': attribute type 4 has an invalid length. [ 102.860718][ T4650] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1450'. [ 102.889675][ T507] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 103.061496][ T507] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 105, changing to 10 [ 103.072688][ T507] usb 4-1: config 1 interface 0 has no altsetting 0 [ 103.080545][ T507] usb 4-1: New USB device found, idVendor=0603, idProduct=0600, bcdDevice= 0.40 [ 103.089767][ T507] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.097733][ T507] usb 4-1: Product: syz [ 103.101895][ T507] usb 4-1: Manufacturer: syz [ 103.106491][ T507] usb 4-1: SerialNumber: syz [ 103.644031][ T507] usbhid 4-1:1.0: can't add hid device: -71 [ 103.650007][ T507] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 103.659149][ T507] usb 4-1: USB disconnect, device number 37 [ 103.761270][ T4683] overlayfs: failed to resolve './file1/file0': -2 [ 104.793028][ T4692] rust_binder: Write failure EFAULT in pid:709 [ 104.793403][ T4691] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1463'. [ 104.834883][ T4696] GUP no longer grows the stack in syz.3.1465 (4696): 200000004000-20000000a000 (200000002000) [ 104.845491][ T4696] CPU: 1 UID: 0 PID: 4696 Comm: syz.3.1465 Not tainted syzkaller #0 c6196c673b5935b37251aae71b5d8ba93d255e6c [ 104.845526][ T4696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.845547][ T4696] Call Trace: [ 104.845554][ T4696] [ 104.845562][ T4696] __dump_stack+0x21/0x30 [ 104.845594][ T4696] dump_stack_lvl+0x10c/0x190 [ 104.845618][ T4696] ? __cfi_dump_stack_lvl+0x10/0x10 [ 104.845643][ T4696] ? find_vma+0xcd/0x110 [ 104.845676][ T4696] ? vma_is_secretmem+0x11/0x50 [ 104.845701][ T4696] dump_stack+0x19/0x20 [ 104.845724][ T4696] __get_user_pages+0x1e34/0x22d0 [ 104.845752][ T4696] ? populate_vma_page_range+0x230/0x230 [ 104.845775][ T4696] get_user_pages_remote+0x392/0xbe0 [ 104.845797][ T4696] ? __cfi_mtree_load+0x10/0x10 [ 104.845816][ T4696] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 104.845845][ T4696] ? __cfi_get_user_pages_remote+0x10/0x10 [ 104.845869][ T4696] __access_remote_vm+0x1e2/0x640 [ 104.845888][ T4696] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 104.845913][ T4696] ? access_remote_vm+0x60/0x60 [ 104.845933][ T4696] ? _raw_spin_lock+0x8c/0x120 [ 104.845955][ T4696] ? __cfi__raw_spin_lock+0x10/0x10 [ 104.845977][ T4696] access_remote_vm+0x39/0x60 [ 104.845997][ T4696] proc_pid_cmdline_read+0x4bb/0xbf0 [ 104.846019][ T4696] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 104.846037][ T4696] ? bpf_lsm_file_permission+0xd/0x20 [ 104.846060][ T4696] vfs_readv+0x62b/0xa50 [ 104.846079][ T4696] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 104.846101][ T4696] ? do_readv+0x2d0/0x2d0 [ 104.846127][ T4696] __x64_sys_preadv+0x197/0x2a0 [ 104.846146][ T4696] ? __cfi___x64_sys_preadv+0x10/0x10 [ 104.846167][ T4696] ? switch_fpu_return+0x12/0x20 [ 104.846190][ T4696] x64_sys_call+0x1ee9/0x2ee0 [ 104.846218][ T4696] do_syscall_64+0x58/0xf0 [ 104.846241][ T4696] ? clear_bhb_loop+0x50/0xa0 [ 104.846258][ T4696] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 104.846287][ T4696] RIP: 0033:0x7f666878ebe9 [ 104.846311][ T4696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.846329][ T4696] RSP: 002b:00007f6669692038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 104.846352][ T4696] RAX: ffffffffffffffda RBX: 00007f66689b5fa0 RCX: 00007f666878ebe9 [ 104.846375][ T4696] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000005 [ 104.846389][ T4696] RBP: 00007f6668811e19 R08: 0000000000000000 R09: 0000000000000000 [ 104.846402][ T4696] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 104.846415][ T4696] R13: 00007f66689b6038 R14: 00007f66689b5fa0 R15: 00007ffddbc627f8 [ 104.846434][ T4696] [ 105.133454][ T36] audit: type=1400 audit(2000000044.327:621): avc: denied { accept } for pid=4708 comm="syz.3.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.161073][ T36] audit: type=1400 audit(2000000044.327:622): avc: denied { shutdown } for pid=4708 comm="syz.3.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.243646][ T4714] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.285955][ T4714] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3356708090 (26853664720 ns) > initial count (9735166528 ns). Using initial count to start timer. [ 106.340338][ T4714] kvm: Disabled LAPIC found during irq injection [ 106.350111][ T36] audit: type=1326 audit(2000000045.459:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.1481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60b8f8ebe9 code=0x0 [ 106.364898][ T4714] rust_binder: Error while translating object. [ 106.372961][ T4714] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 106.379138][ T4714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:716 [ 107.667414][ T4757] overlayfs: failed to clone upperpath [ 107.668197][ T36] audit: type=1400 audit(2000000046.702:624): avc: denied { create } for pid=4756 comm="syz.2.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 107.713482][ T4763] overlayfs: failed to clone upperpath [ 109.062506][ T4771] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.062943][ T4771] rust_binder: Error while translating object. [ 109.069745][ T4771] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 109.076177][ T4771] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:725 [ 109.600099][ T507] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 109.772232][ T507] usb 4-1: config 162 has an invalid interface number: 79 but max is 1 [ 109.780586][ T507] usb 4-1: config 162 has an invalid interface number: 183 but max is 1 [ 109.788946][ T507] usb 4-1: config 162 has no interface number 0 [ 109.795222][ T507] usb 4-1: config 162 has no interface number 1 [ 109.801503][ T507] usb 4-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 109.814574][ T507] usb 4-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 109.825462][ T507] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 109.836530][ T507] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 109.847653][ T507] usb 4-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 109.859468][ T507] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 109.870782][ T507] usb 4-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 109.883987][ T507] usb 4-1: config 162 interface 79 has no altsetting 0 [ 109.890936][ T507] usb 4-1: config 162 interface 183 has no altsetting 0 [ 109.899202][ T507] usb 4-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 109.908265][ T507] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.916270][ T507] usb 4-1: Product: syz [ 109.920414][ T507] usb 4-1: Manufacturer: syz [ 109.925003][ T507] usb 4-1: SerialNumber: syz [ 110.152246][ T4794] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4794 comm=syz.3.1500 [ 110.165123][ T4794] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.165449][ T4794] rust_binder: Failed to allocate buffer. len:4200, is_oneway:false [ 110.171913][ T4794] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 110.179926][ T4794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:741 [ 110.315520][ T507] pl2303 4-1:162.79: required endpoints missing [ 110.331880][ T507] pl2303 4-1:162.183: pl2303 converter detected [ 110.338423][ T507] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 110.346772][ T507] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 110.355315][ T507] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 110.363696][ T507] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 110.372112][ T507] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 110.380432][ T507] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 110.388961][ T507] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 110.397335][ T507] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 110.406033][ T507] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 110.414652][ T507] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 110.423232][ T507] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 110.432277][ T507] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 110.440888][ T507] usb 4-1: USB disconnect, device number 38 [ 110.448503][ T507] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 110.456476][ T507] pl2303 4-1:162.183: device disconnected [ 110.645113][ T4801] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1501'. [ 112.371625][ T4839] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1511'. [ 112.406113][ T36] audit: type=1400 audit(2000000051.135:625): avc: denied { accept } for pid=4843 comm="syz.1.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.433107][ T4848] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1515'. [ 112.516644][ T4856] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1517'. [ 112.526429][ T4856] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1517'. [ 112.711906][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 112.872308][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 112.878738][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 112.887202][ T9] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 112.895375][ T9] usb 4-1: config 0 has no interface number 0 [ 112.901470][ T9] usb 4-1: config 0 interface 253 has no altsetting 0 [ 112.909668][ T9] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=47.2a [ 112.918725][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.926709][ T9] usb 4-1: Product: syz [ 112.930856][ T9] usb 4-1: Manufacturer: syz [ 112.935420][ T9] usb 4-1: SerialNumber: syz [ 112.940803][ T9] usb 4-1: config 0 descriptor?? [ 113.162965][ T4848] rust_binder: Write failure EFAULT in pid:755 [ 113.165333][ T9] usb_ehset_test 4-1:0.253: probe with driver usb_ehset_test failed with error -32 [ 113.181552][ T9] usb 4-1: USB disconnect, device number 39 [ 114.155070][ T36] audit: type=1400 audit(2000000052.762:626): avc: denied { accept } for pid=4872 comm="syz.1.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.020413][ T4889] overlayfs: failed to clone upperpath [ 116.101033][ T4904] fuse: Bad value for 'user_id' [ 116.106066][ T4904] fuse: Bad value for 'user_id' [ 118.017931][ T36] audit: type=1400 audit(2000000056.371:627): avc: denied { accept } for pid=4909 comm="syz.2.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 120.209919][ T4951] netlink: 'syz.3.1547': attribute type 16 has an invalid length. [ 120.221395][ T4951] netlink: 'syz.3.1547': attribute type 3 has an invalid length. [ 120.229208][ T4951] netlink: 'syz.3.1547': attribute type 1 has an invalid length. [ 120.240537][ T4951] netlink: 64030 bytes leftover after parsing attributes in process `syz.3.1547'. [ 120.250112][ T4951] netlink: 'syz.3.1547': attribute type 16 has an invalid length. [ 120.266959][ T4951] netlink: 'syz.3.1547': attribute type 3 has an invalid length. [ 120.274995][ T4956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1552'. [ 120.283101][ T4951] netlink: 'syz.3.1547': attribute type 1 has an invalid length. [ 120.294307][ T4951] netlink: 64030 bytes leftover after parsing attributes in process `syz.3.1547'. [ 120.310934][ T4956] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1552'. [ 122.411940][ T4964] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.466273][ T4981] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 122.480715][ T4981] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 97) [ 122.480741][ T4981] rust_binder: Error while translating object. [ 122.491669][ T4981] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 122.502303][ T4981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:776 [ 122.512962][ T36] audit: type=1400 audit(2000000060.589:628): avc: denied { setopt } for pid=4963 comm="syz.3.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.548038][ T4981] input: syz1 as /devices/virtual/input/input17 [ 124.701108][ T36] audit: type=1400 audit(2000000062.627:629): avc: denied { nlmsg_tty_audit } for pid=4989 comm="syz.2.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 124.765656][ T36] audit: type=1400 audit(2000000062.693:630): avc: denied { append } for pid=4998 comm="syz.3.1566" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 124.792599][ T36] audit: type=1400 audit(2000000062.693:631): avc: denied { write } for pid=5001 comm="syz.3.1567" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=1398 state=3 status=67 (errno 9: Bad file descriptor) [ 124.850133][ T36] audit: type=1400 audit(2000000062.768:632): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2904]" dev="pipefs" ino=2904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 125.085924][ T46] bridge_slave_1: left allmulticast mode [ 125.091564][ T46] bridge_slave_1: left promiscuous mode [ 125.097187][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.104594][ T46] bridge_slave_0: left allmulticast mode [ 125.110346][ T46] bridge_slave_0: left promiscuous mode [ 125.115938][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.310507][ T46] tipc: Left network mode [ 125.315363][ T46] veth1_macvtap: left promiscuous mode [ 125.320890][ T46] veth0_vlan: left promiscuous mode [ 125.642184][ T46] bridge_slave_1: left allmulticast mode [ 125.647833][ T46] bridge_slave_1: left promiscuous mode [ 125.653460][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.660959][ T46] bridge_slave_0: left allmulticast mode [ 125.666645][ T46] bridge_slave_0: left promiscuous mode [ 125.672257][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.679811][ T46] bridge_slave_1: left allmulticast mode [ 125.685546][ T46] bridge_slave_1: left promiscuous mode [ 125.691127][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.698562][ T46] bridge_slave_0: left allmulticast mode [ 125.704180][ T46] bridge_slave_0: left promiscuous mode [ 125.709790][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.954736][ T46] veth1_macvtap: left promiscuous mode [ 125.960228][ T46] veth0_vlan: left promiscuous mode