last executing test programs: 27.390349789s ago: executing program 2 (id=705): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x80000000000000) sendmsg$unix(r0, &(0x7f0000000700)={&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f00000002c0)="8f2430a5019c33abd2bd6a57c8c6a2a663bfb72f5b1f4b1f22aa744bb6f0ce9695fbe12f1a84c8919e1086ce80766c8ed704bb8c14ed4722d70704fa839815dda786a7afbb58f51865081659a05d2d0f8002aff83a185f1d509fcc194f1eaf61af1f7380c7f2338138877726b2ab11", 0x6f}, {&(0x7f0000000340)="e420e9f8d33e8843205168f70b99fed33a8e1b4ab8b7ccdc6f7db10f121c186558d166cfb067a9d0017e224bf95d8fee", 0x30}, {&(0x7f0000000400)="1e2899dca1cd3e088fef4a994fed6ca871ec349463726d558af9414966a310834240f2e87e5e8e9cf6568be5a590531e6ca5524bea0690d3fbb76f8ddeca497cc4ed746ec9f27eede485f236136e26c474e596f9123667cc01cea00a0e043c8509d83d3489c8074dbe94", 0x6a}, {&(0x7f0000000480)="0c3c2e5488b3028795c6c3149456c051d66e90555f4f45a30e39683b72b994358f53d64c1e6ff57be3a4b5b3804bff5b7602251b558f9d8197054e71e91f11dc79c0f66cf8c9895a30e47a9c777f65cda435667797ba5d162b8ce705d1163890d894a770dfc2fdd0a00a5bffac8f99d1d18e2f8a63f4327f9109f2c705d5824cb39d91a5ad73eaf2ab5ad98a376552295b7625a8675cb90cd8e84369389c97f843774514b5c887c44183a2bc72ad631b17275ad92e5dc53ec90bc0", 0xbb}, {&(0x7f0000000380)="f22a7f816cbae8f06aa9f804b02f7da3be9cc72397fd9523879ee3bab673e7ee37696a766a068db3f0b7", 0x2a}, {&(0x7f00000005c0)="08c7c08938048180475e6350a6963519c8508b577dc362a8701ec44b8090323f0d2d7092550b4a49d0512f413ef36a716dd26097e0f2b184b47bbb449e93e90e5b590a1de0df2698a6a2b53340b0ddf9bb314ebd7738a1f012f8c2d0a8e23d2f79e1794441827b5c2a17ca86f3b1f8aa1c42db3f1dfd0054b197ba64d162e27cb59c67111abff2196f017ed2839e2081c78d8494555ee67b76ad3bfc377914a208a5ad5b2afb6ef586bd137b014c4bb7069ab7670122958f84c6b8fc852627", 0xbf}], 0x6, 0x0, 0x0, 0x8040}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x40000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001a00)) r2 = syz_usb_connect$uac1(0x0, 0x78, &(0x7f0000001a80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x3, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x200, 0xb6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x5, 0xff, {0x7, 0x25, 0x1, 0x2, 0x1, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x33, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0xc, 0x1, {0x7, 0x25, 0x1, 0x81, 0xfb, 0x3a}}}}}}}]}}, &(0x7f0000001f00)={0xa, &(0x7f0000001b40)={0xa, 0x6, 0x201, 0xa5, 0xac, 0xd6, 0x8, 0x3}, 0xc, &(0x7f0000001b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0xa, 0xfff7}]}}) syz_usb_control_io$uac1(r2, &(0x7f00000020c0)={0x14, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000002940)={0x14, 0x0, &(0x7f0000002880)={0x0, 0x3, 0x6d, @string={0x6d, 0x3, "7f43318255feb506f8348f933b0862c2dc299e5947b16219bec89620ad8183c55ef2bf3838a9d79c8161c3fc69edb2cf84224f762868f8a4844e399912b52013e7a2c9a886b5e2f7b34a831bddba0224096737a76dbe4c8cffb3e73b2147e6cdb7c97d66477709470848c9"}}}, &(0x7f0000002c00)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)={0x20, 0x83, 0x2, "fcf3"}, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r5, 0x4068aea3, &(0x7f00000001c0)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x24, 0x13, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x1a}]}, 0x24}], 0x1}, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000041c0)=ANY=[@ANYBLOB="0100000000000000b2000040e4ce7f8817"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x100b, 0x3}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0xfffffef3}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff678b958d3bc388f27e520a7335b849b4f88a6db06e45e3f5e648a65b8003cd08e8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85"}) 25.692044015s ago: executing program 2 (id=737): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) socket$inet6(0xa, 0x3, 0xb) (async) r0 = socket$inet6(0xa, 0x3, 0xb) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffb83, 0x1, 0x1, 0x0, 0x5, 0x5}, &(0x7f0000000080)=0x20) openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) (async) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x0, 0x0) (async) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) unshare(0x38020700) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000280), 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x24) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000002c0)={0x6000, 0x14000, 0x1}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000300)) (async) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000300)) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000340)={r2, 0x8, {0x0, 0x0, 0x0, 0x1a, 0x3, 0x0, 0x1, 0x1d, 0x1, "ae82f8a7e64e5224195712177742d630bd58197574881d1e42c1d0813bca3f78765205eb2a4852d15cd18d89b363f36e2d10693289585f14ead4cfcae4e51063", "1b8ce0f6730d99e8ab6df96f9bb89567421709ab6021a1c0622e2021df2678c6bec11a87a440a6e607fb9688f4b0668748efc9cf4e6b0ed42e679f0e330c0190", "554341309ea0587e2db175e9cda935868804051e8a58f7385ab30bc42ddbd086", [0x100000000, 0x200]}}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r4, 0x4002f516, &(0x7f0000000480)={0x1, 0x7}) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r4, 0x4002f516, &(0x7f0000000480)={0x1, 0x7}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xc4, r3, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x58, 0x3b}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "aefbac82340eecfbb498deb40745e9ee3a4e1f3e0188fa62"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4008811) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010c4}, 0x20040080) preadv(r1, &(0x7f0000000800)=[{&(0x7f00000007c0)=""/23, 0x17}], 0x1, 0x3, 0xa5b) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r6, 0x9000aea4, &(0x7f0000000840)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000001840)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001900), r2) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x8008000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x44, r8, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1f}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x44004}, 0x4000005) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r9, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40804) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001b40)={{{@in6=@private1, @in6=@private2}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000001c40)=0xe8) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001ec0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001e80)={&(0x7f0000001cc0)={0x194, r3, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x180, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x1f, 0x2, 0x3, 0x7, 0x3ff, 0xfff7, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x138, 0x80a1, 0x7ff, 0x8, 0xa7, 0x40, 0x8f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x3, 0xd, 0x8, 0x8001, 0x1ff, 0xd0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xc, 0x5, 0x4, 0x401, 0xe50c, 0x1, 0x7ff]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x5}, {0x2, 0x4}, {0x7, 0x2}, {0x1, 0x5}, {0x1, 0xa}, {0x2, 0x3}, {0x2, 0x2}, {0x7, 0x6}, {0x3, 0x8}, {0x6, 0x2}, {0x0, 0xa}, {0x4, 0x6}, {0x5, 0x9}, {0x1, 0x4}, {0x2, 0x2}, {0x5, 0x7}, {0x7, 0x7}, {0x4, 0x6}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x6, 0x9}, {0x2, 0x1}, {0x4, 0x1}, {0x6, 0x5}, {0x0, 0x3}]}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x0, 0x101, 0x7, 0x3e4, 0x4, 0xcfd, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x4, 0x48, 0x4, 0x6, 0x48, 0x2, 0x5, 0x1b, 0x79, 0x6c, 0x2, 0x1b, 0x12, 0x6, 0xc, 0x4, 0x18, 0x16, 0x6c, 0x5, 0x30, 0x2, 0x9, 0x24, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0x12, 0x9, 0x5, 0x9, 0x1, 0x1b, 0x0, 0x30, 0x24, 0x24, 0x77, 0x18, 0x1, 0x6c, 0x4, 0x0, 0x30, 0x12, 0xb, 0x48, 0x3, 0x6c, 0x18, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x6}, {0x0, 0x6}, {0x7, 0x1}, {0x0, 0x8}, {0x1, 0x9}, {0x7, 0x9}, {0x0, 0x5}, {0x5, 0x8}, {0x3, 0xa}, {0x4, 0x9}, {0x2, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x3}, {0x7, 0xa}, {}, {0x4, 0x9}, {0x1, 0x4}, {0x4, 0x2}, {0x3, 0xa}, {0x0, 0xa}, {0x3, 0x5}, {0x2, 0x6}, {0x5, 0x5}, {0x4, 0xa}, {0x0, 0x1}, {}]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x3}, {0x7, 0x6}, {0x2, 0x3}, {0x1, 0x2}, {0x7, 0x3}, {0x7, 0x7}, {0x4, 0x6}, {0x6, 0xa}, {0x0, 0x1}, {0x1}, {0x2}, {0x3, 0x5}, {0x1, 0x6}, {0x7, 0x1}, {0x0, 0x8}, {0x0, 0x1}, {0x7}, {0x7, 0x2}, {0x1, 0x6}, {0x0, 0x1}, {0x6, 0x6}, {0x7, 0x3}, {0x0, 0xa}, {0x1, 0xa}, {0x4, 0x7}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0xa}, {0x7, 0x2}, {0x0, 0x2}, {0x0, 0x8}, {0x6}, {0x3, 0xa}, {0x0, 0x2}, {0x3}, {0x4, 0x9}, {0x2, 0x8}, {0x6, 0x5}, {0x1, 0x6}, {0x2, 0x3}, {0x4, 0xa}, {0x3, 0x2}, {0x6, 0x4}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0xa}, {0x5, 0x2}, {0x3, 0x5}, {0x1, 0x5}, {0x6, 0x6}, {0x7, 0x2}, {0x2, 0x8}, {0x4, 0x4}, {0x4, 0x7}, {0x2, 0x7}, {0x4, 0x3}, {0x6, 0x6}, {0x3, 0x5}, {0x0, 0x2}, {0x4, 0x2}, {0x0, 0x6}, {0x5, 0x9}, {0x6, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x4}, {0x1, 0x3}, {0x4, 0x6}, {0x0, 0x3}, {0x3, 0xa}, {0x3, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x800}, 0x4801) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001ec0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001e80)={&(0x7f0000001cc0)={0x194, r3, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x180, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x1f, 0x2, 0x3, 0x7, 0x3ff, 0xfff7, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x138, 0x80a1, 0x7ff, 0x8, 0xa7, 0x40, 0x8f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x3, 0xd, 0x8, 0x8001, 0x1ff, 0xd0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xc, 0x5, 0x4, 0x401, 0xe50c, 0x1, 0x7ff]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x5}, {0x2, 0x4}, {0x7, 0x2}, {0x1, 0x5}, {0x1, 0xa}, {0x2, 0x3}, {0x2, 0x2}, {0x7, 0x6}, {0x3, 0x8}, {0x6, 0x2}, {0x0, 0xa}, {0x4, 0x6}, {0x5, 0x9}, {0x1, 0x4}, {0x2, 0x2}, {0x5, 0x7}, {0x7, 0x7}, {0x4, 0x6}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x6, 0x9}, {0x2, 0x1}, {0x4, 0x1}, {0x6, 0x5}, {0x0, 0x3}]}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x0, 0x101, 0x7, 0x3e4, 0x4, 0xcfd, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x4, 0x48, 0x4, 0x6, 0x48, 0x2, 0x5, 0x1b, 0x79, 0x6c, 0x2, 0x1b, 0x12, 0x6, 0xc, 0x4, 0x18, 0x16, 0x6c, 0x5, 0x30, 0x2, 0x9, 0x24, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0x12, 0x9, 0x5, 0x9, 0x1, 0x1b, 0x0, 0x30, 0x24, 0x24, 0x77, 0x18, 0x1, 0x6c, 0x4, 0x0, 0x30, 0x12, 0xb, 0x48, 0x3, 0x6c, 0x18, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x6}, {0x0, 0x6}, {0x7, 0x1}, {0x0, 0x8}, {0x1, 0x9}, {0x7, 0x9}, {0x0, 0x5}, {0x5, 0x8}, {0x3, 0xa}, {0x4, 0x9}, {0x2, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x3}, {0x7, 0xa}, {}, {0x4, 0x9}, {0x1, 0x4}, {0x4, 0x2}, {0x3, 0xa}, {0x0, 0xa}, {0x3, 0x5}, {0x2, 0x6}, {0x5, 0x5}, {0x4, 0xa}, {0x0, 0x1}, {}]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x3}, {0x7, 0x6}, {0x2, 0x3}, {0x1, 0x2}, {0x7, 0x3}, {0x7, 0x7}, {0x4, 0x6}, {0x6, 0xa}, {0x0, 0x1}, {0x1}, {0x2}, {0x3, 0x5}, {0x1, 0x6}, {0x7, 0x1}, {0x0, 0x8}, {0x0, 0x1}, {0x7}, {0x7, 0x2}, {0x1, 0x6}, {0x0, 0x1}, {0x6, 0x6}, {0x7, 0x3}, {0x0, 0xa}, {0x1, 0xa}, {0x4, 0x7}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0xa}, {0x7, 0x2}, {0x0, 0x2}, {0x0, 0x8}, {0x6}, {0x3, 0xa}, {0x0, 0x2}, {0x3}, {0x4, 0x9}, {0x2, 0x8}, {0x6, 0x5}, {0x1, 0x6}, {0x2, 0x3}, {0x4, 0xa}, {0x3, 0x2}, {0x6, 0x4}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0xa}, {0x5, 0x2}, {0x3, 0x5}, {0x1, 0x5}, {0x6, 0x6}, {0x7, 0x2}, {0x2, 0x8}, {0x4, 0x4}, {0x4, 0x7}, {0x2, 0x7}, {0x4, 0x3}, {0x6, 0x6}, {0x3, 0x5}, {0x0, 0x2}, {0x4, 0x2}, {0x0, 0x6}, {0x5, 0x9}, {0x6, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x4}, {0x1, 0x3}, {0x4, 0x6}, {0x0, 0x3}, {0x3, 0xa}, {0x3, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x800}, 0x4801) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000002300)={0x158, 0x12, &(0x7f0000001f00)="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"}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x74, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x75}, @void, @val={0xc, 0x99, {0x8, 0x3e}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0xdf5cc0972531b8a4}, 0x20040840) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x74, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x75}, @void, @val={0xc, 0x99, {0x8, 0x3e}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0xdf5cc0972531b8a4}, 0x20040840) 25.675852955s ago: executing program 2 (id=738): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) timer_create(0x0, 0x0, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000540), 0x10) (async) sendmsg$can_bcm(r1, 0x0, 0x0) (async) symlink(0x0, 0x0) (async) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000580)=""/176, 0xb0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x16fa01, 0x0) socket$inet6(0xa, 0xa, 0x3) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) (async) sendmmsg$sock(r3, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@timestamping={{0x18, 0x1, 0x25, 0xa42}}], 0x18}}], 0x1, 0x20000844) syz_open_dev$usbfs(0x0, 0xa, 0x511141) ioctl$BLKRRPART(r2, 0x125f, 0x0) 25.598855567s ago: executing program 2 (id=739): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') preadv2(r1, &(0x7f0000000180)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1, 0x1, 0x4, 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) timer_create(0x0, 0x0, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r2, 0x0, 0x0) symlink(0x0, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000580)=""/176, 0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x16fa01, 0x0) socket$inet6(0xa, 0xa, 0x3) syz_open_dev$usbfs(0x0, 0xa, 0x511141) ioctl$BLKRRPART(r4, 0x125f, 0x0) 25.598471687s ago: executing program 2 (id=740): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x3e, 0x4, @tid=r1}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, 0x0, 0x4080) socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, &(0x7f0000000480)="eadd00000030012eff110f457764c4c3557aa736a33eccb20f060fc7687f260f2335b9520900000f322e66660f388183560000000fc76b9d", 0x38}], 0x1, 0x11, &(0x7f00000005c0)=[@cr4={0x1, 0x104026}], 0x1) mount$bpf(0x0, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x840, &(0x7f00000002c0)=ANY=[@ANYBLOB="a6709040354110ff3b30267076d5f492dbac91514f81595bd5a0d0bfc531d72fa63f7bc3e3de550657d897e700000000000000000000000000001a4bb78ef027a265b11065d4ca92126a749bb5de082f957cf7dccef830aa5d1950483a419ea487292e621c1afd88e875df16f698aedad84839b23dd9c09c9bde74b24aba4b8bc8e1c364f79421dca19ee4f5b3754a932f3a89e0ad3b8457a4", @ANYRESDEC=0x0, @ANYBLOB=',subj_type=,uid=', @ANYRESDEC=0x0, @ANYBLOB=',mand,permit_directio,\x00']) socket$tipc(0x1e, 0x5, 0x0) getpgid(0x0) getpgrp(0xffffffffffffffff) epoll_create1(0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000080)={0x1, 0x0, 0x98, &(0x7f0000000180)={0x0, 0x24000, 0x4}}) 25.447236829s ago: executing program 2 (id=745): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="b9f600630e5f5e36a68cd1ad5489705f12af19050a3f87f3dbce27ed51e99ed40589f8d4125e5e9181e281940174bbb41f17a41e24f401ce77e555acef983350c1393cc9ca1d0575b8f513821a56e0378154b8dda6b2b58a276c413afd36632114f3ba055c11bcc3f156efd5142828842e5ee1c49b948f49d1620ecb66f01efa451aef21168c117cb4f16973925749205f1985de567fed7dbc862cb34cec2e0a", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() lchown(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.id\x00') r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 25.402838399s ago: executing program 32 (id=745): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="b9f600630e5f5e36a68cd1ad5489705f12af19050a3f87f3dbce27ed51e99ed40589f8d4125e5e9181e281940174bbb41f17a41e24f401ce77e555acef983350c1393cc9ca1d0575b8f513821a56e0378154b8dda6b2b58a276c413afd36632114f3ba055c11bcc3f156efd5142828842e5ee1c49b948f49d1620ecb66f01efa451aef21168c117cb4f16973925749205f1985de567fed7dbc862cb34cec2e0a", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() lchown(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.id\x00') r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 10.284456382s ago: executing program 4 (id=746): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x1ff, 0x8, 0xffff, 0xff, 0x0, "01245e116b2deaf7"}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x24, 0x2e, 0x21, 0x0, 0x0, {0x19}, [@generic="a890bf6b68b722a6fbc30cf96f"]}, 0x24}}, 0x0) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r0, 0x2546c000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001500)='\x00\x00\b\x00\xff\xff\xf7\xff\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q\x00\x00\x00\x00\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a\x00\x80\xff\xff\xff\xff\xff\xff\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xc3\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a\xde]X1`d\x9d\x9e\xd0\n\xa1\xa9\x8cO\xb8p\"\xe7\xdb\xab\x0eAW&+\xe8\xf7p\v\x01\\\x98\xeey\xc4c\x18\x91\xd9\x00\x1c\xf0.\x9f\x1e?\xea\xea\'0\"\x94\xd1\xd3P\xa8\xc5wP`\xa6\xd5Q\x11\xc3o\x04\vat\xb9}\x83g\xca\xfe\xf4\xe6;\x18\xb9\xe7<\xcf\x96~\x0f\xb0\xd3\x1bl\x9e\xc2\xc6\xcc\xbe\x8c#\xd0\x9f\x050\x1csf\x84\x06Z\xf4\xd2!\a\x8a\xc8\xbe\xdb\xf6y\x94Z\xed0\xdbZ\x9b8~\xc0\xbbU\xd5I\x14\xb6\xeb\xa7V\x00\x18A%') 8.50082161s ago: executing program 4 (id=746): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x1ff, 0x8, 0xffff, 0xff, 0x0, "01245e116b2deaf7"}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x24, 0x2e, 0x21, 0x0, 0x0, {0x19}, [@generic="a890bf6b68b722a6fbc30cf96f"]}, 0x24}}, 0x0) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r0, 0x2546c000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001500)='\x00\x00\b\x00\xff\xff\xf7\xff\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q\x00\x00\x00\x00\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a\x00\x80\xff\xff\xff\xff\xff\xff\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xc3\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a\xde]X1`d\x9d\x9e\xd0\n\xa1\xa9\x8cO\xb8p\"\xe7\xdb\xab\x0eAW&+\xe8\xf7p\v\x01\\\x98\xeey\xc4c\x18\x91\xd9\x00\x1c\xf0.\x9f\x1e?\xea\xea\'0\"\x94\xd1\xd3P\xa8\xc5wP`\xa6\xd5Q\x11\xc3o\x04\vat\xb9}\x83g\xca\xfe\xf4\xe6;\x18\xb9\xe7<\xcf\x96~\x0f\xb0\xd3\x1bl\x9e\xc2\xc6\xcc\xbe\x8c#\xd0\x9f\x050\x1csf\x84\x06Z\xf4\xd2!\a\x8a\xc8\xbe\xdb\xf6y\x94Z\xed0\xdbZ\x9b8~\xc0\xbbU\xd5I\x14\xb6\xeb\xa7V\x00\x18A%') 6.588862169s ago: executing program 4 (id=746): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x1ff, 0x8, 0xffff, 0xff, 0x0, "01245e116b2deaf7"}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x24, 0x2e, 0x21, 0x0, 0x0, {0x19}, [@generic="a890bf6b68b722a6fbc30cf96f"]}, 0x24}}, 0x0) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r0, 0x2546c000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001500)='\x00\x00\b\x00\xff\xff\xf7\xff\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q\x00\x00\x00\x00\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a\x00\x80\xff\xff\xff\xff\xff\xff\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xc3\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a\xde]X1`d\x9d\x9e\xd0\n\xa1\xa9\x8cO\xb8p\"\xe7\xdb\xab\x0eAW&+\xe8\xf7p\v\x01\\\x98\xeey\xc4c\x18\x91\xd9\x00\x1c\xf0.\x9f\x1e?\xea\xea\'0\"\x94\xd1\xd3P\xa8\xc5wP`\xa6\xd5Q\x11\xc3o\x04\vat\xb9}\x83g\xca\xfe\xf4\xe6;\x18\xb9\xe7<\xcf\x96~\x0f\xb0\xd3\x1bl\x9e\xc2\xc6\xcc\xbe\x8c#\xd0\x9f\x050\x1csf\x84\x06Z\xf4\xd2!\a\x8a\xc8\xbe\xdb\xf6y\x94Z\xed0\xdbZ\x9b8~\xc0\xbbU\xd5I\x14\xb6\xeb\xa7V\x00\x18A%') 4.57313147s ago: executing program 3 (id=858): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (rerun: 64) r0 = syz_open_procfs(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0x5501, 0x0) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (rerun: 32) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async, rerun: 32) mount$bpf(0x0, 0x0, 0x0, 0x958028, 0x0) (async, rerun: 32) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) (async, rerun: 64) sendmmsg$inet(r3, 0x0, 0x0, 0x4) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) getsockopt$sock_buf(r3, 0x1, 0x37, 0x0, 0x0) syz_usb_connect(0x0, 0x3c, &(0x7f00000002c0)=ANY=[@ANYBLOB="120101000814c910be0632a2f33301020301090212", @ANYRES32=r1, @ANYRESHEX, @ANYRES32], 0x0) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async, rerun: 32) close_range(r1, 0xffffffffffffffff, 0x0) (rerun: 32) 4.56106422s ago: executing program 3 (id=860): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88901) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000040)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x502, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x204, 0x200, 0x100, 0x70bd27, 0x25dfdbfc, {0xa}, [@typed={0xc, 0xe6, 0x0, 0x0, @binary="4a3adb26ece6145a"}, @generic="ffa885924f85de0c2b8d4b5e49ad7684549ed4b5fd4d7032c46a1658c9e855a7eb9034864a1ca2b69a81cc2ce2063bd4bfa40e09ec8d2ead36c3", @generic="ab85579ef1d3718e9162f3ae07c9309cd4614787500bf52f301340537623b602a3262763faf17ca698ba7326eedca8b0c66eafdb2ba782258666d7d1fdb1b12d17379c13f8191a87026fa4b4c7019942f598f7c7161abacd63d2ac22b75ca9aa26d46bdad27e359eb85d8b5b56a62648422592ea2ad550c4f6d8b7da3db8fcb2540169cd27d0ef0c73707733f66459db262161d1e3d414a319f3d0b7f3227182a8b5907c0eb63d84eec0815ed57fc8162df5e365c90673dd8a8ce2cce2df47", @typed={0x8, 0x83, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0xc5, 0x0, 0x0, @fd=r1}, @generic="56e703c824a03ffd1cdc8a09f9511c0dea62dfc9706182042bed82902389bc8e98a11b93d195b288455a2650ed", @typed={0x14, 0x15, 0x0, 0x0, @ipv6=@remote}, @typed={0x4, 0x6b}, @generic="3ca944e15fa79d5b6428662b57a191bb79f8c4767f490b74fc13788e407332cb9ba8c7ae11a5a17d768f7638225f716b8075389f5061eafa1db267f2cb0bd1dbf8f52f6df0429b6eda4ee97f5f07ed9fbf824f3081557972f8afb0af1f20210373e54f5876c9849068dc9e5fffb60d9710a015726a78ccd812ba08e70485c177fddce044268b6d9f0da6de", @typed={0x8, 0x135, 0x0, 0x0, @fd=r1}]}, 0x204}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r2 = dup(r1) mkdir(&(0x7f00000003c0)='./file0\x00', 0x80) accept4$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e, 0x80000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x194, r3, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "831a8d52f7012a"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "21ff669fe4"}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_SSID={0x1a, 0x34, @random="6e3caf9d652d312a5c29d79ff85f8782add0d24f1aab"}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5227014f50"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2e6c9dd247"}, @NL80211_ATTR_KEY={0x64, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "fbdc985e43"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9ec42bf19c"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "fac38250eb4b164015f7f9d5d5"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "45ba8e01c6"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "597b581fc9"}], @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1387}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7dc3007b3a"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x353}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_MAC={0xa, 0x6, @random="41eb9141e87b"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6b1f2f79758f"}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000041}, 0x4004084) r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x4) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000780)={0x6, 0x0, 0x6, 0x3, 0x18, "cdcdf3556e108510c79d90d2491a10938d538b"}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"6cb3b2feed60bc8796e3b736ec02550ed01a6ac083592cc5fa57c93633ee38eb647f41eac54691c20b07c2c9cdef0f6a26a15cde49b32aba6cc18e5f11a92227b387057c5249b4ef8fcff3710f67eeb52a496e6c3d8073b9de63acbe3fc65f9ffd74203fa9b9d2138ef748f9781f221c321e2e509040a6acb283853744958da9813f5e4022f744ba467e60a71abbf3192f1c5159cdf186e18511be07970549b7caa6b22746612308453cd0cce5b3701249efe25bc8b9fde9e5298fd19e0e72ce4e04000cfe340701d51e5ede1b38c60eb9ed109ae8df4f9eb8d0f9ecc1dcd695beba104ed9dd69fb2edf6bbdb49071223b91816bb8805fad5bc02ba94a292ce9962d0c2d77ec3d7b4669d5e0950cce75ca42888d57d5ebee3e932971c5edc962358ca7ded66be557eaa1c524e73767860ff7039a849707c737b696cb2e4abad3d7e7f3287c400ca5128c8ab5d5aac15ed4d955f23317c6b8b53e2e0d46825f478fb32d9c07e3df0a044fbec87ae8ab2736dabe14ecb1cdb1af2f9baaa95dce043c47de6be18d03cc688400de415f6245df225734ea9df6c17d46f99aad57df5d86ef350359c41a1c0b29c3326f34d8fc28b86ea807e2ce1beb9fcfd8bef30d0b1b599393f4358ac3ae2d11ce451d5ebe722536367c3a5b69ce14575b902ed32150a47e528264372f32633d27968048f6c43830a022c8772368ab353c213401deb26e58ea1814bcf15fa4da0681dc92c9bf03cc12c9dbef141f0edf4c9a4b5a894b684ed07eb212d00efa0992d8dbe12d03d17b5f74b476e6bcc8664d05189e3154ddeb5808951c178fd4476815495b4d602a72d96b34042590a70b576e537b2e1286d74252f09f5c9c6c741a109b902f62f973b1f634a9da62cd86f2b7b3d310a778c4845b7e74d8b872f8689ab8c7f5a59926271e0b47708df6e41287638715cde49faa7d9e8d869170b809029c0d09a6f55c7284cc7ef97fb8e802f8ced4d67149f81762d9f65d13349848f8e110402949aa23d49be13c4734655563d2c6dffed066592ec0f4a1e72fbc71178448033da2fe4c440945bc41f06bd52ddf38139c775f770146d1bc5f38781bf092464acd95ca21a415fda21aee757815f4abe0cdc00fca46d0ddc4327dedfb84605a14765c0236afcd51cba008e6ca6faf719fe81420543cddb0a4c627861bdd763ad9c2d648a3d8684278d7ba7e91924132f17b6d58eac5a8b04b8e6588a1633cc845709b132f173ededdf0c5de3a08d9fec6bb0ad84a1cdb8c937b28f26d291f3ae308aa12491b6345ab8f4e3e27b3548c9fdc98c1a2672ab159fc18acb9bc49c25bee22d6d3c2445742c4bf7efe8b61e49cbcd391645663d783493e8163eaa3f60ab02f5ee4c92f8aa68daedf42a5c7e54c8807b48bb1d86749c14713a7b5c617a502550550f6248271e8e1c96ac9f6e2ce"}) sendto$inet(r2, &(0x7f0000000bc0)="db0906db61cc0a1f665ad061bc5c2f11370ffd9d61a46129be572ed9accf2bbdba9573b21d0604f68c05a139acd989d87e2a5781aab9f4ae859ae7fd832fde307d4bb7a536d819b4421cb4011950fb63a84fdf54ed481bc061b89559a11db2c1006e250af2f5478022c6b4bcd0596eb222edbec614aebf6b91e22a0eedd7f957b716e907029836694cff92c2485ce275f786c7508fc0f3021bde387bd480d6b753710ea2edca4f722cd76c4f4101076f1b0d3878d5e2c66529c361a1f3af39d98e9a1b90469630848799ff3e3950cf303816beb39e8374b4ba633d084218851779fa6dbc8be6ae2fd297f848f540a55a9b0b3ddce58aa10083ef83aa13e2a0eacc06d6ff88c44fe529248f58a50ace061aaadedc4daac422813f502e75f0f57809181f3ec7ab4e85fd59386a20e03581218d5c53b0ee6c5d244df94321db95fbef02725abf4db741f38ee0a43e739bb35d5c84cb42ad3790b688ed706151c817533a962a2283123d6477b5377390932ad6f41a05d8b20512c6f3a379ef4e476a368347d33c70b1f51b5f33f6aef5bec4c6678789f016b88ba52aaf378870e2fd536dc0a113650997db8320b1538ffe684a94a3001e5b223a37d588b7dea789a9d357d67de971f5f67d68a23f92b88e73e26898e14c506e7ba1632593ba62433d5a5751a1bb4896bdd01da9e8979156adcbce870c9924a75197fd4952440eec5f17e4ce99cb076075c3c746c66ed3609f752dea73bc5c55b43b8dfb12a2e38b31f1bda1e88c7d09a9ebb1caf6bb24d0371ed1fd6cc6cf5fda36d6c0822c68f4dc36e7a5025506f4bd5449cf6b2b02a500c4e6e5414d31f20f5252b4328a439576bd6338e5974dcd9eea87eaaacd9163ff2651d7f8ce83acd094925062079f4d4dc04aa7380cdca89117682d4f527926c5948e05f28c311f3690025cb7258d263b107e0cbd6109cbfba8592cc88784d48a4c32c2aee92e266b4f70ddc2ce0550ffd76f9f95f665db4500ec9158114c59ac96921dea2ca8dd87d8a8768f178c104589cb709a7983b9bb7a33256eef9cd73ac322a8e062ae4ab29c08987e686e49aa1eda7174d6e896d429034c8a534c7d076c505ca37b916d8a3925683a76a7adef3991be3109ede0dd4d3bcb35637114c448af703f6c0131c30c29b90d0e413b49328b8d895274fe32712e1eb6c3d2c38fe873c38a8cf70778add8f3e34eccec71079be56d059d171c33e2aa5a3c594aaf219b4085905b6f4ede3bb55f9bc2096d17458f9fa31d08aa2accfd71433c206fdb1c9d5826783acddf11ab4e2be87516c707e9c43f447212c571a69b2bc040849894494f6b999a818496ca8e1a4f9b28c4e25ce531fb6b8be204a85153613027f3f1747748fb78a138a46581a658b69030dd655a5bdd9ef8e60c9e2584d550d7ac115560b1320e5ee62a6baedfd2992aa884c3bb456c462636bcbaec0d67d7933ec2db8fcff923cea9b1bb2b32ddf5515f42cd45157088eaf2db64fbf2041b8f58d2720a817868824073ce8698a6af6e1c99512c8703bf01e0b512519f65ee0618b99726aefac6962fbb8063c4af31db73b60c8e92ed6dca40f39e62b7ae6b629ff20ea2ca5b5152aa2ff44d3ec88b3b6dc284cc0299045b00a83170846bf9273e15b1556e03f73e80ea4f2ada37195756811ef35f1b368e16ae7cd750d0e83afdad4937f63253c5647aa431dec037fde8d07ae09c383785086f4197207e4fc1799cda2b68ddcc001d3367aff0a1aff1719b298154f08d900a65f3b8fbcd1d4b1f36d0f28b7b132ffb43c3c3b2ab116155b9cfb76a7c2db7b813f3f232b35ce55d6a32acea6cd79596137f88f15e66ae02de58d1f5ab3e23ba3b0acc778b898be37d2dfaeef2f86092696a7b87034aa55bc86dec8e3a34e3b566e1be226fe17390c57ab4dbd2b55b0a79347ac0e80f0de1892d6e0f44ceef9a7c45d4af42b79d2bd05a8720ff77a6efa92d150a649ea5f35d23188fab389f8e756557bf538cd3ebde01f0ce335c1184bab640b2bfb52bb3cb9e04ca6d35696d9fa112fc9dc602ca1a0babea6693e3660a92caa43d42f0d5e21a4fd40d4f86a70fd5e08a2970589828550b3b0b8716c0becedc592aeb6607093c7e497188f6cd1ba5aaec11108a0e0ff350f98ebe6ca1b5b31fa070e4e55308fb0f36fe8dd9a0a2deee84f32faaf69f083a5005feb14d82a20e42cddb21c8b95064a856f7ba993e65d2e922855a9f7756a0cd6d4d77c820bdb1252e1cba6949d788d78cebdf6d318fef51d8daf6b6b0291e1e9c991b0d2014c190bb9a89f85380c02021f8eb18c46541e2977c4ecfbc19fd68321377a155a778b1a59317e0f9166ff8a9e96a8153a4201925f4f7776668a490f82d79125cfbfdfe6ec1a96d3d0a89f38d353dc7960b55a5a0c6cde54bf24cfe91046524ee0265c22d783ab8d7a99d985731d3d6056c4979109fe2e2e484e4aa2660f9b69b5d13a91565de1b1cf457a5406687bff22e524753522a7bb95faa8141b008e11c457fe10668660b2d02526b2f1cd51b1e8d04f089abe1929d3ff14289c3f25344d3bdafbbf0177a717fa572888a06208e1ac28c918f55bea3e5b842745615ed00ee55739913f6f6c9f8ab915bfd57dcbbd8b87e427a3bf0393b6303ebbbe62231f4429a63392fb08567939b4c54512e00134674eda1f7f42a006b2cf8b68fff974d579f49457e2c278d0ea8a656ceb2ac221f033b3077950df30461f10a7cd4eccf2b2363cb4fbfe552f7dfc5dbe2dff41b1e6ddfe2526ee7f1e65ba9e940b6fb11cc3db5aea75713b90291cc819ee16ac2b2a77acba40a125fca9d10fe217c041a77ae18b5934005fc1490e3c5ee6f1bf31c6636e950bc1c0dc38b0251eb427532e012fc7f05f619bd2a18b7aa1da7822f411da808338017d8edb9ff1283dfaee93141327980c4adec14ff91106a0229255ee62014883fd07dbbb0fa9e4bc4ef6b74ec78f7975ffa222e2aca6a233193abdb6783232105e919f2394fc89f0d90db78296328ce43eb49726191c55c89011f7935ca0d30cfb9c0b89999fda1d4d00e5614500e6ab1448fa8c123b250ce646a377924a4e5f583c85b7cf51e1eef6f5d474e20f59ac16d96ca904cd077ad63db2003fd5a8100e803719378e0e803f4b5abd90769daa6efa71207549401051c3df363b9037e6470102234a54422f488e273573b92ab9d21815873867a80752025349da30f2df9a9aa8d0cbd5dd84b6b19f28a28df568ec6a60050c13f19814dcad881d9ca6450e966bbbb1c1ccf0baae7f16f96e2c10a2ab57044ebd2e9884cf86241e1145b654992973b608ac7065f3cce734bfe2fa5342722fc17825d3df342b2c83ea27350bfa5a36fdad34b3f76128de2cfea2f4e073c85225624e3bd9a94cb02d445ba6b83dd8bfc258419a15dbecf3526e287a14e5e334023a01e30ef939be7a4a6cd0d97fdd11c1739a051bcbaddd08d1b9aaeee2e59b67a4cfadac728dc8ac85be5d3fdd09ab64c33f3a8a2a676833c2d0b07687c9fbde8ca0fe9173b2a997aff5e05a65ad40bbde393995273dc3da93830a6f17fb9c88b73f6ce16a8e6ae88b327b99025e34a7d034e6c444b499768f2cf124ca08952e7a03dcc678986d26d7a4d3e80ac02a93901f6149319088d308121770aebf7883cbbfd3acd5c8f6c3a3aedd36af45280430c4feea2c3a77bf7745461615d227b004ff9e2fa7ca3045c9cba4cb2f7b3244e03c4d370d455af4743998c0de9bd5a1af87bce6fb83035ea026b4727f5f58434d90492a6ccd6fe7b550a685798dd1d0c908742c6bba4ef49ae22571e0a0f2ddf6f650e9b637f13df3b06c72fc6279c873b6a33fc982160f4ae2184c8e068a87e19598ab540513fb3979fd01d6f322c7ba8bdf4c81bdc41906cfdc4c7201538bb8a9ee0f86d507aa7e4b0a3944e1bf8bd0eb1f70389ed01e18e2eb36e4cfbaee7aa62662b5ef607a4227494505bb62f1af4b0b248644f47f2eaf3b716bd340132d0a3318212628e3b47203ce692b4563e3b071251877dc290aee592882c209ccc5faf861d41b4cafee5d70e55c367d9fbc3826f14d6614a8a256efd0bef69dfd8d99b64fbec07cce4b32a81f3b34874646785129d48562f7aac9482f3c9a4da77ea0325b66027c618ac0d95fc9739e1571e61518a090eb713d7ba53faeed33da8d396e77f952fefed7954567f400627af3dad59514e2bbeb6538cc56cd3350270d27be046897af04a23fd29c04d02becd62d7f41f814226856d0223aea86b58b094491ab297500223180e4b23fb6139d8d9ba8e739455f42174f248a1666b33315e5f6eb1e05a7a1d7c3d1ce2c70376fbe1842a8e08e9bf628af67165ea1102630e9d5358bfe78b74fef25b34b57b1ccb42babb6cacabdd8d9a4cc797ba9e723ad1d55a862ec426fac154d71141f5ab10c32dc62e03f03c7d259f6834380de5dc4930c6bb5d6ec93c5937ba9e9441517f15a502ee82be744631f2aa2ef55d82755a7c182ca5d687b09c249f6dea51e0957424d18245cc6101067f78894e187deda60d04153184052c68381cb01c69d48da1b69163229a8c8ba8c6064e3265542a74101d2da6fe730250df99ae2a2e50faeba1ea9977bf64f3b56a241eb6d13798d2f47ec0f57fbe7b8fd659bb8bc678e838d610d656879ab145702c56332840a83ee856f2f3a83530273c220ec903f26e9b925c06d3414e293e0005fd4a70818f556c3a6ae0489c56025a13e197168dab2002656e340078f872c3b97b4aee36a66a22b328bc2753c23e3ee115b2b35b80ebc9d8e47330a6b52875c2240cf0dc5573295924250a945ef2baefc3ea6827da8dfc792b0aa461b32f114e78d2957422234727155010fabb676ed83de34b9bbd7d6ccd9fa9676635962eaccc8d871d3f45fb41133710cb47d915d53bf1271441701622db767b0f2a9a66430b1afc42ad2806b27d6aee7e3fb52ab9ba96a6c9bcb086ae6684d5791f96d2d3625205a53afe11574ac03ed810014b66bc58972856fa237f87cfad929536e2d0488fc96e4c7f1f55a505467513059cef6d5c5ad87e569739a51db15f88bceda8f544cb73c5e97cd9e580c38c712768c153ff093de4674a8bbbad07cd0a582509bc4cf0c722f53ab4fdbf36249006bde6b5dc83c71061f895477eb148c8b586df4881e6e4badf597bb93eee4d22f345578a2782ecbeda9db8610de46d1e55631fd9d5edcc3577e054381396195fa58b4604f4ee61b6dcdeb3d4c12e9e94082e0593db55856d93d7f2fc64d062288a6e3feec13997e16d0b2a4503738ef1e641490e48d6035d7136d17f493fb868625504d84d6c7b57532af4343bde35b0316058ae17191c2338c8b2543c0b8615443640bdb4339a1a5fd0949d17223fde9079d4b5d5d585ce64fe38b10cd4d9fbcd5293edb2645610031083784091d11eda0cea22d3b1854c8f73c4dfa491b3af68569bd32494c65e66d31650a5e5b742dc4b86772437a110d9e50b813b6b825ce0b2e19482c5d800f805100b8559e7690033141add1d2c05f8b8ea89efb4e27005d794a84b7354804c3c5f4efb8c178c22f943a2faa912422a150799aaaa3a70796844b7f06398ec38dd4e89398b8f8b225f0690f22a94ccd9900770fb14f1dcd2ea44b84637d571376cbb662c0a868b9d4d924cdf9e8f0a0ac72f4f5098d280abd605347770b0905aea62dc23abf3e87ab1cdd66ec28e9f9e7b3f4545369a9c1f0a9e3bfab3d6999005675cbca3411d43f002ce45d273e016a0e3cbade26918f366", 0x1000, 0x4008000, &(0x7f0000001bc0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000001c00)=0x1, 0x4) fadvise64(r0, 0x7, 0x81, 0x5) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000001c40)={0x3, 0x0, [{0x9, 0x17d6, 0x1d, [0xe5c, 0x5fb, 0x303c, 0x4, 0x8, 0x0, 0x4, 0x1]}, {0xf, 0x101, 0x4, [0x10, 0x10000, 0x4, 0x1, 0xa, 0x0, 0x8]}, {0x1f49d68a, 0x0, 0x5f8, [0x9, 0xfffffffb, 0x0, 0x4, 0x2, 0x3, 0x7fff, 0x3]}]}) r5 = creat(&(0x7f0000001d00)='./file0\x00', 0x20) sendto$inet_nvme_pdu(r5, &(0x7f0000001d40)=@icreq={{0x0, 0x4, 0x80, 0xa}, 0x0, 0x0, 0x0, 0xc8}, 0x80, 0x0, 0x0, 0x0) bind$bt_sco(r2, &(0x7f0000001dc0)={0x1f, @none}, 0x8) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x20, 0x5, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008080}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), r2) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x74, r7, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0xa}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x40004}, 0x8004) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x54, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dvmrp0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000100) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000021c0), 0x100, 0x0) ioctl$TIOCMSET(r8, 0x5418, &(0x7f0000002200)=0x1e54) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000002240)={0x0, 'ipvlan1\x00', {0x4}, 0x5}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000002280)=0x5, &(0x7f00000022c0)=0x2) 4.534138601s ago: executing program 3 (id=861): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x1000, &(0x7f0000000000)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x125c03, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 4.454266502s ago: executing program 4 (id=746): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x1ff, 0x8, 0xffff, 0xff, 0x0, "01245e116b2deaf7"}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x24, 0x2e, 0x21, 0x0, 0x0, {0x19}, [@generic="a890bf6b68b722a6fbc30cf96f"]}, 0x24}}, 0x0) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r0, 0x2546c000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001500)='\x00\x00\b\x00\xff\xff\xf7\xff\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q\x00\x00\x00\x00\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a\x00\x80\xff\xff\xff\xff\xff\xff\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xc3\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a\xde]X1`d\x9d\x9e\xd0\n\xa1\xa9\x8cO\xb8p\"\xe7\xdb\xab\x0eAW&+\xe8\xf7p\v\x01\\\x98\xeey\xc4c\x18\x91\xd9\x00\x1c\xf0.\x9f\x1e?\xea\xea\'0\"\x94\xd1\xd3P\xa8\xc5wP`\xa6\xd5Q\x11\xc3o\x04\vat\xb9}\x83g\xca\xfe\xf4\xe6;\x18\xb9\xe7<\xcf\x96~\x0f\xb0\xd3\x1bl\x9e\xc2\xc6\xcc\xbe\x8c#\xd0\x9f\x050\x1csf\x84\x06Z\xf4\xd2!\a\x8a\xc8\xbe\xdb\xf6y\x94Z\xed0\xdbZ\x9b8~\xc0\xbbU\xd5I\x14\xb6\xeb\xa7V\x00\x18A%') 2.454119403s ago: executing program 3 (id=864): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x2000000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x303}, "401931a543e39edd", "90ce9aa792ef1cea70802531e059b583", "a1d418d5", "36c91327e1ed6dde"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) 2.439747213s ago: executing program 0 (id=865): mkdir(&(0x7f0000000400)='./file0\x00', 0xed) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa4c81, 0x0) fallocate(r1, 0x10, 0x6, 0x80000000003) write$binfmt_misc(r1, &(0x7f0000000500)="5cf7b30ec92941ea5e4c23144cc9ac652646fea4e818fc5d442e06699f79b89b469de466cfde2b0a922bdd3e6e365dee89a19ac020c7c4bdd07551b4a03c14d3ac4181346fab23cbf23903c0ca8f3c1e", 0x50) syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a03ddd7984b47f680658f1337f20ac041e3186264cd6b9cdf180f061caf6cb0bb318f5407720fad0757f2eba67b11491511e03d0d34be25dba33d8e3390778d0000000000000007"]}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r2 = socket$netlink(0x10, 0x3, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r3, 0x0, 0x14, 0x0, &(0x7f0000000e80)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, 0x0, 0x800) r4 = signalfd(r3, &(0x7f0000000440)={[0x101]}, 0x8) r5 = eventfd(0x1) close_range(r5, r1, 0x0) r6 = eventfd(0x8) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000480)={r5, 0x6, 0x0, r6}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000240)=ANY=[@ANYBLOB="646d787492a6e1d4f689c7b41c90453a46aeed71be08000000000000007bd95fe9c38c507f517d8931aea988aacb77d1b11e03613aa8b0df77bafa61c856d7c3f59a095595b4526199a468ba822156bc837738a4b1aac4698c724a2031ad1421f6417c7cbe384938698903d157355c7665a634a9b363e6ed0677d1f86ac71719127e1c87da8ebf59f14511ecb7da6dcbdd01a206ca9d27f007d50270acb869a8285fdd60ad60ea83fc566f"]) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r9, 0x80045438, 0x300000000000000) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="180000005e000101000000000000000008004100", @ANYRES32=0x0, @ANYBLOB="b224de371a228dfa33905d0ae79022f3d150d4df628b9e5f41800a"], 0x18}], 0x1}, 0x0) ptrace(0x18, r10) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="080026bd7002fedbdf250200000005002a0001000000080008003200c25000000800310001000000060028000200000005002e00000436000000280002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0xc080) 2.292553435s ago: executing program 4 (id=746): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x1ff, 0x8, 0xffff, 0xff, 0x0, "01245e116b2deaf7"}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x24, 0x2e, 0x21, 0x0, 0x0, {0x19}, [@generic="a890bf6b68b722a6fbc30cf96f"]}, 0x24}}, 0x0) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r0, 0x2546c000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001500)='\x00\x00\b\x00\xff\xff\xf7\xff\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q\x00\x00\x00\x00\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a\x00\x80\xff\xff\xff\xff\xff\xff\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xc3\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a\xde]X1`d\x9d\x9e\xd0\n\xa1\xa9\x8cO\xb8p\"\xe7\xdb\xab\x0eAW&+\xe8\xf7p\v\x01\\\x98\xeey\xc4c\x18\x91\xd9\x00\x1c\xf0.\x9f\x1e?\xea\xea\'0\"\x94\xd1\xd3P\xa8\xc5wP`\xa6\xd5Q\x11\xc3o\x04\vat\xb9}\x83g\xca\xfe\xf4\xe6;\x18\xb9\xe7<\xcf\x96~\x0f\xb0\xd3\x1bl\x9e\xc2\xc6\xcc\xbe\x8c#\xd0\x9f\x050\x1csf\x84\x06Z\xf4\xd2!\a\x8a\xc8\xbe\xdb\xf6y\x94Z\xed0\xdbZ\x9b8~\xc0\xbbU\xd5I\x14\xb6\xeb\xa7V\x00\x18A%') 240.449737ms ago: executing program 0 (id=866): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000100)=[@clear_death={0x400c630f, 0x1000000}], 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001bc0)={'vcan0\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x6, r7, 0x3, r5}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001c80)={'tunl0\x00', &(0x7f0000001c00)={'tunl0\x00', 0x0, 0x7, 0x8, 0x80000001, 0xe698, {{0x10, 0x4, 0x2, 0xa, 0x40, 0x65, 0x0, 0x1, 0x2f, 0x0, @multicast2, @loopback, {[@ssrr={0x89, 0x2b, 0xd7, [@private=0xa010101, @rand_addr=0x64010102, @local, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x2e}, @dev={0xac, 0x14, 0x14, 0x20}, @empty, @broadcast, @multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001d80)={'gre0\x00', &(0x7f0000001cc0)={'syztnl0\x00', 0x0, 0x8000, 0x80, 0x200, 0x3, {{0x1f, 0x4, 0x1, 0x5, 0x7c, 0x65, 0x0, 0x4, 0x2f, 0x0, @multicast1, @remote, {[@end, @noop, @generic={0x94, 0xd, "4dab795ef112e431782027"}, @timestamp={0x44, 0x10, 0x86, 0x0, 0x0, [0x9, 0x1, 0xd]}, @lsrr={0x83, 0x13, 0x7e, [@rand_addr=0x64010101, @loopback, @multicast2, @remote]}, @ra={0x94, 0x4}, @generic={0x89, 0xe, "e4331cd6c9db052423e536b3"}, @lsrr={0x83, 0x13, 0xcc, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0xa}, @broadcast]}, @lsrr={0x83, 0xf, 0x43, [@broadcast, @multicast1, @multicast1]}, @noop]}}}}}) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000240)="12bc2244125b9105f17dc2324597bdb1251e2615a2f8c91583c85637e4da2895ab325bb687266096506c7bbb2d06288992907c5cb77a51e3e7ea612c3a23af24c6cc0d67217e315fb9c03986378c9eb281a8a9ddc40aa816853aa9a792cec3722c4e6c019950d76fb79a21bed571e153e4976996e732f18c75f7655dad270b43f716f90f7cd79c448b4c9b2431ad1d4af86135946962fd10f92f5c87ce3fc2fbc934e3395677ef16d2d11c20bca6c2dfb5b9ef08c65b58818cfaa20ddad698ef806a40faab8aa4ec", 0xc8}, {&(0x7f00000003c0)="c01952ed50b778f7b0f60fbf55212136b5fc593ace02dc97d81f6c4c13a7a3abed86e5e4a858c671c8a9421128f3758a38cfc1b74e21e48e5302730c1195a13b75b8e90720e7bd3c4bd14db189cd2449b39154a461286448d0152f00527ad22eb2d45a550b984d8755fc41e839f56f692bb07caed90598fd0c8a1146e6de5a2888fac5d4cde0d8573ebdbabb8f0132f1e3ab028af838017f02965b0a3fb9707adb7ce91d7cac240e757e62e79b8c43ee2981f347b5b669457abb6845bab847c34c962701ff930a614b5a70715cb9", 0xce}, {&(0x7f00000004c0)="095964553d8abf584c44a03a387436cd9c95c7920d6c70efead35da639554ab67b9ea7a170c825149d26ffc9c71eec982b2e29720d4c05065e59e7b7ce795e74c32e3f4d20cd1a96", 0x48}, {&(0x7f0000000180)="4bf599cac521600c5b32e2e2b55f3b71a6c4eca1cedbad3cfc632bb5", 0x1c}], 0x4}}, {{&(0x7f0000000540)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000580)="bf7db1ef50fb4b42addd84f7c58f9774d43fdc129d4dc72c2d27af4c5c10e93cf9b00822377798f6017afb2bc81c4fb2209133d3bcd66d2dcbeb3b2eff40225e204d715ef8fa8ee689031d69994ec0ac0cc464367a69b3b0165e1721fb5f718d0710a75fb6a57ec8ae07da969cdff9370708fe1c30aa7cda4633c5fdf50d4b2ca51973fd6f464cc8cca07282ca8bd02b1df3969ad4a80ce6fee6678462f45b2674e21cc99c5f08f4e1796e093fc24315405a1320275df18c39da5e0d478fb375c12d7c99c037712188065b82defb9e72", 0xd0}, {&(0x7f0000000680)="9022e07937af566283f92d4e167b51209905e45cd590161b392c4e514478e00d5e749d8df1b552337ca97ba8af3dd6186a801bb614a3b15646d5602e560e8e3dca423e4c02baa48d7b0784e5b9950af4d96cd71bca08c400ceb8a82490dfa49d8e081b20f1bc7342a46eda444328abc9029573258f115a3f3da20b51b8005cc22948001b75a4c64eeeb74bd78ed05677f68b1fcadb145f2f2c50fcb1ec60", 0x9e}], 0x2, &(0x7f0000000780)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x30}}, {{&(0x7f00000007c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001b40)=[{&(0x7f0000000800)="0f3bf42986cda26ec344142ca123df2f3d851ad15d0fd7419c5fa044e87de9fde06d331497efbd99b2b9dbb418f0efec6c265dd0582f8395136e13a8f57f541a758c4a6bbc847913c1c236052be951", 0x4f}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="3a0d5aaccd7f468e5a194b64b4c79fde47a9e8204c37028f1a5ef22b693362b1f5a0ddea758e76132e6c9a19a4a9682eb31b428d72ef54e5930b482e7d287aa169b44bf7b931ee04e907a3b38e586b4eb97c1695aa9e5172b730ea1bf2cd8cb9f845fe19284f488398bde01d22e90bba795f252fb3a0cfb6bdb44ff2c6011cec02c72f", 0x83}, {&(0x7f0000001940)}, {&(0x7f0000001980)="8c12beb0cc5eeba0c4144cc31c9754ba9cd0c42b02fae179c6a1376e5fb7db065cc9d32cc20cce9f0d2770d955c1bca68df5a97042fbd94611aaa6a75512dc96ad3324a61242094dc2f751b3a7724da36eddd3c0bb", 0x55}, {&(0x7f0000001a00)="8a", 0x1}, {&(0x7f0000001a40)="8b2e18bb440c2846bae0f667e9ac934cfca04355d3210a1377293e3a078d41c86e59c50903aaf12bfd5ba0b805affe4e67c85986450afbbc4d348b1f5cf5200e0bf0a379c0ea07c18a9c7ff08067a31a4a230338f93fbf3626612164f784f7332ebc37975efd38e1024c47d834c99e6b48ed45863a0b1ce97ad25c9b26b8d568ba40529ec9dce221f15eef8bb54e5e4ef415f5ca6f69a063ecabc6d80f5c72165eb3e04d797899c1c5e87e2f847a0a5ed12b95a78fdc3d06d15c8ec04f2dd9fcdb080d76ca263419e3a4c79a8424", 0xce}], 0x7, &(0x7f0000001dc0)=[@ip_retopts={{0x38, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0xad, 0x3, 0x4, [{@remote}, {@multicast1, 0x80}, {@empty, 0x77}, {@local, 0x3ff}]}, @end]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x95}, @noop, @ssrr={0x89, 0x17, 0xb, [@rand_addr=0x64010100, @private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @rr={0x7, 0xf, 0xb2, [@multicast1, @dev={0xac, 0x14, 0x14, 0xa}, @local]}, @end, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x3b}, @broadcast}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@end, @rr={0x7, 0xf, 0xe2, [@multicast1, @rand_addr=0x64010102, @multicast2]}, @ssrr={0x89, 0x7, 0xf9, [@rand_addr=0x64010101]}, @lsrr={0x83, 0x7, 0x45, [@empty]}, @timestamp_addr={0x44, 0x14, 0xdd, 0x1, 0x2, [{@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8001}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x4f, 0x0, 0x6, [0x80, 0x5]}, @generic={0x44, 0xb, "158ec55f02a0fbd945"}, @rr={0x7, 0x13, 0xb0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast2]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @empty}}}], 0x198}}, {{&(0x7f0000001f80)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000002080)=[{&(0x7f0000001fc0)="e0b98aa149194ceb692768ccad88281933426f020c3cb23f378525ec1e668d5d9cc5879703821e8c5efcf546d5932e87d132230302710d6602f5a84ec04cb27a3a2c9e691576e70d2170eb3bdb1a577772495fff7b5b827ca2ae943888fc233b9f8d59a032a3a282f9fca67456a8fede20bc2f621f344b936ae2f19d1dca7383f484126e8e8d282f77bd50a77e13e4e7be7786a4", 0x94}], 0x1}}], 0x4, 0x801) 239.423997ms ago: executing program 3 (id=868): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r0, 0x45809000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000040)=0xef61, 0x4) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = dup2(r2, r3) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}, 0x1c) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r5, 0x10001, 0x0) 213.881277ms ago: executing program 3 (id=869): ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000040)={0x6, 0x5, 0x9, 0x5, 0x7, 0x6}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000e40), 0x1, 0x0) (async) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000e40), 0x1, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x7fff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x35}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x1}) (async) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x7}, {0x20000, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x329800, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x80000000, 0x0, 0x80d, 0x2004c9, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0x362d, 0x0, 0x4], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28) sendto$inet6(r6, &(0x7f0000000140)="b9", 0x1, 0x8000, 0x0, 0x0) (async) sendto$inet6(r6, &(0x7f0000000140)="b9", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r6, 0x0, 0xfdef) (async) write$binfmt_aout(r6, 0x0, 0xfdef) sendto$inet6(r6, &(0x7f00000003c0)="c62e", 0x2, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000001240)=@known='system.sockprotoname\x00') (async) fremovexattr(r0, &(0x7f0000001240)=@known='system.sockprotoname\x00') 136.598768ms ago: executing program 1 (id=871): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', 0x0, 0x2000063, &(0x7f0000000000)={[], [{@fsname={'fsname', 0x3d, '*{\\(.[(,\x98x\xed6\xd9\x05\x00\x00\x00\x00\x00\x00\x00n\x8e\xc8],)*\xf3\xdfV\x9aQ\xecyER~\x94'}}]}) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xc9900) getpeername$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c) 135.573458ms ago: executing program 0 (id=872): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000140), 0x8) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) (async) r2 = signalfd(r1, &(0x7f0000000000)={[0x8]}, 0x8) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x40901, 0x0) write$FUSE_DIRENT(r3, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x200001d0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r4], 0x1c}}, 0x804) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x60, r6, 0x10, 0x70bd2b, 0x25dfdbf7, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000808}, 0x1) (async) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0xd8, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xc, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4001}, 0x40) 135.082668ms ago: executing program 1 (id=873): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x2}, 0x8) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 134.287278ms ago: executing program 0 (id=874): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() lchown(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.id\x00') r3 = syz_pidfd_open(r2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000001100)=0x4, 0x4) futex_waitv(&(0x7f0000000cc0)=[{0x6, &(0x7f0000000200)=0x7, 0x82}, {0x4, &(0x7f0000000240)=0x2, 0x82}, {0x7fffffff, &(0x7f0000000280)=0x9, 0x82}, {0x8, &(0x7f00000002c0)=0x8, 0x82}, {0xfffffffffffff2c3, &(0x7f0000000300)=0x5, 0x2}, {0x33d2, &(0x7f0000000340)=0x1, 0x2}, {0x7, &(0x7f0000000380)=0x80000000, 0x2}, {0x7ff, &(0x7f00000003c0)=0xffffffffffffff81, 0x82}, {0x22, &(0x7f0000000400)=0xb5, 0x82}, {0x6ba, &(0x7f0000000440)=0x39, 0x2}, {0x0, &(0x7f0000000480)=0x5, 0x2}, {0x6, &(0x7f00000004c0)=0xcd, 0x82}, {0x6, &(0x7f0000000540)=0xb, 0x82}, {0x0, &(0x7f0000000580)=0x3ff, 0x82}, {0xd, &(0x7f00000005c0)=0x7, 0x82}, {0x9, &(0x7f0000000600)=0xfffffffffffffffb, 0x2}, {0x4, &(0x7f0000000640)=0x1, 0x2}, {0xfff, &(0x7f0000000680)=0xffffffff, 0x82}, {0x9, &(0x7f00000006c0)=0x1}, {0x800, &(0x7f0000000700), 0x2}, {0x3, &(0x7f0000000740)=0xfffffffffffffffb, 0x82}, {0x3, &(0x7f0000000780)=0x3, 0x2}, {0x6, &(0x7f00000007c0)=0x4, 0x2}, {0x2000000, &(0x7f0000000800)=0xa384, 0x82}, {0x1, &(0x7f0000000840)=0x5b3, 0x80}, {0x8, &(0x7f0000000880)=0xfffffffffffeffff, 0x82}, {0x9, &(0x7f00000008c0)=0xffffffffffffffc0, 0x2}, {0x1, &(0x7f0000000900)=0x6}, {0x6, &(0x7f0000000940)=0xff, 0x2}, {0xfffffffffffffffe, &(0x7f0000000980)=0x7e4, 0x2}, {0x0, &(0x7f00000009c0)=0x7, 0x2}, {0x0, &(0x7f0000000a00)=0x8, 0x2}, {0x415, &(0x7f0000000a40)=0x99, 0x82}, {0x3, &(0x7f0000000a80)=0x3, 0x2}, {0x8, &(0x7f0000000ac0)=0x49, 0x2}, {0x7, &(0x7f0000000b00)=0x3, 0x41}, {0x8, &(0x7f0000000b40)=0x4, 0x2}, {0x1, &(0x7f0000000b80)=0xdc, 0x82}, {0x7, &(0x7f0000000bc0)=0x2800000000, 0x82}, {0x8, &(0x7f0000000c00)=0x15, 0x82}, {0x6, &(0x7f0000000c40)=0x2ccb, 0x82}, {0x4, &(0x7f0000000c80)=0x8, 0x82}], 0x2a, 0x0, &(0x7f00000010c0)={0x0, 0x989680}, 0x1) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 62.849189ms ago: executing program 0 (id=875): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x5, r3, 0x1, 0x3, 0x6, @multicast}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 61.144089ms ago: executing program 1 (id=876): io_destroy(0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000000)=""/22, &(0x7f0000000040)=0x16) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xfffffffffffffff9, 0x3a, 'F!\x14', 0x3a, '}', 0x3a, './file0'}, 0x2b) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x3ff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f00000007c0)={0x0, 0x0}) io_destroy(0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000000)=""/22, &(0x7f0000000040)=0x16) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) write$binfmt_register(r3, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xfffffffffffffff9, 0x3a, 'F!\x14', 0x3a, '}', 0x3a, './file0'}, 0x2b) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) listen(r4, 0x3ff) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f00000007c0)={0x0, 0x0}) (async) 58.139489ms ago: executing program 0 (id=877): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x31, 0xffffffffffffffff, 0x1000) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000440)={0x80, 0x6, 0x3e0, 0x1, 0x0, 0x5, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000081000/0x400000)=nil) 57.867669ms ago: executing program 1 (id=878): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x148c0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x40010, r0, 0x1479f000) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x6186, 0x100, 0x5, 0x40, 0x5}) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000480), 0x4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x148c0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x40010, r0, 0x1479f000) (async) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x6186, 0x100, 0x5, 0x40, 0x5}) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000480), 0x4) (async) 39.296289ms ago: executing program 1 (id=879): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x10200, 0x1) syz_open_procfs$userns(r0, &(0x7f00000000c0)) setns(r1, 0x24020000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0xd0000, 0x144) r4 = syz_open_procfs$userns(r0, &(0x7f0000000280)) mount_setattr(r3, &(0x7f0000000240)='./file0\x00', 0x8100, &(0x7f0000000300)={0x351c37df254fc032, 0x10007a, 0x75bc8f279a7785cf, {r4}}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000840)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, 0xfffffffffffffffe, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) syz_open_procfs(r0, &(0x7f0000000000)='gid_map\x00') umount2(&(0x7f0000000040)='.\x00', 0x2) renameat(r2, 0x0, r2, &(0x7f0000000180)='./file0\x00') 22.94653ms ago: executing program 1 (id=880): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$loop(0x0, 0x401, 0x88143) syz_open_dev$usbfs(0x0, 0xf, 0x8041) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0xb, 0x2}, @fda={0x66646185, 0x1, 0x2, 0x3ff}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000500)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) r3 = dup(r1) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/97, 0x61}], 0x1, &(0x7f0000000240)=""/237, 0xed}, 0x7f}], 0x1, 0x1, 0x0) 0s ago: executing program 4 (id=746): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x1ff, 0x8, 0xffff, 0xff, 0x0, "01245e116b2deaf7"}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x24, 0x2e, 0x21, 0x0, 0x0, {0x19}, [@generic="a890bf6b68b722a6fbc30cf96f"]}, 0x24}}, 0x0) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r0, 0x2546c000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001500)='\x00\x00\b\x00\xff\xff\xf7\xff\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q\x00\x00\x00\x00\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a\x00\x80\xff\xff\xff\xff\xff\xff\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xc3\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a\xde]X1`d\x9d\x9e\xd0\n\xa1\xa9\x8cO\xb8p\"\xe7\xdb\xab\x0eAW&+\xe8\xf7p\v\x01\\\x98\xeey\xc4c\x18\x91\xd9\x00\x1c\xf0.\x9f\x1e?\xea\xea\'0\"\x94\xd1\xd3P\xa8\xc5wP`\xa6\xd5Q\x11\xc3o\x04\vat\xb9}\x83g\xca\xfe\xf4\xe6;\x18\xb9\xe7<\xcf\x96~\x0f\xb0\xd3\x1bl\x9e\xc2\xc6\xcc\xbe\x8c#\xd0\x9f\x050\x1csf\x84\x06Z\xf4\xd2!\a\x8a\xc8\xbe\xdb\xf6y\x94Z\xed0\xdbZ\x9b8~\xc0\xbbU\xd5I\x14\xb6\xeb\xa7V\x00\x18A%') kernel console output (not intermixed with test programs): speed USB device number 3 using dummy_hcd [ 29.673733][ T36] audit: type=1400 audit(1752990224.840:188): avc: denied { read write } for pid=451 comm="syz.0.48" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 29.699250][ T36] audit: type=1400 audit(1752990224.860:189): avc: denied { open } for pid=451 comm="syz.0.48" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 29.759921][ T458] syz.3.49: attempt to access beyond end of device [ 29.759921][ T458] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 29.772721][ T458] FAT-fs (loop3): unable to read boot sector [ 29.802180][ T306] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 29.813122][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.824059][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.834060][ T306] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 29.847093][ T306] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 29.856385][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.866347][ T306] usb 3-1: config 0 descriptor?? [ 29.874076][ T463] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 29.881542][ T463] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 29.921850][ T469] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.962901][ T469] kvm: pic: non byte write [ 30.099771][ T473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17 [ 30.099972][ T473] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 30.116456][ T473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17 [ 30.181886][ T476] rust_binder: 475 RLIMIT_NICE not set [ 30.191774][ T475] rust_binder: Error while translating object. [ 30.197389][ T475] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 30.203662][ T475] rust_binder: Failure BR_FAILED_REPLY { source: ENOENT } during reply - delivering BR_FAILED_REPLY to sender. [ 30.213205][ T475] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:19 [ 30.220966][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.272775][ T480] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 30.272819][ T480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:24 [ 30.286866][ T306] kye 0003:0458:0153.0001: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.2-1/input0 [ 30.402192][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.413275][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 30.427478][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.436682][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.448802][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.453111][ T9] usb 2-1: Product: syz [ 30.461855][ T9] usb 2-1: Manufacturer: syz [ 30.462122][ T306] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 30.474975][ T9] usb 2-1: SerialNumber: syz [ 30.485759][ T9] cdc_mbim 2-1:1.0: skipping garbage [ 30.498857][ T489] fido_id[489]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 30.546120][ T493] loop7: detected capacity change from 0 to 7 [ 30.557894][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.567138][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 30.576313][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.585528][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 30.593525][ T370] loop7: unable to read partition table [ 30.623853][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.633093][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 30.641721][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.650927][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 30.671227][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.680464][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 30.691369][ T471] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 30.701496][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.710728][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 30.721401][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.730605][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 30.764817][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.774067][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 30.787794][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.797053][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 30.805515][ T493] loop7: unable to read partition table [ 30.822909][ T493] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 30.842760][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.852005][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 30.911119][ T109] loop7: unable to read partition table [ 31.366530][ T471] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 31.374293][ T9] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 31.381549][ T9] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 31.389265][ T9] wwan wwan0: port wwan0mbim0 attached [ 31.397791][ T9] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 02:21:51:40:74:43 [ 31.557775][ T515] sock: sock_timestamping_bind_phc: sock not bind to device [ 31.596891][ T9] usb 2-1: USB disconnect, device number 3 [ 31.626539][ T9] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 31.920934][ T337] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 32.072159][ T337] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.083312][ T337] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.093581][ T337] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 32.102930][ T337] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.118476][ T337] usb 4-1: config 0 descriptor?? [ 32.460932][ T359] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 32.473763][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 32.533770][ T337] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 32.550745][ T337] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 32.567746][ T337] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 32.580939][ T337] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 32.590940][ T337] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 32.608245][ T337] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 32.620941][ T337] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 32.638981][ T337] pyra 0003:1E7D:2CF6.0003: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 32.780988][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.930928][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 32.933828][ T520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.939099][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.944990][ T520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.963463][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.973849][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 32.983078][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.991181][ T9] usb 2-1: Product: syz [ 32.995400][ T9] usb 2-1: Manufacturer: syz [ 32.999998][ T9] usb 2-1: SerialNumber: syz [ 33.016996][ T520] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 33.025241][ T520] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 33.033880][ T520] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 33.044869][ T520] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 33.053311][ T539] 2N: renamed from vcan0 (while UP) [ 33.059901][ T337] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device [ 33.074549][ T337] pyra 0003:1E7D:2CF6.0003: couldn't install mouse [ 33.089041][ T337] pyra 0003:1E7D:2CF6.0003: probe with driver pyra failed with error -71 [ 33.102815][ T337] usb 4-1: USB disconnect, device number 6 [ 33.222421][ T545] batadv_slave_1: entered promiscuous mode [ 33.228742][ T545] batadv_slave_1: left promiscuous mode [ 33.235698][ T9] usb 2-1: 0:2 : does not exist [ 33.243679][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 33.268364][ T9] usb 2-1: USB disconnect, device number 4 [ 33.283145][ T547] ======================================================= [ 33.283145][ T547] WARNING: The mand mount option has been deprecated and [ 33.283145][ T547] and is ignored by this kernel. Remove the mand [ 33.283145][ T547] option from the mount to silence this warning. [ 33.283145][ T547] ======================================================= [ 33.338613][ T550] Zero length message leads to an empty skb [ 33.572504][ T561] binder: Unknown parameter 'seclabeL' [ 33.661444][ T31] usb 3-1: USB disconnect, device number 3 [ 33.669171][ T572] binder: Bad value for 'stats' [ 33.669799][ T575] futex_wake_op: syz.2.85 tries to shift op by 144; fix this program [ 33.817553][ T587] binder: Unknown parameter 'st’œKats' [ 33.923795][ T609] tipc: Started in network mode [ 33.928725][ T609] tipc: Node identity 0e386341b57, cluster identity 4711 [ 33.938356][ T609] tipc: Enabled bearer , priority 0 [ 33.946757][ T607] cgroup: release_agent respecified [ 33.946768][ T609] binder: Bad value for 'max' [ 33.949078][ T612] __vm_enough_memory: pid: 612, comm: syz.2.96, bytes: 1152922604118523904 not enough memory for the allocation [ 33.969520][ T608] tipc: Resetting bearer [ 33.983476][ T608] tipc: Disabling bearer [ 34.099702][ T624] rust_binder: Error while translating object. [ 34.099763][ T624] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.106059][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 34.106081][ T36] audit: type=1400 audit(1752990229.260:228): avc: denied { transfer } for pid=623 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 34.142042][ T624] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71 [ 34.189851][ T629] rust_binder: 629: no such ref 1 [ 34.204240][ T629] rust_binder: 629: no such ref 2 [ 34.211885][ T631] rust_binder: Error while translating object. [ 34.211918][ T631] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 34.218136][ T631] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:76 [ 34.288036][ T642] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.304474][ T637] SELinux: security_context_str_to_sid () failed with errno=-22 [ 34.425639][ T653] rust_binder: 653: no such ref 1 [ 34.430939][ T653] rust_binder: 653: no such ref 2 [ 34.745851][ T657] pim6reg1: entered promiscuous mode [ 34.751306][ T657] pim6reg1: entered allmulticast mode [ 34.910066][ T665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'. [ 34.936535][ T667] x_tables: unsorted underflow at hook 4 [ 35.087435][ T682] netlink: 3 bytes leftover after parsing attributes in process `syz.2.120'. [ 35.101606][ T682] netlink: 3 bytes leftover after parsing attributes in process `syz.2.120'. [ 35.110973][ T682] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 35.128189][ T36] audit: type=1400 audit(1752990230.290:229): avc: denied { map } for pid=681 comm="syz.2.120" path="socket:[6165]" dev="sockfs" ino=6165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 35.165769][ T685] rust_binder: Error while translating object. [ 35.165812][ T685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 35.172720][ T685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:110 [ 35.200936][ T36] audit: type=1400 audit(1752990230.360:230): avc: denied { map } for pid=689 comm="syz.2.123" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.222111][ T694] syz.0.125 uses obsolete (PF_INET,SOCK_PACKET) [ 35.247282][ T36] audit: type=1400 audit(1752990230.360:231): avc: denied { read write } for pid=689 comm="syz.2.123" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.267784][ T696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:111 [ 35.285604][ T36] audit: type=1400 audit(1752990230.360:232): avc: denied { map } for pid=691 comm="syz.0.124" path="/36/file0" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.313412][ T700] rust_binder: Error while translating object. [ 35.317144][ T700] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 35.320250][ T36] audit: type=1400 audit(1752990230.360:233): avc: denied { execute } for pid=691 comm="syz.0.124" path="/36/file0" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.326164][ T700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:113 [ 35.334347][ T36] audit: type=1400 audit(1752990230.390:234): avc: denied { bind } for pid=693 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 35.385496][ T36] audit: type=1400 audit(1752990230.390:235): avc: denied { setopt } for pid=693 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 35.471988][ T712] tipc: Enabled bearer , priority 0 [ 35.479468][ T712] tipc: Resetting bearer [ 35.485338][ T65] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 35.512991][ T712] tipc: Disabling bearer [ 35.580956][ T306] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 35.595158][ T36] audit: type=1400 audit(1752990230.760:236): avc: denied { read write } for pid=726 comm="syz.2.137" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 35.620741][ T36] audit: type=1400 audit(1752990230.760:237): avc: denied { open } for pid=726 comm="syz.2.137" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 35.662218][ T65] usb 1-1: not running at top speed; connect to a high speed hub [ 35.670845][ T65] usb 1-1: config 2 has an invalid interface number: 250 but max is 2 [ 35.679144][ T65] usb 1-1: config 2 has an invalid interface number: 7 but max is 2 [ 35.687284][ T65] usb 1-1: config 2 has an invalid interface number: 176 but max is 2 [ 35.702512][ T65] usb 1-1: config 2 has no interface number 0 [ 35.702802][ T734] rust_binder: Write failure EFAULT in pid:137 [ 35.709077][ T65] usb 1-1: config 2 has no interface number 1 [ 35.727841][ T65] usb 1-1: config 2 has no interface number 2 [ 35.734778][ T65] usb 1-1: config 2 interface 250 altsetting 133 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 35.742169][ T306] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 35.746498][ T65] usb 1-1: config 2 interface 250 altsetting 133 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 35.757466][ T306] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 35.768135][ T65] usb 1-1: config 2 interface 250 altsetting 133 has an invalid descriptor for endpoint zero, skipping [ 35.779061][ T306] usb 4-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 35.790433][ T65] usb 1-1: config 2 interface 250 altsetting 133 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 35.803345][ T306] usb 4-1: config 1 interface 0 has no altsetting 0 [ 35.814576][ T65] usb 1-1: config 2 interface 250 altsetting 133 has a duplicate endpoint with address 0x8, skipping [ 35.822681][ T306] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.832113][ T65] usb 1-1: config 2 interface 7 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 35.841608][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.852011][ T65] usb 1-1: config 2 interface 7 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 35.859919][ T306] usb 4-1: Product: syz [ 35.870792][ T65] usb 1-1: config 2 interface 176 altsetting 180 has a duplicate endpoint with address 0xE, skipping [ 35.874897][ T306] usb 4-1: Manufacturer: syz [ 35.886036][ T65] usb 1-1: config 2 interface 176 altsetting 180 has a duplicate endpoint with address 0x1, skipping [ 35.890529][ T306] usb 4-1: SerialNumber: syz [ 35.901562][ T65] usb 1-1: config 2 interface 176 altsetting 180 has a duplicate endpoint with address 0xB, skipping [ 35.907219][ T698] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 35.917191][ T65] usb 1-1: config 2 interface 176 altsetting 180 has a duplicate endpoint with address 0xD, skipping [ 35.924739][ T698] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 35.936792][ T65] usb 1-1: config 2 interface 176 altsetting 180 has a duplicate endpoint with address 0x1, skipping [ 35.942212][ T698] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 35.953289][ T65] usb 1-1: config 2 interface 176 altsetting 180 has a duplicate endpoint with address 0xB, skipping [ 35.971243][ T65] usb 1-1: config 2 interface 176 altsetting 180 has an invalid descriptor for endpoint zero, skipping [ 35.982493][ T65] usb 1-1: config 2 interface 176 altsetting 180 has a duplicate endpoint with address 0x8, skipping [ 35.990983][ T459] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 35.993719][ T65] usb 1-1: config 2 interface 176 altsetting 180 has an invalid descriptor for endpoint zero, skipping [ 36.012255][ T65] usb 1-1: config 2 interface 176 altsetting 180 has a duplicate endpoint with address 0x1, skipping [ 36.023224][ T65] usb 1-1: config 2 interface 176 altsetting 180 has an invalid descriptor for endpoint zero, skipping [ 36.035266][ T65] usb 1-1: config 2 interface 176 altsetting 180 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 36.046443][ T65] usb 1-1: config 2 interface 176 altsetting 180 has a duplicate endpoint with address 0xD, skipping [ 36.057398][ T65] usb 1-1: config 2 interface 250 has no altsetting 0 [ 36.064311][ T65] usb 1-1: config 2 interface 7 has no altsetting 0 [ 36.071002][ T65] usb 1-1: config 2 interface 176 has no altsetting 0 [ 36.079301][ T65] usb 1-1: New USB device found, idVendor=4113, idProduct=0410, bcdDevice=2b.77 [ 36.088424][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.096511][ T65] usb 1-1: Product: syz [ 36.100716][ T65] usb 1-1: Manufacturer: syz [ 36.105366][ T65] usb 1-1: SerialNumber: syz [ 36.111727][ T694] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 36.152151][ T459] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 36.160370][ T459] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.170744][ T459] usb 3-1: config 0 has no interface number 0 [ 36.178577][ T459] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 36.187768][ T459] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.195852][ T459] usb 3-1: Product: syz [ 36.200081][ T459] usb 3-1: Manufacturer: syz [ 36.204753][ T459] usb 3-1: SerialNumber: syz [ 36.210241][ T459] usb 3-1: config 0 descriptor?? [ 36.328510][ T65] usb 1-1: USB disconnect, device number 2 [ 36.378002][ T698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.387186][ T698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.401710][ T306] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 36.428022][ T306] usb 4-1: USB disconnect, device number 7 [ 36.894170][ T753] rust_binder: 746 RLIMIT_NICE not set [ 36.894388][ T753] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 36.907199][ T753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:79 [ 36.931141][ T757] SELinux: security_context_str_to_sid () failed with errno=-22 [ 37.005342][ T776] /dev/rnullb0: Can't open blockdev [ 37.060960][ T785] rust_binder: 775 RLIMIT_NICE not set [ 37.110976][ T794] raw_sendmsg: syz.1.156 forgot to set AF_INET. Fix it! [ 37.153196][ T798] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.153221][ T798] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:102 [ 37.277949][ T808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.161'. [ 37.296462][ T808] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 37.375818][ T813] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 37.392267][ T306] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 37.550941][ T306] usb 4-1: Using ep0 maxpacket: 16 [ 37.557610][ T306] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.568347][ T306] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.579700][ T306] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 37.589400][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.597745][ T306] usb 4-1: Product: ᾚꅭ㎀è³ë¹¶ç„šã¬©æ”ë‹‘ë•‘èŸî´˜ã°²í”™à¯™ï˜î‘°á’•è¢‚쮈ç‘뽸Κ鲓繮䣓食뎨ẹ⨇쭧彫鬽î¹ä¢ªã¬¢á¯£ï¨±ê­ë»„෾젚è”ãªé…žç”–븋渉켵蛉㜛è”༃æ©Ìƒä¼¨æ…œì³Ÿé³•×¿Ç›ì¿šè›½ïˆ„笠줰䥬ࡆ腞浲ࣣೖⓄã«îŠ¡î›´ï€«ç–”î‡ãˆ§è¥’åºç²ì¦¸áª¢ìº¨î†«é½¼ë‡‰í“‡é›­è·˜ëºï¥â¯¯íŽ·î·Šã‚í“¥ï°å”œïš€ç¨§î¥âƒ´î¶¨ë˜â™âšŒì¥ [ 37.631916][ T306] usb 4-1: Manufacturer: ä´ç—Žå´¸ê©à³‘èž‘äµî‘”শ缃꒕홡鹪ﻚ蠾ꥧ찧㡎ꈲ洛峈뙜ロဧ [ 37.643101][ T306] usb 4-1: SerialNumber: 㺖挭싙âœë›é±£ë¦è‹‹ã¬¦ïž™â¿ç…쑿ᔟî¬áŠ“巒ꨗ嚔壅勰찞髞휹ï‘ౠ飊ï¾í„£ç§¨ï¡Œá ¨âŠ²ê¼–汚頰⋆閇ᙉ쫩鄀쳌꺧牌砑䟥앖湔껒㪅â±è–¢è¶œì…‰æ™¥â¥‰ç€žç…§á‚®ã¼žë™¼â©«îº»ã¨¡ä¡‰è®€ã¾·ë„’Ⲇ繊鯽è¨íŒ¢ãº§ì›¦ê“Œê”œç‚²åŠ’몧휤ë¶è¿«á§Œæ‡¤ì–“홵憚㚓怪æ‡æ¢ [ 37.732674][ T815] netlink: 'syz.0.163': attribute type 10 has an invalid length. [ 37.803405][ T822] netlink: 'syz.0.165': attribute type 20 has an invalid length. [ 37.875795][ T796] rtc_cmos 00:00: Alarms can be up to one day in the future [ 37.891123][ T306] usb 4-1: 0:2 : does not exist [ 37.900569][ T306] usb 4-1: USB disconnect, device number 8 [ 37.921733][ T371] udevd[371]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.237003][ T830] mmap: syz.1.167 (830) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.640949][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 38.737349][ T459] usb 3-1: USB disconnect, device number 4 [ 38.756685][ T844] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 38.801229][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 38.812276][ T852] binder: Unknown parameter 'defcontext01777777777777777777777' [ 38.821490][ T9] usb 4-1: config 5 has an invalid interface number: 97 but max is 1 [ 38.829616][ T9] usb 4-1: config 5 has an invalid descriptor of length 36, skipping remainder of the config [ 38.851359][ T9] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 38.860282][ T9] usb 4-1: config 5 has no interface number 0 [ 38.885672][ T9] usb 4-1: config 5 interface 97 has no altsetting 0 [ 38.898046][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=651f, bcdDevice=55.c7 [ 38.903673][ T857] binder: Unknown parameter 'contextÀ' [ 38.917507][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.929715][ T9] usb 4-1: Product: syz [ 38.940956][ T9] usb 4-1: Manufacturer: syz [ 38.945610][ T9] usb 4-1: SerialNumber: syz [ 38.951540][ T859] batadv_slave_0: entered promiscuous mode [ 39.073609][ T854] batadv_slave_0: left promiscuous mode [ 39.169672][ T9] usb 4-1: USB disconnect, device number 9 [ 39.255701][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 39.255722][ T36] audit: type=1400 audit(1752990234.420:260): avc: denied { getopt } for pid=866 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.340943][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.492091][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 39.503847][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.514821][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.524603][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 39.537759][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 39.546832][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.556079][ T10] usb 1-1: config 0 descriptor?? [ 39.730937][ T306] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.762550][ T862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.771239][ T862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.880929][ T306] usb 3-1: Using ep0 maxpacket: 16 [ 39.887325][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.898456][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.908263][ T306] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 39.917363][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.926161][ T306] usb 3-1: config 0 descriptor?? [ 40.088433][ T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 40.095846][ T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 40.103113][ T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 40.110404][ T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x4 [ 40.117720][ T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 40.125069][ T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 40.132395][ T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 40.137451][ T306] hid-multitouch 0003:1FD2:6007.0005: item fetching failed at offset 1/5 [ 40.139717][ T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 40.155709][ T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 40.163356][ T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 40.167967][ T306] hid-multitouch 0003:1FD2:6007.0005: probe with driver hid-multitouch failed with error -22 [ 40.178264][ T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 40.189490][ T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 40.197885][ T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 40.207057][ T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 40.214346][ T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 40.221637][ T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 40.229325][ T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 40.236617][ T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 40.244555][ T10] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 40.253479][ T10] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 40.265273][ T10] microsoft 0003:045E:07DA.0004: no inputs found [ 40.272393][ T10] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 40.353073][ T306] usb 3-1: USB disconnect, device number 5 [ 40.382563][ T887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.184'. [ 40.507771][ T890] binder: Bad value for 'max' [ 40.527572][ T36] audit: type=1400 audit(1752990235.690:261): avc: granted { setsecparam } for pid=891 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 40.547616][ T36] audit: type=1400 audit(1752990235.710:262): avc: denied { accept } for pid=891 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 40.568453][ T36] audit: type=1400 audit(1752990235.720:263): avc: granted { setsecparam } for pid=891 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 40.613536][ T36] audit: type=1400 audit(1752990235.780:264): avc: denied { write } for pid=895 comm="syz.3.188" path="socket:[6896]" dev="sockfs" ino=6896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.642684][ T36] audit: type=1400 audit(1752990235.800:265): avc: denied { write } for pid=895 comm="syz.3.188" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.666239][ T36] audit: type=1400 audit(1752990235.800:266): avc: denied { open } for pid=895 comm="syz.3.188" path="/dev/input/event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.690278][ T36] audit: type=1400 audit(1752990235.800:267): avc: denied { ioctl } for pid=895 comm="syz.3.188" path="/dev/input/event2" dev="devtmpfs" ino=208 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.746497][ T898] 9pnet_fd: Insufficient options for proto=fd [ 40.798642][ T36] audit: type=1400 audit(1752990235.960:268): avc: denied { execute } for pid=899 comm="syz.3.190" path="/46/cpuacct.stat" dev="tmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.858197][ T36] audit: type=1326 audit(1752990236.020:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=904 comm="syz.3.191" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4f2f78e9a9 code=0x0 [ 40.905000][ T907] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 40.912267][ T907] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 40.938218][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.945644][ T908] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 40.945679][ T908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:146 [ 41.291162][ T912] kvm: pic: non byte write [ 41.378520][ T915] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 41.378547][ T915] rust_binder: Read failure Err(EFAULT) in pid:130 [ 41.435784][ T920] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 41.467939][ T922] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 109) [ 41.467961][ T922] rust_binder: Error while translating object. [ 41.478568][ T922] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.484936][ T922] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:161 [ 41.640926][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 41.800911][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 41.812532][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.830974][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 41.840101][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.849399][ T10] usb 2-1: config 0 descriptor?? [ 42.118079][ T65] usb 1-1: USB disconnect, device number 3 [ 42.128902][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 42.153288][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 42.181513][ T10] usb 2-1: USB disconnect, device number 6 [ 42.369048][ T942] kvm: pic: non byte write [ 42.375943][ T942] rust_binder: validate_parent_fixup: new_min_offset=51, sg_entry.length=0 [ 42.375971][ T942] rust_binder: Error while translating object. [ 42.384840][ T942] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.391093][ T942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:155 [ 42.530938][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 42.691396][ T10] usb 2-1: too many configurations: 245, using maximum allowed: 8 [ 42.700086][ T10] usb 2-1: config index 0 descriptor too short (expected 64779, got 72) [ 42.709238][ T10] usb 2-1: config index 1 descriptor too short (expected 64779, got 72) [ 42.718407][ T10] usb 2-1: config index 2 descriptor too short (expected 64779, got 72) [ 42.727550][ T10] usb 2-1: config index 3 descriptor too short (expected 64779, got 72) [ 42.736685][ T10] usb 2-1: config index 4 descriptor too short (expected 64779, got 72) [ 42.745804][ T10] usb 2-1: config index 5 descriptor too short (expected 64779, got 72) [ 42.754960][ T10] usb 2-1: config index 6 descriptor too short (expected 64779, got 72) [ 42.764166][ T10] usb 2-1: config index 7 descriptor too short (expected 64779, got 72) [ 42.773991][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 42.783131][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.791195][ T10] usb 2-1: Product: syz [ 42.795429][ T10] usb 2-1: Manufacturer: syz [ 42.800057][ T10] usb 2-1: SerialNumber: syz [ 42.859645][ T958] /dev/rnullb0: Can't open blockdev [ 42.990910][ T909] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.166456][ T968] rust_binder: Write failure EFAULT in pid:185 [ 43.178252][ T971] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.189014][ T970] rust_binder: Error in use_page_slow: ESRCH [ 43.195612][ T971] rust_binder: Error in use_page_slow: ESRCH [ 43.201656][ T971] rust_binder: use_range failure ESRCH [ 43.207690][ T970] rust_binder: use_range failure ESRCH [ 43.213400][ T970] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 43.219072][ T971] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 43.226960][ T970] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 43.234885][ T971] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 43.234895][ T970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:187 [ 43.253679][ T971] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:187 [ 43.320930][ T459] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 43.357046][ T981] tipc: Cannot configure node identity twice [ 43.460943][ T459] usb 4-1: device descriptor read/64, error -71 [ 43.537404][ T998] binder: Bad value for 'max' [ 43.700925][ T459] usb 4-1: device descriptor read/64, error -71 [ 43.810438][ T1019] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 43.940936][ T459] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 44.070967][ T459] usb 4-1: device descriptor read/64, error -71 [ 44.120939][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 44.270981][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 44.277220][ T10] usb 1-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.288465][ T10] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 44.298577][ T10] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 44.308402][ T10] usb 1-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 44.321525][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 44.328868][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.330972][ T459] usb 4-1: device descriptor read/64, error -71 [ 44.338061][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 44.353187][ T10] usb 1-1: SerialNumber: syz [ 44.358667][ T1023] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 44.366225][ T1023] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 44.451106][ T459] usb usb4-port1: attempt power cycle [ 44.574186][ T1023] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 44.581493][ T1023] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 44.790981][ T459] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 44.812014][ T459] usb 4-1: device descriptor read/8, error -71 [ 44.942113][ T459] usb 4-1: device descriptor read/8, error -71 [ 44.991817][ T10] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 45.013233][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 45.013250][ T36] audit: type=1400 audit(1752990240.180:283): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.043493][ T36] audit: type=1400 audit(1752990240.180:284): avc: denied { read } for pid=148 comm="dhcpcd" name="n16" dev="tmpfs" ino=1467 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.065402][ T36] audit: type=1400 audit(1752990240.180:285): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=1467 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.088360][ T36] audit: type=1400 audit(1752990240.180:286): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=1467 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.111623][ T36] audit: type=1400 audit(1752990240.210:287): avc: denied { read } for pid=1026 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.134826][ T36] audit: type=1400 audit(1752990240.210:288): avc: denied { open } for pid=1026 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.168721][ T306] usb 2-1: USB disconnect, device number 7 [ 45.181629][ T36] audit: type=1400 audit(1752990240.210:289): avc: denied { getattr } for pid=1026 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.193028][ C0] cdc_ether 1-1:1.0 usb0: CDC: unexpected notification 68! [ 45.209853][ T459] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 45.219065][ C0] cdc_ether 1-1:1.0 usb0: CDC: unexpected notification 01! [ 45.224850][ T36] audit: type=1400 audit(1752990240.290:290): avc: denied { write } for pid=1025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.254955][ T36] audit: type=1400 audit(1752990240.290:291): avc: denied { add_name } for pid=1025 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.277986][ T36] audit: type=1400 audit(1752990240.290:292): avc: denied { create } for pid=1025 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.304069][ T459] usb 4-1: device descriptor read/8, error -71 [ 45.441967][ T459] usb 4-1: device descriptor read/8, error -71 [ 45.446194][ T1023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.467408][ T1023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.560937][ T459] usb usb4-port1: unable to enumerate USB device [ 46.017943][ T1059] rust_binder: Error while translating object. [ 46.018003][ T1059] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.024414][ T1059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145 [ 46.079018][ T1063] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1063 comm=syz.3.233 [ 46.147415][ T65] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 46.163253][ T65] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 46.363045][ T1086] rust_binder: 1083 RLIMIT_NICE not set [ 46.366935][ T1083] SELinux: security_context_str_to_sid () failed with errno=-22 [ 46.418204][ T1088] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 46.418225][ T1088] rust_binder: Read failure Err(EFAULT) in pid:163 [ 46.560945][ T306] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 46.671882][ T1108] rust_binder: Error while translating object. [ 46.671930][ T1108] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 46.678251][ T1108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:183 [ 46.720951][ T306] usb 3-1: Using ep0 maxpacket: 16 [ 46.736541][ T306] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.746840][ T306] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.757349][ T306] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 46.766547][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.774720][ T306] usb 3-1: Product: syz [ 46.778964][ T306] usb 3-1: Manufacturer: syz [ 46.783665][ T306] usb 3-1: SerialNumber: syz [ 46.994011][ T306] usb 3-1: 0:2 : does not exist [ 47.011361][ T306] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 47.033725][ T306] usb 3-1: USB disconnect, device number 6 [ 47.054979][ T371] udevd[371]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.565558][ T65] usb 1-1: USB disconnect, device number 4 [ 47.573155][ T65] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 47.714733][ T1145] netlink: 64 bytes leftover after parsing attributes in process `syz.3.252'. [ 47.724822][ T1145] 9pnet_fd: Insufficient options for proto=fd [ 47.811473][ T1153] rust_binder: Failed to allocate buffer. len:18446744073709551448, is_oneway:false [ 47.811505][ T1153] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 47.821037][ T1153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:169 [ 47.865068][ T1155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1155 comm=syz.0.251 [ 47.938841][ T1144] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 121) [ 47.938864][ T1144] rust_binder: Error while translating object. [ 47.949843][ T1144] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.956171][ T1144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:215 [ 48.005824][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.022389][ T1165] rust_binder: 1165: no such ref 0 [ 48.028006][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.028055][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.042044][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.042097][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.055632][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.055680][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.069266][ T1165] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 48.076454][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.076515][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.090018][ T1165] rust_binder: Write failure EINVAL in pid:228 [ 48.090080][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.096329][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.109857][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.109905][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.123525][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.123579][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.137262][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.137316][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.150898][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.150950][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.164481][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.164533][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.178087][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.178138][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.191899][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.191943][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.205504][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.205558][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.219083][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.219127][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.232680][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.232720][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.246256][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.246305][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.259866][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.259909][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.273545][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.273596][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.287191][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.287240][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.300772][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.300813][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.314366][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.314405][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.327927][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.327971][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.341559][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.341616][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.355151][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.355207][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.368712][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.368750][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.382307][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.382357][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.395900][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.395946][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.410131][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.410178][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.423738][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.423780][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.437456][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.437507][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.451072][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.451114][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.464654][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.464700][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.478230][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.478271][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.491822][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.491862][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.505902][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.505947][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.519472][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.519511][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.533169][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.533217][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.546754][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.546807][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.560332][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.560372][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.573908][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.573949][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.587478][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.587529][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.601984][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.602038][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.615869][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.615923][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.631602][ T1169] SELinux: security_context_str_to_sid (syste_uÝGй ‰:éß) failed with errno=-22 [ 48.633520][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.640816][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.654877][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.654927][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.668756][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.668808][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.682511][ T1171] binder: Bad value for 'defcontext' [ 48.687906][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.687956][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.701745][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.701936][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.715683][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.715731][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.729349][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.729406][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.743054][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.743115][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.759042][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.759096][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.777419][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.777470][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.791329][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.791383][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.803842][ T1179] capability: warning: `syz.3.261' uses 32-bit capabilities (legacy support in use) [ 48.805412][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.814552][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.828474][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.828522][ T1167] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 48.843894][ T1167] rust_binder: Write failure EINVAL in pid:228 [ 48.849646][ T1181] netlink: 68 bytes leftover after parsing attributes in process `syz.3.262'. [ 48.875849][ T1181] netlink: 24 bytes leftover after parsing attributes in process `syz.3.262'. [ 48.960716][ T1189] kvm: kvm [1188]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 48.969765][ T1189] kvm: kvm [1188]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 48.987140][ T1189] kvm_intel: kvm [1188]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 48.998739][ T1189] kvm: kvm [1188]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 49.007373][ T1189] kvm: kvm [1188]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 49.016744][ T1194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 49.029044][ T1189] kvm: kvm [1188]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x1 [ 49.031210][ T1196] overlayfs: disabling nfs_export due to verity=require [ 49.042424][ T1189] kvm: kvm [1188]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x1 [ 49.045088][ T1196] overlayfs: missing 'lowerdir' [ 49.053097][ T1189] kvm: kvm [1188]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xfffb [ 49.079060][ T1189] kvm: kvm [1188]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xffed [ 49.088050][ T1189] kvm: kvm [1188]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xffe6 [ 49.102729][ T1189] kvm: kvm [1188]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xffc3 [ 49.153744][ T1201] rust_binder: Error while translating object. [ 49.153783][ T1201] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 49.160144][ T1201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:194 [ 49.409953][ T1227] random: crng reseeded on system resumption [ 49.450919][ T1209] rust_binder: 1206 RLIMIT_NICE not set [ 49.596610][ T1232] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.602289][ T1232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:204 [ 49.860943][ T337] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 50.020930][ T337] usb 3-1: Using ep0 maxpacket: 8 [ 50.027967][ T337] usb 3-1: config 1 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.041156][ T337] usb 3-1: config 1 interface 0 has no altsetting 0 [ 50.049252][ T337] usb 3-1: New USB device found, idVendor=046d, idProduct=c29b, bcdDevice= 0.40 [ 50.058454][ T337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.066652][ T337] usb 3-1: Product: syz [ 50.070907][ T337] usb 3-1: Manufacturer: syz [ 50.075628][ T337] usb 3-1: SerialNumber: syz [ 50.281521][ T1254] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.291540][ T1258] process 'syz.1.287' launched './file0' with NULL argv: empty string added [ 50.293797][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 50.293818][ T36] audit: type=1400 audit(1752990245.460:310): avc: denied { execute } for pid=1257 comm="syz.1.287" name="file0" dev="ramfs" ino=8559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 50.372344][ T36] audit: type=1400 audit(1752990245.460:311): avc: denied { execute_no_trans } for pid=1257 comm="syz.1.287" path="/file0" dev="ramfs" ino=8559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 50.406708][ T36] audit: type=1400 audit(1752990245.460:312): avc: denied { append } for pid=1234 comm="syz.2.279" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.810400][ T337] usbhid 3-1:1.0: can't add hid device: -71 [ 50.826522][ T337] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 50.845493][ T337] usb 3-1: USB disconnect, device number 7 [ 67.311585][ T1278] binder: Bad value for 'max' [ 67.327406][ T1280] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.354064][ T36] audit: type=1400 audit(1752990262.520:313): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=500 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 67.376004][ T337] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 67.377144][ T1287] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 67.397104][ T36] audit: type=1400 audit(1752990262.520:314): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=500 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 67.425490][ T36] audit: type=1400 audit(1752990262.520:315): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=500 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 67.426111][ T337] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 67.589799][ T1305] /dev/rnullb0: Can't open blockdev [ 67.610918][ T36] audit: type=1400 audit(1752990262.770:316): avc: denied { create } for pid=1306 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 67.630961][ T359] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 67.644581][ T36] audit: type=1400 audit(1752990262.780:317): avc: denied { sys_admin } for pid=1306 comm="syz.0.304" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 67.709670][ T36] audit: type=1400 audit(1752990262.870:318): avc: denied { lock } for pid=1314 comm="syz.3.306" path="socket:[8722]" dev="sockfs" ino=8722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 67.726481][ T1317] rust_binder: Write failure EFAULT in pid:275 [ 67.734032][ T306] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 67.748015][ T36] audit: type=1400 audit(1752990262.900:319): avc: denied { mounton } for pid=1314 comm="syz.3.306" path="/78/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 67.758402][ T1322] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 67.822333][ T359] usb 3-1: unable to get BOS descriptor or descriptor too short [ 67.830397][ T359] usb 3-1: not running at top speed; connect to a high speed hub [ 67.839555][ T359] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 67.847818][ T359] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 67.857993][ T359] usb 3-1: config 4 has no interface number 0 [ 67.866223][ T359] usb 3-1: string descriptor 0 read error: -22 [ 67.872924][ T359] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 67.882024][ T359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.892088][ T359] usb 3-1: Found UVC 0.00 device (04f2:b746) [ 67.899089][ T359] usb 3-1: No valid video chain found. [ 67.912155][ T306] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 67.923267][ T306] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 67.934119][ T306] usb 2-1: config 0 interface 0 has no altsetting 0 [ 67.940762][ T306] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 67.949923][ T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.958657][ T306] usb 2-1: config 0 descriptor?? [ 67.964453][ T1298] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 68.020931][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 68.093182][ T337] usb 3-1: USB disconnect, device number 8 [ 68.170940][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 68.177221][ T9] usb 1-1: config 0 has an invalid interface number: 97 but max is 0 [ 68.185528][ T9] usb 1-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 68.195976][ T9] usb 1-1: config 0 has no interface number 0 [ 68.202124][ T9] usb 1-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 68.213170][ T9] usb 1-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 68.220957][ T359] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 68.226416][ T9] usb 1-1: config 0 interface 97 has no altsetting 0 [ 68.242201][ T9] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 68.251670][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.259684][ T9] usb 1-1: Product: syz [ 68.263957][ T9] usb 1-1: Manufacturer: syz [ 68.268581][ T9] usb 1-1: SerialNumber: syz [ 68.274071][ T9] usb 1-1: config 0 descriptor?? [ 68.381980][ T359] usb 4-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 68.390777][ T359] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 68.399933][ T359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 68.411172][ T359] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 68.420258][ T359] usb 4-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 68.428418][ T359] usb 4-1: Product: syz [ 68.432653][ T359] usb 4-1: Manufacturer: syz [ 68.437447][ T359] usb 4-1: SerialNumber: syz [ 68.443045][ T359] usb 4-1: config 0 descriptor?? [ 68.509205][ T1325] overlay: ./file0 is not a directory [ 68.517301][ T9] dm9601 1-1:0.97: probe with driver dm9601 failed with error -22 [ 68.525555][ T9] sr9700 1-1:0.97: probe with driver sr9700 failed with error -22 [ 68.534721][ T9] usb 1-1: USB disconnect, device number 5 [ 68.575376][ T36] audit: type=1400 audit(1752990263.740:320): avc: denied { getopt } for pid=1297 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.577537][ T306] usbhid 2-1:0.0: can't add hid device: -71 [ 68.601037][ T306] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 68.619256][ T306] usb 2-1: USB disconnect, device number 8 [ 68.650966][ T359] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 68.691979][ T1281] udevd[1281]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.850961][ T337] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 68.861365][ T9] usb 4-1: USB disconnect, device number 14 [ 68.980990][ T337] usb 3-1: device descriptor read/64, error -71 [ 69.220935][ T337] usb 3-1: device descriptor read/64, error -71 [ 69.421168][ T306] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 69.426603][ T1346] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.460946][ T337] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 69.550943][ T306] usb 2-1: device descriptor read/64, error -71 [ 69.565957][ T36] audit: type=1400 audit(1752990264.730:321): avc: denied { read } for pid=1352 comm="syz.0.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.566195][ T1353] random: crng reseeded on system resumption [ 69.600942][ T337] usb 3-1: device descriptor read/64, error -71 [ 69.790928][ T306] usb 2-1: device descriptor read/64, error -71 [ 69.890984][ T337] usb 3-1: device descriptor read/64, error -71 [ 70.001710][ T337] usb usb3-port1: attempt power cycle [ 70.030936][ T306] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 70.160924][ T306] usb 2-1: device descriptor read/64, error -71 [ 70.337729][ T1366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.351134][ T337] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 70.382048][ T337] usb 3-1: device descriptor read/8, error -71 [ 70.399526][ T36] audit: type=1400 audit(1752990265.560:322): avc: denied { accept } for pid=1369 comm="syz.3.324" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.419712][ T306] usb 2-1: device descriptor read/64, error -71 [ 70.511903][ T337] usb 3-1: device descriptor read/8, error -71 [ 70.531049][ T306] usb usb2-port1: attempt power cycle [ 70.750922][ T337] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 70.781861][ T337] usb 3-1: device descriptor read/8, error -71 [ 70.870910][ T306] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 70.892048][ T306] usb 2-1: device descriptor read/8, error -71 [ 70.912193][ T337] usb 3-1: device descriptor read/8, error -71 [ 71.021019][ T337] usb usb3-port1: unable to enumerate USB device [ 71.021979][ T306] usb 2-1: device descriptor read/8, error -71 [ 71.210910][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 71.280936][ T306] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 71.311962][ T306] usb 2-1: device descriptor read/8, error -71 [ 71.370902][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 71.380133][ T9] usb 4-1: config index 0 descriptor too short (expected 786, got 42) [ 71.399562][ T9] usb 4-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 71.419965][ T9] usb 4-1: config 0 has no interfaces? [ 71.436963][ T9] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 71.451904][ T306] usb 2-1: device descriptor read/8, error -71 [ 71.456193][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.476239][ T9] usb 4-1: Product: syz [ 71.480461][ T9] usb 4-1: Manufacturer: syz [ 71.500905][ T9] usb 4-1: SerialNumber: syz [ 71.519245][ T9] usb 4-1: config 0 descriptor?? [ 71.561053][ T306] usb usb2-port1: unable to enumerate USB device [ 71.742570][ T306] usb 4-1: USB disconnect, device number 15 [ 72.048438][ T1390] netlink: 'syz.2.333': attribute type 4 has an invalid length. [ 72.059061][ T1390] netlink: 'syz.2.333': attribute type 4 has an invalid length. [ 72.400287][ T1408] batadv_slave_0: entered promiscuous mode [ 72.465460][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 72.465478][ T36] audit: type=1400 audit(1752990267.630:326): avc: denied { search } for pid=1391 comm="syz.2.334" name="/" dev="configfs" ino=1159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.530986][ T36] audit: type=1400 audit(1752990267.630:327): avc: denied { read } for pid=1391 comm="syz.2.334" name="/" dev="configfs" ino=1159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.581433][ T36] audit: type=1400 audit(1752990267.630:328): avc: denied { open } for pid=1391 comm="syz.2.334" path="/" dev="configfs" ino=1159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.613525][ T36] audit: type=1400 audit(1752990267.780:329): avc: denied { ioctl } for pid=1391 comm="syz.2.334" path="/" dev="configfs" ino=1159 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.650357][ T1408] batadv_slave_0: left promiscuous mode [ 72.685396][ T1416] /dev/rnullb0: Can't open blockdev [ 73.101818][ T36] audit: type=1400 audit(1752990268.260:330): avc: denied { mounton } for pid=1434 comm="syz.1.347" path="/77/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 73.184190][ T36] audit: type=1400 audit(1752990268.350:331): avc: denied { getopt } for pid=1429 comm="syz.3.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.301441][ T36] audit: type=1326 audit(1752990268.470:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1440 comm="syz.3.349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f2f78e9a9 code=0x0 [ 73.338188][ T36] audit: type=1326 audit(1752990268.470:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1440 comm="syz.3.349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f2f78e9a9 code=0x0 [ 73.373918][ T36] audit: type=1326 audit(1752990268.490:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1440 comm="syz.3.349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=16 compat=0 ip=0x7f4f2f78e9a9 code=0x0 [ 73.396861][ T36] audit: type=1326 audit(1752990268.520:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1440 comm="syz.3.349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f2f78e9a9 code=0x0 [ 73.470930][ T306] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 73.642032][ T306] usb 2-1: config 0 has an invalid interface number: 144 but max is 0 [ 73.650364][ T306] usb 2-1: config 0 has no interface number 0 [ 73.662079][ T306] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9e.0a [ 73.672308][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.687361][ T306] usb 2-1: Product: syz [ 73.700931][ T306] usb 2-1: Manufacturer: syz [ 73.706144][ T306] usb 2-1: SerialNumber: syz [ 73.715253][ T306] usb 2-1: config 0 descriptor?? [ 73.722692][ T306] usb_ehset_test 2-1:0.144: probe with driver usb_ehset_test failed with error -32 [ 73.762155][ T1468] input: syz1 as /devices/virtual/input/input6 [ 73.772203][ T1466] rust_binder: Error while translating object. [ 73.772244][ T1466] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.778511][ T1466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:253 [ 73.782615][ T1468] rust_binder: Error while translating object. [ 73.797511][ T1468] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.803858][ T1468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:309 [ 73.879937][ T1477] netlink: 'syz.0.361': attribute type 6 has an invalid length. [ 73.896932][ T1477] IPv6: NLM_F_CREATE should be specified when creating new route [ 73.982440][ T306] usb 2-1: USB disconnect, device number 13 [ 74.049824][ T31] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 74.061628][ T31] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.210905][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 74.328028][ T1493] input: syz1 as /devices/virtual/input/input7 [ 74.344487][ T1493] /dev/rnullb0: Can't open blockdev [ 74.360910][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 74.368882][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.378346][ T1495] /dev/rnullb0: Can't open blockdev [ 74.389507][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.405766][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 74.415134][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.423533][ T10] usb 1-1: Product: syz [ 74.427964][ T10] usb 1-1: Manufacturer: syz [ 74.432826][ T10] usb 1-1: SerialNumber: syz [ 74.523901][ T1498] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 74.540450][ T1498] rust_binder: Write failure EINVAL in pid:303 [ 74.682591][ T1481] usb usb8: usbfs: process 1481 (syz.0.362) did not claim interface 0 before use [ 74.703580][ T10] usb 1-1: 0:2 : does not exist [ 74.715295][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 74.736285][ T10] usb 1-1: USB disconnect, device number 6 [ 74.742622][ T1531] bpf: Bad value for 'mode' [ 74.758489][ T1281] udevd[1281]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.785310][ T1531] 9pnet_fd: Insufficient options for proto=fd [ 75.000674][ T1557] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.001284][ T1557] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 75.067205][ T1560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.109454][ T1564] tipc: Enabling of bearer rejected, media not registered [ 75.287535][ T1567] rust_binder: 1566 RLIMIT_NICE not set [ 75.287677][ T1567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:325 [ 75.294013][ T1566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.360956][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 75.392453][ T1578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'. [ 75.402132][ T1578] 9pnet_fd: Insufficient options for proto=fd [ 75.447823][ T1589] netlink: 'syz.1.399': attribute type 27 has an invalid length. [ 75.529054][ T1592] overlay: ./file1 is not a directory [ 75.530929][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 75.541035][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.551265][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.561924][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.064512][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.072612][ T10] usb 4-1: Product: syz [ 76.076939][ T10] usb 4-1: Manufacturer: syz [ 76.081624][ T10] usb 4-1: SerialNumber: syz [ 76.311482][ T10] usb 4-1: 0:2 : does not exist [ 76.323377][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 76.344522][ T10] usb 4-1: USB disconnect, device number 16 [ 76.366549][ T1281] udevd[1281]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.376732][ T1604] rust_binder: Error while translating object. [ 76.382500][ T1604] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 76.388858][ T1604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:346 [ 76.424648][ T1606] SELinux: security_context_str_to_sid (un) failed with errno=-22 [ 77.186028][ T1618] netlink: 3 bytes leftover after parsing attributes in process `syz.2.408'. [ 77.194927][ T1618] netlink: 3 bytes leftover after parsing attributes in process `syz.2.408'. [ 77.203918][ T1618] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 77.460907][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 77.621925][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.643658][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.663558][ T10] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 77.682386][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.698745][ T10] usb 3-1: config 0 descriptor?? [ 77.797352][ T1626] rust_binder: Error while translating object. [ 77.797386][ T1626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 77.803918][ T1626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:331 [ 78.440943][ T348] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 78.580922][ T348] usb 1-1: device descriptor read/64, error -71 [ 78.711885][ T10] uclogic 0003:256C:006D.0009: interface is invalid, ignoring [ 78.820943][ T348] usb 1-1: device descriptor read/64, error -71 [ 78.991669][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 78.991719][ T36] audit: type=1400 audit(1752990274.160:362): avc: denied { read } for pid=1650 comm="syz.3.417" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 79.020476][ T36] audit: type=1400 audit(1752990274.160:361): avc: denied { read } for pid=1650 comm="syz.3.417" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 79.043132][ T36] audit: type=1400 audit(1752990274.160:364): avc: denied { open } for pid=1650 comm="syz.3.417" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 79.043191][ T1652] binder: Unknown parameter '' [ 79.066950][ T36] audit: type=1400 audit(1752990274.160:363): avc: denied { open } for pid=1650 comm="syz.3.417" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 79.081717][ T348] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 79.097355][ T1653] binder: Unknown parameter '' [ 79.174742][ T9] usb 3-1: USB disconnect, device number 13 [ 79.261119][ T348] usb 1-1: device descriptor read/64, error -71 [ 79.512013][ T348] usb 1-1: device descriptor read/64, error -71 [ 79.531713][ T1671] netlink: 'syz.3.423': attribute type 13 has an invalid length. [ 79.546319][ T1671] binder: Unknown parameter 'secl•÷ç{ab' [ 79.616785][ T1676] netlink: 196 bytes leftover after parsing attributes in process `syz.3.425'. [ 79.631208][ T348] usb usb1-port1: attempt power cycle [ 79.640219][ T1676] netlink: 104 bytes leftover after parsing attributes in process `syz.3.425'. [ 79.769593][ T1693] overlay: Unknown parameter 'fsuuid' [ 79.797340][ T36] audit: type=1400 audit(1752990274.960:365): avc: denied { name_bind } for pid=1680 comm="syz.3.426" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 79.837038][ T36] audit: type=1400 audit(1752990274.980:366): avc: denied { name_bind } for pid=1696 comm="syz.2.430" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 79.859513][ T36] audit: type=1400 audit(1752990274.980:367): avc: denied { write } for pid=1696 comm="syz.2.430" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.891749][ T36] audit: type=1400 audit(1752990274.980:368): avc: denied { remove_name } for pid=1696 comm="syz.2.430" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.944015][ T36] audit: type=1400 audit(1752990274.980:369): avc: denied { unlink } for pid=1696 comm="syz.2.430" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.970937][ T348] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 80.011932][ T348] usb 1-1: device descriptor read/8, error -71 [ 80.085038][ T36] audit: type=1400 audit(1752990275.250:370): avc: denied { setopt } for pid=1724 comm="syz.2.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.151900][ T348] usb 1-1: device descriptor read/8, error -71 [ 80.208811][ T1734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=578 sclass=netlink_route_socket pid=1734 comm=syz.1.441 [ 80.260901][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 80.354357][ T1755] SELinux: security_context_str_to_sid () failed with errno=-22 [ 80.362366][ T1755] SELinux: security_context_str_to_sid () failed with errno=-22 [ 80.391118][ T348] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 80.420971][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 80.427290][ T348] usb 1-1: device descriptor read/8, error -71 [ 80.440360][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.451511][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 80.462408][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 80.472145][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.483257][ T9] usb 4-1: config 1 interface 1 has no altsetting 0 [ 80.491265][ T1762] syzkaller0: entered promiscuous mode [ 80.491543][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.496849][ T1762] syzkaller0: entered allmulticast mode [ 80.506161][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.515265][ T1762] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:319 [ 80.519678][ T9] usb 4-1: Product: syz [ 80.533216][ T9] usb 4-1: Manufacturer: syz [ 80.537856][ T9] usb 4-1: SerialNumber: syz [ 80.581867][ T348] usb 1-1: device descriptor read/8, error -71 [ 80.634619][ T1764] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 80.691266][ T348] usb usb1-port1: unable to enumerate USB device [ 80.748164][ T1716] binder: Unknown parameter '18446744073709551615' [ 80.756770][ T9] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 80.764785][ T9] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 80.778326][ T9] usb 4-1: USB disconnect, device number 17 [ 80.795627][ T1288] udevd[1288]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 81.230104][ T1775] sock: sock_timestamping_bind_phc: sock not bind to device [ 81.529783][ T1780] __vm_enough_memory: pid: 1780, comm: syz.2.455, bytes: 1152922604118523904 not enough memory for the allocation [ 81.620909][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 81.782201][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.793365][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.808687][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.831177][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.843640][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.860947][ T45] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 81.861795][ T9] usb 1-1: config 0 descriptor?? [ 82.030900][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 82.042006][ T45] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 82.051544][ T45] usb 3-1: config 0 has no interface number 0 [ 82.062018][ T45] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 82.081046][ T45] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 82.092837][ T45] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 82.102275][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.117773][ T45] usb 3-1: Product: syz [ 82.122487][ T45] usb 3-1: Manufacturer: syz [ 82.127135][ T45] usb 3-1: SerialNumber: syz [ 82.138195][ T45] usb 3-1: config 0 descriptor?? [ 82.143843][ T1796] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 82.151233][ T1796] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 82.279690][ T9] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 82.291020][ T9] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 82.307842][ T9] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 82.359138][ T1796] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 82.366549][ T1796] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 82.543044][ T1775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.552432][ T1775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.561493][ T9] usb 1-1: USB disconnect, device number 11 [ 82.635475][ T45] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 82.645684][ T45] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 82.655448][ T45] asix 3-1:0.251: probe with driver asix failed with error -5 [ 82.663947][ T45] usb 3-1: USB disconnect, device number 14 [ 83.146627][ T1847] proc: Bad value for 'gid' [ 83.406731][ T1870] rust_binder: Error in use_page_slow: ESRCH [ 83.406777][ T1870] rust_binder: use_range failure ESRCH [ 83.412948][ T1869] rust_binder: Error in use_page_slow: ESRCH [ 83.418503][ T1869] rust_binder: use_range failure ESRCH [ 83.421394][ T1870] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 83.425769][ T1869] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 83.430534][ T1870] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 83.444322][ T1869] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 83.455346][ T1869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:366 [ 83.460809][ T1870] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:366 [ 83.505817][ T1873] netlink: 72 bytes leftover after parsing attributes in process `syz.2.486'. [ 83.513106][ T1877] netlink: 'syz.1.485': attribute type 11 has an invalid length. [ 83.548121][ T1880] netlink: 'syz.1.487': attribute type 12 has an invalid length. [ 83.689822][ T1884] batadv_slave_0: entered promiscuous mode [ 83.697645][ T1883] batadv_slave_0: left promiscuous mode [ 83.752098][ T1896] 9pnet_fd: p9_fd_create_unix (1896): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 83.952270][ T1908] tipc: Cannot configure node identity twice [ 83.958396][ T1908] tipc: Cannot configure node identity twice [ 83.989169][ T1911] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 83.989198][ T1911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:376 [ 84.083293][ T1915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.101708][ T1915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.251217][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 84.251237][ T36] audit: type=1400 audit(1752990279.420:384): avc: denied { execute } for pid=1921 comm="syz.0.501" path="/120/memory.events" dev="tmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.686228][ T36] audit: type=1400 audit(1752990279.850:385): avc: denied { create } for pid=1948 comm="syz.0.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.716073][ T36] audit: type=1400 audit(1752990279.850:386): avc: denied { read write } for pid=1948 comm="syz.0.510" dev="sockfs" ino=13128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.729013][ T1955] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 84.747808][ T45] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 84.748808][ T36] audit: type=1400 audit(1752990279.850:387): avc: denied { name_bind } for pid=1948 comm="syz.0.510" path="socket:[13128]" dev="sockfs" ino=13128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.780945][ T36] audit: type=1400 audit(1752990279.920:388): avc: denied { relabelto } for pid=1954 comm="syz.3.512" name="file0" dev="tmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 84.808650][ T36] audit: type=1400 audit(1752990279.920:389): avc: denied { associate } for pid=1954 comm="syz.3.512" name="file0" dev="tmpfs" ino=706 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 84.809875][ T1957] netlink: 140 bytes leftover after parsing attributes in process `syz.3.513'. [ 84.835985][ T36] audit: type=1400 audit(1752990280.933:390): avc: denied { unlink } for pid=291 comm="syz-executor" name="file0" dev="tmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 84.896008][ T1957] tipc: Enabling of bearer rejected, failed to enable media [ 84.920952][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 84.927204][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.938131][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.947941][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.960942][ T45] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 84.962294][ T1959] rust_binder: 1957 RLIMIT_NICE not set [ 84.970019][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.984757][ T45] usb 3-1: config 0 descriptor?? [ 85.396180][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 85.403552][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 85.410809][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 85.418157][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 85.425422][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 85.432728][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 85.440032][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 85.447306][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 85.454603][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 85.461898][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 85.469132][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 85.476844][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 85.484128][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 85.491410][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 85.498667][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 85.510617][ T45] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000B/input/input9 [ 85.529217][ T45] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 85.600636][ T1943] netlink: 'syz.2.508': attribute type 2 has an invalid length. [ 85.609105][ T36] audit: type=1400 audit(1752990281.773:391): avc: denied { write } for pid=1977 comm="syz.0.520" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 85.609467][ T45] usb 3-1: USB disconnect, device number 15 [ 85.918098][ T1990] overlayfs: failed to clone upperpath [ 85.925387][ T1990] tipc: Enabling of bearer rejected, failed to enable media [ 85.950750][ T1992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.526'. [ 85.960328][ T1992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.526'. [ 86.031508][ T2000] 9pnet_fd: Insufficient options for proto=fd [ 86.073567][ T36] audit: type=1400 audit(1752990282.243:392): avc: denied { connect } for pid=2003 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.250884][ T36] audit: type=1400 audit(1752990282.413:393): avc: denied { watch watch_reads } for pid=2011 comm="syz.2.533" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 86.431842][ T2025] overlayfs: failed to clone upperpath [ 86.509964][ T2029] mmap: syz.1.538 (2029): VmData 29081600 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 86.552066][ T2029] overlayfs: failed to clone upperpath [ 86.595510][ T2033] binder: Unknown parameter 'rw.' [ 86.790715][ T2038] 9pnet_fd: Insufficient options for proto=fd [ 86.840930][ T306] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 87.000885][ T306] usb 3-1: Using ep0 maxpacket: 16 [ 87.013287][ T306] usb 3-1: config 0 has an invalid interface number: 218 but max is 0 [ 87.025983][ T306] usb 3-1: config 0 has no interface number 0 [ 87.038899][ T306] usb 3-1: config 0 interface 218 has no altsetting 0 [ 87.053432][ T306] usb 3-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice=4d.ad [ 87.063875][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.080903][ T306] usb 3-1: Product: syz [ 87.091042][ T306] usb 3-1: Manufacturer: syz [ 87.096504][ T306] usb 3-1: SerialNumber: syz [ 87.111002][ T306] usb 3-1: config 0 descriptor?? [ 87.326178][ T306] snd-usb-audio 3-1:0.218: probe with driver snd-usb-audio failed with error -2 [ 87.355343][ T306] usb 3-1: USB disconnect, device number 16 [ 87.356177][ T1281] udevd[1281]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.218/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.650320][ T2075] rust_binder: Failed to allocate buffer. len:18446744073709551448, is_oneway:false [ 87.650355][ T2075] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 87.671609][ T2075] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:402 [ 87.739861][ T2077] overlayfs: failed to resolve './file0': -2 [ 87.900150][ T2083] fuse: Unknown parameter 'root¿Âtmode' [ 88.230896][ T306] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 88.390890][ T306] usb 4-1: Using ep0 maxpacket: 16 [ 88.397331][ T306] usb 4-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.408724][ T306] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 88.418992][ T306] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 88.429085][ T306] usb 4-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 88.442472][ T306] usb 4-1: config 1 interface 0 has no altsetting 0 [ 88.449983][ T306] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.459424][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 88.467721][ T306] usb 4-1: SerialNumber: syz [ 88.473789][ T2090] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 88.481292][ T2090] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 88.692118][ T2090] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 88.710767][ T2090] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 88.937024][ T2103] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2549184248 (40786947968 ns) > initial count (38013993840 ns). Using initial count to start timer. [ 88.971271][ T2103] kvm: Disabled LAPIC found during irq injection [ 89.122916][ T2108] overlayfs: failed to clone lowerpath [ 89.140638][ T306] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 89.260904][ T36] kauditd_printk_skb: 2588 callbacks suppressed [ 89.260924][ T36] audit: type=1326 audit(1752990285.423:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2095 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d018e9a9 code=0x50000 [ 89.301973][ T36] audit: type=1326 audit(1752990285.423:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2095 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d018e9a9 code=0x50000 [ 89.340279][ T36] audit: type=1326 audit(1752990285.423:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2095 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d018e9a9 code=0x50000 [ 89.366793][ T36] audit: type=1326 audit(1752990285.423:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2095 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d018e9a9 code=0x50000 [ 89.409654][ T36] audit: type=1326 audit(1752990285.423:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2095 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d018e9a9 code=0x50000 [ 89.443904][ T2135] netlink: 'syz.1.572': attribute type 1 has an invalid length. [ 89.455852][ T36] audit: type=1326 audit(1752990285.423:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2095 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d018e9a9 code=0x50000 [ 89.499793][ T36] audit: type=1326 audit(1752990285.423:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2095 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d018e9a9 code=0x50000 [ 89.537116][ T36] audit: type=1326 audit(1752990285.453:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2095 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d018e9a9 code=0x50000 [ 89.566918][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 68! [ 89.576202][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 01! [ 89.595298][ T36] audit: type=1326 audit(1752990285.453:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2095 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d018e9a9 code=0x50000 [ 89.638266][ T36] audit: type=1326 audit(1752990285.453:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2095 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d018e9a9 code=0x50000 [ 89.792478][ T306] usb 4-1: USB disconnect, device number 18 [ 89.807291][ T306] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 89.991265][ T2169] netlink: 148 bytes leftover after parsing attributes in process `syz.0.575'. [ 90.045434][ T2177] 9pnet_fd: Insufficient options for proto=fd [ 90.206672][ T2200] rust_binder: 2196 RLIMIT_NICE not set [ 90.383169][ T2220] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 90.389286][ T2220] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 90.399379][ T2220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:420 [ 90.617371][ T2243] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 90.640927][ T2243] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:462 [ 91.854389][ T2308] 9pnet_fd: Insufficient options for proto=fd [ 92.076722][ T2327] cgroup: Unknown subsys name 'measure' [ 92.083638][ T2327] rust_binder: 2326 RLIMIT_NICE not set [ 92.118963][ T2335] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.137650][ T2334] rust_binder: Error in use_page_slow: ESRCH [ 92.137671][ T2334] rust_binder: use_range failure ESRCH [ 92.143983][ T2334] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 92.149510][ T2334] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 92.157386][ T2334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:419 [ 92.178826][ T2337] netlink: 'syz.2.628': attribute type 13 has an invalid length. [ 92.461982][ T2363] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 92.481407][ T2363] futex_wake_op: syz.3.636 tries to shift op by 144; fix this program [ 92.578075][ T2371] rust_binder: 2369 RLIMIT_NICE not set [ 92.624253][ T2375] overlayfs: failed to clone upperpath [ 92.637584][ T2375] netlink: 393 bytes leftover after parsing attributes in process `syz.0.641'. [ 92.692124][ T2384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.645'. [ 92.720146][ T2389] fuse: Bad value for 'fd' [ 92.750412][ T2393] rust_binder: 2394 RLIMIT_NICE not set [ 92.750591][ T2395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:461 [ 92.977901][ T2414] netlink: 'syz.0.656': attribute type 2 has an invalid length. [ 92.994762][ T348] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 93.002471][ T2414] netlink: 1 bytes leftover after parsing attributes in process `syz.0.656'. [ 93.058282][ T2417] overlayfs: missing 'lowerdir' [ 93.162186][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.173331][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.187736][ T348] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 93.200918][ T348] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.210402][ T348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.219299][ T348] usb 4-1: config 0 descriptor?? [ 93.434919][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.442538][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.457735][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.466118][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.473676][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.481429][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.488935][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.496700][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.504167][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.511672][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.520916][ T2438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'. [ 93.536581][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.554276][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.561869][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.569301][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.576945][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.584516][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.592099][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.600820][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.608461][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.619779][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.629316][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.637143][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.644779][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.652294][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.662090][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.669652][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.677306][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.684789][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.692284][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.699913][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.709085][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.716918][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.724489][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.732020][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.741626][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.749087][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.758250][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.765800][ T348] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.773563][ T348] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 93.789421][ T348] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 93.793446][ T2456] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1735930343 (6943721372 ns) > initial count (3280091632 ns). Using initial count to start timer. [ 93.819423][ T348] usb 4-1: USB disconnect, device number 19 [ 93.835228][ T2455] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 93.838449][ T2457] fido_id[2457]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 93.843989][ T2455] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 94.014105][ T2463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2463 comm=syz.3.669 [ 94.027792][ T2463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.027824][ T2463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.034346][ T2463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.040863][ T2463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.047312][ T2463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.053958][ T2463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.060551][ T2463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.067263][ T2463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.074072][ T2463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.089463][ T2463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.098434][ T2467] netlink: 165 bytes leftover after parsing attributes in process `syz.0.670'. [ 94.194275][ T2486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.671'. [ 94.202089][ T2485] netlink: 76 bytes leftover after parsing attributes in process `syz.2.676'. [ 94.282826][ T2505] overlayfs: failed to resolve './file1': -2 [ 94.289272][ T2508] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 94.314354][ T2515] binder: Unknown parameter 'fscontext?}' [ 94.331187][ T2515] syzkaller0: left promiscuous mode [ 94.336440][ T2515] syzkaller0: left allmulticast mode [ 94.356490][ T2518] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 94.356522][ T2518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:465 [ 94.405033][ T36] kauditd_printk_skb: 10108 callbacks suppressed [ 94.405067][ T36] audit: type=1400 audit(1752990547.571:13100): avc: denied { shutdown } for pid=2522 comm="syz.2.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.440778][ T36] audit: type=1400 audit(1752990547.571:13101): avc: denied { read } for pid=2522 comm="syz.2.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.700787][ T348] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 94.850814][ T348] usb 3-1: Using ep0 maxpacket: 16 [ 94.860143][ T348] usb 3-1: config index 0 descriptor too short (expected 786, got 42) [ 94.868479][ T348] usb 3-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 94.878999][ T348] usb 3-1: config 0 has no interfaces? [ 94.886121][ T348] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 94.895352][ T348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.903408][ T348] usb 3-1: Product: syz [ 94.907761][ T348] usb 3-1: Manufacturer: syz [ 94.912431][ T348] usb 3-1: SerialNumber: syz [ 94.917917][ T348] usb 3-1: config 0 descriptor?? [ 94.997384][ T2531] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 95.006193][ T2531] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 95.015689][ T2531] overlayfs: missing 'lowerdir' [ 95.125136][ T36] audit: type=1400 audit(1752990548.291:13102): avc: denied { listen } for pid=2525 comm="syz.2.690" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.149463][ T348] usb 3-1: USB disconnect, device number 17 [ 95.161378][ T36] audit: type=1400 audit(1752990548.321:13103): avc: denied { ioctl } for pid=2538 comm="syz.0.694" path="socket:[15822]" dev="sockfs" ino=15822 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.195161][ T36] audit: type=1400 audit(1752990548.361:13104): avc: denied { ioctl } for pid=2540 comm="syz.3.695" path="socket:[15831]" dev="sockfs" ino=15831 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 95.676866][ T2560] rust_binder: Error while translating object. [ 95.676912][ T2560] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 95.683695][ T2560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:474 [ 95.742483][ T2563] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2563 comm=syz.2.703 [ 95.876864][ T2585] 9pnet_fd: Insufficient options for proto=fd [ 95.907809][ T36] audit: type=1400 audit(1752990549.071:13105): avc: denied { read } for pid=2591 comm="syz.0.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.020769][ T31] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 96.091170][ T2595] sit0: entered promiscuous mode [ 96.097426][ T2595] netlink: 'syz.3.714': attribute type 1 has an invalid length. [ 96.105214][ T2595] netlink: 1 bytes leftover after parsing attributes in process `syz.3.714'. [ 96.118990][ T2595] overlay: ./file0 is not a directory [ 96.170754][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 96.177961][ T31] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 96.186922][ T31] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 96.197096][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.207583][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.216733][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.224849][ T31] usb 3-1: Product: syz [ 96.229044][ T31] usb 3-1: Manufacturer: syz [ 96.233721][ T31] usb 3-1: SerialNumber: syz [ 96.378926][ T2605] rust_binder: Write failure EFAULT in pid:524 [ 96.803528][ T2619] netlink: 5 bytes leftover after parsing attributes in process `syz.0.722'. [ 96.818716][ T2619] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 96.825554][ T2619] 0ªî{X¹¦: entered allmulticast mode [ 96.831355][ T2619] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 96.848640][ T2620] netlink: 5 bytes leftover after parsing attributes in process `syz.0.722'. [ 96.857633][ T2620] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 96.865296][ T2620] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 96.882720][ T2569] rust_binder: Error while translating object. [ 96.882759][ T2569] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 96.889075][ T2569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:481 [ 96.900716][ T2624] overlayfs: failed to clone upperpath [ 96.969391][ T31] usb 3-1: 0:2 : does not exist [ 96.982894][ T31] usb 3-1: USB disconnect, device number 18 [ 97.000086][ T2640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 97.096693][ T2659] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 97.616150][ T2675] rust_binder: Failed to allocate buffer. len:18446744073709551448, is_oneway:false [ 97.707826][ T2675] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 97.717329][ T2675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:545 [ 97.843872][ T36] audit: type=1400 audit(1752990551.001:13106): avc: denied { mounton } for pid=2692 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 97.898820][ T36] audit: type=1326 audit(1752990551.061:13107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2698 comm="syz.0.750" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb63738e9a9 code=0x0 [ 98.882290][ T36] audit: type=1400 audit(1752990552.051:13108): avc: denied { ioctl } for pid=2732 comm="syz.3.758" path="/dev/usbmon6" dev="devtmpfs" ino=109 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 99.170791][ T31] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 99.322342][ T31] usb 4-1: config 14 has an invalid interface number: 34 but max is 3 [ 99.330652][ T31] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 99.340954][ T31] usb 4-1: config 14 has 1 interface, different from the descriptor's value: 4 [ 99.349916][ T31] usb 4-1: config 14 has no interface number 0 [ 99.356129][ T31] usb 4-1: config 14 interface 34 altsetting 75 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 99.369335][ T31] usb 4-1: config 14 interface 34 has no altsetting 0 [ 99.377565][ T31] usb 4-1: New USB device found, idVendor=1286, idProduct=2049, bcdDevice=7e.e6 [ 99.386770][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.394790][ T31] usb 4-1: Product: syz [ 99.399005][ T31] usb 4-1: Manufacturer: syz [ 99.403670][ T31] usb 4-1: SerialNumber: syz [ 99.538649][ T2741] netlink: 'syz.0.760': attribute type 12 has an invalid length. [ 99.624532][ T31] usb 4-1: USB disconnect, device number 20 [ 100.457583][ T2760] kvm: pic: non byte write [ 100.568235][ T2764] netlink: 'syz.3.767': attribute type 6 has an invalid length. [ 100.591018][ T2764] IPv6: NLM_F_CREATE should be specified when creating new route [ 100.736692][ T2772] /dev/rnullb0: Can't open blockdev [ 101.541896][ T2775] overlayfs: missing 'workdir' [ 102.756001][ T36] audit: type=1400 audit(1752990555.921:13109): avc: denied { ioctl } for pid=2787 comm="syz.0.773" path="socket:[17508]" dev="sockfs" ino=17508 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.820734][ T36] audit: type=1400 audit(1752990555.981:13110): avc: denied { relabelfrom } for pid=2790 comm="syz.1.776" name="" dev="pipefs" ino=17172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 103.846304][ T36] audit: type=1400 audit(1752990557.011:13111): avc: denied { execmem } for pid=2804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 103.925757][ T36] audit: type=1400 audit(1752990557.091:13112): avc: denied { bind } for pid=2814 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.946762][ T36] audit: type=1400 audit(1752990557.091:13113): avc: denied { name_bind } for pid=2814 comm="syz.0.787" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 103.969363][ T36] audit: type=1400 audit(1752990557.091:13114): avc: denied { node_bind } for pid=2814 comm="syz.0.787" saddr=fe80::3b src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 105.135918][ T36] audit: type=1400 audit(1752990558.301:13115): avc: denied { getopt } for pid=2840 comm="syz.3.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.390930][ T45] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 105.520870][ T45] usb 4-1: device descriptor read/64, error -71 [ 105.760800][ T45] usb 4-1: device descriptor read/64, error -71 [ 106.000836][ T45] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 106.130837][ T45] usb 4-1: device descriptor read/64, error -71 [ 106.370835][ T45] usb 4-1: device descriptor read/64, error -71 [ 106.465298][ T2864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.802'. [ 106.475756][ T2864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.802'. [ 106.485056][ T2864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.802'. [ 106.493941][ T45] usb usb4-port1: attempt power cycle [ 106.517548][ T2873] fuse: Bad value for 'user_id' [ 106.522559][ T2873] fuse: Bad value for 'user_id' [ 106.645129][ T36] audit: type=1400 audit(1752990559.811:13116): avc: denied { map } for pid=2929 comm="syz.0.813" path="socket:[17761]" dev="sockfs" ino=17761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.830952][ T45] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 106.852010][ T45] usb 4-1: device descriptor read/8, error -71 [ 106.982130][ T45] usb 4-1: device descriptor read/8, error -71 [ 107.220817][ T45] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 107.241974][ T45] usb 4-1: device descriptor read/8, error -71 [ 107.371974][ T45] usb 4-1: device descriptor read/8, error -71 [ 107.481098][ T45] usb usb4-port1: unable to enumerate USB device [ 109.426990][ T2984] netlink: 'syz.0.818': attribute type 16 has an invalid length. [ 109.439390][ T36] audit: type=1400 audit(1752990562.601:13117): avc: denied { listen } for pid=2979 comm="syz.3.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.518751][ T2993] binder: Unknown parameter 'ÿÿ' [ 109.583772][ T12] tipc: Subscription rejected, illegal request [ 109.668216][ T2997] 9pnet_fd: Insufficient options for proto=fd [ 109.780710][ T36] audit: type=1400 audit(1752990562.941:13118): avc: denied { create } for pid=2994 comm="syz.0.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 111.048950][ T3004] 9pnet_fd: p9_fd_create_tcp (3004): problem connecting socket to 127.0.0.1 [ 111.076541][ T36] audit: type=1400 audit(1752990564.241:13119): avc: denied { create } for pid=3009 comm="syz.0.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.096957][ T36] audit: type=1400 audit(1752990564.241:13120): avc: denied { write } for pid=3009 comm="syz.0.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.117408][ T36] audit: type=1400 audit(1752990564.241:13121): avc: denied { nlmsg_write } for pid=3009 comm="syz.0.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.151213][ T3017] netlink: 'syz.0.829': attribute type 19 has an invalid length. [ 111.159270][ T3017] netlink: 5 bytes leftover after parsing attributes in process `syz.0.829'. [ 111.290812][ T31] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 111.420828][ T31] usb 4-1: device descriptor read/64, error -71 [ 111.660821][ T31] usb 4-1: device descriptor read/64, error -71 [ 111.900821][ T31] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 112.031043][ T31] usb 4-1: device descriptor read/64, error -71 [ 112.271401][ T31] usb 4-1: device descriptor read/64, error -71 [ 112.380915][ T31] usb usb4-port1: attempt power cycle [ 112.720850][ T31] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 112.742559][ T31] usb 4-1: device descriptor read/8, error -71 [ 112.851285][ T36] audit: type=1400 audit(1752990566.021:13122): avc: denied { accept } for pid=3036 comm="syz.1.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.890951][ T31] usb 4-1: device descriptor read/8, error -71 [ 113.130847][ T31] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 113.151922][ T31] usb 4-1: device descriptor read/8, error -71 [ 113.281981][ T31] usb 4-1: device descriptor read/8, error -71 [ 113.391015][ T31] usb usb4-port1: unable to enumerate USB device [ 114.617910][ T36] audit: type=1400 audit(1752990567.781:13123): avc: denied { setopt } for pid=3065 comm="syz.1.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 115.456638][ T36] audit: type=1326 audit(1752990568.621:13124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3067 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2f78e9a9 code=0x7fc00000 [ 116.591075][ T3091] binder: Unknown parameter 'uid>00000000000000000000' [ 118.519864][ T3104] netlink: 'syz.3.856': attribute type 13 has an invalid length. [ 120.739000][ T36] audit: type=1400 audit(1752990573.901:13125): avc: denied { setopt } for pid=3138 comm="syz.0.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.765373][ T36] audit: type=1400 audit(1752990573.921:13126): avc: denied { read } for pid=3138 comm="syz.0.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 122.994533][ T3154] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 123.013179][ T3154] kvm: pic: level sensitive irq not supported [ 123.013505][ T3154] kvm: pic: non byte read [ 123.032355][ T3154] kvm: pic: level sensitive irq not supported [ 123.032423][ T3154] kvm: pic: non byte read [ 123.052487][ T3154] kvm: pic: level sensitive irq not supported [ 123.052554][ T3154] kvm: pic: non byte read SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=746 state=3 status=67 (errno 11: Resource temporarily unavailable) [ 123.270073][ T36] audit: type=1400 audit(1752990576.421:13127): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[1570]" dev="pipefs" ino=1570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 123.553609][ T295] bridge_slave_1: left allmulticast mode [ 123.559831][ T295] bridge_slave_1: left promiscuous mode [ 123.565657][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.573395][ T295] bridge_slave_0: left allmulticast mode [ 123.579046][ T295] bridge_slave_0: left promiscuous mode [ 123.584802][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.823784][ T295] tipc: Left network mode [ 123.829129][ T295] veth1_macvtap: left promiscuous mode [ 123.834698][ T295] veth0_vlan: left promiscuous mode [ 124.142166][ T295] bridge_slave_1: left allmulticast mode [ 124.147843][ T295] bridge_slave_1: left promiscuous mode [ 124.153530][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.161194][ T295] bridge_slave_0: left allmulticast mode [ 124.166847][ T295] bridge_slave_0: left promiscuous mode [ 124.172514][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.273303][ T295] veth1_macvtap: left promiscuous mode [ 124.278837][ T295] veth0_vlan: left promiscuous mode