last executing test programs: 25.815347088s ago: executing program 0 (id=500): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x521002, 0x0) (async) r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005140), &(0x7f0000005180)=0xc) (async) gettid() (async) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000512000/0x9000)=nil) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x130e020, &(0x7f0000000040)={[], [{@audit}, {@smackfsdef={'smackfsdef', 0x3d, '/]'}}]}) chdir(&(0x7f0000000480)='./bus\x00') (async) r1 = openat(0xffffffffffffffff, &(0x7f0000000500)='.\x00', 0x100, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010006000000000004000500000000001000030000000022200007000000000076283a87b246d2e372b73dfbcc99b9f694d90b2aea933b77f52326849430bd0d74010b94fdf3d68fb8cccf79df54af69a647deab5918a0432c255d5c6b45e559ff5762ba1cc28ad5b357b9aaf0136ee7162f5aea1aa2de46343e5f7799e8c4f2325d35e74906df4566c7951466909574162a55a6"], 0x24, 0x1) (async) setreuid(0xffffffffffffffff, 0xee01) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) (async) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x189882, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) capset(0x0, 0x0) clock_adjtime(0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000300)={0xc7, 0x0, 0x20000000001}) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000380)) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) (async) ioctl$KVM_GET_MSR_INDEX_LIST(r5, 0x4018aee2, &(0x7f0000000000)) (async) openat$rnullb(0xffffffffffffff9c, 0x0, 0x1cbd81, 0x0) 25.814496618s ago: executing program 0 (id=502): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = memfd_create(&(0x7f0000000740)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98i\xfb\xadv\xb3', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40) sendfile(r1, r1, 0x0, 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r1, 0x0) rmdir(0x0) fchdir(0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x7ffff000) 24.953460837s ago: executing program 0 (id=515): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_pidfd_open(0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000810}, 0x26008890) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async, rerun: 64) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) (async) setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f00000000c0)={@private=0xa010103, @loopback}, 0xc) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x3065a7505c571d40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) close(r8) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r8, 0x8b2b, &(0x7f0000000000)={'wlan1\x00', @remote}) (async, rerun: 64) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r8, 0x8040942d, &(0x7f0000000180)) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x74, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r4}, @increfs_done={0x40106308, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/36, 0x24, 0xffffffffffffffff, 0x1c}, @fda={0x66646185, 0x2, 0x0, 0x17}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x31}}, &(0x7f0000000140)={0x0, 0x28, 0x48}}}, @free_buffer={0x40086303, r4}, @register_looper], 0x0, 0x0, 0x0}) 24.902074632s ago: executing program 0 (id=517): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109040, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') r3 = accept4(r2, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000000)=0x80, 0x80800) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000100), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 24.690777699s ago: executing program 0 (id=521): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x189a02, 0xb8) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r2], 0x448}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r2], 0x448}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00003e4000/0x2000)=nil, 0x2000, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r3, 0x9, 0x0, &(0x7f0000000500)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x325400, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000000)={0x6, 0xd, 0x100, 0x7a8, 0x80000000000003, 0x11, 0x7f, 0xc3d}, &(0x7f00000002c0)={0x563, 0x3, 0x9, 0x6, 0x4, 0x3, 0x9, 0xeaca}, &(0x7f0000000080)={0xe7f, 0x9, 0x6b1f0c16, 0x8, 0x80000001, 0x1, 0x6, 0x5}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000380)={[0x1]}, 0x8}) (async) pselect6(0x40, &(0x7f0000000000)={0x6, 0xd, 0x100, 0x7a8, 0x80000000000003, 0x11, 0x7f, 0xc3d}, &(0x7f00000002c0)={0x563, 0x3, 0x9, 0x6, 0x4, 0x3, 0x9, 0xeaca}, &(0x7f0000000080)={0xe7f, 0x9, 0x6b1f0c16, 0x8, 0x80000001, 0x1, 0x6, 0x5}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000380)={[0x1]}, 0x8}) 24.587235047s ago: executing program 0 (id=526): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x406000, 0x8) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080)=0x8000, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000001140)=[{{&(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x2, 0x4044014) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000100)={@rand_addr=0x64010101, @local, 0x0, 0x9, [@private=0xa010100, @remote, @multicast1, @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010101, @multicast2, @rand_addr=0x64010101]}, 0x34) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x5) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, 0x0) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000001400)={0x0, 0x0, 0xfc000000}) 24.587046337s ago: executing program 32 (id=526): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x406000, 0x8) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080)=0x8000, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000001140)=[{{&(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x2, 0x4044014) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000100)={@rand_addr=0x64010101, @local, 0x0, 0x9, [@private=0xa010100, @remote, @multicast1, @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010101, @multicast2, @rand_addr=0x64010101]}, 0x34) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x5) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, 0x0) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000001400)={0x0, 0x0, 0xfc000000}) 9.964673477s ago: executing program 4 (id=527): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c0, 0x0, 0x0, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x2}}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x508642, 0xe7) getpeername$packet(r2, 0x0, 0x0) open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) 8.227440337s ago: executing program 3 (id=614): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x100}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00401707000905813a40000000000904010000020d00000904010102020d000009058202000200"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 8.178189071s ago: executing program 4 (id=527): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c0, 0x0, 0x0, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x2}}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x508642, 0xe7) getpeername$packet(r2, 0x0, 0x0) open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) 6.343486018s ago: executing program 1 (id=618): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003940)={0x18, 0x11, 0x1, 0x0, 0x2, {0x7}, [@nested={0x4, 0xe3}]}, 0x18}}, 0x0) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.343265759s ago: executing program 1 (id=619): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r0, 0x8004b709, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, @empty, 0x0, 0x1, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b"]) socketpair$unix(0x1, 0x5, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000000) 6.335816629s ago: executing program 4 (id=527): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c0, 0x0, 0x0, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x2}}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x508642, 0xe7) getpeername$packet(r2, 0x0, 0x0) open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) 4.496841548s ago: executing program 1 (id=620): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48d4}, 0x4040000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0xd0, r3, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x10}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x54f}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8400}, {0x8, 0x15, 0x3ff}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8040}, 0x20000014) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4c, &(0x7f0000002900)=0x659c, 0x4) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r4, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000240)) timerfd_settime(r4, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f0000000180)=[@dead_binder_done, @exit_looper, @enter_looper, @acquire_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)={@fd={0x66642a85, 0x0, r7}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}], 0xffffffffffffffc6, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) 4.496264688s ago: executing program 3 (id=622): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x7, 0xe, 0x0, 0x400000, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x10, 0x2, 0x2, 0x60000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x90) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x10, r1, 0x1e380000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000140)=0x2, 0x4) syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x400080) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140000000000000, 0x0) recvmmsg(r0, &(0x7f000001e300)=[{{&(0x7f0000000200)=@can, 0x80, &(0x7f0000019a40)=[{&(0x7f0000000280)=""/50, 0x32}, {&(0x7f0000000380)=""/238, 0xee}, {&(0x7f00000002c0)=""/12, 0xc}, {&(0x7f0000000480)=""/165, 0xa5}, {&(0x7f0000000540)=""/223, 0xdf}, {&(0x7f0000000640)=""/27, 0x1b}, {&(0x7f0000019680)=""/164, 0xa4}, {&(0x7f0000019740)=""/196, 0xc4}, {&(0x7f0000019840)=""/240, 0xf0}, {&(0x7f0000019940)=""/252, 0xfc}], 0xa}}, {{&(0x7f0000019b00)=@generic, 0x80, &(0x7f000001b140)=[{&(0x7f0000019b80)=""/231, 0xe7}, {&(0x7f0000019c80)=""/175, 0xaf}, {&(0x7f0000019d40)=""/136, 0x88}, {&(0x7f0000019e00)=""/1, 0x1}, {&(0x7f0000019e40)=""/172, 0xac}, {&(0x7f0000019f00)=""/142, 0x8e}, {&(0x7f0000019fc0)=""/160, 0xa0}, {&(0x7f000001a080)=""/179, 0xb3}, {&(0x7f000001a140)=""/4096, 0x1000}], 0x9, &(0x7f000001b200)=""/1, 0x1}, 0x3}, {{&(0x7f000001b240)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f000001c500)=[{&(0x7f000001b2c0)=""/4096, 0x1000}, {&(0x7f000001c2c0)}, {&(0x7f000001c300)=""/208, 0xd0}, {&(0x7f000001c400)=""/202, 0xca}], 0x4, &(0x7f000001c540)=""/194, 0xc2}, 0x4}, {{0x0, 0x0, &(0x7f000001db40)=[{&(0x7f000001c640)=""/45, 0x2d}, {&(0x7f000001c680)=""/34, 0x22}, {&(0x7f000001c6c0)=""/226, 0xe2}, {&(0x7f000001c7c0)=""/4096, 0x1000}, {&(0x7f000001d7c0)=""/244, 0xf4}, {&(0x7f000001d8c0)=""/144, 0x90}, {&(0x7f000001d980)=""/207, 0xcf}, {&(0x7f000001da80)=""/182, 0xb6}], 0x8, &(0x7f000001dbc0)=""/82, 0x52}, 0xc55}, {{&(0x7f000001dc40)=@nfc_llcp, 0x80, &(0x7f000001e200)=[{&(0x7f000001dcc0)=""/155, 0x9b}, {&(0x7f000001dd80)=""/57, 0x39}, {&(0x7f000001ddc0)=""/138, 0x8a}, {&(0x7f000001de80)=""/11, 0xb}, {&(0x7f000001dec0)=""/226, 0xe2}, {&(0x7f000001dfc0)=""/234, 0xea}, {&(0x7f000001e0c0)=""/38, 0x26}, {&(0x7f000001e100)=""/210, 0xd2}], 0x8, &(0x7f000001e280)=""/86, 0x56}, 0x9}], 0x5, 0x100, &(0x7f000001e440)={0x77359400}) read$msr(r3, &(0x7f0000000680)=""/102392, 0x18ff8) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 4.437172323s ago: executing program 1 (id=623): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x981b00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/notes', 0xf80c2, 0x11a) write$UHID_CREATE2(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='\v\x00'], 0x1c7) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$inet(r2, &(0x7f00000065c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000006a40)=ANY=[], 0xc0}}], 0x1, 0x4000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.282903005s ago: executing program 1 (id=624): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x98, 0x0, &(0x7f0000000100)=[@release={0x40046306, 0x1}, @increfs_done, @enter_looper, @increfs_done={0x40106308, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fd, @fda={0x66646185, 0x0, 0x2, 0x1a}, @flat=@handle={0x73682a85, 0x1000, 0x1}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}, @decrefs, @increfs_done={0x40106308, 0x1}, @register_looper], 0x1000, 0x0, &(0x7f00000001c0)="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"}) (async) pipe2(&(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pwrite64(r2, &(0x7f0000001240)="e78838fc9a4439623c54ae95902b0726e2054762d0dcb1f36a459a1aa87529a92255e32a4946d48b4fee895db677166a512b61d759706142581726e21381876979218a084834901661c8ab7ccea74cf1f887514f045156ec615cd93caf5927ed006b55eb28a7f9928a9f1f948ac009", 0x6f, 0x27c5e485) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f00000012c0)={@private=0xa010100, @private=0xa010101, 0x0, "2045f6481e26b8911cb6f1964fdbdf52ffb2458c5f56cfed10072cfdc26f2c4c", 0x0, 0x7ff, 0x8}, 0x3c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r2) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x48, r3, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x18}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x34}, @NL80211_ATTR_PMKID={0x14, 0x55, "9626705cb0f1c2cbd957a0d91315abe2"}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x3c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44854}, 0x20000000) (async, rerun: 64) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) (async, rerun: 64) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000015c0), r1) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000001740)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001600)={0xc8, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe00000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x63e4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x740}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x50}, 0xbe0bf9a687d3087a) (async, rerun: 32) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)={0xa4, r3, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_SSID={0xc, 0x34, @random="dde81d9e68fc05c5"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x271}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004000}, 0x20010) (async, rerun: 32) r5 = gettid() sched_setscheduler(r5, 0x1, &(0x7f0000001900)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001980)={0x1, &(0x7f0000001940)=[{0x1, 0x40, 0x4, 0x3}]}) (async) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0xffffffffffffffff, &(0x7f00000019c0), 0x4001) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a40), r2) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x30, r6, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'syzkaller0\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x240c0}, 0x40000814) (async) ptrace$ARCH_SET_GS(0x1e, r5, &(0x7f0000001b40), 0x1001) (async, rerun: 32) symlink(&(0x7f0000001b80)='.\x00', &(0x7f0000001bc0)='./file0\x00') (async, rerun: 32) r7 = syz_usb_connect(0x0, 0x13f4, &(0x7f0000001c00)={{0x12, 0x1, 0x310, 0x11, 0x57, 0x66, 0x10, 0x19d2, 0xff94, 0x5574, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13e2, 0x4, 0x1, 0xe0, 0xc0, 0xd1, [{{0x9, 0x4, 0xff, 0x6, 0xf, 0xff, 0xff, 0xff, 0xae, [@hid_hid={0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x124}}], [{{0x9, 0x5, 0x2, 0x1, 0x50, 0x40, 0x9, 0xb, [@generic={0x66, 0xb, "6456edc78e716a01f7e0bbd9d414102531f841e833b792ff7e959333764b56fc3764375ee940c66a259923aa7f6b0fdb69e64dd435f2f94ff085057bc11b45326de86e199c6e1fce7930cf3b00c5e2d8319489b432973250838863e41dc74c43f91f344f"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x1ff, 0xff, 0x3f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x8}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x7, 0xde, 0xb, [@generic={0x14, 0x23, "3136da615613dec8a3bd131167dbc2c34ce0"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x9, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x8}]}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0x4, 0x4, 0xf, [@generic={0xa0, 0x10, "c41df1eb689f252be3b28309d68c5bd106afe779dd7aff3fc822874980be8b2b1a844446d2fced276eb256438e08f8e7cff7f40451c8ad5273385b3417e2c158ce32f050118cf4aad8c9297671ba7942b8a841df2c7ea7bf59fa574eddfbc0b2607016159ecf6a57a74ba7f0a3c8456aa4bf5082d3e218b4d3c25564dc81ce1ca966ad4b495cc5c9353ccc92eed77ba89716f9a9868e88646fe957f790a1"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0x4, 0x10, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa}]}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x7, 0xac, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x4}, @generic={0x8d, 0x6, "423419cf2f1d71a7cc878448ae42f969c6b4fae1bb8cd55c26134f2dbfd245aebc4e2097191c1b569e5d87de36474dfc961b7c2401acd1013893e44e85763baf79ce758a97843ef8a8706fbf6c75cc021f39588973bb0c5fbab4330fc345f06c3b0798c7e5a840c3048b673fbdf6972ed12fea46e4dacf2f3a7f7c3c7a58fadc9cf542d9e5b8ffe00117bb"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x70, 0x4, 0x6, [@generic={0xa4, 0xd, "5e0eccd07c1faaa2c2af9fe77d7330a6dda852fe910228f02c10adf05a05ec9f39cb6dbbee37ae9edaf7ed62d009e7236ccd1a014836d29788a2c51518b092929d26feaec2b347f6f6885faf72e0cd28115decec97a8cdf482c53134b5951b861ad6d18824c33fd9f3bd0b806fd131479d17e7fb379c48732224c60f6ae80405294e2720715047f147f29a1218b7bc6f48bee310fc23418e6291d23d962b0cbc9f8d"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x20, 0x60, 0x7, 0xee, [@generic={0x97, 0xb, "b1b31575bc43d1013de290c30b44733fcad491f994a2920b73185c4bd2575a8459d07f4dfc049ddf5a5433177cf1a4f0e203064fe65701bdf6bb3960ccff8d4419554588f1e73c58d3aab6bd7344641447810021bb5f8ce4799ffdb7db13d0459993bef939b6cab6d47597ffaac5b25636f0f096e85f914c9355241291eaf66c3b565b0e0487fbebd0407f420894d994a5ca714232"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x74, 0xc1}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x6, 0x6, 0x1, [@generic={0xcb, 0x23, "b489271153bb27f2c418461bf2e04dfef50e02626c7cdce1cdd3453cba9a925d3a86666d690a304b45b8cd2f3a766815d33ad0c7df49817f22b8994a1b9018e18bb4e4871cb747245da4922909c1b810fc9a0e8743dbc1e1112cea9ccd348e98c4c18123781ec397bc16483f8c6ccbb76c925326f238cc3f41b03cc4d907745f6ce6905b7250079d6ed4977e36a26e3955c17580cd2a58ef0e1ba5a9c9f1e6fc522ea54427df23a2db9baea973e105b35afa9c10fb62b2379c4345b2efb663c4e9dd9a39805ee60bf8"}, @generic={0x6a, 0x36, "bd763fc286af23080333115972281bf7fafdb48086efc9ba590402cc6137883bb78a5aaf3517fb01e58224c68ac411949c0df5fe9908c55003f29a55a6a29f988689ae87deba5222923853df48f133d75e911ee1c4038a10e2b48bd6e1479dd58018bff26c14129a"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x8, 0x24, 0x6d, [@generic={0x2, 0x3}, @generic={0xe1, 0xf, "404e93a9f58dfdbece48d11121f48f21f2a3f20d680611266c68bb30e0369a5b1d5d8604b15a843fc6c77e1e44676d4f43483d89db5115932f2ca58b8a3e1f155af62c0d497773107ac5ba559c588c77a47ef04fa456466014333faed62f8839650b4dfef682cb1a89b7aecda5548c9034513f35ec103fa1ba85514f088c1f1a956f46c5e7ea6f1ba2b0d426c92d11c350c4bd503bddf106d89dab728c53e391c1efd99a4da962f0c7fcd43d389b2d17dad29ff38065dd89d9c9e07a5f2c4395e4515ea72a13ae9307d7b2fb98a898373150ae027144486ec0c8ad1e680a06"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x5, 0x9, 0x3, [@generic={0x5a, 0x2b, "ee08318a695da6344c3de8a2303869bfa0df74bbaeef281eb9b7647330e124d4bd287e04706da3661289f0da2ba492507f0878bbe31e6ee1aeb02ecee54ea21c319e003c0ac1e18e4eafb7a28e16a1ccff88e060ff664972"}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x8f, 0x2}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x2, 0xf, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8}]}}, {{0x9, 0x5, 0x9, 0x10, 0x0, 0x3, 0x36, 0xa, [@generic={0x25, 0x6, "6ca9ccce5da4010a4d0ebec4ba47740fada53df3ddaa8ef671b25d55e5f1f5e857683c"}, @generic={0x3c, 0x3, "99814f7841a66346dd3ef2a97973a710a485e642549100d44c4cc16fc2186498790cc427c0ff42945a61b1c93c588bba0698aac26b3de13307d8"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x400, 0x32, 0x81, 0x6, [@generic={0xed, 0x22, "548f873c166504159da5f2a2d3be1faf24f1a52eeb73c4b6449331ab45d0443f5aede34e3792a80a2b84009d52533eddd4557c75559f3b6b3502412ca45b5cf9ee5659e4c21198e9564c120eeb4bdeeefb8078220d5b7d5c9c29eee23ca798d53a243cf89a4e0abc63b3a70f2c9582d66f66dafa3b1761c3a4c77bcc5a69132305d4e5bc6e891e9881f31125ab6a37479a57a06f95178e2a53f0e638af32921e8d22ff323bdb37248b8564e0b4a414e07cbcd78ab5a5856806570d7a7ec3a01d8eda8cc351834fbd05b830d92c459875ce2d656c96906179682a781a38591c3810f7d022f43bcdef175111"}]}}]}}, {{0x9, 0x4, 0x49, 0x1, 0x9, 0x38, 0x3, 0x11, 0x6, [@hid_hid={0x9, 0x21, 0xea, 0x9, 0x1, {0x22, 0xa37}}], [{{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x4, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x4}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x8, 0x9c, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x9}]}}, {{0x9, 0x5, 0x0, 0x12, 0x20, 0x10, 0x80, 0x6, [@generic={0x9f, 0x3, "df03df182aca516c0d060b2eab2be02ca81382875aa1e188a826915fdcc83101a267d79a6340fa845891ae2850c753c6ef9de78d0c847cd3a360733aef6fdaddd66f1e4a1120685f0c67986274c91d3cd42b8c70a3c0bf1bf4d56d87e1bc43e69aabdac1f69b43c98f95ab86f44bfcfee3ef5d4eb409f0bf419b552ca3714e4d34b763fc85fb59a98bbe91f03f4d36134038d2787c63f8d3301333d60c"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x3ff, 0xfa, 0x80, 0x7, [@generic={0x22, 0x11, "3bfad9a7ca891f7f2cec104c78f5074d934c23c0d454fd2a702ca8005d000eb9"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x8, 0x3, 0x0, [@generic={0xb1, 0x3, "67096b58cd15ec8fb2869cb4524e0649065c11c7925ed3ef593d9658f7c07bdbc4bf875403a444fe5b0c7afaa03725b7f2e2b047a943d9787159d52e276325eb68baef9e8edf55138c08023cd8341f9a9ae89ebdeefa2dfef1783f6dec609749d09a5bd68e38cabe645d4bf850d027061a12e4688cac7bd52b2987d21de26f5c55d1fcce95cdea69868dd49b0c7ccc7c9dc78c8007905ec81e616351903410ef02c54b76a64b2b7870261060597a88"}]}}, {{0x9, 0x5, 0xa6ed7e36c873fa29, 0x9, 0x6ceeff68bb2dfeaa, 0x7, 0x4, 0x2, [@generic={0xc8, 0x6, "2fe0aa9b73d6bed6df91b2854e2c229f5cab7f3848fcb6f38326272f2c4ae0c07738ce328b1127fe2a064abfcc526d27718850a268e93fbe645d7b4ef7a64ebd2c98eb21b51e98639761d0848af0643828b1d8694e958285c803229577495a4960d1130c58ffe54f2cbea66dd49126eef6ce349004b57fbcd3d964ebdc9d3b5535166c202d0629a12da1a61749e8ce26d51173009a0ecde9407062f9389ebf396d253cf8ae384b548098c93b3430df736a7312b6945799b512bdc90ceb3d70aac0d8a4d8e6bb"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x1, 0x2, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x1, 0x8, 0x8, 0x7, 0x78, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x81, 0x400}]}}, {{0x9, 0x5, 0xa, 0x10, 0x24, 0x5, 0x4b, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x85, 0x5, 0x5e9c}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x9de}]}}]}}, {{0x9, 0x4, 0x6c, 0xe, 0xd, 0xe, 0x95, 0x15, 0x3, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x80, 0x8, 0x1}, @as_header={0x7, 0x24, 0x1, 0x8e, 0x2, 0x4}, @as_header={0x7, 0x24, 0x1, 0xd7, 0x7, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x34, 0xfe, 0x1001}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1, 0x420, 0x4, '^+]J'}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xa, 0x3, 0x7f, 0x4, 'u', "e0"}]}], [{{0x9, 0x5, 0x3, 0x10, 0x10, 0x7, 0x8, 0x3, [@generic={0x44, 0x2, "ae2371bf13291fcccf0e21043969fc490ae953958edd543f260f5b6d8f649b6a371a555b53d8583ad5934cbe614071d1fb277780e308f9322050d2aac8e59235802a"}, @generic={0x21, 0x22, "881674022b95bb6c5f3ad6016ace027218579f2b3b6307aeb662f3dd693f0c"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x8, 0x7f, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x60, 0xf444}, @generic={0xa1, 0xb, "08e8d9bc08b01dd9cbdbe6214c3532acce288c50ea0a839857e59a9f6aced21b1e7b822ba43c2766927a794739e44864da1f74ec23826bb8abca8e27310b7fe5cab35a754e3fa2fbe14ef3c576183e78d217039cec82041a6c6f1a0fe339f8f8cf221ea8b7f5a7488afd19b8a82fb3d07ec1341ce9e5c3c11983135f6964f266fbfd1ff51aaef255cb80c5ab5fbe0f75ef2f08679b3f83ead2626f38123146"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x10, 0x3, 0x40, 0xd, [@generic={0x7, 0x23, "2b555be503"}, @generic={0xcb, 0x30, "25ac388e60f71de6c579e244b41f8ee654b1fe810812bb34d98037b91b916e8286938e5fce20301e618fbcec5f28fe1801aa57d82da240717a8ea028844dc45d84f54c6491638a827397a3a15fddfea429b335feeb033a9634c85735e46f09b304d985720785374b0b84d12bfd2d8942d19cf90bf02ed352775e115efae76195e58f69ec10c19613dcc51783224c583739c19dbd8ca24af6d26cc2a606a93b2fa645c206e253f1e25ecc8aed56767babb4d2f9be94a54fdf95f5463a7649ea4b94737b62eb8ef724c3"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x200, 0x6, 0x7, 0xea, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x7f}]}}, {{0x9, 0x5, 0x4, 0x4, 0x0, 0x0, 0x10, 0x4, [@generic={0xfa, 0xd, "f16328bd19c107a484a849eea4f1b403774e1b241f45a5121ca4d3d04bc5daceeef6c26193cd1a74c2ae7858dda4792945021b62b60469639a21dc9fa0e991537b12f9dbd4611e0a06e2ce80733bee5a0ce6de6b683f313a63475fd7a1d8567284f744537a80a085ec578ea9b7d9279727ab01e4ef4a6fa1971a0ae98d71f9fe114cb5ce1b80c38aaca74024fa2f9071d6917821c7b6b2d1e9ff2d49e66c5ba5056f35ba509a1fa1f57b2a4d511a6dbc2751b95b139ea60ac1ba05e77045178839017c7e5c2d2cd80449ff83ea2e34bf62bfdf1bca8ea9ff673c1a88f0f740ede0781ab22880b837fcd68766697da0701c48e0137e32ee1e"}, @generic={0x37, 0xa, "cd9ded22bacf993054377ad973ca5d1aff22a933b0298cb5a987f6f275bac95cd2f8edd3712415647d02a117d7145532ed94d75263"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0xa, 0x1, 0x81, [@generic={0x9d, 0x31, "f48ab54cbc261327784cedefd3bf99316790f50367125fe320426b7b2bf75e19f9ce1b3267c8c0acf9c6417440bc06287d946c00099d9f702ab4734433f98897ab7bbb2ef8e8a7bb0182d5cc903743f0856494f1f02cd0039cbffd223619ace5aafe9fc8797f1b21381bf1f92d10f7d27c9bfb4d0b2f0c5b4dd4b596eec99590eb4979bc9bf76568681a4a70d46c064a8f0c6b4ec3cbdb36ef965d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x96e2}]}}, {{0x9, 0x5, 0x9, 0x16, 0x400, 0x19, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0xfff9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x8, 0xff, 0x4, [@generic={0x2d, 0x23, "3adb57181eb7aa8804cf852669c10606f37fa3c8273deb647524145616409da722703b8f61d7c75fa02a1c"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0xb}]}}, {{0x9, 0x5, 0x1, 0x8, 0x400, 0xf9, 0x8, 0x0, [@generic={0xa9, 0x21, "472c21decdf1b4bb993864eda569061e672587f89d1a4cd17301a151833077cfeca92b40a06827e3aca2e03de7a46908410f4372dee75a98d38bde67ca2c0fc434ddaf88bc18445ae38200ae973f11abbdf15e6b5878c47f6aabc750bdba9c50ebe012ba104c4582537681f59e76d67f761fbbc7725344c7232b6202bdbba7f67ff30684dac7ab02bfebe175a842721d9006af35ce07a18fdee5154d648d7c4cc9d5f6dd4d83e0"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0xff, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xd, 0x1}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x1, 0xe, 0xc, [@generic={0xde, 0x7, "6a33d6bb7180df9e97161539a122f3ea257cddcf4f7607191f40657d9575ba5c031e48150afb885879d50e8c9e4fdd2dab25730a7a74c5a87ec0bac65986cebb8a2b057513cb0dabe47b2cce1f32a0a1b2c4a43dd3ca9bb5a2fc7ca8954bad34962884759297b4a74fa9a85f0dabe01d46578ad8ce0e5949f3ad1ea145a128c48ee5225904ed9735dcc49febd8b0e367a5af680ce8ff51842325e4aa7278c5b4d63449aea32e6cd8f4c072af46695d38bba644cb77df64a65b852a0e28998a8dfcfb07e69ef9674783593bddae427d3ef0ec5afb5bd4aef17480fa84"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x5, 0xb, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x5}]}}, {{0x9, 0x5, 0x4, 0x1f, 0x10, 0xcc, 0x9, 0x1, [@generic={0x45, 0x23, "837624646963b83413c94ca0b3c6bd4ded7326c6458f56fa13848ea5a7e936b4d51742ca65b37a3b1daf91b8ecd1eb933ab51ae2693f993b680d288bcd2a01b96d1e72"}]}}]}}, {{0x9, 0x4, 0xdb, 0x7, 0x2, 0xff, 0xff, 0xff, 0x2, [@hid_hid={0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xa17}}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "576ae0"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x63, 0x6, 0x5, 0x2}, {0x6, 0x24, 0x1a, 0x7fff, 0x8}, [@mdlm_detail={0xf, 0x24, 0x13, 0x1, "3e3d56f161024af4964a50"}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x3, 0x3}, @dmm={0x7, 0x24, 0x14, 0x1, 0x3}, @country_functional={0x8, 0x24, 0x7, 0x8, 0xebd, [0x262]}]}], [{{0x9, 0x5, 0x80, 0xc, 0x200, 0x2, 0x9, 0x80, [@generic={0xfd, 0x21, "8800382eba20e634d9487d3196e5403754eb1b0cd953f3c3fc23bce2b64ddfd5e94257cb2adf8642d6b9a8726950f616bc97701954e90c3a1da392b8f46058d5603cd2b4f3bd1e573caf193e6028255dde0441b928c8eee453f9bc449823e77aed154811240d68d530f6d2db6d8a4d2efaf95b5cea51b79b4212b65a34bb9f3d6157e8f4ecffcaedda57d503f88ab7a0b5277d8eb9bb7cbed1bcc6ef1bb115ecd6f27c179d04fe389cf7e4efce37dbb96f9a45855022e7c86927b62028e0f9f45413c0bf7750875389405161222f0517e7920ea83d56b3a334e7c240751877d655972c03d55ded75b4eea6bd242f10b35685f9ab0b5760feb0c142"}, @generic={0xa9, 0x4, "631843e4390995be2ed577bbf724ab663c836e4a5e4dae5c4a10aebe632564782596e0bab0fcf469b1ed1441a070cf8292276bf67bed06a2deb461f0f0ce8718aad306243fb60c671d2d9b87f8112dc16dec35ff3e6c04523ab2c0ac21178347698016a4930bcb7c3369fc8d4b332229115dc5c12e927de4450234d0dd85f40cdfeb8ff9a0d1f7e8cd9dfe2053b79c749886a5ec9cd96d918a1edbf3f63af1908bb74489a6c08b"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x2b213d5d6d814dab, 0x52, 0x6, 0x3, [@generic={0x100, 0x23, "577efe0b46e15040f5d6d44c829eab83b68646a5951d51fb5d01d21d91719117344800f2fe0d748cf69f5974b8b037e86248c200fab6d95d33e34e8f0d5ba53a2563c752af11a9677680e95f716392e0fe08a79390286ddb480bef48a5e09b355c522c18c92c3ec6469718a8a75bdf6d7155a499a24d1d0183ff078835dc0d8ec1d4b1e2466c1d7ed1cc10f8495c7c8dd26ad887ea36e920f3f8000d338f20bc74d9a1b7c8ad328148d2778e8bee53f1e30898e83bf04d96f84a8c74f50d60c9f7ca164364afdc2ef5d481908a516755a4fc284bf2acf2b34339d2fb7cabb954a529dca07dd0c20849fdc132d014c16b1929324b3ba10d564c576131ba86"}, @uac_iso={0x7, 0x25, 0x1, 0x183, 0x1, 0x93f2}]}}]}}]}}]}}, &(0x7f0000003180)={0xa, &(0x7f0000003000)={0xa, 0x6, 0x250, 0x7, 0x6, 0x1b, 0xff, 0x80}, 0x1f, &(0x7f0000003040)={0x5, 0xf, 0x1f, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "a0e994a13d8f55d19e86521f618774a9"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x1, [{0xe9, &(0x7f0000003080)=@string={0xe9, 0x3, "87516ed7faee9ea2526736ce700566dbb530dba82b41ac5098f45173fadd47a07442953ac8f1bb5e85e0ead731b787e3344798df561d65855926017725d696207a9b47c3e94246101d16bee85ff59f8a1aa5af87e919148da0e166ed368123aa81dd77b5eee5af51f73d9d54e3692c9e2d5fb26065505542e52bcff83935a81cb139bf959431e45be272862c48bcb03080a342262adc553e9a710165ecc25247d02565ca3ec8a868b675e803911ec6e76c68b6ceeed07e8c55c89cefa635e42d51e6bbd72dd1da61f75b63976ad6aa97a2ec0413a110387bd4d256731c76e01ca666b264f45d31"}}]}) syz_usb_control_io$hid(r7, &(0x7f00000032c0)={0x24, &(0x7f00000031c0)={0x20, 0xa, 0x1c, {0x1c, 0x1, "9d5670db47d2aca7ccfc88243cf2f806c1e94124c40527341447"}}, &(0x7f0000003200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}, &(0x7f0000003240)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, 'c'}]}}, &(0x7f0000003280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x1d6}}}}, &(0x7f0000003500)={0x2c, &(0x7f0000003300)={0x0, 0x14, 0x84, "b0510f8fa3ce9fc345208e8253a33da0c25e40e2dedb92eaa1ef8b87148cf897eca71b28ae8e724ef09b2fa23b9f19c790c8ffae44c5e62f0bce8510072d6b5363884d52aa607284e562a29fa99af0fe564f3382920c22bdd3aed3558ec530f8a07e179c8cb39fd2629e6369cc7c2f260123fe1b3a4bce52fad00c19e52bdc1073d920ac"}, &(0x7f00000033c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000003400)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000003440)={0x20, 0x1, 0x5f, "b8995fa2ee2262758dcab6114ba5f8395b74d2cbbfed3f1d47cf7b7969824f50c36fe87c20fc7eeb6fcd15657dc4ce49c03c3da4fc727e9dcbc9deb457e5aade4560e9d69c079bd756261c9bf203e07cf71d2428e44f340af4317a281bfc6f"}, &(0x7f00000034c0)={0x20, 0x3, 0x1, 0x5}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000003540)='./binderfs/custom1\x00', 0x0, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000003580)={0x986, {0x10, 0xffffffff, 0xd82d, 0x4, 0x48}}) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003600), r1) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003640)={'wg0\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000003700)={'ip6_vti0\x00', &(0x7f0000003680)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x2, 0x40, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0x27}, 0x7, 0x10, 0xabf, 0x1ff}}) (rerun: 32) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000003840)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003800)={&(0x7f0000003740)={0xb0, r8, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ff}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xcf971669c1ee161a, &(0x7f0000003900)={0xa, &(0x7f0000003880)=[{0x3, 0x7, 0x3, 0x4}, {0x0, 0x6, 0xa, 0x5}, {0x1, 0x9, 0x30, 0x80}, {0x80, 0x2, 0xa6, 0x200}, {0x5927, 0x45, 0x0, 0xef}, {0x4, 0x8, 0x7, 0x9}, {0x2, 0x1, 0xaf, 0x27}, {0xc075, 0xc8, 0x0, 0x7}, {0x9d6a, 0x4, 0x6, 0x8001}, {0x9, 0xe, 0xd, 0xfffffffd}]}) 4.268148766s ago: executing program 4 (id=527): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c0, 0x0, 0x0, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x2}}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x508642, 0xe7) getpeername$packet(r2, 0x0, 0x0) open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) 2.302053005s ago: executing program 1 (id=625): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req={0x8, 0x0, 0x3, 0xaf}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) syz_usb_connect(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902240001010000000904690202ff"], 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4800, 0x0) recvmmsg$unix(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/37, 0x25}], 0x1}}], 0x1, 0x400120a0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) utime(0x0, &(0x7f0000001840)={0x40, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1000, 0x1}) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 2.299902855s ago: executing program 2 (id=626): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x505000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4dd99000) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0x770a, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000100)=@arm64={0xff, 0x8, 0xf3, '\x00', 0x7fb}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.299629055s ago: executing program 3 (id=627): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) (async) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) (async) recvmmsg(r4, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}}], 0x4000000000000a8, 0x0, 0x0) (async) sendto$packet(r1, &(0x7f00000002c0)="12040500d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.274849717s ago: executing program 3 (id=628): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x0, {{0xa, 0x4e20, 0x4, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x4e11, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x464a40, 0x0) mmap(&(0x7f0000280000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x75144000) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r4, 0x45809000) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x1}, 0xe) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) ioctl$BLKRRPART(r5, 0x125f, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 2.135268159s ago: executing program 2 (id=629): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (async) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000000000000000040"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = socket(0x840000000002, 0x3, 0xff) connect$inet(r6, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000100)={0x800000000000158}) (async) read$FUSE(r0, &(0x7f0000003800)={0x2020}, 0x2020) 2.132702329s ago: executing program 4 (id=527): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c0, 0x0, 0x0, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x2}}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x508642, 0xe7) getpeername$packet(r2, 0x0, 0x0) open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) 124.011301ms ago: executing program 2 (id=630): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00010400000000000000000400000008000000a3"], 0x1c}], 0x1}, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000074000/0x2000)=nil, 0x2000, 0xe) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 64) 122.880501ms ago: executing program 3 (id=631): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x58, 0x0, &(0x7f00000003c0)=[@dead_binder_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/219, 0xdb, 0x0, 0x7}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}, 0x400}], 0xc, 0x0, &(0x7f0000000100)="447b821ef8d98334c5176c08"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @fda={0x66646185, 0x9, 0xffffffffffffffff, 0x1f}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) 104.119032ms ago: executing program 3 (id=632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x2801, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) ioctl$TCSETSW2(r1, 0x5425, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000012f2d5f8b4eb44e0acd2ac112b5c50592cd8e14bf04050000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x20000000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000200000/0x1000)=nil, 0x1000, 0x14) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 43.409287ms ago: executing program 2 (id=633): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x181}]}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}]}]}, 0x38}}, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x8, r5}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000008, 0x12, r0, 0xa2858000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 42.256627ms ago: executing program 2 (id=634): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\v\x00\x00'], 0x119) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x5}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5e, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e0b7dfd6c9276f53e0667dd48f28b"}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) (async) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\v\x00\x00'], 0x119) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x5}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000, 0x2}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5e, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e0b7dfd6c9276f53e0667dd48f28b"}) (async) 42.022097ms ago: executing program 2 (id=635): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c504}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000847000/0x1000)=nil, 0x1000}, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=527): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c0, 0x0, 0x0, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x2}}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x508642, 0xe7) getpeername$packet(r2, 0x0, 0x0) open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.149' (ED25519) to the list of known hosts. [ 26.962369][ T36] audit: type=1400 audit(1755918838.070:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.964038][ T281] cgroup: Unknown subsys name 'net' [ 26.985316][ T36] audit: type=1400 audit(1755918838.070:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.013286][ T36] audit: type=1400 audit(1755918838.090:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.013542][ T281] cgroup: Unknown subsys name 'devices' [ 27.156207][ T281] cgroup: Unknown subsys name 'hugetlb' [ 27.161936][ T281] cgroup: Unknown subsys name 'rlimit' [ 27.256780][ T36] audit: type=1400 audit(1755918838.360:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.280611][ T36] audit: type=1400 audit(1755918838.360:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.291545][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.305606][ T36] audit: type=1400 audit(1755918838.360:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.337221][ T36] audit: type=1400 audit(1755918838.420:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.362758][ T36] audit: type=1400 audit(1755918838.420:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.399360][ T36] audit: type=1400 audit(1755918838.500:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.425166][ T36] audit: type=1400 audit(1755918838.500:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.425236][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.305116][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.312207][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.319396][ T288] bridge_slave_0: entered allmulticast mode [ 28.325815][ T288] bridge_slave_0: entered promiscuous mode [ 28.332440][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.339528][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.346805][ T288] bridge_slave_1: entered allmulticast mode [ 28.353092][ T288] bridge_slave_1: entered promiscuous mode [ 28.389057][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.396245][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.403670][ T289] bridge_slave_0: entered allmulticast mode [ 28.409950][ T289] bridge_slave_0: entered promiscuous mode [ 28.417844][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.424978][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.432111][ T289] bridge_slave_1: entered allmulticast mode [ 28.438451][ T289] bridge_slave_1: entered promiscuous mode [ 28.498088][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.505196][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.512342][ T291] bridge_slave_0: entered allmulticast mode [ 28.518691][ T291] bridge_slave_0: entered promiscuous mode [ 28.531781][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.538866][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.546238][ T291] bridge_slave_1: entered allmulticast mode [ 28.552524][ T291] bridge_slave_1: entered promiscuous mode [ 28.578841][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.586020][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.593095][ T290] bridge_slave_0: entered allmulticast mode [ 28.599817][ T290] bridge_slave_0: entered promiscuous mode [ 28.607088][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.614290][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.621405][ T290] bridge_slave_1: entered allmulticast mode [ 28.627767][ T290] bridge_slave_1: entered promiscuous mode [ 28.774382][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.781450][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.788774][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.795819][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.823623][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.830697][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.838027][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.845080][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.871357][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.878489][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.886042][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.893251][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.909169][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.916284][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.923937][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.931178][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.988604][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.996895][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.006763][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.014533][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.021843][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.029315][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.059169][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.066269][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.074106][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.081162][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.095074][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.102150][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.122792][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.129979][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.142620][ T289] veth0_vlan: entered promiscuous mode [ 29.154525][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.161697][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.169668][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.176764][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.196761][ T288] veth0_vlan: entered promiscuous mode [ 29.215877][ T289] veth1_macvtap: entered promiscuous mode [ 29.250994][ T288] veth1_macvtap: entered promiscuous mode [ 29.261277][ T290] veth0_vlan: entered promiscuous mode [ 29.282300][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.294087][ T290] veth1_macvtap: entered promiscuous mode [ 29.312139][ T291] veth0_vlan: entered promiscuous mode [ 29.357635][ T291] veth1_macvtap: entered promiscuous mode [ 29.401172][ T341] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.402249][ T340] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.423987][ T340] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 29.430042][ T343] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 29.444190][ T344] virtio-fs: tag not found [ 29.450313][ T343] rust_binder: 2: no such ref 8388611 [ 29.500446][ T350] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 29.500496][ T350] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 29.518320][ T350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:5 [ 29.568494][ T359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.598857][ T359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.628978][ T366] random: crng reseeded on system resumption [ 29.654497][ T366] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 29.654525][ T366] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 29.659153][ T368] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 29.662775][ T366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:12 [ 29.680609][ T369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.711039][ T364] rust_binder: 7: no such ref 2 [ 29.721003][ T364] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.726901][ T373] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.834083][ T331] rust_binder: 363: removing orphan mapping 0:112 [ 29.852475][ T380] rust_binder: Error while translating object. [ 29.852524][ T380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.859723][ T380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 29.885431][ T382] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 29.895139][ T382] rust_binder: Error while translating object. [ 29.904354][ T382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.910606][ T382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 30.176445][ T413] tipc: Started in network mode [ 30.190556][ T415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 30.190652][ T413] tipc: Node identity c, cluster identity 4711 [ 30.208007][ T413] tipc: Node number set to 12 [ 30.297919][ T419] netlink: 165 bytes leftover after parsing attributes in process `syz.0.26'. [ 30.307937][ T425] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.331491][ T331] rust_binder: 418: removing orphan mapping 0:24 [ 30.502294][ T442] overlayfs: failed to resolve './file1': -2 [ 30.553170][ T436] mmap: syz.1.31 (436) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.556567][ T447] usb usb5: usbfs: process 447 (syz.0.35) did not claim interface 0 before use [ 30.577093][ T447] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.577695][ T447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.35'. [ 30.594534][ T447] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 30.594558][ T447] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 30.602693][ T447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:28 [ 30.638578][ T453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.648742][ T451] rust_binder: Error while translating object. [ 30.655488][ T451] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 30.661948][ T451] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:34 [ 30.723870][ T459] Zero length message leads to an empty skb [ 30.880153][ T462] netlink: 32 bytes leftover after parsing attributes in process `syz.1.40'. [ 30.889471][ T462] rust_binder: 461 RLIMIT_NICE not set [ 30.895179][ T65] rust_binder: 0: removing orphan mapping 0:4248 [ 30.926872][ T465] rust_binder: Write failure EFAULT in pid:44 [ 30.934918][ T468] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.977409][ T477] ======================================================= [ 30.977409][ T477] WARNING: The mand mount option has been deprecated and [ 30.977409][ T477] and is ignored by this kernel. Remove the mand [ 30.977409][ T477] option from the mount to silence this warning. [ 30.977409][ T477] ======================================================= [ 31.031863][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 31.176297][ T494] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 31.176317][ T494] rust_binder: Read failure Err(EFAULT) in pid:57 [ 31.185065][ T494] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 31.333338][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.484633][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.494925][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.504793][ T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 31.513303][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.513915][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 31.529600][ T31] usb 1-1: SerialNumber: syz [ 31.664576][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.674852][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.684616][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 31.693740][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 31.701790][ T10] usb 2-1: SerialNumber: syz [ 31.792993][ T503] capability: warning: `syz.2.53' uses 32-bit capabilities (legacy support in use) [ 31.805120][ T503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 31.812325][ T504] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 31.908838][ T497] rust_binder: Read failure Err(EFAULT) in pid:60 [ 31.910365][ T10] usb 2-1: 0:2 : does not exist [ 31.922196][ T10] usb 2-1: unit 5 not found! [ 31.933343][ T10] usb 2-1: USB disconnect, device number 2 [ 31.967518][ T492] udevd[492]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.000632][ T511] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 32.000682][ T511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:34 [ 32.179475][ T36] kauditd_printk_skb: 114 callbacks suppressed [ 32.179496][ T36] audit: type=1400 audit(1755918843.280:188): avc: denied { block_suspend } for pid=512 comm="syz.2.56" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.489877][ T522] netlink: 'syz.1.57': attribute type 4 has an invalid length. [ 32.497624][ T522] netlink: 'syz.1.57': attribute type 6 has an invalid length. [ 32.505287][ T522] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.57'. [ 32.568038][ T36] audit: type=1400 audit(1755918843.670:189): avc: denied { setopt } for pid=525 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 32.608915][ T528] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.621396][ T528] syz.1.60 uses obsolete (PF_INET,SOCK_PACKET) [ 32.630769][ T36] audit: type=1400 audit(1755918843.730:190): avc: denied { create } for pid=527 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.656349][ T36] audit: type=1400 audit(1755918843.760:191): avc: denied { bind } for pid=527 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.683503][ T36] audit: type=1400 audit(1755918843.760:192): avc: denied { setopt } for pid=527 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.748445][ T36] audit: type=1400 audit(1755918843.850:193): avc: denied { ioctl } for pid=536 comm="syz.1.63" path="socket:[3882]" dev="sockfs" ino=3882 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.806498][ T36] audit: type=1400 audit(1755918843.850:194): avc: denied { append } for pid=536 comm="syz.1.63" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.832998][ T540] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 32.845451][ T36] audit: type=1400 audit(1755918843.880:195): avc: denied { create } for pid=536 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 32.865063][ T36] audit: type=1400 audit(1755918843.880:196): avc: denied { bind } for pid=536 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 32.889651][ T36] audit: type=1400 audit(1755918843.990:197): avc: denied { setopt } for pid=548 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.922981][ T554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.923862][ T553] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 32.930538][ T554] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 32.941350][ T553] rust_binder: Error in use_page_slow: EFAULT [ 32.952602][ T554] rust_binder: Error in use_page_slow: EFAULT [ 32.958996][ T553] rust_binder: use_range failure EFAULT [ 32.965729][ T554] rust_binder: use_range failure EFAULT [ 32.971462][ T553] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 32.977403][ T554] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 32.985855][ T553] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 32.994524][ T554] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 33.004532][ T553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:53 [ 33.014748][ T554] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:53 [ 33.042258][ T560] IPv6: Can't replace route, no match found [ 33.083368][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 33.227615][ T573] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.227648][ T573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 33.493268][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.654364][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 33.662577][ T9] usb 4-1: config 0 has no interface number 0 [ 33.674721][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.686277][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.696343][ T9] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.700172][ T579] mmap: syz.1.76 (579): VmData 29003776 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 33.709674][ T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 33.730866][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.739936][ T9] usb 4-1: config 0 descriptor?? [ 33.905412][ T582] syz.1.77 (582): attempted to duplicate a private mapping with mremap. This is not supported. [ 33.969432][ T9] uclogic 0003:28BD:0042.0001: failed retrieving string descriptor #100: -71 [ 33.978665][ T477] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 33.978781][ T9] uclogic 0003:28BD:0042.0001: failed retrieving pen parameters: -71 [ 33.993495][ T9] uclogic 0003:28BD:0042.0001: pen probing failed: -71 [ 34.000842][ T9] uclogic 0003:28BD:0042.0001: failed probing parameters: -71 [ 34.008702][ T9] uclogic 0003:28BD:0042.0001: probe with driver uclogic failed with error -71 [ 34.022177][ T9] usb 4-1: USB disconnect, device number 2 [ 34.031648][ T31] usb 1-1: skipping empty audio interface (v1) [ 34.033591][ T589] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 34.060481][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 34.061624][ T591] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 34.069701][ T591] rust_binder: Read failure Err(EFAULT) in pid:92 [ 34.086561][ T31] usb 1-1: USB disconnect, device number 2 [ 34.126963][ T597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'. [ 34.136762][ T376] udevd[376]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.202749][ T601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.204298][ T601] rust_binder: Error while translating object. [ 34.210847][ T601] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 34.217417][ T601] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:82 [ 34.345728][ T615] rust_binder: 102: no such ref 1 [ 34.359996][ T615] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 34.367333][ T615] rust_binder: Error while translating object. [ 34.367365][ T615] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 34.373581][ T615] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:102 [ 34.463335][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.484592][ T621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:106 [ 34.603788][ T31] usb 1-1: device descriptor read/64, error -71 [ 34.610385][ T629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.620138][ T629] rust_binder: Error in use_page_slow: ESRCH [ 34.627320][ T629] rust_binder: use_range failure ESRCH [ 34.636949][ T629] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 34.642963][ T629] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 34.651944][ T629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:115 [ 34.674097][ T631] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.742444][ T632] rust_binder: Error in use_page_slow: ESRCH [ 34.742464][ T632] rust_binder: use_range failure ESRCH [ 34.748600][ T632] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 34.754294][ T632] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 34.762159][ T632] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:117 [ 34.772302][ T632] rust_binder: Error in use_page_slow: ESRCH [ 34.781489][ T632] rust_binder: use_range failure ESRCH [ 34.787577][ T632] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 34.793214][ T632] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 34.801087][ T632] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:117 [ 34.853305][ T31] usb 1-1: device descriptor read/64, error -71 [ 35.103301][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 35.217076][ T643] binder: Binderfs stats mode cannot be changed during a remount [ 35.234858][ T31] usb 1-1: device descriptor read/64, error -71 [ 35.330825][ T649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.348835][ T649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.418242][ T653] overlayfs: workdir and upperdir must be separate subtrees [ 35.493259][ T31] usb 1-1: device descriptor read/64, error -71 [ 35.603366][ T31] usb usb1-port1: attempt power cycle [ 35.733262][ T331] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.783293][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 35.893250][ T331] usb 4-1: Using ep0 maxpacket: 16 [ 35.898805][ T331] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 35.907639][ T331] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 35.915328][ T331] usb 4-1: can't read configurations, error -61 [ 35.934908][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 35.943280][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 35.951465][ T9] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 35.962499][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 35.974283][ T31] usb 1-1: device descriptor read/8, error -71 [ 35.980612][ T9] usb 2-1: New USB device found, idVendor=0eef, idProduct=480e, bcdDevice= 0.40 [ 36.001613][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.009809][ T9] usb 2-1: Product: Й [ 36.014007][ T9] usb 2-1: Manufacturer: 墨祄驖嗔Ƿ迼稿볆鎏癰钰頸༉ꖊ啻✽㬾㚫ꏧﬨ뇀ㄓᶱ叩㿝䂅祳ﴎ퐠泏꤉䎊ਆ♕䵪降뒝廘⷏↶ᒫ૫뿧臒ઔቻ㙢ᵯ뒐추푆慇䄚禦霰鈃몡ᗘ슠ᥖ괭砣樅಩颉荒 [ 36.037358][ T9] usb 2-1: SerialNumber: ј [ 36.043447][ T655] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 36.053369][ T331] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.106117][ T31] usb 1-1: device descriptor read/8, error -71 [ 36.203273][ T331] usb 4-1: Using ep0 maxpacket: 16 [ 36.208876][ T331] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 36.219231][ T331] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 36.227027][ T331] usb 4-1: can't read configurations, error -61 [ 36.233712][ T331] usb usb4-port1: attempt power cycle [ 36.253886][ T665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.262829][ T665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.272467][ T668] tipc: Started in network mode [ 36.277473][ T668] tipc: Node identity 06000000000000000004, cluster identity 4711 [ 36.288068][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 36.301178][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 36.314033][ T9] usb 2-1: USB disconnect, device number 3 [ 36.343282][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 36.397159][ T31] usb 1-1: device descriptor read/8, error -71 [ 36.400952][ T679] syz.1.108 (679): /proc/678/oom_adj is deprecated, please use /proc/678/oom_score_adj instead. [ 36.534495][ T31] usb 1-1: device descriptor read/8, error -71 [ 36.583281][ T331] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 36.604430][ T331] usb 4-1: Using ep0 maxpacket: 16 [ 36.610156][ T331] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 36.619108][ T331] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 36.626963][ T331] usb 4-1: can't read configurations, error -61 [ 36.643444][ T31] usb usb1-port1: unable to enumerate USB device [ 36.743315][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 36.763285][ T331] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 36.783660][ T331] usb 4-1: Using ep0 maxpacket: 16 [ 36.789480][ T331] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 36.798854][ T331] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 36.806641][ T331] usb 4-1: can't read configurations, error -61 [ 36.813133][ T331] usb usb4-port1: unable to enumerate USB device [ 36.905199][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 36.914025][ T9] usb 2-1: config 6 has an invalid interface number: 144 but max is 0 [ 36.922413][ T9] usb 2-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 36.931387][ T9] usb 2-1: config 6 has an invalid interface number: 93 but max is 0 [ 36.939708][ T9] usb 2-1: config 6 has 2 interfaces, different from the descriptor's value: 1 [ 36.948710][ T9] usb 2-1: config 6 has no interface number 0 [ 36.954898][ T9] usb 2-1: config 6 has no interface number 1 [ 36.961167][ T9] usb 2-1: config 6 interface 144 altsetting 6 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 36.972608][ T9] usb 2-1: config 6 interface 144 altsetting 6 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 36.983731][ T9] usb 2-1: config 6 interface 144 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 36.994654][ T9] usb 2-1: config 6 interface 144 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 37.005564][ T9] usb 2-1: config 6 interface 144 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 37.016319][ T9] usb 2-1: config 6 interface 144 altsetting 6 endpoint 0x6 has invalid maxpacket 72, setting to 64 [ 37.027184][ T9] usb 2-1: config 6 interface 144 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 37.038303][ T9] usb 2-1: too many endpoints for config 6 interface 93 altsetting 30: 189, using maximum allowed: 30 [ 37.049333][ T9] usb 2-1: config 6 interface 93 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 189 [ 37.062680][ T9] usb 2-1: config 6 interface 144 has no altsetting 0 [ 37.069520][ T9] usb 2-1: config 6 interface 93 has no altsetting 0 [ 37.077653][ T9] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a73, bcdDevice=9b.95 [ 37.086741][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.094769][ T9] usb 2-1: Product: syz [ 37.098952][ T9] usb 2-1: Manufacturer: 읍报箲囈ن먋ᶣ蓅괞鎛鮬画룉谯✛얄然犰а옽盜鷟锭抍鹳쏛눩귆얩꿿鵻⟛楉ᛲꓓ단늑鞠꿮졉镂冻橤钅㳢味쁂뤚褫ᑼ嫐臵ⅾ௞䓆돕옟癙掍訖⌎勫遬夥ว䒁箨ᒄ῰許蝞䆢⭸ [ 37.123738][ T9] usb 2-1: SerialNumber: syz [ 37.129625][ T681] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 37.138415][ T681] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 37.201154][ T36] kauditd_printk_skb: 42 callbacks suppressed [ 37.201175][ T36] audit: type=1400 audit(1755918848.300:240): avc: denied { bind } for pid=693 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.304169][ T696] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 37.351278][ T9] usb 2-1: USB disconnect, device number 4 [ 37.415529][ T696] incfs: Can't find or create .index dir in ./file0 [ 37.422277][ T696] incfs: mount failed -103 [ 37.494433][ T701] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 37.494462][ T701] rust_binder: Read failure Err(EFAULT) in pid:46 [ 37.526372][ T36] audit: type=1400 audit(1755918848.630:241): avc: denied { mount } for pid=706 comm="syz.0.118" name="/" dev="configfs" ino=1263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 37.563371][ T36] audit: type=1400 audit(1755918848.630:242): avc: denied { search } for pid=706 comm="syz.0.118" name="/" dev="configfs" ino=1263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 37.593101][ T36] audit: type=1400 audit(1755918848.630:243): avc: denied { mount } for pid=706 comm="syz.0.118" name="/" dev="ramfs" ino=6358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 37.622481][ T36] audit: type=1400 audit(1755918848.630:244): avc: denied { write } for pid=706 comm="syz.0.118" name="/" dev="configfs" ino=1263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 37.645976][ T36] audit: type=1400 audit(1755918848.630:245): avc: denied { add_name } for pid=706 comm="syz.0.118" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 37.666690][ T36] audit: type=1400 audit(1755918848.630:246): avc: denied { create } for pid=706 comm="syz.0.118" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 37.697245][ T36] audit: type=1400 audit(1755918848.800:247): avc: denied { bpf } for pid=727 comm="syz.2.126" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.697998][ T728] fuse: Bad value for 'fd' [ 37.717841][ T729] fuse: Bad value for 'fd' [ 37.723035][ T36] audit: type=1400 audit(1755918848.800:248): avc: denied { create } for pid=727 comm="syz.2.126" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 37.748707][ T36] audit: type=1400 audit(1755918848.800:249): avc: denied { mounton } for pid=727 comm="syz.2.126" path="/27/file0" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 37.870342][ T742] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 37.878574][ T742] SELinux: failed to load policy [ 37.898365][ T747] fuseblk: Bad value for 'fd' [ 37.903817][ T747] rust_binder: 71: no such ref 2 [ 37.908895][ T747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71 [ 38.143328][ T331] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 38.277593][ T766] netlink: 'syz.2.136': attribute type 11 has an invalid length. [ 38.285499][ T331] usb 1-1: device descriptor read/64, error -71 [ 38.523483][ T331] usb 1-1: device descriptor read/64, error -71 [ 38.752767][ T777] capability: warning: `syz.1.140' uses deprecated v2 capabilities in a way that may be insecure [ 38.765336][ T777] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.773553][ T331] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 38.803272][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 38.816956][ T778] rust_binder: Error in use_page_slow: ESRCH [ 38.816976][ T778] rust_binder: use_range failure ESRCH [ 38.823149][ T778] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 38.828724][ T778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 38.836642][ T778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:149 [ 38.847613][ T778] netlink: 104 bytes leftover after parsing attributes in process `syz.1.140'. [ 38.866213][ T778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:149 [ 38.923290][ T331] usb 1-1: device descriptor read/64, error -71 [ 38.963250][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 38.969801][ T10] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.982812][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 38.989571][ T10] usb 4-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 38.998697][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.007425][ T10] usb 4-1: config 0 descriptor?? [ 39.173273][ T331] usb 1-1: device descriptor read/64, error -71 [ 39.283332][ T331] usb usb1-port1: attempt power cycle [ 39.421190][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 39.427489][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 39.436557][ T10] usb 4-1: USB disconnect, device number 7 [ 39.600303][ T787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.600460][ T787] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 39.607324][ T787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:152 [ 39.625268][ T331] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 39.654403][ T331] usb 1-1: device descriptor read/8, error -71 [ 39.784607][ T331] usb 1-1: device descriptor read/8, error -71 [ 39.893276][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 39.936134][ T797] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 39.943486][ T797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:109 [ 40.023260][ T331] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 40.053241][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 40.054409][ T331] usb 1-1: device descriptor read/8, error -71 [ 40.069221][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 40.077679][ T10] usb 2-1: config 179 has no interface number 0 [ 40.084081][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 40.095494][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 40.107177][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 40.118802][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 40.119538][ T808] rust_binder: Failed copying into alloc: EFAULT [ 40.131203][ T10] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 40.138719][ T810] overlayfs: failed to resolve '/zӁ|ѣq*_8!VN Օ`{sy1Nz': -2 [ 40.151260][ T808] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 40.159860][ T808] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 40.168275][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 40.187585][ T808] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:117 [ 40.187685][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.214429][ T331] usb 1-1: device descriptor read/8, error -71 [ 40.222914][ T794] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 40.333342][ T331] usb usb1-port1: unable to enumerate USB device [ 40.543266][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 40.640683][ T518] usb 2-1: USB disconnect, device number 5 [ 40.640713][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 40.654837][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 40.694432][ T10] usb 4-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 40.704856][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 40.714449][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.728808][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.737915][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.746038][ T10] usb 4-1: Product: syz [ 40.750298][ T10] usb 4-1: Manufacturer: syz [ 40.754954][ T10] usb 4-1: SerialNumber: syz [ 40.911418][ T828] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 40.961487][ T831] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.978835][ T10] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 40.992695][ T10] cdc_ncm 4-1:1.0: bind() failure [ 41.000554][ T10] usb 4-1: USB disconnect, device number 8 [ 41.038722][ T838] process 'syz.2.162' launched '/dev/fd/3' with NULL argv: empty string added [ 41.269623][ T866] netlink: 140 bytes leftover after parsing attributes in process `syz.0.170'. [ 41.279331][ T866] netlink: 48 bytes leftover after parsing attributes in process `syz.0.170'. [ 41.289623][ T866] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.289735][ T866] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 208, size: 238) [ 41.296943][ T866] rust_binder: Error while translating object. [ 41.308054][ T866] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.321132][ T866] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:88 [ 41.333335][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 41.503221][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 41.512705][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.522911][ T10] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 41.532226][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.543372][ T10] usb 4-1: config 0 descriptor?? [ 41.640972][ T875] rust_binder: Error while translating object. [ 41.641028][ T875] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.647687][ T875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:169 [ 41.952889][ T10] saitek 0003:06A3:0621.0002: unknown main item tag 0x0 [ 41.983781][ T10] saitek 0003:06A3:0621.0002: unknown main item tag 0x0 [ 41.991277][ T10] saitek 0003:06A3:0621.0002: unknown main item tag 0x0 [ 41.998849][ T10] saitek 0003:06A3:0621.0002: unknown main item tag 0x0 [ 42.006309][ T10] saitek 0003:06A3:0621.0002: unknown main item tag 0x0 [ 42.028386][ T10] saitek 0003:06A3:0621.0002: hidraw0: USB HID v0.03 Device [HID 06a3:0621] on usb-dummy_hcd.3-1/input0 [ 42.130395][ T919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 42.152819][ T919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.185'. [ 42.201290][ T928] overlayfs: conflicting options: userxattr,metacopy=on [ 42.404264][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 42.404283][ T36] audit: type=1400 audit(1755918853.514:277): avc: denied { setopt } for pid=925 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.430276][ T36] audit: type=1400 audit(1755918853.534:278): avc: denied { read } for pid=925 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.631305][ T36] audit: type=1400 audit(1755918853.734:279): avc: denied { wake_alarm } for pid=934 comm="syz.1.189" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.057507][ T942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 43.077803][ T944] overlayfs: missing 'workdir' [ 43.145780][ T949] fuse: Bad value for 'fd' [ 43.793251][ T331] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 43.944869][ T331] usb 2-1: unable to get BOS descriptor or descriptor too short [ 43.953005][ T331] usb 2-1: not running at top speed; connect to a high speed hub [ 43.960833][ T331] usb 2-1: too many configurations: 67, using maximum allowed: 8 [ 43.969773][ T331] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 43.977548][ T331] usb 2-1: can't read configurations, error -61 [ 44.013585][ T10] usb 4-1: USB disconnect, device number 9 [ 44.058081][ T967] rust_binder: Write failure EFAULT in pid:132 [ 44.075934][ T45] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.094937][ T45] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.113252][ T331] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 44.264747][ T331] usb 2-1: unable to get BOS descriptor or descriptor too short [ 44.272804][ T331] usb 2-1: not running at top speed; connect to a high speed hub [ 44.280729][ T331] usb 2-1: too many configurations: 67, using maximum allowed: 8 [ 44.289541][ T331] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 44.297231][ T331] usb 2-1: can't read configurations, error -61 [ 44.303834][ T331] usb usb2-port1: attempt power cycle [ 44.643283][ T331] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 44.664939][ T331] usb 2-1: unable to get BOS descriptor or descriptor too short [ 44.673070][ T331] usb 2-1: not running at top speed; connect to a high speed hub [ 44.680871][ T331] usb 2-1: too many configurations: 67, using maximum allowed: 8 [ 44.689696][ T331] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 44.697321][ T331] usb 2-1: can't read configurations, error -61 [ 44.749732][ T982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.206'. [ 44.805752][ T36] audit: type=1400 audit(1755918855.914:280): avc: denied { create } for pid=990 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 44.833266][ T331] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 44.855083][ T331] usb 2-1: unable to get BOS descriptor or descriptor too short [ 44.863358][ T331] usb 2-1: not running at top speed; connect to a high speed hub [ 44.871221][ T331] usb 2-1: too many configurations: 67, using maximum allowed: 8 [ 44.880281][ T331] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 44.888443][ T331] usb 2-1: can't read configurations, error -61 [ 44.895085][ T331] usb usb2-port1: unable to enumerate USB device [ 44.938169][ T36] audit: type=1400 audit(1755918856.044:281): avc: denied { read } for pid=1001 comm="syz.3.213" name="/" dev="configfs" ino=1263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.960350][ T36] audit: type=1400 audit(1755918856.044:282): avc: denied { open } for pid=1001 comm="syz.3.213" path="/" dev="configfs" ino=1263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.233236][ T577] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 45.363293][ T577] usb 4-1: device descriptor read/64, error -71 [ 45.401237][ T1014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.219'. [ 45.410289][ T1015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.219'. [ 45.421108][ T36] audit: type=1400 audit(1755918856.524:283): avc: denied { create } for pid=1013 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 45.448767][ T36] audit: type=1400 audit(1755918856.554:284): avc: denied { create } for pid=1017 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.468216][ T36] audit: type=1400 audit(1755918856.574:285): avc: denied { setopt } for pid=1017 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.487936][ T36] audit: type=1400 audit(1755918856.574:286): avc: denied { bind } for pid=1017 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.633223][ T577] usb 4-1: device descriptor read/64, error -71 [ 45.656318][ T1036] overlayfs: failed to clone upperpath [ 45.681024][ T1038] netlink: 224 bytes leftover after parsing attributes in process `syz.2.228'. [ 45.883387][ T577] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 45.951900][ T1067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=1067 comm=syz.2.237 [ 45.992764][ T1074] 9pnet_fd: Insufficient options for proto=fd [ 46.013339][ T577] usb 4-1: device descriptor read/64, error -71 [ 46.263271][ T577] usb 4-1: device descriptor read/64, error -71 [ 46.373367][ T577] usb usb4-port1: attempt power cycle [ 46.393257][ T331] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 46.545178][ T331] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.556132][ T331] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58377, setting to 1024 [ 46.567338][ T331] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 46.577519][ T331] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 46.597672][ T331] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.598381][ T1095] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.607044][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.632305][ T331] usb 1-1: Product: Ќ [ 46.636490][ T331] usb 1-1: Manufacturer: ࠉ [ 46.641274][ T331] usb 1-1: SerialNumber: ᝷屰絧싐艌讁ಝ箟ოப綎䗾超퍌ﾦ䢙㏏額ꄀ쭗빵㘜ۑ߇㦻痃禂꺬제汔ҍ䲛៧ჟ똺俩븈撊尖켜᳢㷟굃蟃ਝ恫ꞛ됇╓坔ౌﾘ缩㗽圓챁枋隉沅빱ꚤ睸爵緻顂耰⬙嫌獻뾵ꁧ㊕댗蟆籴쩝ໜ픯罾몫칸僁徛㤜㨳낉︈㊢큰소흒뿅󎯔⦕ [ 46.674764][ T1092] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 46.733241][ T577] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 46.759275][ T577] usb 4-1: device descriptor read/8, error -71 [ 46.787265][ T1112] /dev/rnullb0: Can't open blockdev [ 46.894352][ T577] usb 4-1: device descriptor read/8, error -71 [ 47.083457][ T1092] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 47.084701][ T1115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.090755][ T1092] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 47.101470][ T1116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.107334][ T1115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.115170][ T1116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.130779][ T1116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.139207][ T577] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 47.144298][ T1116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.160234][ T331] cdc_ncm 1-1:1.0: bind() failure [ 47.167214][ T577] usb 4-1: device descriptor read/8, error -71 [ 47.172152][ T331] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 47.183525][ T331] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 47.196526][ T331] usb 1-1: USB disconnect, device number 11 [ 47.306796][ T577] usb 4-1: device descriptor read/8, error -71 [ 47.413381][ T577] usb usb4-port1: unable to enumerate USB device [ 47.526071][ T1152] tmpfs: Invalid uid '0x00000000ffffffff' [ 47.535101][ T1153] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.570616][ T1159] overlayfs: failed to clone upperpath [ 47.583260][ T521] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 47.613337][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 47.613357][ T36] audit: type=1400 audit(1755918858.714:292): avc: denied { append } for pid=1168 comm="syz.0.270" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 47.625673][ T1173] overlayfs: failed to clone upperpath [ 47.694489][ T36] audit: type=1400 audit(1755918858.804:293): avc: denied { ioctl } for pid=1181 comm="syz.0.274" path="socket:[7276]" dev="sockfs" ino=7276 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 47.734347][ T521] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.744749][ T1191] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.744811][ T521] usb 2-1: config 0 has no interfaces? [ 47.758300][ T521] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 47.767847][ T521] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.790198][ T521] usb 2-1: config 0 descriptor?? [ 47.830791][ T36] audit: type=1400 audit(1755918858.934:294): avc: denied { mounton } for pid=1188 comm="syz.0.276" path="/56/file0" dev="tmpfs" ino=327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 48.001519][ T1143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.013805][ T1143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.022459][ T1143] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.033037][ T1211] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 48.074052][ T1214] rust_binder: Error in use_page_slow: ESRCH [ 48.074082][ T1214] rust_binder: use_range failure ESRCH [ 48.074717][ T1211] rust_binder: Write failure EINVAL in pid:144 [ 48.082340][ T1214] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 48.110465][ T1214] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 48.119219][ T1214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:201 [ 48.121423][ T36] audit: type=1400 audit(1755918859.224:295): avc: denied { create } for pid=1216 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 48.159362][ T45] usb 2-1: USB disconnect, device number 10 [ 48.354906][ T1231] raw_sendmsg: syz.3.286 forgot to set AF_INET. Fix it! [ 48.364195][ T36] audit: type=1400 audit(1755918859.464:296): avc: denied { setopt } for pid=1230 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 48.397992][ T36] audit: type=1400 audit(1755918859.474:297): avc: denied { execute } for pid=1230 comm="syz.3.286" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.433371][ T36] audit: type=1326 audit(1755918859.544:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1234 comm="syz.3.288" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91e718ebe9 code=0x0 [ 48.487513][ T1244] /dev/rnullb0: Can't open blockdev [ 48.599223][ T36] audit: type=1400 audit(1755918859.704:299): avc: denied { accept } for pid=1257 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.729670][ T1263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 48.740931][ T1262] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 48.740951][ T1262] rust_binder: Error while translating object. [ 48.749621][ T1262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.755856][ T1262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:204 [ 48.903226][ T577] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 48.995109][ T36] audit: type=1400 audit(1755918860.104:300): avc: denied { map } for pid=1275 comm="syz.1.301" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 49.044401][ T36] audit: type=1400 audit(1755918860.154:301): avc: denied { getopt } for pid=1279 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.064459][ T577] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.074452][ T577] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 49.083877][ T577] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.092844][ T577] usb 1-1: config 0 descriptor?? [ 49.136839][ T1283] 9pnet_fd: Insufficient options for proto=fd [ 49.502488][ T577] lenovo 0003:17EF:6047.0004: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 49.905657][ T577] lenovo 0003:17EF:6047.0004: Failed to switch middle button: -71 [ 49.918570][ T577] lenovo 0003:17EF:6047.0004: Fn-lock setting failed: -71 [ 49.932547][ T577] lenovo 0003:17EF:6047.0004: Sensitivity setting failed: -71 [ 49.942260][ T577] usb 1-1: USB disconnect, device number 12 [ 50.193239][ T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 50.344367][ T45] usb 2-1: config 127 has an invalid interface number: 32 but max is 0 [ 50.352861][ T45] usb 2-1: config 127 has no interface number 0 [ 50.359205][ T45] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=64.06 [ 50.368476][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.378095][ T45] ums-freecom 2-1:127.32: USB Mass Storage device detected [ 50.483130][ T1309] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.535033][ T1310] rust_binder: Error in use_page_slow: ESRCH [ 50.541706][ T1310] rust_binder: use_range failure ESRCH [ 50.548268][ T1310] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 50.554391][ T1310] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 50.562267][ T1310] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:193 [ 50.573346][ T1310] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:193 [ 50.724198][ T577] usb 2-1: USB disconnect, device number 11 [ 51.262992][ T1315] rust_binder: Write failure EFAULT in pid:227 [ 51.283923][ T1317] $: renamed from bridge_slave_0 (while UP) [ 51.315064][ T1321] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 51.315084][ T1321] rust_binder: Error while translating object. [ 51.323869][ T1321] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.330100][ T1321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:231 [ 51.409435][ T1328] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.461196][ T1332] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.469866][ T1332] rust_binder: Error in use_page_slow: ESRCH [ 51.474875][ T1333] rust_binder: Error in use_page_slow: ESRCH [ 51.476620][ T1332] rust_binder: use_range failure ESRCH [ 51.482729][ T1333] rust_binder: use_range failure ESRCH [ 51.488879][ T1332] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 51.495427][ T1333] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 51.499845][ T1332] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 51.508182][ T1333] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 51.515834][ T1332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:238 [ 51.525457][ T1333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:198 [ 51.740419][ T1346] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.793240][ T45] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 51.807190][ T1355] fuse: Bad value for 'user_id' [ 51.812282][ T1355] fuse: Bad value for 'user_id' [ 51.895797][ T1360] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1360 comm=syz.0.329 [ 51.915863][ T1368] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=1368 comm=syz.2.331 [ 51.942492][ T1373] fuse: Bad value for 'fd' [ 51.967507][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.981222][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.991076][ T45] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 52.000230][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 52.008487][ T45] usb 2-1: SerialNumber: syz [ 52.217121][ T45] usb 2-1: 0:2 : does not exist [ 52.223913][ T45] usb 2-1: USB disconnect, device number 12 [ 52.233126][ T376] udevd[376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.485258][ T1405] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.485280][ T1405] rust_binder: Read failure Err(EFAULT) in pid:184 [ 52.508728][ T1407] netlink: 'syz.3.343': attribute type 13 has an invalid length. [ 52.526151][ T1407] fuse: Bad value for 'group_id' [ 52.531138][ T1407] fuse: Bad value for 'group_id' [ 52.633864][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 52.633884][ T36] audit: type=1400 audit(1755918863.744:312): avc: denied { mounton } for pid=1408 comm="syz.3.344" path="/59/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.713255][ T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 52.836187][ T36] audit: type=1326 audit(1755918863.944:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1380 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529118ebe9 code=0x7fc00000 [ 52.859558][ T36] audit: type=1326 audit(1755918863.944:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1380 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f529118ebe9 code=0x7fc00000 [ 52.883404][ T1421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'. [ 52.892209][ T1421] netlink: 'syz.3.345': attribute type 3 has an invalid length. [ 52.902381][ T45] usb 1-1: config 1 interface 0 altsetting 14 bulk endpoint 0x82 has invalid maxpacket 16 [ 52.914194][ T45] usb 1-1: config 1 interface 0 altsetting 14 bulk endpoint 0x3 has invalid maxpacket 1023 [ 52.924456][ T36] audit: type=1326 audit(1755918863.944:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1380 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529118ebe9 code=0x7fc00000 [ 52.947917][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 52.954834][ T36] audit: type=1326 audit(1755918863.944:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1380 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529118ebe9 code=0x7fc00000 [ 52.978428][ T36] audit: type=1326 audit(1755918863.944:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1380 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529118ebe9 code=0x7fc00000 [ 53.002167][ T36] audit: type=1326 audit(1755918863.944:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1380 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529118ebe9 code=0x7fc00000 [ 53.025947][ T36] audit: type=1326 audit(1755918863.944:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1380 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529118ebe9 code=0x7fc00000 [ 53.033256][ T518] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 53.049297][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.065882][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.074383][ T45] usb 1-1: Product: 浭ቿ날⏲ଵ屟泌荫稾간菨賝溕䨳厮蜻ꢿ⠷횦ꋺ첝躦㵎✂ꛚ犡戉這ퟲ⮙斠갵獗爹焛栽餛్㯢뮫魫蹓Ӱ逦ᶝ历㱎깺ꑭ蒂䴣視淐⾓黎괺◿⊯롸ﮪꄥ凃谳陃甃གྷল杯죅踓҈䛱徎䵯䝐ửꣾ䣟콫崉ᜄ鰚佹ꥐ뢉⑼䲩醴젌䌰翊ﭙ܃毯턑띶荦먫ẖᴼ৚晨痢翷ﴮ [ 53.108157][ T36] audit: type=1326 audit(1755918863.944:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1380 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529118ebe9 code=0x7fc00000 [ 53.131765][ T45] usb 1-1: Manufacturer: ⠁ [ 53.136570][ T36] audit: type=1326 audit(1755918863.944:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1380 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529118ebe9 code=0x7fc00000 [ 53.159817][ T45] usb 1-1: SerialNumber: 軖穜뭺詿澪료೙뷏ɰ電ꄓࡳ鿳퉍歂蓟脱¢缕딯۴狴襎䩩羦朋Ꭱ糱擩促髀铹齐求⿝贛戍楁鄳⨓꼡똥ヿ펛腜㣸搜埒ཱྀ杇ᣮ⾸녮﯀㴌각쪖ꎔ닌᥷ᝤ沋뵀⌵ᡊ灴ᮭꎔꠌ튉Ⓢ竷㍱問幥卑 [ 53.185336][ T331] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 53.207224][ T1403] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 53.214697][ T518] usb 2-1: device descriptor read/64, error -71 [ 53.221214][ T1403] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 53.323453][ T331] usb 4-1: device descriptor read/64, error -71 [ 53.439601][ T45] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 53.450114][ T45] usb 1-1: USB disconnect, device number 13 [ 53.457673][ T518] usb 2-1: device descriptor read/64, error -71 [ 53.466033][ T1428] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.468138][ T1428] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 53.474656][ T1428] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 53.482679][ T1428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:239 [ 53.553440][ T1438] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.563413][ T331] usb 4-1: device descriptor read/64, error -71 [ 53.713269][ T518] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 53.813290][ T331] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 53.843246][ T518] usb 2-1: device descriptor read/64, error -71 [ 53.853257][ T45] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 53.943289][ T331] usb 4-1: device descriptor read/64, error -71 [ 54.004486][ T45] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 54.012661][ T45] usb 1-1: config 0 has no interface number 0 [ 54.018805][ T45] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.029806][ T45] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.039832][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 54.048950][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.058126][ T45] usb 1-1: config 0 descriptor?? [ 54.083255][ T518] usb 2-1: device descriptor read/64, error -71 [ 54.183260][ T331] usb 4-1: device descriptor read/64, error -71 [ 54.193414][ T518] usb usb2-port1: attempt power cycle [ 54.221159][ T1441] netlink: 188 bytes leftover after parsing attributes in process `syz.2.354'. [ 54.230925][ T1441] netlink: 188 bytes leftover after parsing attributes in process `syz.2.354'. [ 54.294850][ T331] usb usb4-port1: attempt power cycle [ 54.302488][ T1445] overlayfs: missing 'lowerdir' [ 54.309366][ T1445] ip6tnl0: entered promiscuous mode [ 54.314692][ T1445] ip6tnl0: entered allmulticast mode [ 54.333783][ T1448] overlayfs: failed to clone upperpath [ 54.467423][ T45] logitech-djreceiver 0003:046D:C71B.0005: unknown main item tag 0x0 [ 54.477092][ T45] logitech-djreceiver 0003:046D:C71B.0005: unknown main item tag 0x0 [ 54.485406][ T45] logitech-djreceiver 0003:046D:C71B.0005: unknown main item tag 0x0 [ 54.503240][ T45] logitech-djreceiver 0003:046D:C71B.0005: unknown main item tag 0x0 [ 54.513410][ T45] logitech-djreceiver 0003:046D:C71B.0005: unknown main item tag 0x0 [ 54.521598][ T45] logitech-djreceiver 0003:046D:C71B.0005: unknown main item tag 0x0 [ 54.529740][ T45] logitech-djreceiver 0003:046D:C71B.0005: unknown main item tag 0x0 [ 54.539083][ T45] logitech-djreceiver 0003:046D:C71B.0005: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.0-1/input32 [ 54.543382][ T518] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 54.584332][ T518] usb 2-1: device descriptor read/8, error -71 [ 54.633292][ T331] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 54.654351][ T331] usb 4-1: device descriptor read/8, error -71 [ 54.666820][ T1439] rust_binder: Error in use_page_slow: ESRCH [ 54.666838][ T1439] rust_binder: use_range failure ESRCH [ 54.672887][ T1439] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 54.678422][ T1439] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 54.686305][ T1439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:249 [ 54.714219][ T518] usb 2-1: device descriptor read/8, error -71 [ 54.784400][ T331] usb 4-1: device descriptor read/8, error -71 [ 54.963294][ T518] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 54.984533][ T518] usb 2-1: device descriptor read/8, error -71 [ 55.023593][ T331] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 55.040355][ T1480] overlayfs: failed to clone upperpath [ 55.047105][ T331] usb 4-1: device descriptor read/8, error -71 [ 55.114432][ T518] usb 2-1: device descriptor read/8, error -71 [ 55.184362][ T331] usb 4-1: device descriptor read/8, error -71 [ 55.223371][ T518] usb usb2-port1: unable to enumerate USB device [ 55.293360][ T331] usb usb4-port1: unable to enumerate USB device [ 55.743255][ T1497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1497 comm=syz.3.375 [ 56.063240][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 56.183233][ T577] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 56.193386][ T10] usb 4-1: device descriptor read/64, error -71 [ 56.313265][ T577] usb 2-1: device descriptor read/64, error -71 [ 56.443307][ T10] usb 4-1: device descriptor read/64, error -71 [ 56.553242][ T577] usb 2-1: device descriptor read/64, error -71 [ 56.557882][ T331] usb 1-1: USB disconnect, device number 14 [ 56.683267][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 56.793234][ T577] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 56.813280][ T10] usb 4-1: device descriptor read/64, error -71 [ 56.923256][ T577] usb 2-1: device descriptor read/64, error -71 [ 56.943247][ T331] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 56.985461][ T1570] batadv_slave_0: entered promiscuous mode [ 56.992592][ T1570] batadv_slave_0: left promiscuous mode [ 57.020829][ T1574] fuse: Bad value for 'group_id' [ 57.025851][ T1574] fuse: Bad value for 'group_id' [ 57.054725][ T10] usb 4-1: device descriptor read/64, error -71 [ 57.103343][ T331] usb 1-1: Using ep0 maxpacket: 16 [ 57.109684][ T331] usb 1-1: config 0 has an invalid interface number: 138 but max is 0 [ 57.117911][ T331] usb 1-1: config 0 has no interface number 0 [ 57.124161][ T331] usb 1-1: too many endpoints for config 0 interface 138 altsetting 225: 192, using maximum allowed: 30 [ 57.135350][ T331] usb 1-1: config 0 interface 138 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 192 [ 57.148880][ T331] usb 1-1: config 0 interface 138 has no altsetting 0 [ 57.155787][ T331] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 57.164903][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.173525][ T577] usb 2-1: device descriptor read/64, error -71 [ 57.173986][ T331] usb 1-1: config 0 descriptor?? [ 57.182222][ T10] usb usb4-port1: attempt power cycle [ 57.293361][ T577] usb usb2-port1: attempt power cycle [ 57.523316][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 57.544516][ T10] usb 4-1: device descriptor read/8, error -71 [ 57.633253][ T577] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 57.654365][ T577] usb 2-1: device descriptor read/8, error -71 [ 57.674397][ T10] usb 4-1: device descriptor read/8, error -71 [ 57.784463][ T577] usb 2-1: device descriptor read/8, error -71 [ 57.913249][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 57.935127][ T1587] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 57.944442][ T10] usb 4-1: device descriptor read/8, error -71 [ 57.945568][ T36] kauditd_printk_skb: 1950 callbacks suppressed [ 57.945586][ T36] audit: type=1400 audit(1755918869.054:2272): avc: denied { relabelto } for pid=1586 comm="syz.2.404" name="cgroup" dev="tmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 57.951508][ T1587] overlayfs: failed to clone upperpath [ 57.957543][ T36] audit: type=1400 audit(1755918869.054:2273): avc: denied { associate } for pid=1586 comm="syz.2.404" name="cgroup" dev="tmpfs" ino=977 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 58.026172][ T36] audit: type=1400 audit(1755918869.134:2274): avc: denied { unlink } for pid=290 comm="syz-executor" name="cgroup" dev="tmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 58.043282][ T577] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 58.094391][ T10] usb 4-1: device descriptor read/8, error -71 [ 58.100665][ T577] usb 2-1: device descriptor read/8, error -71 [ 58.203421][ T10] usb usb4-port1: unable to enumerate USB device [ 58.234389][ T577] usb 2-1: device descriptor read/8, error -71 [ 58.343360][ T577] usb usb2-port1: unable to enumerate USB device [ 58.837674][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.104318][ T1629] fuse: Bad value for 'user_id' [ 59.115956][ T1629] fuse: Bad value for 'user_id' [ 59.171953][ T1636] fuse: Unknown parameter 'gToupUi' [ 59.226310][ T36] audit: type=1400 audit(1755918870.334:2275): avc: denied { map } for pid=1643 comm="syz.2.423" path="socket:[9310]" dev="sockfs" ino=9310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.249793][ T36] audit: type=1400 audit(1755918870.334:2276): avc: denied { read } for pid=1643 comm="syz.2.423" path="socket:[9310]" dev="sockfs" ino=9310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.287675][ T1648] 9pnet_fd: Insufficient options for proto=fd [ 59.303288][ T45] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 59.354777][ T1663] rust_binder: Error while translating object. [ 59.354835][ T1663] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.361278][ T1663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:229 [ 59.372116][ T1665] overlayfs: conflicting options: nfs_export=on,index=off [ 59.389490][ T36] audit: type=1400 audit(1755918870.494:2277): avc: denied { write } for pid=1662 comm="syz.3.429" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 59.413887][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.431000][ T1670] fuse: Unknown parameter 'f0x0000000000000004' [ 59.451113][ T1670] netlink: 84 bytes leftover after parsing attributes in process `syz.2.431'. [ 59.503248][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 59.514502][ T45] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 59.523108][ T45] usb 2-1: config 179 has no interface number 0 [ 59.530777][ T45] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 59.550573][ T45] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 59.562690][ T45] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 59.584809][ T45] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 59.595311][ T45] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 59.595438][ T1685] overlayfs: failed to clone upperpath [ 59.609950][ T45] usb 2-1: config 179 interface 65 has no altsetting 0 [ 59.621322][ T45] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 59.630660][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.655235][ T45] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input4 [ 59.682357][ T36] audit: type=1400 audit(1755918870.784:2278): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=482 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.705358][ T36] audit: type=1400 audit(1755918870.784:2279): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=482 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.752382][ T1691] netlink: 'syz.2.439': attribute type 1 has an invalid length. [ 59.769367][ T331] usb 1-1: string descriptor 0 read error: -71 [ 59.781866][ T331] ftdi_sio 1-1:0.138: FTDI USB Serial Device converter detected [ 59.796764][ T331] usb 1-1: Detected FT232A [ 59.805229][ T331] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 59.820848][ T1698] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.834067][ T331] usb 1-1: USB disconnect, device number 15 [ 59.858297][ T331] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 59.869990][ T331] ftdi_sio 1-1:0.138: device disconnected [ 59.893372][ T1699] rust_binder: Error in use_page_slow: ESRCH [ 59.893400][ T1699] rust_binder: use_range failure ESRCH [ 59.903212][ T1699] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 59.908745][ T1699] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 59.933226][ T1699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:260 [ 59.943275][ T1699] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 59.959942][ T1699] /dev/rnullb0: Can't open blockdev [ 60.360360][ T36] audit: type=1400 audit(1755918871.464:2280): avc: denied { setopt } for pid=1705 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.360680][ T1706] netlink: 152 bytes leftover after parsing attributes in process `syz.2.444'. [ 60.421904][ T9] usb 2-1: USB disconnect, device number 21 [ 60.422045][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 60.444242][ T9] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 60.486017][ T36] audit: type=1326 audit(1755918871.594:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1707 comm="syz.1.445" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff55518ebe9 code=0x0 [ 60.700732][ T1718] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.840506][ T1723] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.857035][ T1723] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.870573][ T1723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:268 [ 60.904179][ T1723] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.988195][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 61.015162][ T9] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 61.174937][ T1734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'. [ 61.341111][ T1761] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 61.341139][ T1761] rust_binder: Error while translating object. [ 61.356463][ T1761] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.365451][ T1761] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:263 [ 61.396226][ T1766] fuseblk: Bad value for 'fd' [ 61.473224][ T45] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 61.549920][ T1777] $: renamed from bridge_slave_0 (while UP) [ 61.550373][ T1778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 61.556653][ T1778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:256 [ 61.623243][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 61.646405][ T45] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.668167][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 61.679500][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 61.692282][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 61.701503][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.707163][ T1790] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 61.710301][ T45] usb 1-1: config 0 descriptor?? [ 61.713486][ T1790] rust_binder: Error while translating object. [ 61.722965][ T1732] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 61.737622][ T1790] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.737657][ T1790] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:269 [ 61.744311][ T45] hub 1-1:0.0: USB hub found [ 61.781808][ T1792] /dev/rnullb0: Can't open blockdev [ 61.943576][ T1732] netlink: 64 bytes leftover after parsing attributes in process `syz.0.450'. [ 61.953372][ T45] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 62.123255][ T31] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 62.155220][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 62.161258][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 62.183653][ T45] usb 1-1: USB disconnect, device number 16 [ 62.202720][ T1801] 9pnet_fd: Insufficient options for proto=fd [ 62.273218][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 62.279745][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 62.288127][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.298287][ T31] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 62.311331][ T31] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 62.320455][ T31] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 62.331674][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=4a23, bcdDevice=cc.c0 [ 62.340776][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.348810][ T31] usb 4-1: Product: syz [ 62.353011][ T31] usb 4-1: Manufacturer: syz [ 62.357882][ T31] usb 4-1: SerialNumber: syz [ 62.566500][ T1798] rust_binder: Read failure Err(EFAULT) in pid:274 [ 62.572286][ T31] usb 4-1: USB disconnect, device number 22 [ 62.608096][ T1809] netlink: 32 bytes leftover after parsing attributes in process `syz.1.479'. [ 62.617843][ T1810] netlink: 32 bytes leftover after parsing attributes in process `syz.1.479'. [ 62.740224][ T1822] netlink: 'syz.0.483': attribute type 6 has an invalid length. [ 62.752496][ T1824] /dev/rnullb0: Can't open blockdev [ 63.014327][ T1839] netlink: 188 bytes leftover after parsing attributes in process `syz.2.488'. [ 63.201095][ T1853] tipc: Enabled bearer , priority 10 [ 63.249880][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 63.249900][ T36] audit: type=1400 audit(1755918874.354:2292): avc: denied { create } for pid=1855 comm="syz.2.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 63.308741][ T36] audit: type=1400 audit(1755918874.394:2293): avc: denied { create } for pid=1855 comm="syz.2.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 63.329813][ T1860] SELinux: ebitmap: truncated map [ 63.339762][ T1860] SELinux: failed to load policy [ 63.367660][ T36] audit: type=1400 audit(1755918874.414:2294): avc: denied { load_policy } for pid=1857 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 63.398522][ T577] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 63.423428][ T36] audit: type=1400 audit(1755918874.494:2295): avc: denied { shutdown } for pid=1861 comm="syz.2.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.593228][ T577] usb 4-1: Using ep0 maxpacket: 16 [ 63.613925][ T577] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 63.623858][ T577] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 63.643346][ T577] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.683224][ T577] usb 4-1: config 1 interface 0 has no altsetting 0 [ 63.691271][ T577] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 63.700685][ T577] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.714604][ T577] usb 4-1: Product: syz [ 63.721326][ T577] usb 4-1: Manufacturer: syz [ 63.726052][ T577] usb 4-1: SerialNumber: syz [ 63.744375][ T1887] netlink: 32 bytes leftover after parsing attributes in process `syz.1.505'. [ 63.756374][ T1887] random: crng reseeded on system resumption [ 63.801477][ T1891] /dev/loop0: Can't lookup blockdev [ 63.888678][ T36] audit: type=1400 audit(1755918874.994:2296): avc: denied { mount } for pid=1899 comm="syz.2.510" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.932978][ T1848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.933281][ T577] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 63.942424][ T1848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.973236][ T36] audit: type=1400 audit(1755918875.074:2297): avc: denied { sqpoll } for pid=1846 comm="syz.3.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 64.034193][ T1912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.089048][ T1913] rust_binder: Error in use_page_slow: ESRCH [ 64.095649][ T1913] rust_binder: use_range failure ESRCH [ 64.101717][ T1913] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 64.107518][ T1913] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 64.115520][ T1913] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:299 [ 64.193266][ T521] tipc: Node number set to 100925440 [ 64.330374][ T577] usb 4-1: USB disconnect, device number 23 [ 64.338288][ T577] usblp0: removed [ 64.347252][ T1920] veth1_macvtap: left promiscuous mode [ 64.391507][ T36] audit: type=1400 audit(1755918875.494:2298): avc: denied { mount } for pid=1922 comm="syz.0.517" name="/" dev="pstore" ino=1480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 64.418058][ T36] audit: type=1400 audit(1755918875.504:2299): avc: denied { execute } for pid=1919 comm="syz.3.516" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.441387][ T36] audit: type=1400 audit(1755918875.524:2300): avc: denied { accept } for pid=1922 comm="syz.0.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.561802][ T36] audit: type=1400 audit(1755918875.664:2301): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.630713][ T1943] 9pnet_fd: Insufficient options for proto=fd [ 64.844553][ T336] bridge_slave_1: left allmulticast mode [ 64.850305][ T336] bridge_slave_1: left promiscuous mode [ 64.856306][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.864186][ T336] bridge_slave_0: left allmulticast mode [ 64.869932][ T336] bridge_slave_0: left promiscuous mode [ 64.875669][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.945913][ T1954] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.025143][ T336] tipc: Left network mode [ 65.037101][ T336] veth1_macvtap: left promiscuous mode [ 65.042854][ T336] veth0_vlan: left promiscuous mode [ 65.048254][ T1957] rust_binder: Error in use_page_slow: ESRCH [ 65.048276][ T1957] rust_binder: use_range failure ESRCH [ 65.063336][ T1957] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 65.068847][ T1957] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 65.084023][ T1957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:304 [ 65.151411][ T1963] rust_binder: Error in use_page_slow: ESRCH [ 65.160639][ T1963] rust_binder: use_range failure ESRCH [ 65.170764][ T1963] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 65.184943][ T1963] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 65.192929][ T1963] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:309 [ 65.207885][ T1967] netlink: 'syz.2.532': attribute type 4 has an invalid length. [ 65.234729][ T1967] netlink: 'syz.2.532': attribute type 4 has an invalid length. [ 65.303274][ T45] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 65.473225][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 65.479576][ T45] usb 4-1: config 211 has an invalid descriptor of length 0, skipping remainder of the config [ 65.497044][ T45] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 65.506754][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.515309][ T45] usb 4-1: Product: syz [ 65.520129][ T45] usb 4-1: Manufacturer: syz [ 65.526438][ T45] usb 4-1: SerialNumber: syz [ 66.498004][ T1988] 9pnet_fd: Insufficient options for proto=fd [ 66.503927][ T1991] /dev/sg0: Can't lookup blockdev [ 67.773256][ T45] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 67.903231][ T45] usb 2-1: device descriptor read/64, error -71 [ 68.008017][ T577] usb 4-1: USB disconnect, device number 24 [ 68.153257][ T45] usb 2-1: device descriptor read/64, error -71 [ 68.210135][ T2009] rust_binder: Write failure EFAULT in pid:290 [ 68.285275][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 68.285297][ T36] audit: type=1400 audit(1755918879.394:2307): avc: denied { create } for pid=2015 comm="syz.3.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 68.324054][ T36] audit: type=1400 audit(1755918879.434:2308): avc: denied { write } for pid=2015 comm="syz.3.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 68.413253][ T45] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 68.543274][ T45] usb 2-1: device descriptor read/64, error -71 [ 68.783358][ T45] usb 2-1: device descriptor read/64, error -71 [ 68.893484][ T45] usb usb2-port1: attempt power cycle [ 69.233295][ T45] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 69.264273][ T45] usb 2-1: device descriptor read/8, error -71 [ 69.294089][ T2028] rust_binder: 296: no such ref 3 [ 69.305656][ T10] rust_binder: 2026: removing orphan mapping 0:24 [ 69.334489][ T2038] rust_binder: Error while translating object. [ 69.334524][ T2038] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 69.340737][ T2038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:299 [ 69.397141][ T45] usb 2-1: device descriptor read/8, error -71 [ 69.663242][ T45] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 69.684288][ T45] usb 2-1: device descriptor read/8, error -71 [ 69.814296][ T45] usb 2-1: device descriptor read/8, error -71 [ 69.923389][ T45] usb usb2-port1: unable to enumerate USB device [ 70.361218][ T2045] overlayfs: failed to clone upperpath [ 70.425855][ T2053] 9pnet_fd: Insufficient options for proto=fd [ 70.438914][ T2054] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 70.474021][ T2066] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 70.482093][ T2066] rust_binder: Read failure Err(EFAULT) in pid:308 [ 70.483586][ T2065] rust_binder: 334: no such ref 0 [ 70.593496][ T331] rust_binder: 2068: removing orphan mapping 0:24 [ 70.643656][ T2079] cgroup: fork rejected by pids controller in /syz2 [ 70.655311][ T2107] netlink: 5 bytes leftover after parsing attributes in process `syz.1.566'. [ 70.673571][ T2107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 71.702405][ T2156] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.013272][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 72.153342][ T10] usb 2-1: device descriptor read/64, error -71 [ 72.393370][ T10] usb 2-1: device descriptor read/64, error -71 [ 72.633270][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 72.763282][ T10] usb 2-1: device descriptor read/64, error -71 [ 72.993240][ T36] audit: type=1400 audit(1755918884.094:2309): avc: denied { accept } for pid=2170 comm="syz.2.575" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.003282][ T10] usb 2-1: device descriptor read/64, error -71 [ 73.153334][ T10] usb usb2-port1: attempt power cycle [ 73.273244][ T521] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 73.423599][ T521] usb 4-1: too many configurations: 244, using maximum allowed: 8 [ 73.432451][ T521] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 73.440136][ T521] usb 4-1: can't read configurations, error -61 [ 73.493228][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 73.514247][ T10] usb 2-1: device descriptor read/8, error -71 [ 73.573248][ T521] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 73.644327][ T10] usb 2-1: device descriptor read/8, error -71 [ 73.723665][ T521] usb 4-1: too many configurations: 244, using maximum allowed: 8 [ 73.732705][ T521] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 73.740348][ T521] usb 4-1: can't read configurations, error -61 [ 73.746867][ T521] usb usb4-port1: attempt power cycle [ 73.893280][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 73.914355][ T10] usb 2-1: device descriptor read/8, error -71 [ 74.044545][ T10] usb 2-1: device descriptor read/8, error -71 [ 74.083294][ T521] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 74.104066][ T521] usb 4-1: too many configurations: 244, using maximum allowed: 8 [ 74.113071][ T521] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 74.120729][ T521] usb 4-1: can't read configurations, error -61 [ 74.153345][ T10] usb usb2-port1: unable to enumerate USB device [ 74.253293][ T521] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 74.274041][ T521] usb 4-1: too many configurations: 244, using maximum allowed: 8 [ 74.283007][ T521] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 74.290704][ T521] usb 4-1: can't read configurations, error -61 [ 74.297140][ T521] usb usb4-port1: unable to enumerate USB device [ 75.774083][ T2196] overlayfs: failed to clone upperpath [ 75.809047][ T2200] overlayfs: failed to clone upperpath [ 77.335909][ T36] audit: type=1400 audit(1755918888.434:2310): avc: denied { ioctl } for pid=2213 comm="syz.1.587" path="socket:[12762]" dev="sockfs" ino=12762 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.417976][ T2231] SELinux: security_context_str_to_sid () failed with errno=-22 [ 77.428279][ T2228] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 77.428325][ T2228] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:330 [ 77.481855][ T36] audit: type=1400 audit(1755918888.584:2311): avc: denied { create } for pid=2236 comm="syz.3.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.537449][ T36] audit: type=1400 audit(1755918888.634:2312): avc: denied { map } for pid=2236 comm="syz.3.596" path="socket:[11929]" dev="sockfs" ino=11929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 79.051181][ T2242] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.082780][ T36] audit: type=1400 audit(1755918890.184:2313): avc: denied { write } for pid=2246 comm="syz.2.599" path="socket:[11935]" dev="sockfs" ino=11935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.116129][ T2247] netlink: 1327 bytes leftover after parsing attributes in process `syz.2.599'. [ 79.137388][ T36] audit: type=1400 audit(1755918890.224:2314): avc: denied { map } for pid=2245 comm="syz.1.601" path="socket:[12835]" dev="sockfs" ino=12835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.183371][ T2258] rust_binder: Write failure EFAULT in pid:367 [ 79.184831][ T2261] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 79.191039][ T2261] rust_binder: Read failure Err(EFAULT) in pid:342 [ 79.209263][ T2261] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 79.252588][ T2270] overlayfs: missing 'lowerdir' [ 80.953009][ T36] audit: type=1400 audit(1755918892.054:2315): avc: denied { execute } for pid=2285 comm="syz.1.612" path="/sys/kernel/kheaders.tar.xz" dev="sysfs" ino=4570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 80.983079][ T36] audit: type=1400 audit(1755918892.084:2316): avc: denied { nlmsg_write } for pid=2285 comm="syz.1.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 81.011014][ T2286] 9pnet_fd: Insufficient options for proto=fd [ 81.030923][ T2294] netlink: 20 bytes leftover after parsing attributes in process `syz.2.613'. [ 81.038974][ T36] audit: type=1400 audit(1755918892.084:2317): avc: denied { audit_write } for pid=2285 comm="syz.1.612" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 81.063254][ T2296] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.071977][ T36] audit: type=1107 audit(1755918892.084:2318): pid=2285 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 81.094925][ T2296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'. [ 81.253246][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 81.404305][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.414489][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 81.424353][ T10] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.438746][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.447837][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.455858][ T10] usb 4-1: Product: syz [ 81.460102][ T10] usb 4-1: Manufacturer: syz [ 81.464739][ T10] usb 4-1: SerialNumber: syz [ 81.470473][ T2293] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 82.480266][ T2293] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 82.481073][ T10] cdc_ncm 4-1:1.0: bind() failure [ 82.495007][ T10] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 82.503199][ T10] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 82.512385][ T10] usb 4-1: USB disconnect, device number 29 [ 84.795307][ T36] audit: type=1400 audit(1755918895.904:2319): avc: denied { read } for pid=2319 comm="syz.3.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.824551][ T2320] rust_binder: Write failure EFAULT in pid:394 [ 84.963449][ T2329] rust_binder: 398: no such ref 1 [ 84.975531][ T2329] rust_binder: Error in use_page_slow: ESRCH [ 84.975578][ T2329] rust_binder: use_range failure ESRCH [ 84.982189][ T2329] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 84.988107][ T2329] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 85.005398][ T2329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:398 [ 87.233300][ T521] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 87.404004][ T521] usb 2-1: Using ep0 maxpacket: 16 [ 87.410260][ T521] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 87.418492][ T521] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.428618][ T521] usb 2-1: config 1 has no interface number 0 [ 87.434742][ T521] usb 2-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 87.448003][ T521] usb 2-1: config 1 interface 105 has no altsetting 0 [ 87.456307][ T521] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 87.465440][ T521] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.473486][ T521] usb 2-1: Product: syz [ 87.477661][ T521] usb 2-1: Manufacturer: syz [ 87.482278][ T521] usb 2-1: SerialNumber: syz [ 87.741322][ T521] aqc111 2-1:1.105: probe with driver aqc111 failed with error -22 [ 87.750277][ T521] usb 2-1: USB disconnect, device number 30 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=527 state=3 status=67 (errno 9: Bad file descriptor) [ 89.158493][ T2356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:365 [ 89.351366][ T36] audit: type=1400 audit(1755918901.446:2320): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2694]" dev="pipefs" ino=2694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 89.655553][ T906] bridge_slave_1: left allmulticast mode [ 89.661248][ T906] bridge_slave_1: left promiscuous mode [ 89.666918][ T906] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.674429][ T906] $: left allmulticast mode [ 89.679443][ T906] $: left promiscuous mode [ 89.684507][ T906] bridge0: port 1($) entered disabled state [ 89.911589][ T906] veth1_macvtap: left promiscuous mode [ 89.917178][ T906] veth0_vlan: left promiscuous mode [ 90.144767][ T906] bridge_slave_1: left allmulticast mode [ 90.150431][ T906] bridge_slave_1: left promiscuous mode [ 90.156100][ T906] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.163706][ T906] $: left allmulticast mode [ 90.168688][ T906] $: left promiscuous mode [ 90.173638][ T906] bridge0: port 1($) entered disabled state [ 90.285206][ T906] veth0_vlan: left promiscuous mode