last executing test programs: 9.985560869s ago: executing program 1 (id=4176): rt_sigaction(0x17, &(0x7f00000004c0)={0x0, 0x40000007, 0x0, {[0x100000000]}}, 0x0, 0x8, &(0x7f0000000080)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58011303", @ANYBLOB="08002bbd7000fedbdf2513000000200007800c000400490000000000000008000200cf00000008000200090000002c000380080001000300000008000300090000000800020004000000080003001378000008000300030000004c0004803c0007800800010004000000080001000d000000080001000e00000008000300030000000800040002000000080004000c0000000800020002"], 0x158}}, 0x4004080) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1e, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}}, 0x0) futex(0x0, 0x86, 0x0, 0x0, 0x0, 0x40) ioctl$BINDER_FREEZE(r0, 0xc0046209, 0x0) 8.211675479s ago: executing program 3 (id=4264): syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0xf2d8, 0x13090, 0x0, 0x382}, 0x0, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r0, &(0x7f00000000c0)=ANY=[], 0xffffff6a) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x100000b, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x1, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x4007, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xf, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0x3, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x4, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1006, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8005, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x1003, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x1, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x0, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0) 8.205497679s ago: executing program 1 (id=4176): rt_sigaction(0x17, &(0x7f00000004c0)={0x0, 0x40000007, 0x0, {[0x100000000]}}, 0x0, 0x8, &(0x7f0000000080)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58011303", @ANYBLOB="08002bbd7000fedbdf2513000000200007800c000400490000000000000008000200cf00000008000200090000002c000380080001000300000008000300090000000800020004000000080003001378000008000300030000004c0004803c0007800800010004000000080001000d000000080001000e00000008000300030000000800040002000000080004000c0000000800020002"], 0x158}}, 0x4004080) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1e, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}}, 0x0) futex(0x0, 0x86, 0x0, 0x0, 0x0, 0x40) ioctl$BINDER_FREEZE(r0, 0xc0046209, 0x0) 6.46179226s ago: executing program 0 (id=4265): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078002e4fccfc00000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x48080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101201, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000140)="08733a3c319169675d25f0b3418a", 0xe, 0x40000, &(0x7f0000000200)={0x11, 0xe, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) syz_usb_connect(0x6, 0x4e1, &(0x7f0000001d00)={{0x12, 0x1, 0x201, 0x23, 0x3f, 0x27, 0x8, 0x305a, 0x1404, 0x2c5f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4cf, 0x2, 0x6, 0x9, 0x0, 0xff, [{{0x9, 0x4, 0x71, 0x5, 0x10, 0xff, 0x12, 0x9d, 0x8, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x96, 0x4, 0x2}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0x0, 0x0, '=', '%%['}]}], [{{0x9, 0x5, 0x80, 0x1, 0x10, 0xd, 0x6, 0x6}}, {{0x9, 0x5, 0x80, 0x1, 0x200, 0x0, 0x6, 0x6, [@generic={0xbf, 0x22, "38acf1b24bd6afbabbef7576ea6fb2a66faf5b6cb6a2a5a3a344e1881fae940b8a7f1e1e84cfa07000b0242146a1a093416b142260b783c13cefd1be4750b56fd22dd41b103a2a2b8a876b286ebd4f8f432e6ffc7ccb6168c8bd32cbce5555a5f4fa6ffa30719aa41615129e780ae523ee1b66cfa1f9a90218b26450b3a05ffc54fd3d82e2f09d777189b7fa142ef02ca8c9e2cd5cd7bf0ea2f51029e3fff12283a8498ab590a9b6f279ed53246ccad4fb0172787da076af7d25659876"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xb4, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ef, 0x81, 0xf}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x6, 0x2, 0x8}}, {{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x40, 0x24}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x4, 0xf9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x623}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x8}]}}, {{0x9, 0x5, 0xf, 0xf, 0x400, 0x0, 0x10, 0x7}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x8, 0x6}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x0, 0xfe, 0x31, [@generic={0x82, 0x10, "49ef807e14731f7293ff626345bd18eeea06faeec213250b2e387019642152fdd3a149068da94d76e62d19eb176dde30f98f41040f803eabbb178ad3342a7b20d83299f26fd6c7335b7b54b988f7bc49492cc3097ed20056b46b837fbcda60b9e7903f2b29bfe2404f7c0a2f16b59ba1fff99d98ed5f14362983f812faa3c4bc"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0xa4, 0x4, 0x4}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x0, 0x9, 0x8, [@generic={0xbb, 0x0, "980de940bd213ef3346cbd3517afef6b74c3708ec8f63388ab68da8a231ee30e147427dd80e0cb1242ba686b65ca7030966c0c16a0531be8c2845740080c6813af7a2dc8412d0cd206a6aa3d5b9daa22f21f399913046dcd98ca09c903c928857950b76a2ae3c3e6086c6640b49cbbab5dd5b1dbe8e7ccda957e9a2e66dfe8e0f5f3a3e4f932f87d626dbab3780ed320e1026a90927e8fc9c071d2b5e9a07e7607e6c14537b99c541e8fdc0e2c158219387b4e2598df909c31"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x400, 0x10, 0x9, 0x59, [@generic={0xf, 0x30, "2457918183b91df8bf48029ada"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x80}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x66, 0xe, 0x9, [@generic={0x5b, 0x21, "f0582c92eda1048cf3a0457f0b1079ca55b4c6425a68c8d590e670c3abf5b95ce318d41d0bd4817aff77f1330992bff2f8c4fe543cc7b193da27a7b566adf17c8c08fbc88a0edec6b2114d0a167fd1d887aecc7fc367c0d5a5"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x0, 0x1, 0x9, [@generic={0x88, 0xe, "1048d4e5f2277ca0e1d94ca3d93421c09743e1a2021a5b4df2329d9ca0226c81d9a3bfb45b931ffe75db3cbfc71deee5aa2f86629dd3009a7e02ffdc224c2cea667bc501090a2554aadddf893ecc0249bcc9c7d49a31b35dd778ed989ad75a11f483dfd6bbf6a6e9ebd29cf7c8784874c87eca11b6e69f5db7b2d4f428af2c1bac2362df52f4"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0x5, 0xf, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xdd1}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x200}]}}, {{0x9, 0x5, 0x4, 0x14, 0x10, 0x7, 0x4, 0x38}}]}}, {{0x9, 0x4, 0xc6, 0x93, 0x1, 0x2, 0xe, 0x0, 0x9, [@generic={0xc6, 0x28, "08c803aa22569ed506aac8e4788588ef4716583dee1a3a7bfff3697e20b9f9156b4718ea39dbaba6217c806c8f6fa1dbf6aad74d7aeaaa889b5b909e25c0f76957684ba5d601afb4cd9652c612307a68f643ff90fc0f8c53960d3dba88eb1fe173ebaaddf25639dace296a590048df7bb471d76539a92b4a983433b27e0a3372a9ea2e548f2dcaf99067755674adc6164f01a039e866ffa661e9eb43358909f40aef12b1ce37495abc05077cb0256c3038d99783d6f8b2aed2d89b15e3f5cc23c23f8c07"}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "d9abe08b29"}, {0x5, 0x24, 0x0, 0x22f}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x5, 0xfff8, 0x66}, [@dmm={0x7, 0x24, 0x14, 0xb9d9, 0x3}]}], [{{0x9, 0x5, 0x0, 0x2, 0x8, 0x77, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xfff}]}}]}}]}}]}}, &(0x7f00000025c0)={0xa, &(0x7f0000002200)={0xa, 0x6, 0x200, 0x4, 0xd, 0xff, 0xff, 0x3}, 0x27, &(0x7f0000002240)={0x5, 0xf, 0x27, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x13, 0x3, 0x9, 0xf000, 0x2, [0xc030, 0xbec0, 0xc00f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x4, 0xd7d}]}, 0x7, [{0x4, &(0x7f0000002280)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000022c0)=@lang_id={0x4, 0x3, 0x3c97}}, {0xcb, &(0x7f0000002300)=@string={0xcb, 0x3, "95cee1f81ed179ea648569a0e9acaef7d8619f1fab4fd82d60a6f8b454361beff115b200987dde74f68991ee60d946b43ed5a57b14df6fd71a83f02035cae14113838966a59afd3f8e5c9640f44d520eba6eb6d3e236cc0c56bb84efb58bba44c06bb3f216c68f1da6fbf269649c065e013650eb8104446c4547c563a76fe4ac74ef24e4129ad7f1ce260b2e7f33f06ab77bbb444ca48eabe9256c7850d93cb9b61e286a74b97db1c319cc6bda8414397ee8b464e67a1888059f75aebe23ce663f6bb4fe1c0a64de85"}}, {0x4, &(0x7f0000002400)=@lang_id={0x4, 0x3, 0x449}}, {0x8d, &(0x7f0000002440)=@string={0x8d, 0x3, "696866ad7ba08fa5d17cc8db4484db06f9b4c17520021404c384b752f65fd088597ed183e7aa17fc696b4c76c797a1a4d93c828a3c2da8135128d3f9a89fc2ece830824821aedf26a5f1285e1c4491d8f942d3ae251254cb8cef4cfee5be38754025855749c2c76a9a40657010cae78decda7aacc91e176a8514d0e6fdf9404bc0ce8fe88d038f2a3129ee"}}, {0x4, &(0x7f0000002500)=@lang_id={0x4, 0x3, 0x400a}}, {0x53, &(0x7f0000002540)=@string={0x53, 0x3, "47bad26520ff9c91a262480e1d6ec38b7fce7a5d9449271cfd5f721be0763d68655fd1120d6f1f762526db1c891ffff26633411ca44f4f94e68e0bd7ae1235bddcf5ca64702624002d14a9f477bd542b63"}}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000001cc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000a4}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x3c, r7, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xfffffbff}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0xfffffff3}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40100) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000000c0)=0x40004, 0x4) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r8, 0x4008ae48, &(0x7f0000000080)=0xeeee0000) r9 = socket(0x10, 0x803, 0x0) r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIBMAP(r10, 0x1, &(0x7f0000013c00)) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x48b}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f00000018c0)=""/256, 0x100}, {&(0x7f0000000180)=""/231, 0xe7}, {&(0x7f00000034c0)=""/197, 0xc5}, {&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f00000019c0)=""/144, 0x90}, {&(0x7f0000000380)=""/155, 0x9b}], 0x8}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4020aeb2, &(0x7f00000006c0)={0x0, 0x0, @ioapic={0x100010000, 0x101, 0x0, 0x0, 0x0, [{0x6, 0x6, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x8}, {0x5, 0x6, 0x3, '\x00', 0xf1}, {0xc, 0x0, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x5}, {0x94, 0x3, 0xb, '\x00', 0xff}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x6, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x0, 0x62, '\x00', 0x6}, {0xd, 0xfb, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x81, '\x00', 0xe}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0xb6, '\x00', 0x7}, {0x5, 0x28, 0x5, '\x00', 0x9}, {0x7, 0x9, 0x9, '\x00', 0x81}, {0xf9, 0xa7, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x1}}) syz_socket_connect_nvme_tcp() r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EXT4_IOC_GET_ES_CACHE(r12, 0xc020662a, &(0x7f0000002640)={0x3ff, 0x6881291d, 0x2, 0x4, 0x7, 0x0, [{0x8000, 0x1, 0x6, '\x00', 0x8}, {0x100, 0x8, 0x8000, '\x00', 0x200}, {0x7, 0x7, 0x500000000, '\x00', 0x1}, {0x0, 0xf2a, 0x5, '\x00', 0x1000}, {0x8, 0x7, 0x4, '\x00', 0x2180}, {0x5, 0x9, 0x817, '\x00', 0xb80}, {0x4, 0x0, 0x2, '\x00', 0x1008}]}) 6.46142886s ago: executing program 2 (id=4266): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x4e22, 0x0, @local}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f00000002c0)="76ffe48ee64e6399c435319c5e7ecd874689db141aae82c241cdb3266bfebe537c59775250468805a2ac209a229832dce6ede7dc4309856ed41f64e943cef7bee69c2c6662b3bc6b9678e4bf0b0d45c77f328efd69c071beaf4218cd6cae7fb3b109f7361ef9df9b6ec094d9df4ff0c6b0c63fd005a2f0a8ed6952d75d4ae8b1aea2205440ec02619b17b3758fec2938f97c45359de600c4000000002b704d", 0xfffffe3b}], 0x1) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000200)={{0x3000, 0x10000, 0x10, 0x8, 0x81, 0x6, 0x2, 0x5, 0xf, 0x3, 0xc0, 0xe}, {0xeeef0000, 0x100000, 0xb, 0xff, 0x7, 0x9, 0x3, 0x7, 0x6, 0x10, 0x1}, {0xc80288ceb93b530a, 0x2, 0xa, 0x5, 0xc0, 0x37, 0x9, 0xc5, 0x6, 0x2, 0x10, 0x3}, {0x8000000, 0x1000, 0x4, 0x7, 0xe6, 0x0, 0x7, 0x1, 0x3, 0x3, 0x9, 0xa}, {0xeeef0000, 0xeeee8000, 0xf, 0x7, 0x6, 0x6, 0x7, 0xa6, 0x2, 0x1, 0x8d, 0x3}, {0x0, 0x2, 0x9, 0x1, 0x2, 0xfa, 0x0, 0x2, 0x10, 0x2, 0xa3, 0x6}, {0x100000, 0x5000, 0x1a, 0x0, 0x3, 0x1c, 0xff, 0xe9, 0x20, 0xf, 0x7, 0x1c}, {0x1000, 0x0, 0x9, 0xa, 0x1, 0x7, 0xb0, 0x4, 0x90, 0x4, 0xa, 0x9}, {0x10000, 0x300}, {0x4, 0x8}, 0x4, 0x0, 0xeeee0000, 0x400, 0x6, 0x100, 0xeeee8000, [0x3, 0x2, 0x9, 0x10000]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x4, 0x2, 0x32}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = memfd_secret(0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) ioctl$USBDEVFS_DISCARDURB(r7, 0x550b, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)={0x80000003}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = accept4$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x807}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x2c}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r8, &(0x7f00000004c0)=""/249, 0xf9, 0x40, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000080)=0x3) writev(r6, &(0x7f0000000640)=[{&(0x7f0000000340)="f769d923540fdae38609316ed51c44c295a821e2263c0fa9d46d33e905c3ac58d1a5b60b5424ec07636fd8bed5a47d270c2d3c4ea1b2af8d4d087d4f14e6a959c6bec5ce2d285ddd82ffbd64993c780295acd39d4f61bd453ad426e25da134991fcedc6b192fdb6706e5ee8bd8dae64ff05b923ed349", 0x76}, {&(0x7f00000005c0)="ca2677512c2406f00d54ef998c9c0f8d36d3862fe9ab13c678649e73fb081587262da420983ebb5d88f23cb3fc566a878ad945277870c2fb4c3b7b326b68c96153c6ad00d7e3f54d5249fd74f2875930cc5e560df180779e81875a215e73ed6c2bf53e8a9eef6b8fe7fa51d8d41b4ab21951ce063f4b5fe2b72ca996f2aa341c", 0x80}, {&(0x7f00000003c0)="de4075e51334d73cc818557eea0d94d03fd5301778f535b1a8d709aaf68f293b50602bdfc36823ae5840ea02c8a051fa", 0x30}, {&(0x7f00000007c0)="b8049f75259922abbcb8519c4800d9142024654d2e61a9b8708ff4982bd0697cf71a48ef2abbc852f219e4fdfe474520323d22f1a74f062978f660208bbbee72d4978925184f533743cf4961e44572c74230fad43969b98ad8b03bfd8793f375a744e3dcf31d2292ec281e218bdba00d8e244299c0debff16ffd7930545bf3a832d8", 0x82}], 0x4) openat$cgroup_int(r4, &(0x7f0000000180)='io.weight\x00', 0x2, 0x0) r9 = socket$inet6(0xa, 0x80001, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @mcast2, 0x3ff}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 6.46120922s ago: executing program 3 (id=4267): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) r1 = socket$netlink(0x10, 0x3, 0xc) syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001f40)={0x564, r2, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xe, 0x12}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x488, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, @device_a, @device_a, @random="cefcb0c56ada", {0xd, 0x8}, "", @value={0x6, 0x1, 0x0, 0x1, 0x40}}, @random="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"}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x7ffc}, @broadcast, @random="3f0314e97e00"}}, @NL80211_ATTR_FRAME={0x99, 0x33, @mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x5000}, @device_a, @broadcast, @random="167ebadacde6", {0x7, 0x7}, @value=@ver_80211n={0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xb81, 0x23, @random=0x20, @void, @val={0x2d, 0x1a, {0x20, 0x1, 0x4, 0x0, {0x5, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2}, 0x800, 0x3}}, [{0xdd, 0x55, "941e1d4af8a9246f60589481acb5c9cf9a829372c460fe3d88dce759277680eeb79292f6876be65cf1c86216ce107c74cae48842144abd54fb742a982fc0f380538cb904925f4f53ac25411e51b5ffc8b78881eb3b"}]}}]}, 0x564}, 0x1, 0x0, 0x0, 0x440c0}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r3, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 6.4390961s ago: executing program 3 (id=4268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000001180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000080)={0x10c0, r1, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="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"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x8d, 0xa9, @random="47b36f9496746849f2a57200e728ced375ff1bcd57bcda0f26477046b1c65fd7524e46015798b4a90ad37a6314da7cd8d51db90859b53c26a3fd9841e46b5caf7a6f7cc3049ed8e823c58a6ec53572cddd0b082a82fc698d56061d64b351a553f4b1d312972945c6c1a29036504e7721302f4e3bb3214489f8d60ffea436594fe2d46c2a89cb649471"}]}, 0x10c0}, 0x1, 0x0, 0x0, 0x42041}, 0x4) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x54}, 0x4) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x2c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048800}, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001400)={'wg1\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x40, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c010}, 0x0) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000001500), 0x80000) flistxattr(r3, &(0x7f0000001540)=""/116, 0x74) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001600)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000001780)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x88041000}, 0xc, &(0x7f0000001740)={&(0x7f0000001680)={0xb0, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4c0}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x118}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1f, 0x13, [{0x1b, 0x1}, {0x6c}, {0x30}, {0x3, 0x1}, {0x9, 0x1}, {0x9, 0x1}, {0x24}, {0x3}, {0x12}, {0x12}, {0x30, 0x1}, {0x6c}, {0x6c}, {0x978a6196c6a765fb}, {0x60, 0x1}, {0x6c}, {0x1b, 0x1}, {0x48}, {0x18, 0x1}, {0x30, 0x1}, {0x24}, {0x1b}, {0x48, 0x1}, {0x6c, 0x1}, {0xb}, {0x4, 0x1}, {0x1}]}, @NL80211_ATTR_STA_WME={0x34, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x50}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x3cb}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x48001) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f00000017c0)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x40, r6, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xf5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0xc0) r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000001940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001980)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) bind$packet(r7, &(0x7f0000001a00)={0x11, 0x3, r8, 0x1, 0x4, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000001ac0)=@buf={0x75, &(0x7f0000001a40)="41339ac5f6e4b5114dc22c8e66c5f54f76de4d06a5c6eca30949e1a43df172ba2f87162d1d3da4c4508f0541a221061e4ee6a965dd69bfbe0e44e4493b9c120b9bab73da91919e33d983ddefaf17a68d78360ce2ead6206bf8036c7133d517723cda7a4b844299e65189fb725890a1cecea3429b82"}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000001e00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001b80)={0x210, r9, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x81, 0x4a}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x4b3c}, @NL80211_ATTR_IE={0x1c6, 0x2a, [@perr={0x84, 0xf5, {0x7, 0xf, [{{0x0, 0x1}, @device_a, 0x2, @value, 0xf}, {{0x0, 0x1}, @broadcast, 0x2fa2b2b3, @value, 0x2b}, {{}, @device_b, 0x9000000, @void, 0x6}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x2c}, {{0x0, 0x1}, @device_a, 0xfffffeff, @value=@device_b, 0x3b}, {{0x0, 0x1}, @device_b, 0x3, @value=@broadcast, 0x29}, {{}, @device_a, 0x800, @void, 0x31}, {{}, @device_b, 0x200, @void, 0x2c}, {{0x0, 0x1}, @broadcast, 0x7fffffff, @value=@device_b, 0x19}, {{0x0, 0x1}, @device_b, 0x3ff, @value, 0x21}, {{}, @device_b, 0x47, @void, 0x15}, {{}, @device_a, 0x8000, @void, 0x24}, {{0x0, 0x1}, @device_a, 0xdc2f54c, @value, 0x30}, {{}, @device_a, 0x0, @void, 0x16}, {{}, @device_b, 0x6, @void, 0x34}]}}, @fast_bss_trans={0x37, 0x59, {0x7, 0x1, "d00df03f82771e04cfc4162da252ed31", "dfb14459d536221cb9c7d31df029de476d1ed8af7a10d6bb764eb314d6040365", "47a3b363c774c6657fb8902f8669ba1c8fd17c734bb558dffdcfccad01ecda74", [{0x2, 0x5, "e578fe55a2"}]}}, @channel_switch={0x25, 0x3, {0x1, 0x40, 0x5}}, @tim={0x5, 0x66, {0x2, 0x3f, 0x7, "c9610f933d87c86847377a0ce5960af5a06c93d1aeeb7a2354d04edd614c26b8cc9b8a02372111282364079681d6c828487724d160d448361d111825ef230c3671a74749dc150a1637a78940f05b7a456410dce7ed57993f15128bf9da89a696e4cafa"}}, @dsss={0x3, 0x1, 0xb0}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xd}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x100}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xf}]}, 0x210}, 0x1, 0x0, 0x0, 0x4020014}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_DEBUGREGS(r10, 0x8080aea1, &(0x7f0000001e40)) fcntl$getownex(r7, 0x10, &(0x7f0000001ec0)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000001f00)=r11) memfd_create(&(0x7f0000001f40)='devlink\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001fc0)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f00000020c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002100)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private0}}, &(0x7f0000002200)=0xe8) r14 = geteuid() fsetxattr$system_posix_acl(r3, &(0x7f0000001f80)='system.posix_acl_default\x00', &(0x7f0000002900)={{}, {}, [{0x2, 0x2, r12}, {0x2, 0xe, r13}, {0x2, 0x0, r14}, {0x2, 0x1}, {0x2, 0xe}, {0x2, 0x1}, {0x2, 0x2}, {0x2, 0x2}], {0x4, 0x2}, [{0x8, 0x4, 0xee01}, {0x8, 0x5}, {0x8, 0x6}, {}, {}], {0x10, 0x2}, {0x20, 0x2}}, 0x8c, 0x1) 6.339218881s ago: executing program 3 (id=4269): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012"], 0x50}}, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0xb1, 0x5, 0x73, 0xffefffff}, {0x6, 0x8, 0x6}]}, 0x10) sendmsg$netlink(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000140)={0x18, 0x2e, 0x333, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0xd, 0x0, 0x0, @fd}]}, 0x18}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0403d11, 0x0) r4 = syz_open_pts(r2, 0x40c041) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000280)={"db9b6d031584c21fb6e7c92268073c53", 0x0, 0x0, {0x406, 0x37622b75}, {0x9, 0xc}, 0x4, [0x3, 0xfffffffffffffff9, 0x7ff, 0xfffffffffffff000, 0xffff, 0x6, 0x2, 0x10001, 0x6, 0x1, 0x8ef7, 0xfffffffffffffffc, 0x7, 0x1, 0x8000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000004c0)={"152aa6122e4f971ee0a136b3f0e20889", 0x0, 0x0, {0x1, 0xcff}, {0xa39e, 0x6}, 0x6, [0x100000000, 0x8, 0xffff, 0x2, 0x7, 0x9, 0x3, 0x6, 0x405cf85f, 0x8, 0x3ff, 0x1, 0x80, 0xc90, 0x1, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000005c0)={"35d308a6ab002ecae714ef72719baa07", r5, r6, {0x4, 0xfff}, {0x3, 0x60f}, 0x9, [0x8, 0x3, 0x6, 0x3, 0xd2a8, 0x7f, 0x2, 0x5, 0x60, 0x7, 0x100000000, 0x0, 0x7, 0xc, 0x3, 0x3]}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r7}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer], 0x3e, 0x0, 0x0}) fsetxattr$security_evm(r1, &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x3, 0x3, 0x14, 0x0, 0x26, "c69d7c7b6c046d4fef3207c36d046ffd9e687988924ccd6dd8dd84184b9bd5a3e2930c61166d"}, 0x2f, 0x0) 6.338809411s ago: executing program 2 (id=4270): unshare(0x22020600) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x2, 0x1}, 0xe) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup(r0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 6.243048602s ago: executing program 1 (id=4176): rt_sigaction(0x17, &(0x7f00000004c0)={0x0, 0x40000007, 0x0, {[0x100000000]}}, 0x0, 0x8, &(0x7f0000000080)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58011303", @ANYBLOB="08002bbd7000fedbdf2513000000200007800c000400490000000000000008000200cf00000008000200090000002c000380080001000300000008000300090000000800020004000000080003001378000008000300030000004c0004803c0007800800010004000000080001000d000000080001000e00000008000300030000000800040002000000080004000c0000000800020002"], 0x158}}, 0x4004080) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1e, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}}, 0x0) futex(0x0, 0x86, 0x0, 0x0, 0x0, 0x40) ioctl$BINDER_FREEZE(r0, 0xc0046209, 0x0) 4.380872333s ago: executing program 0 (id=4271): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x5) socketpair(0x10, 0x80000, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x400}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x10) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000800010000000000000000700080000000000"]) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) tkill(r6, 0x2) ptrace(0x4208, r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() madvise(&(0x7f0000143000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) write(r0, &(0x7f0000000400)="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", 0xfffffcf1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x7]}, 0x0, 0x8) 4.380059983s ago: executing program 2 (id=4272): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0xffffffffffffffaa, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 4.379535473s ago: executing program 3 (id=4273): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r5 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fstat(0xffffffffffffffff, &(0x7f0000000440)) sendto$inet6(r6, &(0x7f0000000000), 0x0, 0x20048004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18119, @rand_addr, 0x983a}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x406f413, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) ptrace$peek(0x2, r3, &(0x7f0000000180)) ptrace$poke(0x5, r3, &(0x7f0000000080), 0x0) sendmsg$AUDIT_SET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfe, {0x48, 0x1, 0x0, r3, 0x8, 0x200, 0x6, 0x7, 0x0, 0x0, 0x80}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioprio_get$pid(0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4.354088943s ago: executing program 2 (id=4274): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x100000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x25, &(0x7f0000000000)=0x40d8, 0x4) 4.287170254s ago: executing program 2 (id=4275): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x8000, 0x10, 0xfffffff7, 0x10, {{0x19, 0x4, 0x1, 0x8, 0x64, 0x65, 0x0, 0x0, 0x2f, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0x4c, 0x7e, 0x1, 0x4, [{@remote, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x7}, {@local, 0x100}, {@remote, 0xafa}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x4a0482, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x30, 0x3, 0x2, 0xaa6c, r5, 0x0}]) ioctl$SNAPSHOT_FREE(r4, 0x3305) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r8, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0xa) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',\nfdno=', @ANYRESHEX=r11, @ANYBLOB=',version=9p2000,k']) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r7, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r7, 0x400454cd, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) close_range(r2, 0xffffffffffffffff, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x1a, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x1000, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="12011001070102109806826bebd30102030109021200010600b06a091f"], 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4.235460144s ago: executing program 1 (id=4176): rt_sigaction(0x17, &(0x7f00000004c0)={0x0, 0x40000007, 0x0, {[0x100000000]}}, 0x0, 0x8, &(0x7f0000000080)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58011303", @ANYBLOB="08002bbd7000fedbdf2513000000200007800c000400490000000000000008000200cf00000008000200090000002c000380080001000300000008000300090000000800020004000000080003001378000008000300030000004c0004803c0007800800010004000000080001000d000000080001000e00000008000300030000000800040002000000080004000c0000000800020002"], 0x158}}, 0x4004080) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1e, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}}, 0x0) futex(0x0, 0x86, 0x0, 0x0, 0x0, 0x40) ioctl$BINDER_FREEZE(r0, 0xc0046209, 0x0) 2.296909096s ago: executing program 0 (id=4276): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 2.273808646s ago: executing program 0 (id=4277): arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000001c0)) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x400, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}, {{@in=@multicast1, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400000}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x2, @in=@broadcast, 0x0, 0x1}]}]}, 0x23c}}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000004900000000fbff0004"]) (async) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 2.206423556s ago: executing program 1 (id=4176): rt_sigaction(0x17, &(0x7f00000004c0)={0x0, 0x40000007, 0x0, {[0x100000000]}}, 0x0, 0x8, &(0x7f0000000080)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58011303", @ANYBLOB="08002bbd7000fedbdf2513000000200007800c000400490000000000000008000200cf00000008000200090000002c000380080001000300000008000300090000000800020004000000080003001378000008000300030000004c0004803c0007800800010004000000080001000d000000080001000e00000008000300030000000800040002000000080004000c0000000800020002"], 0x158}}, 0x4004080) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1e, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}}, 0x0) futex(0x0, 0x86, 0x0, 0x0, 0x0, 0x40) ioctl$BINDER_FREEZE(r0, 0xc0046209, 0x0) 2.163170807s ago: executing program 0 (id=4278): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x7ffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x5}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder0\x00', 0x0, 0x0) 146.909559ms ago: executing program 0 (id=4279): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x800, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) pipe(&(0x7f0000000040)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x800, 0x0) (async) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x5) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) (async) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) (async) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) 145.457739ms ago: executing program 2 (id=4280): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078002e4fccfc00000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x48080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101201, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000140)="08733a3c319169675d25f0b3418a", 0xe, 0x40000, &(0x7f0000000200)={0x11, 0xe, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) syz_usb_connect(0x6, 0x4e1, &(0x7f0000001d00)={{0x12, 0x1, 0x201, 0x23, 0x3f, 0x27, 0x8, 0x305a, 0x1404, 0x2c5f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4cf, 0x2, 0x6, 0x9, 0x0, 0xff, [{{0x9, 0x4, 0x71, 0x5, 0x10, 0xff, 0x12, 0x9d, 0x8, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x96, 0x4, 0x2}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0x0, 0x0, '=', '%%['}]}], [{{0x9, 0x5, 0x80, 0x1, 0x10, 0xd, 0x6, 0x6}}, {{0x9, 0x5, 0x80, 0x1, 0x200, 0x0, 0x6, 0x6, [@generic={0xbf, 0x22, "38acf1b24bd6afbabbef7576ea6fb2a66faf5b6cb6a2a5a3a344e1881fae940b8a7f1e1e84cfa07000b0242146a1a093416b142260b783c13cefd1be4750b56fd22dd41b103a2a2b8a876b286ebd4f8f432e6ffc7ccb6168c8bd32cbce5555a5f4fa6ffa30719aa41615129e780ae523ee1b66cfa1f9a90218b26450b3a05ffc54fd3d82e2f09d777189b7fa142ef02ca8c9e2cd5cd7bf0ea2f51029e3fff12283a8498ab590a9b6f279ed53246ccad4fb0172787da076af7d25659876"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xb4, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ef, 0x81, 0xf}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x6, 0x2, 0x8}}, {{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x40, 0x24}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x4, 0xf9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x623}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x8}]}}, {{0x9, 0x5, 0xf, 0xf, 0x400, 0x0, 0x10, 0x7}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x8, 0x6}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x0, 0xfe, 0x31, [@generic={0x82, 0x10, "49ef807e14731f7293ff626345bd18eeea06faeec213250b2e387019642152fdd3a149068da94d76e62d19eb176dde30f98f41040f803eabbb178ad3342a7b20d83299f26fd6c7335b7b54b988f7bc49492cc3097ed20056b46b837fbcda60b9e7903f2b29bfe2404f7c0a2f16b59ba1fff99d98ed5f14362983f812faa3c4bc"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0xa4, 0x4, 0x4}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x0, 0x9, 0x8, [@generic={0xbb, 0x0, "980de940bd213ef3346cbd3517afef6b74c3708ec8f63388ab68da8a231ee30e147427dd80e0cb1242ba686b65ca7030966c0c16a0531be8c2845740080c6813af7a2dc8412d0cd206a6aa3d5b9daa22f21f399913046dcd98ca09c903c928857950b76a2ae3c3e6086c6640b49cbbab5dd5b1dbe8e7ccda957e9a2e66dfe8e0f5f3a3e4f932f87d626dbab3780ed320e1026a90927e8fc9c071d2b5e9a07e7607e6c14537b99c541e8fdc0e2c158219387b4e2598df909c31"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x400, 0x10, 0x9, 0x59, [@generic={0xf, 0x30, "2457918183b91df8bf48029ada"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x80}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x66, 0xe, 0x9, [@generic={0x5b, 0x21, "f0582c92eda1048cf3a0457f0b1079ca55b4c6425a68c8d590e670c3abf5b95ce318d41d0bd4817aff77f1330992bff2f8c4fe543cc7b193da27a7b566adf17c8c08fbc88a0edec6b2114d0a167fd1d887aecc7fc367c0d5a5"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x0, 0x1, 0x9, [@generic={0x88, 0xe, "1048d4e5f2277ca0e1d94ca3d93421c09743e1a2021a5b4df2329d9ca0226c81d9a3bfb45b931ffe75db3cbfc71deee5aa2f86629dd3009a7e02ffdc224c2cea667bc501090a2554aadddf893ecc0249bcc9c7d49a31b35dd778ed989ad75a11f483dfd6bbf6a6e9ebd29cf7c8784874c87eca11b6e69f5db7b2d4f428af2c1bac2362df52f4"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0x5, 0xf, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xdd1}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x200}]}}, {{0x9, 0x5, 0x4, 0x14, 0x10, 0x7, 0x4, 0x38}}]}}, {{0x9, 0x4, 0xc6, 0x93, 0x1, 0x2, 0xe, 0x0, 0x9, [@generic={0xc6, 0x28, "08c803aa22569ed506aac8e4788588ef4716583dee1a3a7bfff3697e20b9f9156b4718ea39dbaba6217c806c8f6fa1dbf6aad74d7aeaaa889b5b909e25c0f76957684ba5d601afb4cd9652c612307a68f643ff90fc0f8c53960d3dba88eb1fe173ebaaddf25639dace296a590048df7bb471d76539a92b4a983433b27e0a3372a9ea2e548f2dcaf99067755674adc6164f01a039e866ffa661e9eb43358909f40aef12b1ce37495abc05077cb0256c3038d99783d6f8b2aed2d89b15e3f5cc23c23f8c07"}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "d9abe08b29"}, {0x5, 0x24, 0x0, 0x22f}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x5, 0xfff8, 0x66}, [@dmm={0x7, 0x24, 0x14, 0xb9d9, 0x3}]}], [{{0x9, 0x5, 0x0, 0x2, 0x8, 0x77, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xfff}]}}]}}]}}]}}, &(0x7f00000025c0)={0xa, &(0x7f0000002200)={0xa, 0x6, 0x200, 0x4, 0xd, 0xff, 0xff, 0x3}, 0x27, &(0x7f0000002240)={0x5, 0xf, 0x27, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x13, 0x3, 0x9, 0xf000, 0x2, [0xc030, 0xbec0, 0xc00f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x4, 0xd7d}]}, 0x7, [{0x4, &(0x7f0000002280)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000022c0)=@lang_id={0x4, 0x3, 0x3c97}}, {0xcb, &(0x7f0000002300)=@string={0xcb, 0x3, "95cee1f81ed179ea648569a0e9acaef7d8619f1fab4fd82d60a6f8b454361beff115b200987dde74f68991ee60d946b43ed5a57b14df6fd71a83f02035cae14113838966a59afd3f8e5c9640f44d520eba6eb6d3e236cc0c56bb84efb58bba44c06bb3f216c68f1da6fbf269649c065e013650eb8104446c4547c563a76fe4ac74ef24e4129ad7f1ce260b2e7f33f06ab77bbb444ca48eabe9256c7850d93cb9b61e286a74b97db1c319cc6bda8414397ee8b464e67a1888059f75aebe23ce663f6bb4fe1c0a64de85"}}, {0x4, &(0x7f0000002400)=@lang_id={0x4, 0x3, 0x449}}, {0x8d, &(0x7f0000002440)=@string={0x8d, 0x3, "696866ad7ba08fa5d17cc8db4484db06f9b4c17520021404c384b752f65fd088597ed183e7aa17fc696b4c76c797a1a4d93c828a3c2da8135128d3f9a89fc2ece830824821aedf26a5f1285e1c4491d8f942d3ae251254cb8cef4cfee5be38754025855749c2c76a9a40657010cae78decda7aacc91e176a8514d0e6fdf9404bc0ce8fe88d038f2a3129ee"}}, {0x4, &(0x7f0000002500)=@lang_id={0x4, 0x3, 0x400a}}, {0x53, &(0x7f0000002540)=@string={0x53, 0x3, "47bad26520ff9c91a262480e1d6ec38b7fce7a5d9449271cfd5f721be0763d68655fd1120d6f1f762526db1c891ffff26633411ca44f4f94e68e0bd7ae1235bddcf5ca64702624002d14a9f477bd542b63"}}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000001cc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000a4}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x3c, r7, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xfffffbff}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0xfffffff3}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40100) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000000c0)=0x40004, 0x4) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r8, 0x4008ae48, &(0x7f0000000080)=0xeeee0000) r9 = socket(0x10, 0x803, 0x0) r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIBMAP(r10, 0x1, &(0x7f0000013c00)) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x48b}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f00000018c0)=""/256, 0x100}, {&(0x7f0000000180)=""/231, 0xe7}, {&(0x7f00000034c0)=""/197, 0xc5}, {&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f00000019c0)=""/144, 0x90}, {&(0x7f0000000380)=""/155, 0x9b}], 0x8}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4020aeb2, &(0x7f00000006c0)={0x0, 0x0, @ioapic={0x100010000, 0x101, 0x0, 0x0, 0x0, [{0x6, 0x6, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x8}, {0x5, 0x6, 0x3, '\x00', 0xf1}, {0xc, 0x0, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x5}, {0x94, 0x3, 0xb, '\x00', 0xff}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x6, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x0, 0x62, '\x00', 0x6}, {0xd, 0xfb, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x81, '\x00', 0xe}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0xb6, '\x00', 0x7}, {0x5, 0x28, 0x5, '\x00', 0x9}, {0x7, 0x9, 0x9, '\x00', 0x81}, {0xf9, 0xa7, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x1}}) syz_socket_connect_nvme_tcp() r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EXT4_IOC_GET_ES_CACHE(r12, 0xc020662a, &(0x7f0000002640)={0x3ff, 0x6881291d, 0x2, 0x4, 0x7, 0x0, [{0x8000, 0x1, 0x6, '\x00', 0x8}, {0x100, 0x8, 0x8000, '\x00', 0x200}, {0x7, 0x7, 0x500000000, '\x00', 0x1}, {0x0, 0xf2a, 0x5, '\x00', 0x1000}, {0x8, 0x7, 0x4, '\x00', 0x2180}, {0x5, 0x9, 0x817, '\x00', 0xb80}, {0x4, 0x0, 0x2, '\x00', 0x1008}]}) 145.262369ms ago: executing program 3 (id=4281): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 32) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000240)=0x1000, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x2, 0x0, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 0s ago: executing program 1 (id=4176): rt_sigaction(0x17, &(0x7f00000004c0)={0x0, 0x40000007, 0x0, {[0x100000000]}}, 0x0, 0x8, &(0x7f0000000080)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58011303", @ANYBLOB="08002bbd7000fedbdf2513000000200007800c000400490000000000000008000200cf00000008000200090000002c000380080001000300000008000300090000000800020004000000080003001378000008000300030000004c0004803c0007800800010004000000080001000d000000080001000e00000008000300030000000800040002000000080004000c0000000800020002"], 0x158}}, 0x4004080) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1e, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}}, 0x0) futex(0x0, 0x86, 0x0, 0x0, 0x0, 0x40) ioctl$BINDER_FREEZE(r0, 0xc0046209, 0x0) kernel console output (not intermixed with test programs): ons: partition scan of loop2 (úùƒå¡™‰ü¶CêjÌ–ãâ•ÁJ) failed (rc=-5) [ 263.423358][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.432540][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 263.442257][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.451505][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 263.459920][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.469101][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 263.477208][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.486422][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 263.494580][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.503834][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 263.507821][ T8586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.520821][ T8586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.580764][ T8588] rust_binder: Write failure EFAULT in pid:615 [ 263.609152][ T8590] exFAT-fs (rnullb0): invalid boot record signature [ 263.622374][ T8590] exFAT-fs (rnullb0): failed to read boot sector [ 263.628940][ T8590] exFAT-fs (rnullb0): failed to recognize exfat type [ 263.650959][ T8592] 9pnet_fd: Insufficient options for proto=fd [ 263.716572][ T8595] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2926'. [ 263.731253][ T8586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.740019][ T8586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.097350][ T45] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 264.230385][ T8601] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2929'. [ 264.241938][ T8601] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2929'. [ 264.257335][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 264.263821][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.275101][ T45] usb 3-1: New USB device found, idVendor=056a, idProduct=006b, bcdDevice= 0.00 [ 264.284267][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.298056][ T45] usb 3-1: config 0 descriptor?? [ 264.632399][ T8608] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.683878][ T8609] rust_binder: Error in use_page_slow: ESRCH [ 264.690723][ T8609] rust_binder: use_range failure ESRCH [ 264.696783][ T8609] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 264.702342][ T8609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 264.710412][ T8609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:627 [ 264.721535][ T45] wacom 0003:056A:006B.0023: Unknown device_type for 'HID 056a:006b'. Assuming pen. [ 264.741089][ T45] wacom 0003:056A:006B.0023: hidraw0: USB HID v0.02 Device [HID 056a:006b] on usb-dummy_hcd.2-1/input0 [ 264.768092][ T45] input: Wacom Bamboo1 5x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:006B.0023/input/input33 [ 264.797475][ T359] usb 2-1: USB disconnect, device number 29 [ 264.850606][ T8621] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1772137250 (3544274500 ns) > initial count (1988451886 ns). Using initial count to start timer. [ 264.941435][ T10] usb 3-1: USB disconnect, device number 45 [ 265.127373][ T359] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 265.277355][ T359] usb 2-1: Using ep0 maxpacket: 32 [ 265.283797][ T359] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.295550][ T359] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 265.304890][ T359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.312983][ T359] usb 2-1: Product: syz [ 265.317173][ T359] usb 2-1: Manufacturer: syz [ 265.322212][ T359] usb 2-1: SerialNumber: syz [ 265.327547][ T359] usb 2-1: config 0 descriptor?? [ 265.333347][ T359] usb 2-1: bad CDC descriptors [ 265.338516][ T359] usb 2-1: unsupported MDLM descriptors [ 265.537164][ T10] usb 2-1: USB disconnect, device number 30 [ 265.573969][ T8635] __vm_enough_memory: pid: 8635, comm: syz.0.2941, bytes: 18014402804453376 not enough memory for the allocation [ 265.631931][ T8642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2943'. [ 265.807368][ T359] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 265.867460][ T63] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 265.957333][ T359] usb 3-1: Using ep0 maxpacket: 8 [ 265.964678][ T359] usb 3-1: unable to get BOS descriptor or descriptor too short [ 265.973289][ T359] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 109 [ 265.983298][ T359] usb 3-1: config 8 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.996279][ T359] usb 3-1: config 8 interface 0 has no altsetting 0 [ 266.004715][ T359] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 266.013929][ T359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.021993][ T359] usb 3-1: Product: syz [ 266.026167][ T359] usb 3-1: Manufacturer: syz [ 266.030824][ T359] usb 3-1: SerialNumber: syz [ 266.036902][ T8636] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 266.037840][ T63] usb 1-1: Using ep0 maxpacket: 16 [ 266.050661][ T63] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 266.060138][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.073054][ T63] usb 1-1: config 0 descriptor?? [ 266.084142][ T63] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 266.097739][ T63] usb 1-1: Detected FT4232H [ 266.248244][ T359] usb 3-1: selecting invalid altsetting 0 [ 266.260463][ T359] usb 3-1: USB disconnect, device number 46 [ 266.271064][ T8180] udevd[8180]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 266.288440][ T63] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 266.297773][ T63] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 266.307386][ T63] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 266.317630][ T63] usb 1-1: USB disconnect, device number 31 [ 266.324570][ T63] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 266.336361][ T63] ftdi_sio 1-1:0.0: device disconnected [ 266.810452][ T36] audit: type=1400 audit(2000000058.180:788): avc: denied { setattr } for pid=8671 comm="syz.0.2954" name="/" dev="configfs" ino=2360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 266.902199][ T8676] rust_binder: Write failure EFAULT in pid:649 [ 266.997390][ T359] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 267.157346][ T359] usb 3-1: Using ep0 maxpacket: 8 [ 267.163593][ T359] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 267.174793][ T359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.186111][ T359] usb 3-1: config 0 descriptor?? [ 267.253122][ T36] audit: type=1326 audit(2000000058.620:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.0.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb238f6c9 code=0x7ffc0000 [ 267.287380][ T36] audit: type=1326 audit(2000000058.620:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.0.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb238f6c9 code=0x7ffc0000 [ 267.298341][ T8694] 9pnet_fd: Insufficient options for proto=fd [ 267.311181][ T36] audit: type=1326 audit(2000000058.620:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.0.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fefb238f6c9 code=0x7ffc0000 [ 267.340681][ T36] audit: type=1326 audit(2000000058.620:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.0.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb238f6c9 code=0x7ffc0000 [ 267.364439][ T36] audit: type=1326 audit(2000000058.620:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.0.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb238f6c9 code=0x7ffc0000 [ 267.388596][ T36] audit: type=1326 audit(2000000058.620:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.0.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb238f6c9 code=0x7ffc0000 [ 267.390542][ T8696] netlink: 'syz.3.2962': attribute type 4 has an invalid length. [ 267.413848][ T36] audit: type=1326 audit(2000000058.620:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.0.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb238f6c9 code=0x7ffc0000 [ 267.420089][ T8696] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2962'. [ 267.443989][ T36] audit: type=1326 audit(2000000058.620:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.0.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb238f6c9 code=0x7ffc0000 [ 267.475778][ T36] audit: type=1326 audit(2000000058.620:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.0.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fefb238f6c9 code=0x7ffc0000 [ 267.688876][ T8718] kvm: kvm [8717]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 267.697560][ T8718] kvm: kvm [8717]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 267.709362][ T8718] kvm: kvm [8717]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 267.721759][ T8718] kvm: kvm [8717]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 267.730894][ T8718] kvm: kvm [8717]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 267.742481][ T8718] kvm_intel: kvm [8717]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 267.827366][ T8433] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 267.977345][ T8433] usb 1-1: Using ep0 maxpacket: 32 [ 267.983768][ T8433] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 267.992151][ T8433] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.002527][ T8433] usb 1-1: config 0 has no interface number 0 [ 268.016130][ T8433] usb 1-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.030157][ T8433] usb 1-1: config 0 interface 2 has no altsetting 0 [ 268.049334][ T8433] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 268.069326][ T8433] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.088657][ T8433] usb 1-1: Product: syz [ 268.093282][ T8433] usb 1-1: Manufacturer: syz [ 268.098142][ T8433] usb 1-1: SerialNumber: syz [ 268.107519][ T8433] usb 1-1: config 0 descriptor?? [ 269.107617][ T8433] usb 1-1: invalid MIDI in EP 0 [ 269.123639][ T8433] snd-usb-audio 1-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 270.095473][ T8249] udevd[8249]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 270.111522][ T8433] usb 1-1: USB disconnect, device number 32 [ 271.267085][ T359] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 271.291490][ T359] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 271.323287][ T359] asix 3-1:0.0: probe with driver asix failed with error -71 [ 271.338782][ T359] usb 3-1: USB disconnect, device number 47 [ 271.360512][ T8789] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2983'. [ 271.370131][ T8789] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.373076][ T8780] overlayfs: missing 'lowerdir' [ 271.517520][ T8809] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 271.517554][ T8809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:172 [ 271.667392][ T330] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 271.754541][ T8831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=8831 comm=syz.2.2997 [ 271.779155][ T8829] netlink: 'syz.1.2996': attribute type 4 has an invalid length. [ 271.839007][ T330] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 271.848570][ T330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.858155][ T330] usb 1-1: config 0 descriptor?? [ 272.723658][ T8876] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:193 [ 272.724148][ T8876] rust_binder: Error while translating object. [ 272.733595][ T8876] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 272.740059][ T8876] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:193 [ 272.750168][ T8878] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 272.831202][ T8882] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:198 [ 273.087361][ T63] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 273.246016][ T8894] netlink: 'syz.3.3020': attribute type 27 has an invalid length. [ 273.258446][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.269593][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.279985][ T63] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 273.291155][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.301027][ T63] usb 3-1: config 0 descriptor?? [ 273.708996][ T63] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 273.716064][ T63] lenovo 0003:17EF:6047.0024: item fetching failed at offset 3/5 [ 273.724507][ T63] lenovo 0003:17EF:6047.0024: hid_parse failed [ 273.730780][ T63] lenovo 0003:17EF:6047.0024: probe with driver lenovo failed with error -22 [ 273.825203][ T8900] x_tables: duplicate underflow at hook 1 [ 273.913166][ T8885] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 273.913949][ T8433] usb 3-1: USB disconnect, device number 48 [ 274.401171][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 274.401190][ T36] audit: type=1326 audit(2000000065.770:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8907 comm="syz.3.3027" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f221198f6c9 code=0x0 [ 275.295519][ T330] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 275.318656][ T330] asix 1-1:0.0: probe with driver asix failed with error -71 [ 275.327093][ T330] usb 1-1: USB disconnect, device number 33 [ 275.362307][ T8928] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 275.379315][ T8931] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 275.385900][ T8931] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:685 [ 275.411778][ T8933] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3036'. [ 275.464212][ T8933] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 275.479252][ T8936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3037'. [ 275.847382][ T359] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 275.999974][ T359] usb 3-1: Invalid ep0 maxpacket: 9 [ 276.106825][ T36] audit: type=1400 audit(2000000067.470:817): avc: denied { getattr } for pid=8953 comm="syz.1.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 276.127487][ T359] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 276.277362][ T359] usb 3-1: Invalid ep0 maxpacket: 9 [ 276.282770][ T359] usb usb3-port1: attempt power cycle [ 276.380538][ T8968] netlink: 'syz.3.3048': attribute type 6 has an invalid length. [ 276.388421][ T8968] IPv6: NLM_F_CREATE should be specified when creating new route [ 276.627355][ T359] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 276.647954][ T359] usb 3-1: Invalid ep0 maxpacket: 9 [ 276.777343][ T359] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 276.797693][ T359] usb 3-1: Invalid ep0 maxpacket: 9 [ 276.803095][ T359] usb usb3-port1: unable to enumerate USB device [ 276.979542][ T8978] 9pnet_fd: Insufficient options for proto=fd [ 276.998423][ T36] audit: type=1400 audit(2000000068.370:818): avc: denied { listen } for pid=8979 comm="syz.3.3054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 278.171369][ T9022] 9pnet_fd: p9_fd_create_tcp (9022): problem connecting socket to 127.0.0.1 [ 278.213438][ T9032] fuseblk: Unknown parameter 'fdJ“¸É' [ 278.621727][ T36] audit: type=1400 audit(2000000069.990:819): avc: denied { nlmsg_write } for pid=9044 comm="syz.2.3081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 278.642907][ T36] audit: type=1107 audit(2000000069.990:820): pid=9044 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 278.677739][ T9050] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 278.917361][ T330] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 278.987347][ T359] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 279.078574][ T330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.089615][ T330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.099443][ T330] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 279.108666][ T330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.117428][ T330] usb 1-1: config 0 descriptor?? [ 279.137321][ T359] usb 3-1: Using ep0 maxpacket: 16 [ 279.143717][ T359] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 33620, setting to 1024 [ 279.155151][ T359] usb 3-1: config 0 interface 0 has no altsetting 0 [ 279.161924][ T359] usb 3-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 279.171112][ T359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.179858][ T359] usb 3-1: config 0 descriptor?? [ 279.325435][ T330] usbhid 1-1:0.0: can't add hid device: -71 [ 279.337130][ T330] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 279.349047][ T330] usb 1-1: USB disconnect, device number 34 [ 279.384959][ T9066] IPv6: NLM_F_CREATE should be specified when creating new route [ 279.392969][ T9066] IPv6: NLM_F_REPLACE set, but no existing node found! [ 279.594780][ T9045] 9pnet_fd: Insufficient options for proto=fd [ 279.802143][ T9045] rust_binder: Read failure Err(EAGAIN) in pid:214 [ 279.805018][ T359] usbhid 3-1:0.0: can't add hid device: -71 [ 279.817888][ T359] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 279.829762][ T359] usb 3-1: USB disconnect, device number 53 [ 280.114128][ T9095] netlink: 'syz.1.3102': attribute type 16 has an invalid length. [ 280.122845][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3102'. [ 280.527327][ T9132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.536545][ T9132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.625020][ T9135] fuse: Bad value for 'group_id' [ 280.630081][ T9135] fuse: Bad value for 'group_id' [ 280.767347][ T330] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 280.918580][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.929561][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.939456][ T330] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 280.948661][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.957326][ T330] usb 3-1: config 0 descriptor?? [ 281.270315][ T9159] netlink: 'syz.1.3124': attribute type 4 has an invalid length. [ 281.291940][ T9161] x_tables: unsorted underflow at hook 2 [ 281.364649][ T330] lenovo 0003:17EF:6047.0025: unknown main item tag 0x0 [ 281.371915][ T330] lenovo 0003:17EF:6047.0025: item fetching failed at offset 3/5 [ 281.380395][ T330] lenovo 0003:17EF:6047.0025: hid_parse failed [ 281.386691][ T330] lenovo 0003:17EF:6047.0025: probe with driver lenovo failed with error -22 [ 281.564766][ T9132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.573420][ T9132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.581511][ T9132] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 281.583241][ T9] usb 3-1: USB disconnect, device number 54 [ 281.604408][ T9171] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.604563][ T9172] rust_binder: Failed copying remainder into alloc: EFAULT [ 281.611511][ T9172] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 281.619035][ T9172] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 281.627501][ T9172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:722 [ 282.400290][ T9201] netlink: 'syz.0.3139': attribute type 25 has an invalid length. [ 282.417941][ T9202] netlink: 'syz.0.3139': attribute type 25 has an invalid length. [ 282.516560][ T9205] 9pnet_fd: Insufficient options for proto=fd [ 282.536619][ T9208] x_tables: duplicate underflow at hook 1 [ 282.680022][ T9236] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 282.696568][ T9236] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 282.696599][ T9236] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 282.716881][ T9236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:732 [ 282.758160][ T9253] tipc: Enabling of bearer rejected, failed to enable media [ 283.027338][ T8433] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 283.046297][ T36] audit: type=1400 audit(2000000074.410:821): avc: denied { setopt } for pid=9268 comm="syz.2.3157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 283.047988][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3157'. [ 283.157330][ T8433] usb 1-1: device descriptor read/64, error -71 [ 283.397479][ T8433] usb 1-1: device descriptor read/64, error -71 [ 283.484797][ T9276] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 283.637414][ T8433] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 283.767333][ T8433] usb 1-1: device descriptor read/64, error -71 [ 283.887379][ T9334] /dev/loop0: Can't lookup blockdev [ 283.907345][ T10] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 284.007356][ T8433] usb 1-1: device descriptor read/64, error -71 [ 284.058468][ T10] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 284.067682][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.076304][ T10] usb 3-1: config 0 descriptor?? [ 284.117463][ T8433] usb usb1-port1: attempt power cycle [ 284.458655][ T8433] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 284.481080][ T8433] usb 1-1: device descriptor read/8, error -71 [ 284.618376][ T8433] usb 1-1: device descriptor read/8, error -71 [ 284.857357][ T8433] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 284.878379][ T8433] usb 1-1: device descriptor read/8, error -71 [ 285.008355][ T8433] usb 1-1: device descriptor read/8, error -71 [ 285.117442][ T8433] usb usb1-port1: unable to enumerate USB device [ 285.491251][ T9287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.499922][ T9287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.638068][ T36] audit: type=1400 audit(2000000077.010:822): avc: denied { accept } for pid=9358 comm="syz.1.3190" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 285.666268][ T9363] 9pnet_fd: Insufficient options for proto=fd [ 285.684972][ T9365] devpts: called with bogus options [ 285.863725][ T9384] overlayfs: failed to clone upperpath [ 285.870125][ T9384] SELinux: Context system_u:object_r:netlabel_mgmt_exec_t:s0 is not valid (left unmapped). [ 285.880756][ T36] audit: type=1400 audit(2000000077.260:823): avc: denied { relabelto } for pid=9379 comm="syz.1.3198" name="file0" dev="tmpfs" ino=1731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:netlabel_mgmt_exec_t:s0" [ 285.907965][ T36] audit: type=1400 audit(2000000077.260:824): avc: denied { associate } for pid=9379 comm="syz.1.3198" name="file0" dev="tmpfs" ino=1731 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netlabel_mgmt_exec_t:s0" [ 286.137706][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 286.148072][ T10] asix 3-1:0.0: probe with driver asix failed with error -71 [ 286.157321][ T10] usb 3-1: USB disconnect, device number 55 [ 286.674917][ T9392] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3202'. [ 286.785098][ T10] hid-generic 0000:0004:0000.0026: unknown main item tag 0x0 [ 286.796483][ T10] hid-generic 0000:0004:0000.0026: unknown main item tag 0x0 [ 286.804409][ T10] hid-generic 0000:0004:0000.0026: unknown main item tag 0x0 [ 286.817465][ T10] hid-generic 0000:0004:0000.0026: hidraw0: HID v0.00 Device [syz0] on syz0 [ 287.037396][ T8433] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 287.187330][ T8433] usb 3-1: Using ep0 maxpacket: 16 [ 287.193971][ T8433] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.204917][ T8433] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.214940][ T8433] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 287.227816][ T8433] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 287.236942][ T8433] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.245722][ T8433] usb 3-1: config 0 descriptor?? [ 287.556140][ T9458] veth1_macvtap: left promiscuous mode [ 287.561956][ T9458] macsec0: entered allmulticast mode [ 287.577902][ T9458] veth1_macvtap: entered promiscuous mode [ 287.597352][ T9458] veth1_macvtap: entered allmulticast mode [ 287.603394][ T9458] macsec0: left allmulticast mode [ 287.612115][ T9458] veth1_macvtap: left allmulticast mode [ 287.662324][ T8433] usbhid 3-1:0.0: can't add hid device: -71 [ 287.679758][ T8433] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 287.690934][ T9470] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 287.697064][ T9472] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 287.704561][ T8433] usb 3-1: USB disconnect, device number 56 [ 287.718996][ T36] audit: type=1326 audit(2000000079.090:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.3.3232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f221198f6c9 code=0x0 [ 287.738256][ T9470] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 287.798116][ T9478] rust_binder: Error while translating object. [ 287.804678][ T9478] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 287.810939][ T9478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:277 [ 287.870010][ T3416] Bluetooth: hci0: Frame reassembly failed (-84) [ 287.879770][ T9487] rust_binder: Write failure EFAULT in pid:279 [ 287.891108][ T9489] netlink: 'syz.3.3237': attribute type 27 has an invalid length. [ 288.954521][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3246'. [ 289.001825][ T9523] cgroup: Need name or subsystem set [ 289.020513][ T36] audit: type=1326 audit(2000000080.390:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221198f6c9 code=0x7ffc0000 [ 289.044212][ T36] audit: type=1326 audit(2000000080.390:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221198f6c9 code=0x7ffc0000 [ 289.068239][ T36] audit: type=1326 audit(2000000080.390:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f221198f6c9 code=0x7ffc0000 [ 289.091941][ T36] audit: type=1326 audit(2000000080.390:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221198f6c9 code=0x7ffc0000 [ 289.115460][ T36] audit: type=1326 audit(2000000080.390:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221198f6c9 code=0x7ffc0000 [ 289.139073][ T36] audit: type=1326 audit(2000000080.390:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f221198f6c9 code=0x7ffc0000 [ 289.162341][ T36] audit: type=1326 audit(2000000080.420:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221198f6c9 code=0x7ffc0000 [ 289.185981][ T36] audit: type=1326 audit(2000000080.420:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f221198f6c9 code=0x7ffc0000 [ 289.209353][ T36] audit: type=1326 audit(2000000080.420:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221198f6c9 code=0x7ffc0000 [ 289.233592][ T8433] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 289.233955][ T36] audit: type=1326 audit(2000000080.420:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f221198f6c9 code=0x7ffc0000 [ 289.367406][ T8433] usb 1-1: device descriptor read/64, error -71 [ 289.617532][ T8433] usb 1-1: device descriptor read/64, error -71 [ 289.857352][ T8433] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 289.927459][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 289.927476][ T432] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 289.971243][ T9540] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 289.997320][ T8433] usb 1-1: device descriptor read/64, error -71 [ 290.045765][ T9549] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 290.045794][ T9549] rust_binder: Read failure Err(EFAULT) in pid:293 [ 290.054261][ T9549] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 290.071115][ T9549] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 290.247403][ T8433] usb 1-1: device descriptor read/64, error -71 [ 290.367471][ T8433] usb usb1-port1: attempt power cycle [ 290.457407][ T63] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 290.608427][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.618261][ T63] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 290.631194][ T63] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 290.640281][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.649179][ T63] usb 3-1: config 0 descriptor?? [ 290.655269][ T63] usbhid 3-1:0.0: can't add hid device: -22 [ 290.661494][ T63] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 290.707332][ T8433] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 290.728798][ T8433] usb 1-1: device descriptor read/8, error -71 [ 290.786763][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3270'. [ 290.797610][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3270'. [ 290.858488][ T8433] usb 1-1: device descriptor read/8, error -71 [ 291.097348][ T8433] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 291.118385][ T8433] usb 1-1: device descriptor read/8, error -71 [ 291.248451][ T8433] usb 1-1: device descriptor read/8, error -71 [ 291.357561][ T8433] usb usb1-port1: unable to enumerate USB device [ 291.862179][ T9650] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3276'. [ 292.051434][ C1] af_packet: tpacket_rcv: packet too big, clamped from 4 to 4294967272. macoff=96 [ 292.231482][ T9672] netlink: 'syz.1.3284': attribute type 4 has an invalid length. [ 292.239474][ T9672] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3284'. [ 292.556646][ T9675] overlayfs: missing 'lowerdir' [ 292.899140][ T9693] rust_binder: 752: no such ref 0 [ 292.904334][ T9693] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 292.914779][ T9693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:752 [ 293.235521][ T336] usb 3-1: USB disconnect, device number 57 [ 293.278691][ T9724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.301738][ T9724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.312871][ T9724] /dev/nullb0: Can't lookup blockdev [ 293.577353][ T336] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 293.717340][ T336] usb 3-1: device descriptor read/64, error -71 [ 293.975574][ T336] usb 3-1: device descriptor read/64, error -71 [ 294.059206][ T36] kauditd_printk_skb: 98 callbacks suppressed [ 294.059227][ T36] audit: type=1400 audit(2000000085.430:934): avc: denied { map } for pid=9735 comm="syz.0.3304" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 294.091550][ T36] audit: type=1400 audit(2000000085.460:935): avc: denied { ioctl } for pid=9735 comm="syz.0.3304" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 294.117614][ T36] audit: type=1400 audit(2000000085.460:936): avc: denied { set_context_mgr } for pid=9735 comm="syz.0.3304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 294.211221][ T36] audit: type=1400 audit(2000000085.580:937): avc: denied { create } for pid=9741 comm="syz.0.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 294.231578][ T36] audit: type=1400 audit(2000000085.580:938): avc: denied { create } for pid=9741 comm="syz.0.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 294.237388][ T336] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 294.251767][ T36] audit: type=1400 audit(2000000085.580:939): avc: denied { getopt } for pid=9741 comm="syz.0.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 294.318529][ T36] audit: type=1400 audit(2000000085.690:940): avc: denied { call } for pid=9744 comm="syz.0.3307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 294.319890][ T9745] rust_binder: 779: no such ref 3 [ 294.338302][ T36] audit: type=1400 audit(2000000085.690:941): avc: denied { read } for pid=9744 comm="syz.0.3307" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 294.343153][ T9745] rust_binder: inc_ref_done called when no active inc_refs [ 294.366418][ T36] audit: type=1400 audit(2000000085.690:942): avc: denied { open } for pid=9744 comm="syz.0.3307" path="/dev/input/event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 294.366981][ T9745] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 294.373941][ T36] audit: type=1400 audit(2000000085.690:943): avc: denied { ioctl } for pid=9744 comm="syz.0.3307" path="/dev/input/event2" dev="devtmpfs" ino=208 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 294.398373][ T9745] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:779 [ 294.405693][ T336] usb 3-1: device descriptor read/64, error -71 [ 294.677364][ T336] usb 3-1: device descriptor read/64, error -71 [ 294.787435][ T336] usb usb3-port1: attempt power cycle [ 295.003219][ T9763] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.010349][ T9763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.127701][ T336] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 295.148388][ T336] usb 3-1: device descriptor read/8, error -71 [ 295.278612][ T336] usb 3-1: device descriptor read/8, error -71 [ 295.327356][ T8433] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 295.402307][ T9772] fuse: Bad value for 'fd' [ 295.457035][ T9786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3321'. [ 295.463317][ T9785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3321'. [ 295.466361][ T9786] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3321'. [ 295.484191][ T9785] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3321'. [ 295.494462][ T8433] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 295.503717][ T8433] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.513366][ T8433] usb 1-1: config 0 descriptor?? [ 295.527458][ T336] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 295.548470][ T336] usb 3-1: device descriptor read/8, error -71 [ 295.678473][ T336] usb 3-1: device descriptor read/8, error -71 [ 295.787422][ T336] usb usb3-port1: unable to enumerate USB device [ 296.687332][ T10] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 296.838435][ T10] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 5 [ 296.847118][ T10] usb 3-1: can't read configurations, error -22 [ 296.977381][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 297.110818][ T9862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 297.118852][ T9862] IPv6: NLM_F_CREATE should be set when creating new route [ 297.126227][ T9862] IPv6: NLM_F_CREATE should be set when creating new route [ 297.136140][ T10] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 5 [ 297.145786][ T10] usb 3-1: can't read configurations, error -22 [ 297.146549][ T9862] veth1_to_bond: mtu less than device minimum [ 297.157701][ T10] usb usb3-port1: attempt power cycle [ 297.336226][ T9767] rust_binder: Error while translating object. [ 297.336285][ T9767] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 297.343600][ T9767] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:792 [ 297.354155][ T8433] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 297.374060][ T8433] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 297.384542][ T8433] asix 1-1:0.0: probe with driver asix failed with error -71 [ 297.393313][ T8433] usb 1-1: USB disconnect, device number 44 [ 297.497403][ T10] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 297.519367][ T10] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 5 [ 297.528387][ T10] usb 3-1: can't read configurations, error -22 [ 297.657367][ T10] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 297.678945][ T10] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 5 [ 297.687625][ T10] usb 3-1: can't read configurations, error -22 [ 297.694064][ T10] usb usb3-port1: unable to enumerate USB device [ 297.791480][ T9873] overlayfs: failed to clone upperpath [ 298.472197][ T9900] kvm: kvm [9899]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xbe702111 [ 298.737393][ T336] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 298.867308][ T336] usb 1-1: device descriptor read/64, error -71 [ 299.107388][ T336] usb 1-1: device descriptor read/64, error -71 [ 299.248401][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 299.248421][ T36] audit: type=1400 audit(2000000090.620:985): avc: denied { mount } for pid=9911 comm="syz.3.3366" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 299.283731][ T9914] batadv_slave_0: entered promiscuous mode [ 299.291735][ T36] audit: type=1400 audit(2000000090.660:986): avc: denied { bind } for pid=9913 comm="syz.3.3367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 299.318913][ T9913] batadv_slave_0: left promiscuous mode [ 299.357389][ T336] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 299.487427][ T336] usb 1-1: device descriptor read/64, error -71 [ 299.536839][ T9924] netlink: 'syz.2.3371': attribute type 12 has an invalid length. [ 299.563571][ T36] audit: type=1400 audit(2000000090.930:987): avc: denied { unmount } for pid=7273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 299.592100][ T36] audit: type=1400 audit(2000000090.960:988): avc: denied { read write } for pid=9925 comm="syz.2.3372" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 299.616432][ T36] audit: type=1400 audit(2000000090.960:989): avc: denied { open } for pid=9925 comm="syz.2.3372" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 299.737404][ T336] usb 1-1: device descriptor read/64, error -71 [ 299.774555][ T9931] rust_binder: Error while translating object. [ 299.774588][ T9931] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 299.781089][ T9931] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:326 [ 299.790676][ T9931] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 299.799886][ T9931] rust_binder: Read failure Err(EFAULT) in pid:326 [ 299.847564][ T336] usb usb1-port1: attempt power cycle [ 299.899504][ T36] audit: type=1400 audit(2000000091.270:990): avc: denied { mount } for pid=9935 comm="syz.2.3377" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 299.922587][ T36] audit: type=1400 audit(2000000091.280:991): avc: denied { bind } for pid=9934 comm="syz.3.3376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 299.942435][ T36] audit: type=1400 audit(2000000091.280:992): avc: denied { listen } for pid=9934 comm="syz.3.3376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 299.962475][ T36] audit: type=1400 audit(2000000091.280:993): avc: denied { accept } for pid=9934 comm="syz.3.3376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 299.985056][ T36] audit: type=1400 audit(2000000091.340:994): avc: denied { unmount } for pid=7273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 300.019957][ T9947] rust_binder: Write failure EFAULT in pid:331 [ 300.071937][ T9956] SELinux: Context system_u:object_r:devpts_t:s0 is not valid (left unmapped). [ 300.217348][ T336] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 300.238404][ T336] usb 1-1: device descriptor read/8, error -71 [ 300.290504][ T9981] fuse: Bad value for 'user_id' [ 300.295482][ T9981] fuse: Bad value for 'user_id' [ 300.312507][ T9983] veth0_virt_wifi: entered allmulticast mode [ 300.321422][ T9982] veth0_virt_wifi: left allmulticast mode [ 300.340898][ T9985] overlayfs: missing 'lowerdir' [ 300.351946][ T9985] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=114 sclass=netlink_tcpdiag_socket pid=9985 comm=syz.3.3396 [ 300.368304][ T336] usb 1-1: device descriptor read/8, error -71 [ 300.617498][ T336] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 300.638373][ T336] usb 1-1: device descriptor read/8, error -71 [ 300.768354][ T336] usb 1-1: device descriptor read/8, error -71 [ 300.877536][ T336] usb usb1-port1: unable to enumerate USB device [ 300.916479][T10022] overlayfs: missing 'lowerdir' [ 300.922850][T10022] No source specified [ 301.104316][T10035] __vm_enough_memory: pid: 10035, comm: syz.2.3414, bytes: 18014402804453376 not enough memory for the allocation [ 301.232916][T10054] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 301.315602][T10069] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 301.400598][T10095] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3437'. [ 301.467523][T10112] /dev/nullb0: Can't lookup blockdev [ 301.572548][T10126] rust_binder: Write failure EFAULT in pid:379 [ 301.573268][T10126] rust_binder: Write failure EFAULT in pid:379 [ 301.683229][T10142] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 301.706495][T10145] rust_binder: Error while translating object. [ 301.706553][T10145] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 301.713390][T10145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:814 [ 301.977274][T10188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.006458][T10188] rust_binder: Got transaction with invalid offset. [ 302.013201][T10188] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 302.020227][T10188] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:391 [ 302.086284][T10201] tmpfs: Bad value for 'nr_inodes' [ 302.107581][T10200] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 302.107618][T10200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:399 [ 302.157361][ T442] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 302.268672][T10212] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3475'. [ 302.279557][T10212] rust_binder: 410: no such ref 3 [ 302.284650][T10212] rust_binder: inc_ref_done called when no active inc_refs [ 302.284670][T10212] rust_binder: inc_ref_done called when no active inc_refs [ 302.292092][T10212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:410 [ 302.299758][T10212] rust_binder: 410: no such ref 2 [ 302.313985][T10212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:410 [ 302.317369][ T442] usb 1-1: Using ep0 maxpacket: 32 [ 302.332964][ T442] usb 1-1: config 0 interface 0 has no altsetting 0 [ 302.339757][ T442] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 302.348955][ T442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.360448][ T442] usb 1-1: config 0 descriptor?? [ 302.774106][ T442] usbhid 1-1:0.0: can't add hid device: -71 [ 302.780644][ T442] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 302.790056][ T442] usb 1-1: USB disconnect, device number 49 [ 303.060562][T10229] binder: Unknown parameter ' 7' [ 303.238530][T10243] rust_binder: Error while translating object. [ 303.238567][T10243] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 303.245011][T10243] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:428 [ 303.527591][ T336] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 303.581561][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3495'. [ 303.657318][ T359] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 303.688615][ T336] usb 1-1: config 0 has an invalid interface number: 66 but max is 2 [ 303.696923][ T336] usb 1-1: config 0 has an invalid interface number: 33 but max is 2 [ 303.705118][ T336] usb 1-1: config 0 has an invalid interface number: 100 but max is 2 [ 303.713771][ T336] usb 1-1: config 0 has no interface number 0 [ 303.720092][ T336] usb 1-1: config 0 has no interface number 1 [ 303.726253][ T336] usb 1-1: config 0 has no interface number 2 [ 303.732915][ T336] usb 1-1: config 0 interface 66 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 303.743951][ T336] usb 1-1: config 0 interface 66 altsetting 7 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 303.754955][ T336] usb 1-1: config 0 interface 66 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 303.765745][ T336] usb 1-1: config 0 interface 66 altsetting 7 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 303.776974][ T336] usb 1-1: config 0 interface 33 altsetting 2 endpoint 0xD has an invalid bInterval 20, changing to 7 [ 303.788208][ T336] usb 1-1: config 0 interface 33 altsetting 2 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 303.799241][ T336] usb 1-1: config 0 interface 33 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 303.810025][ T336] usb 1-1: config 0 interface 33 altsetting 2 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 303.820885][ T359] usb 3-1: Using ep0 maxpacket: 16 [ 303.826293][ T336] usb 1-1: config 0 interface 33 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 303.837293][ T336] usb 1-1: config 0 interface 33 altsetting 2 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 303.849515][ T336] usb 1-1: config 0 interface 33 altsetting 2 endpoint 0x8A has an invalid bInterval 181, changing to 7 [ 303.860785][ T336] usb 1-1: config 0 interface 33 altsetting 2 endpoint 0x8A has invalid maxpacket 41390, setting to 1024 [ 303.872119][ T336] usb 1-1: config 0 interface 33 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 303.883023][ T359] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 303.891783][ T359] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 303.901928][ T336] usb 1-1: config 0 interface 33 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 303.912685][ T359] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.921597][ T336] usb 1-1: config 0 interface 33 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 303.932470][ T336] usb 1-1: config 0 interface 33 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 303.943211][ T336] usb 1-1: config 0 interface 33 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 303.954142][ T336] usb 1-1: config 0 interface 33 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 303.965078][ T336] usb 1-1: config 0 interface 33 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 303.975908][ T336] usb 1-1: config 0 interface 33 altsetting 2 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 303.989204][ T336] usb 1-1: config 0 interface 100 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 304.000048][ T336] usb 1-1: config 0 interface 100 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 304.010813][ T336] usb 1-1: config 0 interface 66 has no altsetting 0 [ 304.017666][ T359] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 304.026730][ T359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.034783][ T336] usb 1-1: config 0 interface 33 has no altsetting 0 [ 304.041562][ T336] usb 1-1: config 0 interface 100 has no altsetting 0 [ 304.048384][ T359] usb 3-1: Product: syz [ 304.052566][ T359] usb 3-1: Manufacturer: syz [ 304.057173][ T359] usb 3-1: SerialNumber: syz [ 304.063923][ T336] usb 1-1: New USB device found, idVendor=16d8, idProduct=6001, bcdDevice=73.4f [ 304.073732][ T336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.081897][ T336] usb 1-1: Product: 醮Ḵ겢ﰰ藚횰ෆ⨘처蓂é·ê…ƒá¯†æ®è§†åŒêŒŸëŒ¼æ†œé©§ã±‹â·ˆë¸µï ¥ç±à·áž™ê–᧌浑웑ëœå‘½â´è¿€àµ§áŒ€â‡›è»á–¯å»Œì•³ [ 304.097106][ T336] usb 1-1: Manufacturer: 塷쥊웢ï¥ï˜‡ïµ­é·¼ì£ãˆå—©á§¢è’•æ¼•ä‰†â€é´Ÿâ‘“칵퉜峹落쎙酷è䙀⺫谺ꔣ徯잎鵤걱彈îºåŸ¬à½Œ [ 304.111145][ T336] usb 1-1: SerialNumber: á° [ 304.116727][ T336] usb 1-1: config 0 descriptor?? [ 304.330990][ T336] usb 1-1: USB disconnect, device number 50 [ 304.469941][ T359] usb 3-1: 0:2 : does not exist [ 304.837236][T10302] __vm_enough_memory: pid: 10302, comm: syz.0.3507, bytes: 18014402804453376 not enough memory for the allocation [ 304.987099][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 304.987119][ T36] audit: type=1400 audit(2000000096.350:1036): avc: denied { execute_no_trans } for pid=10314 comm="syz.1.3513" path="/395/file0" dev="tmpfs" ino=2151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 305.084658][ T36] audit: type=1400 audit(2000000096.450:1037): avc: denied { mounton } for pid=10319 comm="syz.0.3515" path="/294/file0" dev="ramfs" ino=48932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 305.315040][T10347] rust_binder: Write failure EFAULT in pid:855 [ 305.395900][ T36] audit: type=1400 audit(2000000096.760:1038): avc: denied { create } for pid=10360 comm="syz.3.3530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 305.576257][T10374] rust_binder: 861: no such ref 3 [ 305.581484][T10374] rust_binder: inc_ref_done called when no active inc_refs [ 305.581512][T10374] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 305.596189][ T36] audit: type=1400 audit(2000000096.960:1039): avc: denied { create } for pid=10385 comm="syz.3.3539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 305.616242][T10374] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:861 [ 305.629501][ T36] audit: type=1400 audit(2000000096.960:1040): avc: denied { sys_admin } for pid=10385 comm="syz.3.3539" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 305.687933][ T36] audit: type=1400 audit(2000000097.060:1041): avc: denied { setopt } for pid=10401 comm="syz.3.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 305.688019][T10402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.713431][T10402] rust_binder: Write failure EINVAL in pid:866 [ 305.738817][ T36] audit: type=1400 audit(2000000097.120:1042): avc: denied { read write } for pid=10406 comm="syz.0.3545" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 305.769717][ T36] audit: type=1400 audit(2000000097.120:1043): avc: denied { open } for pid=10406 comm="syz.0.3545" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 305.804895][ T36] audit: type=1400 audit(2000000097.120:1044): avc: denied { ioctl } for pid=10406 comm="syz.0.3545" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 305.836016][T10413] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 305.852746][T10417] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 305.857169][ T36] audit: type=1400 audit(2000000097.120:1045): avc: denied { ioctl } for pid=10406 comm="syz.0.3545" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 305.867691][T10417] rust_binder: Write failure EINVAL in pid:876 [ 306.086737][T10427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:880 [ 306.129696][T10431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3554'. [ 306.138895][T10432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3554'. [ 306.201401][T10432] rust_binder: Error in use_page_slow: ESRCH [ 306.201430][T10432] rust_binder: use_range failure ESRCH [ 306.211860][T10432] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 306.218328][T10432] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 306.226612][T10432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:882 [ 306.430834][ T336] usb 3-1: USB disconnect, device number 66 [ 306.564604][T10462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 306.564833][T10461] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 306.572494][T10461] rust_binder: Read failure Err(EFAULT) in pid:450 [ 306.581339][T10461] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 306.635312][T10471] rust_binder: 460: no such ref 1 [ 306.640519][T10471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:460 [ 306.887372][ T359] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 306.960180][T10475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3569'. [ 306.970825][T10475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:885 [ 306.983669][T10477] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3570'. [ 307.004934][T10477] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 307.004974][T10477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:887 [ 307.048525][ T359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.068809][ T359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.078723][ T359] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.091692][ T359] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.100980][ T359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.109827][ T359] usb 3-1: config 0 descriptor?? [ 307.475574][T10508] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 307.483756][T10508] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 307.492230][T10508] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 307.500505][T10508] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 307.520058][ T359] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 307.537194][ T359] plantronics 0003:047F:FFFF.0027: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 308.148771][T10553] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 308.251991][T10564] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 308.268635][T10564] rust_binder: Error in use_page_slow: ESRCH [ 308.268668][T10564] rust_binder: use_range failure ESRCH [ 308.275404][T10564] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 308.281215][T10564] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 308.289592][T10564] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:904 [ 308.411381][ T442] usb 3-1: USB disconnect, device number 67 [ 308.589786][T10604] vfat: Unknown parameter '/selinux/access' [ 308.763016][T10629] fuse: Bad value for 'fd' [ 308.989092][T10641] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 308.989114][T10641] rust_binder: Error while translating object. [ 308.997959][T10641] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 309.004281][T10641] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:468 [ 309.387358][ T359] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 309.549786][ T359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.560759][ T359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.570588][ T359] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 309.579798][ T359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.588517][ T359] usb 3-1: config 0 descriptor?? [ 309.895980][T10673] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=10673 comm=syz.1.3640 [ 309.995861][ T359] lenovo 0003:17EF:6047.0028: unknown main item tag 0x0 [ 310.002928][ T359] lenovo 0003:17EF:6047.0028: item fetching failed at offset 3/5 [ 310.010927][ T359] lenovo 0003:17EF:6047.0028: hid_parse failed [ 310.017204][ T359] lenovo 0003:17EF:6047.0028: probe with driver lenovo failed with error -22 [ 310.197204][T10657] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 310.199073][ T336] usb 3-1: USB disconnect, device number 68 [ 310.785516][T10727] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3659'. [ 310.796105][T10727] overlay: ./file0 is not a directory [ 310.822300][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 310.822320][ T36] audit: type=1400 audit(2000000102.190:1079): avc: denied { create } for pid=10716 comm="syz.2.3654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 311.066697][T10739] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3662'. [ 311.240926][ T36] audit: type=1400 audit(2000000102.610:1080): avc: denied { create } for pid=10763 comm="syz.1.3672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 311.261454][ T36] audit: type=1400 audit(2000000102.610:1081): avc: denied { write } for pid=10763 comm="syz.1.3672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 311.292265][ T36] audit: type=1326 audit(2000000102.660:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.1.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865618f6c9 code=0x7ffc0000 [ 311.316087][ T36] audit: type=1326 audit(2000000102.660:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.1.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f865618f6c9 code=0x7ffc0000 [ 311.346230][ T36] audit: type=1326 audit(2000000102.660:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.1.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865618f6c9 code=0x7ffc0000 [ 311.371197][ T36] audit: type=1326 audit(2000000102.660:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.1.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f865618f6c9 code=0x7ffc0000 [ 311.417056][ T36] audit: type=1326 audit(2000000102.660:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.1.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865618f6c9 code=0x7ffc0000 [ 311.448079][ T36] audit: type=1326 audit(2000000102.660:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.1.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f865618f6c9 code=0x7ffc0000 [ 311.472150][ T36] audit: type=1326 audit(2000000102.660:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.1.3673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=244 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 311.585423][T10791] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 311.595569][T10791] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 311.682108][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3675'. [ 311.691210][T10801] netlink: 'syz.2.3685': attribute type 4 has an invalid length. [ 311.700122][T10801] netlink: 'syz.2.3685': attribute type 2 has an invalid length. [ 311.791749][T10806] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.917328][ T442] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 312.047326][ T442] usb 1-1: device descriptor read/64, error -71 [ 312.098274][T10814] loop2: detected capacity change from 0 to 8388607 [ 312.108836][ T8249] Buffer I/O error on dev loop2, logical block 1048575, async page read [ 312.244117][T10823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 312.244165][T10823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:506 [ 312.287590][ T442] usb 1-1: device descriptor read/64, error -71 [ 312.323955][T10835] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 312.324497][T10835] rust_binder: Error while translating object. [ 312.333569][T10835] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 312.340209][T10835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:511 [ 312.367712][T10837] overlay: ./file0 is not a directory [ 312.574018][ T442] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 312.597685][T10844] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 312.598183][T10844] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 312.604753][T10844] rust_binder: Error while translating object. [ 312.617641][T10844] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 312.623868][T10844] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:518 [ 312.708419][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3702'. [ 312.727330][ T442] usb 1-1: device descriptor read/64, error -71 [ 312.967350][ T63] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 312.976534][T10872] 9pnet_fd: Insufficient options for proto=fd [ 312.982760][ T442] usb 1-1: device descriptor read/64, error -71 [ 313.030368][T10880] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 313.058270][T10882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10882 comm=syz.1.3713 [ 313.097593][ T442] usb usb1-port1: attempt power cycle [ 313.119294][ T63] usb 3-1: config 1 has an invalid interface number: 160 but max is 2 [ 313.127638][ T63] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 313.136353][ T63] usb 3-1: config 1 has an invalid interface number: 13 but max is 2 [ 313.144551][ T63] usb 3-1: config 1 has an invalid interface number: 228 but max is 2 [ 313.152805][ T63] usb 3-1: config 1 has an invalid interface number: 114 but max is 2 [ 313.161149][ T63] usb 3-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 313.170278][ T63] usb 3-1: config 1 has no interface number 0 [ 313.176606][ T63] usb 3-1: config 1 has no interface number 1 [ 313.183070][ T63] usb 3-1: config 1 has no interface number 2 [ 313.189212][ T63] usb 3-1: config 1 has no interface number 3 [ 313.195316][ T63] usb 3-1: config 1 interface 160 altsetting 248 endpoint 0xD has an invalid bInterval 240, changing to 7 [ 313.206687][ T63] usb 3-1: config 1 interface 160 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 313.217820][ T63] usb 3-1: config 1 interface 160 altsetting 248 has a duplicate endpoint with address 0x4, skipping [ 313.228893][ T63] usb 3-1: config 1 interface 160 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 313.239967][ T63] usb 3-1: config 1 interface 160 altsetting 248 has a duplicate endpoint with address 0x4, skipping [ 313.250883][ T63] usb 3-1: config 1 interface 160 altsetting 248 endpoint 0xA has an invalid bInterval 128, changing to 7 [ 313.262234][ T63] usb 3-1: config 1 interface 160 altsetting 248 has a duplicate endpoint with address 0x8, skipping [ 313.273155][ T63] usb 3-1: config 1 interface 160 altsetting 248 has 11 endpoint descriptors, different from the interface descriptor's value: 12 [ 313.286671][ T63] usb 3-1: too many endpoints for config 1 interface 13 altsetting 150: 240, using maximum allowed: 30 [ 313.298312][ T63] usb 3-1: config 1 interface 13 altsetting 150 has 1 endpoint descriptor, different from the interface descriptor's value: 240 [ 313.311778][ T63] usb 3-1: config 1 interface 228 altsetting 9 has an endpoint descriptor with address 0x1D, changing to 0xD [ 313.323536][ T63] usb 3-1: config 1 interface 228 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 313.334276][ T63] usb 3-1: config 1 interface 114 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 313.345044][ T63] usb 3-1: config 1 interface 114 altsetting 8 endpoint 0xE has an invalid bInterval 25, changing to 8 [ 313.356143][ T63] usb 3-1: config 1 interface 114 altsetting 8 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 313.367151][ T63] usb 3-1: config 1 interface 114 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 313.377917][ T63] usb 3-1: config 1 interface 114 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 313.388799][ T63] usb 3-1: config 1 interface 114 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 313.399618][ T63] usb 3-1: config 1 interface 114 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 313.410505][ T63] usb 3-1: config 1 interface 114 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 313.421327][ T63] usb 3-1: config 1 interface 114 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 313.432220][ T63] usb 3-1: config 1 interface 160 has no altsetting 0 [ 313.439041][ T63] usb 3-1: config 1 interface 13 has no altsetting 0 [ 313.445868][ T63] usb 3-1: config 1 interface 228 has no altsetting 0 [ 313.452821][ T442] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 313.460611][ T63] usb 3-1: config 1 interface 114 has no altsetting 0 [ 313.469337][ T63] usb 3-1: Dual-Role OTG device on HNP port [ 313.475485][ T63] usb 3-1: New USB device found, idVendor=0489, idProduct=e05f, bcdDevice=57.00 [ 313.484631][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.492903][ T63] usb 3-1: Product: syz [ 313.497128][ T63] usb 3-1: Manufacturer: syz [ 313.501855][ T63] usb 3-1: SerialNumber: syz [ 313.506989][ T442] usb 1-1: device descriptor read/8, error -71 [ 313.642872][ T442] usb 1-1: device descriptor read/8, error -71 [ 313.728843][ T63] cdc_mbim 3-1:1.228: CDC Union missing and no IAD found [ 313.747321][ T63] cdc_mbim 3-1:1.228: bind() failure [ 313.756560][ T63] usb 3-1: USB disconnect, device number 69 [ 313.887348][ T442] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 313.908513][ T442] usb 1-1: device descriptor read/8, error -71 [ 314.038382][ T442] usb 1-1: device descriptor read/8, error -71 [ 314.147471][ T442] usb usb1-port1: unable to enumerate USB device [ 314.310075][T10929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:533 [ 314.345740][T10935] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 314.353044][T10937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3736'. [ 314.374605][T10937] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3736'. [ 314.815464][T10959] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 315.077311][ T336] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 315.229990][ T336] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.239162][ T336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.247181][ T336] usb 1-1: Product: syz [ 315.251414][ T336] usb 1-1: Manufacturer: syz [ 315.256042][ T336] usb 1-1: SerialNumber: syz [ 316.318428][ T336] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 316.521490][ T36] kauditd_printk_skb: 56 callbacks suppressed [ 316.521515][ T36] audit: type=1400 audit(2000000107.890:1145): avc: denied { ioctl } for pid=10953 comm="syz.0.3742" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 316.556010][ T336] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 316.569987][ T336] usb 1-1: USB disconnect, device number 55 [ 316.576280][ T336] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 316.591500][ T36] audit: type=1400 audit(2000000107.960:1146): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 317.041119][ T36] audit: type=1400 audit(2000000108.410:1147): avc: denied { write } for pid=11022 comm="syz.0.3768" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 317.042822][T11023] rust_binder: 944: no such ref 1 [ 317.064307][ T36] audit: type=1400 audit(2000000108.410:1148): avc: denied { lock } for pid=11022 comm="syz.0.3768" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 317.392089][ T36] audit: type=1400 audit(2000000108.760:1149): avc: denied { getopt } for pid=11047 comm="syz.1.3776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 317.489967][T11057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11057 comm=syz.3.3779 [ 318.001601][T11068] netlink: 57 bytes leftover after parsing attributes in process `syz.1.3784'. [ 318.021895][ T36] audit: type=1400 audit(2000000109.390:1150): avc: denied { map } for pid=11069 comm="syz.3.3785" path="socket:[50047]" dev="sockfs" ino=50047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 318.106821][ T36] audit: type=1400 audit(2000000109.470:1151): avc: denied { connect } for pid=11077 comm="syz.1.3789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 318.127288][ T63] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 318.263897][T11084] netlink: 51 bytes leftover after parsing attributes in process `syz.1.3791'. [ 318.273364][ T36] audit: type=1400 audit(2000000109.650:1152): avc: denied { ioctl } for pid=11073 comm="syz.3.3787" path="socket:[50057]" dev="sockfs" ino=50057 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 318.297307][ T63] usb 1-1: Using ep0 maxpacket: 16 [ 318.308208][ T63] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 318.330040][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.347410][ T63] usb 1-1: Product: syz [ 318.351731][ T63] usb 1-1: Manufacturer: syz [ 318.356378][ T63] usb 1-1: SerialNumber: syz [ 318.367503][ T63] r8152-cfgselector 1-1: Unknown version 0x0000 [ 318.384044][ T63] r8152-cfgselector 1-1: config 0 descriptor?? [ 318.581328][ T36] audit: type=1400 audit(2000000109.950:1153): avc: denied { create } for pid=11106 comm="syz.2.3800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 318.601294][ T36] audit: type=1400 audit(2000000109.950:1154): avc: denied { write } for pid=11106 comm="syz.2.3800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 318.869183][ T336] r8152-cfgselector 1-1: USB disconnect, device number 56 [ 319.183297][T11123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3805'. [ 319.559127][T11157] rust_binder: 561: no such ref 0 [ 319.564238][T11157] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 319.593485][T11157] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 319.607334][T11157] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 319.622991][T11157] rust_binder: 561: no such ref 0 [ 319.729909][T11167] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3822'. [ 319.749264][T11167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3822'. [ 320.280374][T11200] netlink: 'syz.3.3833': attribute type 11 has an invalid length. [ 320.288498][T11200] netlink: 'syz.3.3833': attribute type 2 has an invalid length. [ 320.683872][T11240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=11240 comm=syz.3.3847 [ 320.806435][T11242] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 321.269561][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3850'. [ 321.279910][T11246] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 321.287525][T11246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:959 [ 321.721122][T11268] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 321.721156][T11268] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 321.729280][T11268] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:582 [ 321.789934][T11269] rust_binder: 11268 RLIMIT_NICE not set [ 321.814153][T11271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3860'. [ 322.067327][ T8433] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 322.161251][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 322.161270][ T36] audit: type=1400 audit(2000000113.530:1169): avc: denied { write } for pid=11293 comm="syz.3.3870" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 322.219293][ T8433] usb 3-1: config 1 has an invalid interface number: 160 but max is 2 [ 322.228471][ T8433] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 322.237551][ T8433] usb 3-1: config 1 has an invalid interface number: 13 but max is 2 [ 322.245816][ T8433] usb 3-1: config 1 has an invalid interface number: 228 but max is 2 [ 322.254581][ T8433] usb 3-1: config 1 has an invalid interface number: 114 but max is 2 [ 322.263135][ T8433] usb 3-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 322.273414][ T8433] usb 3-1: config 1 has no interface number 0 [ 322.279656][ T8433] usb 3-1: config 1 has no interface number 1 [ 322.285775][ T8433] usb 3-1: config 1 has no interface number 2 [ 322.292097][ T8433] usb 3-1: config 1 has no interface number 3 [ 322.298263][ T8433] usb 3-1: config 1 interface 160 altsetting 248 endpoint 0xD has an invalid bInterval 240, changing to 7 [ 322.309667][ T8433] usb 3-1: config 1 interface 160 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 322.321352][ T8433] usb 3-1: config 1 interface 160 altsetting 248 has a duplicate endpoint with address 0x4, skipping [ 322.323930][T11307] /dev/md0: Can't lookup blockdev [ 322.332673][ T8433] usb 3-1: config 1 interface 160 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 322.349883][ T8433] usb 3-1: config 1 interface 160 altsetting 248 has a duplicate endpoint with address 0x4, skipping [ 322.361349][ T8433] usb 3-1: config 1 interface 160 altsetting 248 endpoint 0xA has an invalid bInterval 128, changing to 7 [ 322.372957][ T8433] usb 3-1: config 1 interface 160 altsetting 248 has a duplicate endpoint with address 0x8, skipping [ 322.384159][ T8433] usb 3-1: config 1 interface 160 altsetting 248 has 11 endpoint descriptors, different from the interface descriptor's value: 12 [ 322.398161][ T8433] usb 3-1: too many endpoints for config 1 interface 13 altsetting 150: 240, using maximum allowed: 30 [ 322.409353][ T8433] usb 3-1: config 1 interface 13 altsetting 150 has 1 endpoint descriptor, different from the interface descriptor's value: 240 [ 322.422975][ T8433] usb 3-1: config 1 interface 228 altsetting 9 has an endpoint descriptor with address 0x1D, changing to 0xD [ 322.434667][ T8433] usb 3-1: config 1 interface 228 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 322.445576][ T8433] usb 3-1: config 1 interface 114 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 322.456460][ T8433] usb 3-1: config 1 interface 114 altsetting 8 endpoint 0xE has an invalid bInterval 25, changing to 8 [ 322.467546][ T8433] usb 3-1: config 1 interface 114 altsetting 8 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 322.478548][ T8433] usb 3-1: config 1 interface 114 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 322.489351][ T8433] usb 3-1: config 1 interface 114 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 322.500257][ T8433] usb 3-1: config 1 interface 114 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 322.511064][ T8433] usb 3-1: config 1 interface 114 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 322.522202][ T8433] usb 3-1: config 1 interface 114 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 322.532942][ T8433] usb 3-1: config 1 interface 114 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 322.543919][ T8433] usb 3-1: config 1 interface 160 has no altsetting 0 [ 322.550907][ T8433] usb 3-1: config 1 interface 13 has no altsetting 0 [ 322.557770][ T8433] usb 3-1: config 1 interface 228 has no altsetting 0 [ 322.565934][ T8433] usb 3-1: config 1 interface 114 has no altsetting 0 [ 322.574455][ T8433] usb 3-1: Dual-Role OTG device on HNP port [ 322.580767][ T8433] usb 3-1: New USB device found, idVendor=0489, idProduct=e05f, bcdDevice=57.00 [ 322.590357][ T8433] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.598614][ T8433] usb 3-1: Product: syz [ 322.602819][ T8433] usb 3-1: Manufacturer: syz [ 322.607490][ T8433] usb 3-1: SerialNumber: syz [ 322.826725][ T8433] cdc_mbim 3-1:1.228: CDC Union missing and no IAD found [ 322.834128][ T8433] cdc_mbim 3-1:1.228: bind() failure [ 322.843145][ T8433] usb 3-1: USB disconnect, device number 70 [ 322.872951][ T36] audit: type=1400 audit(2000000114.240:1170): avc: denied { append } for pid=11328 comm="syz.0.3883" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.918118][ T36] audit: type=1400 audit(2000000114.240:1171): avc: denied { wake_alarm } for pid=11334 comm="syz.3.3884" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 322.994222][T11346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3889'. [ 323.041325][T11350] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11350 comm=syz.1.3891 [ 323.041623][ T36] audit: type=1400 audit(2000000114.410:1172): avc: denied { audit_write } for pid=11349 comm="syz.1.3891" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 323.054708][T11350] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11350 comm=syz.1.3891 [ 323.136078][ T36] audit: type=1107 audit(2000000114.410:1173): pid=11349 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 323.365947][ T36] audit: type=1400 audit(2000000114.730:1174): avc: denied { map } for pid=11381 comm="syz.2.3903" path="socket:[52900]" dev="sockfs" ino=52900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 323.391755][ T36] audit: type=1400 audit(2000000114.730:1175): avc: denied { read accept } for pid=11381 comm="syz.2.3903" path="socket:[52900]" dev="sockfs" ino=52900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 323.397935][T11388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:999 [ 323.473105][T11392] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 323.497739][T11394] binder: Bad value for 'stats' [ 323.531644][T11397] binder: Unknown parameter '' [ 323.594656][T11403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3912'. [ 323.677343][ T336] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 323.828615][ T336] usb 1-1: config 0 has an invalid interface number: 242 but max is 0 [ 323.836911][ T336] usb 1-1: config 0 has no interface number 0 [ 323.843158][ T330] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 323.850820][ T336] usb 1-1: too many endpoints for config 0 interface 242 altsetting 149: 210, using maximum allowed: 30 [ 323.862387][ T336] usb 1-1: config 0 interface 242 altsetting 149 has 1 endpoint descriptor, different from the interface descriptor's value: 210 [ 323.876037][ T336] usb 1-1: config 0 interface 242 has no altsetting 0 [ 323.882905][ T336] usb 1-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 323.892086][ T336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.900863][ T336] usb 1-1: config 0 descriptor?? [ 324.019316][ T330] usb 3-1: config 1 has an invalid interface number: 160 but max is 2 [ 324.027642][ T330] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 324.036377][ T330] usb 3-1: config 1 has an invalid interface number: 13 but max is 2 [ 324.044520][ T330] usb 3-1: config 1 has an invalid interface number: 228 but max is 2 [ 324.052896][ T330] usb 3-1: config 1 has an invalid interface number: 114 but max is 2 [ 324.061313][ T330] usb 3-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 324.070318][ T330] usb 3-1: config 1 has no interface number 0 [ 324.076416][ T330] usb 3-1: config 1 has no interface number 1 [ 324.082535][ T330] usb 3-1: config 1 has no interface number 2 [ 324.088884][ T330] usb 3-1: config 1 has no interface number 3 [ 324.095025][ T330] usb 3-1: config 1 interface 160 altsetting 248 endpoint 0xD has an invalid bInterval 240, changing to 7 [ 324.106413][ T330] usb 3-1: config 1 interface 160 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 324.117456][ T330] usb 3-1: config 1 interface 160 altsetting 248 has a duplicate endpoint with address 0x4, skipping [ 324.128494][ T330] usb 3-1: config 1 interface 160 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 324.139706][ T330] usb 3-1: config 1 interface 160 altsetting 248 has a duplicate endpoint with address 0x4, skipping [ 324.150849][ T330] usb 3-1: config 1 interface 160 altsetting 248 endpoint 0xA has an invalid bInterval 128, changing to 7 [ 324.162477][ T330] usb 3-1: config 1 interface 160 altsetting 248 has a duplicate endpoint with address 0x8, skipping [ 324.173925][ T330] usb 3-1: config 1 interface 160 altsetting 248 has 11 endpoint descriptors, different from the interface descriptor's value: 12 [ 324.187449][ T330] usb 3-1: too many endpoints for config 1 interface 13 altsetting 150: 240, using maximum allowed: 30 [ 324.198580][ T330] usb 3-1: config 1 interface 13 altsetting 150 has 1 endpoint descriptor, different from the interface descriptor's value: 240 [ 324.212021][ T330] usb 3-1: config 1 interface 228 altsetting 9 has an endpoint descriptor with address 0x1D, changing to 0xD [ 324.223737][ T330] usb 3-1: config 1 interface 228 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 324.234500][ T330] usb 3-1: config 1 interface 114 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 324.245243][ T330] usb 3-1: config 1 interface 114 altsetting 8 endpoint 0xE has an invalid bInterval 25, changing to 8 [ 324.256699][ T330] usb 3-1: config 1 interface 114 altsetting 8 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 324.267845][ T330] usb 3-1: config 1 interface 114 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 324.278696][ T330] usb 3-1: config 1 interface 114 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 324.289427][ T330] usb 3-1: config 1 interface 114 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 324.300162][ T330] usb 3-1: config 1 interface 114 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 324.311145][ T330] usb 3-1: config 1 interface 114 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 324.321892][ T330] usb 3-1: config 1 interface 114 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 324.332904][ T330] usb 3-1: config 1 interface 160 has no altsetting 0 [ 324.339782][ T330] usb 3-1: config 1 interface 13 has no altsetting 0 [ 324.346471][ T330] usb 3-1: config 1 interface 228 has no altsetting 0 [ 324.353297][ T330] usb 3-1: config 1 interface 114 has no altsetting 0 [ 324.361653][ T330] usb 3-1: Dual-Role OTG device on HNP port [ 324.367947][ T330] usb 3-1: New USB device found, idVendor=0489, idProduct=e05f, bcdDevice=57.00 [ 324.377001][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.385141][ T330] usb 3-1: Product: syz [ 324.389451][ T330] usb 3-1: Manufacturer: syz [ 324.394054][ T330] usb 3-1: SerialNumber: syz [ 324.607338][ T330] cdc_mbim 3-1:1.228: CDC Union missing and no IAD found [ 324.614439][ T330] cdc_mbim 3-1:1.228: bind() failure [ 324.622722][ T330] usb 3-1: USB disconnect, device number 71 [ 324.655829][T11412] fuse: Bad value for 'fd' [ 324.812605][ T36] audit: type=1400 audit(2000000116.180:1176): avc: denied { write } for pid=11389 comm="syz.0.3906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 324.815483][T11425] fuse: Bad value for 'user_id' [ 324.832343][ T36] audit: type=1400 audit(2000000116.180:1177): avc: denied { read } for pid=11389 comm="syz.0.3906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 324.837146][T11425] fuse: Bad value for 'user_id' [ 324.897478][T11427] exFAT-fs (rnullb0): invalid boot record signature [ 324.904213][T11427] exFAT-fs (rnullb0): failed to read boot sector [ 324.910673][T11427] exFAT-fs (rnullb0): failed to recognize exfat type [ 325.329368][T11440] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3925'. [ 325.339139][T11440] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3925'. [ 325.348069][T11440] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 325.387315][ T63] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 325.400710][T11443] overlayfs: empty lowerdir [ 325.407023][T11443] overlayfs: missing 'lowerdir' [ 325.537326][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 325.543776][ T63] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 325.552137][ T63] usb 3-1: config 0 has no interface number 0 [ 325.559767][ T63] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 325.573664][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.581768][ T63] usb 3-1: Product: syz [ 325.585986][ T63] usb 3-1: Manufacturer: syz [ 325.590619][ T63] usb 3-1: SerialNumber: syz [ 325.595948][ T63] usb 3-1: config 0 descriptor?? [ 325.602038][ T63] ftdi_sio 3-1:0.217: FTDI USB Serial Device converter detected [ 325.610120][ T63] usb 3-1: Detected SIO [ 325.614848][ T63] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 325.803558][ T330] usb 3-1: USB disconnect, device number 72 [ 325.810470][ T330] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 325.820277][ T330] ftdi_sio 3-1:0.217: device disconnected [ 325.985414][T11455] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 326.354273][ T36] audit: type=1400 audit(2000000117.720:1178): avc: denied { remount } for pid=11479 comm="syz.1.3940" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 326.452058][ T330] usb 1-1: USB disconnect, device number 57 [ 326.534918][T11494] SELinux: security_context_str_to_sid () failed with errno=-22 [ 326.567771][T11500] binder: Bad value for 'max' [ 326.729434][T11526] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 326.729473][T11526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:626 [ 326.745947][T11536] overlayfs: failed to clone lowerpath [ 326.771734][T11537] kvm: pic: non byte write [ 326.937070][T11562] netlink: 'syz.2.3958': attribute type 4 has an invalid length. [ 326.945171][T11562] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.3958'. [ 327.052456][T11575] netlink: 'syz.1.3970': attribute type 4 has an invalid length. [ 327.060414][T11575] netlink: 'syz.1.3970': attribute type 6 has an invalid length. [ 327.068448][T11575] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3970'. [ 327.087604][ T63] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 327.239250][ T63] usb 1-1: config 1 has an invalid interface number: 160 but max is 2 [ 327.247528][ T63] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 327.258103][ T63] usb 1-1: config 1 has an invalid interface number: 13 but max is 2 [ 327.266292][ T63] usb 1-1: config 1 has an invalid interface number: 228 but max is 2 [ 327.274740][ T63] usb 1-1: config 1 has an invalid interface number: 114 but max is 2 [ 327.283010][ T63] usb 1-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 327.292065][ T63] usb 1-1: config 1 has no interface number 0 [ 327.298315][ T63] usb 1-1: config 1 has no interface number 1 [ 327.304442][ T63] usb 1-1: config 1 has no interface number 2 [ 327.310670][ T63] usb 1-1: config 1 has no interface number 3 [ 327.316955][ T63] usb 1-1: config 1 interface 160 altsetting 248 endpoint 0xD has an invalid bInterval 240, changing to 7 [ 327.328617][ T63] usb 1-1: config 1 interface 160 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 327.337757][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3972'. [ 327.339662][ T63] usb 1-1: config 1 interface 160 altsetting 248 has a duplicate endpoint with address 0x4, skipping [ 327.359618][ T63] usb 1-1: config 1 interface 160 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 327.372347][ T63] usb 1-1: config 1 interface 160 altsetting 248 has a duplicate endpoint with address 0x4, skipping [ 327.383800][ T63] usb 1-1: config 1 interface 160 altsetting 248 endpoint 0xA has an invalid bInterval 128, changing to 7 [ 327.395223][ T63] usb 1-1: config 1 interface 160 altsetting 248 has a duplicate endpoint with address 0x8, skipping [ 327.406917][ T63] usb 1-1: config 1 interface 160 altsetting 248 has 11 endpoint descriptors, different from the interface descriptor's value: 12 [ 327.420580][ T63] usb 1-1: too many endpoints for config 1 interface 13 altsetting 150: 240, using maximum allowed: 30 [ 327.431721][ T63] usb 1-1: config 1 interface 13 altsetting 150 has 1 endpoint descriptor, different from the interface descriptor's value: 240 [ 327.445122][ T63] usb 1-1: config 1 interface 228 altsetting 9 has an endpoint descriptor with address 0x1D, changing to 0xD [ 327.456849][ T63] usb 1-1: config 1 interface 228 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 327.467648][ T63] usb 1-1: config 1 interface 114 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 327.478408][ T63] usb 1-1: config 1 interface 114 altsetting 8 endpoint 0xE has an invalid bInterval 25, changing to 8 [ 327.489504][ T63] usb 1-1: config 1 interface 114 altsetting 8 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 327.500543][ T63] usb 1-1: config 1 interface 114 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 327.511497][ T63] usb 1-1: config 1 interface 114 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 327.522917][ T63] usb 1-1: config 1 interface 114 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 327.533716][ T63] usb 1-1: config 1 interface 114 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 327.544728][ T63] usb 1-1: config 1 interface 114 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 327.555504][ T63] usb 1-1: config 1 interface 114 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 327.566512][ T63] usb 1-1: config 1 interface 160 has no altsetting 0 [ 327.573418][ T63] usb 1-1: config 1 interface 13 has no altsetting 0 [ 327.580165][ T63] usb 1-1: config 1 interface 228 has no altsetting 0 [ 327.586977][ T63] usb 1-1: config 1 interface 114 has no altsetting 0 [ 327.595322][ T63] usb 1-1: Dual-Role OTG device on HNP port [ 327.602120][ T63] usb 1-1: New USB device found, idVendor=0489, idProduct=e05f, bcdDevice=57.00 [ 327.611323][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.620974][ T63] usb 1-1: Product: syz [ 327.625185][ T63] usb 1-1: Manufacturer: syz [ 327.629868][ T63] usb 1-1: SerialNumber: syz [ 327.691448][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 327.691479][ T36] audit: type=1400 audit(2000000119.060:1180): avc: denied { write } for pid=11589 comm="syz.2.3975" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 327.722869][T11590] rust_binder: Error while translating object. [ 327.722917][T11590] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 327.726838][ T36] audit: type=1400 audit(2000000119.100:1181): avc: denied { create } for pid=11589 comm="syz.2.3975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 327.729575][T11590] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:639 [ 327.847777][ T63] cdc_mbim 1-1:1.228: CDC Union missing and no IAD found [ 327.864301][ T63] cdc_mbim 1-1:1.228: bind() failure [ 327.874573][ T63] usb 1-1: USB disconnect, device number 58 [ 327.878606][T11603] __vm_enough_memory: pid: 11603, comm: syz.2.3979, bytes: 18014402804453376 not enough memory for the allocation [ 327.964788][T11609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 327.964815][T11609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:656 [ 327.991607][T11612] rust_binder: Write failure EFAULT in pid:659 [ 328.014754][ T36] audit: type=1400 audit(2000000119.380:1182): avc: denied { mount } for pid=11613 comm="syz.2.3984" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 328.047958][ T36] audit: type=1400 audit(2000000119.410:1183): avc: denied { unmount } for pid=7273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 328.145071][T11624] rust_binder: Error while translating object. [ 328.145107][T11624] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 328.151389][T11624] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:671 [ 328.359708][ T36] audit: type=1400 audit(2000000119.730:1184): avc: denied { write } for pid=11633 comm="syz.0.3991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 328.362084][T11634] rust_binder: Error while translating object. [ 328.388682][T11634] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 328.394871][T11634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1035 [ 328.416653][ T36] audit: type=1400 audit(2000000119.780:1185): avc: denied { nlmsg_read } for pid=11635 comm="syz.0.3992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 328.446851][ T330] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 328.458713][T11638] rust_binder: Error in use_page_slow: ESRCH [ 328.458740][T11638] rust_binder: use_range failure ESRCH [ 328.458603][ T36] audit: type=1107 audit(2000000119.830:1186): pid=11637 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 328.464819][T11638] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 328.562101][T11638] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 328.570957][T11638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1039 [ 328.597329][ T330] usb 3-1: Using ep0 maxpacket: 32 [ 328.613020][ T330] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.624224][ T330] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 328.637298][ T330] usb 3-1: config 0 interface 0 has no altsetting 0 [ 328.643978][ T330] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 328.653177][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.666047][ T330] usb 3-1: config 0 descriptor?? [ 328.855394][T11660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3999'. [ 328.872696][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4000'. [ 328.893811][T11662] binder: Unknown parameter 'on' [ 328.943596][T11673] batadv_slave_0: entered promiscuous mode [ 328.950436][T11672] batadv_slave_0: left promiscuous mode [ 328.970081][T11675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=11675 comm=syz.0.4005 [ 328.982794][T11675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11675 comm=syz.0.4005 [ 328.997385][T11675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=11675 comm=syz.0.4005 [ 329.029844][T11686] veth1: entered allmulticast mode [ 329.037185][T11685] veth1: left allmulticast mode [ 329.085401][ T330] waltop 0003:172F:0501.0029: unknown main item tag 0x0 [ 329.100458][ T330] waltop 0003:172F:0501.0029: unknown main item tag 0x0 [ 329.112685][ T330] waltop 0003:172F:0501.0029: unknown main item tag 0x0 [ 329.120269][ T330] waltop 0003:172F:0501.0029: unknown main item tag 0x0 [ 329.124334][ T36] audit: type=1400 audit(2000000120.490:1187): avc: denied { bind } for pid=11694 comm="syz.0.4013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 329.129188][ T330] waltop 0003:172F:0501.0029: unknown main item tag 0x0 [ 329.159901][ T330] waltop 0003:172F:0501.0029: hidraw0: USB HID v0.05 Device [HID 172f:0501] on usb-dummy_hcd.2-1/input0 [ 329.285649][ T63] usb 3-1: USB disconnect, device number 73 [ 329.444829][ T36] audit: type=1326 audit(2000000120.810:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11708 comm="syz.3.4017" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f221198f6c9 code=0x0 [ 329.855280][ T36] audit: type=1400 audit(2000000121.230:1189): avc: denied { unmount } for pid=7273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 329.868854][T11712] rust_binder: 677: no such ref 1 [ 330.005559][T11721] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 330.041209][T11726] fuse: Unknown parameter 'bd' [ 330.083397][T11733] rust_binder: Write failure EFAULT in pid:692 [ 330.238217][T11759] rust_binder: Error while translating object. [ 330.245299][T11759] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 330.252519][T11759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1085 [ 330.318555][T11769] overlayfs: failed to resolve './file1': -2 [ 330.597357][ T330] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 330.748457][ T330] usb 3-1: config 0 has an invalid interface number: 213 but max is 0 [ 330.756965][ T330] usb 3-1: config 0 has no interface number 0 [ 330.764904][ T330] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=92.db [ 330.774306][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.782850][ T330] usb 3-1: Product: syz [ 330.787465][ T330] usb 3-1: Manufacturer: syz [ 330.792290][ T330] usb 3-1: SerialNumber: syz [ 330.799320][ T330] usb 3-1: config 0 descriptor?? [ 331.011801][ T330] usb 3-1: USB disconnect, device number 74 [ 331.304376][T11826] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4059'. [ 331.317309][ T8433] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 331.366181][T11836] 9pnet_virtio: no channels available for device 127.0.0.1 [ 331.480465][ T8433] usb 1-1: config 9 has an invalid interface number: 51 but max is 0 [ 331.488967][ T8433] usb 1-1: config 9 has no interface number 0 [ 331.497516][ T8433] usb 1-1: string descriptor 0 read error: -22 [ 331.503934][ T8433] usb 1-1: New USB device found, idVendor=07a6, idProduct=07c2, bcdDevice=37.12 [ 331.513231][ T8433] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.540765][T11853] 9pnet_fd: Insufficient options for proto=fd [ 331.726876][ T336] usb 1-1: USB disconnect, device number 59 [ 331.775797][T11875] 9pnet: Could not find request transport: ft [ 332.557311][ T63] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 332.687308][ T63] usb 1-1: device descriptor read/64, error -71 [ 332.927350][ T63] usb 1-1: device descriptor read/64, error -71 [ 332.947358][ T330] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 333.098420][ T330] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.108579][ T330] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 333.119505][ T330] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 333.133761][ T330] usb 3-1: New USB device found, idVendor=0525, idProduct=0008, bcdDevice= 0.40 [ 333.142952][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 333.151020][ T330] usb 3-1: SerialNumber: syz [ 333.167358][ T63] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 333.297359][ T63] usb 1-1: device descriptor read/64, error -71 [ 333.537324][ T63] usb 1-1: device descriptor read/64, error -71 [ 333.647436][ T63] usb usb1-port1: attempt power cycle [ 333.987338][ T63] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 334.008421][ T63] usb 1-1: device descriptor read/8, error -71 [ 334.138483][ T63] usb 1-1: device descriptor read/8, error -71 [ 334.377324][ T63] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 334.398549][ T63] usb 1-1: device descriptor read/8, error -71 [ 334.445642][T11926] overlayfs: failed to clone lowerpath [ 334.568559][ T63] usb 1-1: device descriptor read/8, error -71 [ 334.677461][ T63] usb usb1-port1: unable to enumerate USB device [ 334.690795][T11950] 9pnet_fd: Insufficient options for proto=fd [ 335.329891][T11952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 335.355994][T11952] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4104'. [ 335.372110][T11952] rust_binder: Error while translating object. [ 335.372147][T11952] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 335.378277][T11954] 9pnet_fd: Insufficient options for proto=fd [ 335.378835][T11952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1101 [ 335.409610][T11958] binder: Unknown parameter 'defcontext01777777777777777777777' [ 335.498945][T11971] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 335.498977][T11971] rust_binder: Error while translating object. [ 335.510060][T11971] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 335.516489][T11971] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1105 [ 335.526437][T11975] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 335.750747][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 335.750768][ T36] audit: type=1400 audit(2000000127.120:1199): avc: denied { ioctl } for pid=11987 comm="syz.1.4118" path="socket:[54251]" dev="sockfs" ino=54251 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 335.787326][ T8433] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 335.809611][ T442] usb 3-1: USB disconnect, device number 75 [ 335.830600][T11994] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 335.878590][ T36] audit: type=1400 audit(2000000127.250:1200): avc: denied { getopt } for pid=12001 comm="syz.2.4125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 335.935276][T12013] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 335.947922][ T8433] usb 1-1: Using ep0 maxpacket: 16 [ 335.962246][ T8433] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 335.975499][ T8433] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.984103][ T8433] usb 1-1: Product: syz [ 335.988904][ T8433] usb 1-1: Manufacturer: syz [ 335.993553][ T8433] usb 1-1: SerialNumber: syz [ 336.002842][ T8433] usb 1-1: config 0 descriptor?? [ 336.006770][T12016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4131'. [ 336.021369][ T8433] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 336.033694][ T8249] udevd[8249]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 336.112674][T12028] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.153699][ T36] audit: type=1400 audit(2000000127.520:1201): avc: denied { ioctl } for pid=12037 comm="syz.2.4140" path="socket:[55001]" dev="sockfs" ino=55001 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 336.174258][T12038] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.216036][ T36] audit: type=1400 audit(2000000127.580:1202): avc: denied { execute } for pid=11977 comm="syz.0.4114" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 336.216412][ T336] usb 1-1: USB disconnect, device number 64 [ 336.305372][T12052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.305988][T12052] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 336.306423][T12053] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 336.312736][T12052] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 336.327368][T12053] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 336.328984][T12052] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:756 [ 336.339519][T12053] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:756 [ 336.735996][T12072] netlink: 'syz.1.4150': attribute type 4 has an invalid length. [ 336.753253][T12072] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.4150'. [ 336.764899][T12072] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4150'. [ 336.775308][T12072] 9pnet: Unknown protocol version 9 [ 336.781602][T12072] IPv6: NLM_F_CREATE should be specified when creating new route [ 336.957520][T12101] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.958631][T12101] rust_binder: Error while translating object. [ 336.965127][T12101] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 336.971850][T12101] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:774 [ 337.054991][T12105] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 337.064600][T12105] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 337.071374][T12105] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 337.079682][T12105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:777 [ 337.659623][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4161'. [ 337.884803][T12155] 9pnet_fd: Insufficient options for proto=fd [ 338.241679][ T36] audit: type=1400 audit(2000000129.610:1203): avc: denied { listen } for pid=12173 comm="syz.1.4175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 338.457298][ T36] audit: type=1400 audit(2000000129.810:1204): avc: denied { mounton } for pid=12176 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 338.673784][T12180] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 338.673812][T12180] rust_binder: Error while translating object. [ 338.682745][T12180] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 338.690470][T12180] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1118 [ 338.946262][T12192] rust_binder: Write failure EFAULT in pid:1127 [ 339.080261][ T3412] bridge_slave_1: left allmulticast mode [ 339.092474][ T3412] bridge_slave_1: left promiscuous mode [ 339.098517][ T3412] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.106190][ T3412] bridge_slave_0: left allmulticast mode [ 339.111972][ T3412] bridge_slave_0: left promiscuous mode [ 339.117677][ T3412] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.221536][ T3412] veth1_macvtap: left promiscuous mode [ 339.227149][ T3412] veth0_vlan: left promiscuous mode [ 339.927411][ T432] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 340.120443][T12203] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.120794][T12203] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 340.127496][T12203] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 340.136816][T12203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:782 [ 340.160745][T12207] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.171521][T12207] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 340.178257][T12207] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 340.186428][T12207] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:784 [ 340.220283][T12210] rust_binder: Write failure EFAULT in pid:1137 [ 340.224579][T12213] rust_binder: Write failure EFAULT in pid:786 [ 340.382290][T12218] rust_binder: Write failure EFAULT in pid:1139 [ 340.941147][T12233] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 341.072805][ T36] audit: type=1400 audit(2000000132.440:1205): avc: denied { getopt } for pid=12228 comm="syz.2.4193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 341.085171][T12251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4200'. [ 341.107511][ T36] audit: type=1400 audit(2000000132.460:1206): avc: denied { map } for pid=12250 comm="syz.3.4200" path="socket:[56695]" dev="sockfs" ino=56695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 341.197302][ T359] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 341.357386][ T359] usb 1-1: Using ep0 maxpacket: 16 [ 341.364483][ T359] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1023 [ 341.374580][ T359] usb 1-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 341.387524][ T359] usb 1-1: config 1 interface 0 has no altsetting 0 [ 341.395773][ T359] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.404925][ T359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.413025][ T359] usb 1-1: Product: syz [ 341.417183][ T359] usb 1-1: Manufacturer: င [ 341.421815][ T359] usb 1-1: SerialNumber: syz [ 341.427658][T12230] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 341.434865][T12230] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 341.644750][ T359] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 341.654313][ T359] usb 1-1: USB disconnect, device number 65 [ 342.018576][T12270] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 342.020098][T12270] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 342.026685][T12270] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 342.034901][T12270] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:805 [ 342.934202][T12282] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 342.948227][T12283] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 342.964635][T12283] rust_binder: inc_ref_done called when no active inc_refs [ 342.971366][ T36] audit: type=1400 audit(2000000134.330:1207): avc: denied { associate } for pid=12281 comm="syz.2.4210" name="811" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 343.004103][T12283] rust_binder: Error while translating object. [ 343.004141][T12283] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 343.010465][T12283] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:810 [ 343.011159][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4213'. [ 343.055849][T12289] overlayfs: failed to clone upperpath [ 343.131510][ T36] audit: type=1400 audit(2000000134.500:1208): avc: denied { create } for pid=12298 comm="syz.3.4216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 344.114172][T12309] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4220'. [ 344.124703][T12309] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4220'. [ 344.133960][T12309] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 344.155168][ T36] audit: type=1400 audit(2000000135.530:1209): avc: denied { execute } for pid=12312 comm="syz.2.4221" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 344.205521][T12315] fuse: Bad value for 'fd' [ 346.584869][T12337] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 347.949742][T12363] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 347.951654][T12362] netlink: 'syz.3.4240': attribute type 27 has an invalid length. [ 347.994601][ T36] audit: type=1400 audit(2000000139.360:1210): avc: denied { create } for pid=12366 comm="syz.2.4242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 350.980033][ T36] audit: type=1400 audit(2000000142.350:1211): avc: denied { execute } for pid=12399 comm="syz.2.4252" path="/dev/binderfs/binder1" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 350.980731][T12401] loop2: detected capacity change from 0 to 8388607 [ 351.017330][ T8249] Buffer I/O error on dev loop2, logical block 1048575, async page read [ 351.064145][T12409] rust_binder: Write failure EFAULT in pid:1163 [ 351.076907][ T36] audit: type=1400 audit(2000000142.440:1212): avc: denied { sqpoll } for pid=12406 comm="syz.2.4254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 352.779676][ T36] audit: type=1326 audit(2000000144.150:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.2.4258" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdbd18f6c9 code=0x0 [ 352.854360][T12427] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.625159][ T36] audit: type=1400 audit(2000000145.990:1214): avc: denied { lock } for pid=12441 comm="syz.3.4263" path="socket:[55999]" dev="sockfs" ino=55999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 354.807610][ T330] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 354.958455][ T330] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.968628][ T330] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 354.977715][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.986600][ T330] usb 3-1: config 0 descriptor?? [ 355.195100][ T330] usb 3-1: USB disconnect, device number 76 [ 356.467057][T12455] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.467222][T12455] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 356.473990][T12455] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 356.482462][T12455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:850 [ 356.537333][ T36] audit: type=1400 audit(2000000147.900:1215): avc: denied { connect } for pid=12459 comm="syz.2.4270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 358.512658][T12469] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.524059][T12467] kvm: user requested TSC rate below hardware speed [ 358.565271][T12475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.629135][T12467] kvm: pic: non byte write [ 358.807300][ T359] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 358.957302][ T359] usb 3-1: device descriptor read/64, error -71 [ 359.197360][ T359] usb 3-1: device descriptor read/64, error -71 [ 359.437374][ T359] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 359.567344][ T359] usb 3-1: device descriptor read/64, error -71 [ 359.807367][ T359] usb 3-1: device descriptor read/64, error -71 [ 359.917434][ T359] usb usb3-port1: attempt power cycle [ 360.257359][ T359] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 360.278446][ T359] usb 3-1: device descriptor read/8, error -71 [ 360.408383][ T359] usb 3-1: device descriptor read/8, error -71 [ 360.612780][T12485] binder: Bad value for 'stats' [ 360.657328][ T359] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 360.678371][ T359] usb 3-1: device descriptor read/8, error -71 [ 360.692523][T12488] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 360.818373][ T359] usb 3-1: device descriptor read/8, error -71 [ 360.937458][ T359] usb usb3-port1: unable to enumerate USB device [ 362.787992][T12495] cgroup: fork rejected by pids controller in /syz3 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=1 req=4176 state=3 status=67 (errno 9: Bad file descriptor) [ 362.967283][ T36] audit: type=1400 audit(2000000154.330:1216): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[2695]" dev="pipefs" ino=2695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 363.319244][ T3412] bridge_slave_1: left allmulticast mode [ 363.324950][ T3412] bridge_slave_1: left promiscuous mode [ 363.330671][ T3412] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.338483][ T3412] bridge_slave_0: left allmulticast mode [ 363.344156][ T3412] bridge_slave_0: left promiscuous mode [ 363.350369][ T3412] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.501319][ T3412] veth1_macvtap: left promiscuous mode [ 363.506873][ T3412] veth0_vlan: left promiscuous mode [ 363.820163][ T3412] bridge_slave_1: left allmulticast mode [ 363.825942][ T3412] bridge_slave_1: left promiscuous mode [ 363.831670][ T3412] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.839321][ T3412] bridge_slave_0: left allmulticast mode [ 363.844997][ T3412] bridge_slave_0: left promiscuous mode [ 363.850910][ T3412] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.858891][ T3412] bridge_slave_1: left allmulticast mode [ 363.864545][ T3412] bridge_slave_1: left promiscuous mode [ 363.870325][ T3412] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.878031][ T3412] bridge_slave_0: left allmulticast mode [ 363.883687][ T3412] bridge_slave_0: left promiscuous mode [ 363.889516][ T3412] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.081555][ T3412] veth1_macvtap: left promiscuous mode [ 364.087130][ T3412] veth0_vlan: left promiscuous mode [ 364.092789][ T3412] veth1_macvtap: left promiscuous mode [ 364.098409][ T3412] veth0_vlan: left promiscuous mode