last executing test programs: 1m53.578883871s ago: executing program 1 (id=551): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbmon(0x0, 0x7, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x1, 0x8}) timerfd_create(0x8, 0x0) read(r3, &(0x7f00000000c0)=""/20, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000100)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg(r5, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x0) r6 = dup(r2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008001400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x1}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x26}, @flat=@weak_binder={0x77622a85, 0x110b, 0x2}, @fda={0x66646185, 0x2, 0x0, 0x22}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) socket$nl_route(0x10, 0x3, 0x0) 1m53.486115558s ago: executing program 1 (id=552): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x5f875000) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r1, 0x0, 0x8001, &(0x7f0000000e00)="129a0a6b6b536e123c359b237855b367813fa23269bdead37faf05634e5a88cbaeb2dd64a5fb4abe697b606b31ed53351d5b4a673f03f859c0e71939c04db89bb7c090", 0x43) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x5f875000) (async) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) setsockopt(r1, 0x0, 0x8001, &(0x7f0000000e00)="129a0a6b6b536e123c359b237855b367813fa23269bdead37faf05634e5a88cbaeb2dd64a5fb4abe697b606b31ed53351d5b4a673f03f859c0e71939c04db89bb7c090", 0x43) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) 1m53.485599158s ago: executing program 1 (id=553): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0xdc, 0x0, 0xfffffffffffffffd}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0xb53b, @loopback, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0xfffffffffffffe46, &(0x7f0000000180), 0x1}}], 0x1, 0x4000001) r5 = dup(r4) read$FUSE(r5, &(0x7f00000075c0)={0x2020}, 0x2020) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000300)=[@wrmsr={0x1e, 0x20, {0x9bb, 0x101}}, @wrmsr={0x1e, 0x20, {0x9eb, 0x1}}, @wr_crn={0x46, 0x20, {0x1}}, @wr_crn={0x46, 0x20, {0x0, 0x5}}, @wr_crn={0x46, 0x20, {0x4, 0x8}}, @wr_crn={0x46, 0x20, {0x0, 0x93}}, @code={0xa, 0x44, {"66baa000ecf20f06430f01d10f20e035100000000f22e02e0f01c5440f78173665f2aa0fc72d000000000f1bf9c70204000000"}}, @uexit={0x0, 0x18, 0xfffffffffffffffe}, @wr_crn={0x46, 0x20, {0x4, 0x3}}], 0x13c}) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000000900)={{r4}, r7, 0x2, @inherit={0x90, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000900000000000000030000000000000001040000000000002000000000000000ff01000000000000060000000000000007000000000000000300000000000000a10000000000000003000000000000000100000000000000f9ffffffffffffff0700000000000000040000000000cc0000000000000009000000000000000400000000000000"]}, @name="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"}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) read$char_usb(r5, &(0x7f0000004500)=""/134, 0x86) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0x6bf1c2d5adbacc32}) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000c0000090000001f000000000088a8"], 0x1d) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r10, 0x4004af07, &(0x7f0000000240)) 1m53.475649549s ago: executing program 1 (id=554): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x51, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba2e"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000540)=0x8, 0x4) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) fsopen(&(0x7f0000000000)='squashfs\x00', 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0xc028ae92, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = getuid() quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000100)=@md0, r6, &(0x7f0000000180)='./file0\x00') 1m53.422697063s ago: executing program 1 (id=555): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0x4e22, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000c00)="002130a1d069ffd35b0b48c697636acbacf5f62f1721a0480bc892ab9bf7fcbf06487a90554144ec2319967d74150b1a022d1684203a437a3236cee457b21cd74b37e613e404dc417d1a7b36f96f7412812a533906195c37e9fcfa467c71b9a3afc629f9", 0x64}], 0x1, 0x8, 0x49d) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0x3, 0xfffffc00, 0x3, 0x9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/151, 0x97}], 0x1, 0x9, 0xfffffc01) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0x4e22, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) (async) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000c00)="002130a1d069ffd35b0b48c697636acbacf5f62f1721a0480bc892ab9bf7fcbf06487a90554144ec2319967d74150b1a022d1684203a437a3236cee457b21cd74b37e613e404dc417d1a7b36f96f7412812a533906195c37e9fcfa467c71b9a3afc629f9", 0x64}], 0x1, 0x8, 0x49d) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0x3, 0xfffffc00, 0x3, 0x9}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) preadv(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/151, 0x97}], 0x1, 0x9, 0xfffffc01) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) 1m53.384205467s ago: executing program 1 (id=556): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x9, &(0x7f0000000200)=[{0x0, 0x100000be63, 0x9}], 0xaaaab63, 0x7}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m53.328930021s ago: executing program 32 (id=556): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x9, &(0x7f0000000200)=[{0x0, 0x100000be63, 0x9}], 0xaaaab63, 0x7}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 40.200765225s ago: executing program 4 (id=1898): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x5e1f, 0x7, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)="7957d404736da65f9d132319c6a55a72a932122e28f7a3e15055620509f8ada5e1f0ad3c236813bd7cdf2446fc4483ca047742fc4e5eccadbddd0d809dc47aa57f2f0ca096f3c120c3048ab52f5e23a7478137b13a", 0x55}], 0x1, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8000041) 40.185764677s ago: executing program 4 (id=1899): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xe6542, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 40.13817758s ago: executing program 4 (id=1900): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000000106d042bc50000000000010902240001000060000904150b02030003000921060400012205000905810340000708073426402b7273"], 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x5, 0x8, 0x62}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0xd, 0xef}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x5c, 0x5, 0xf9, 0xff, 0x7}, 0xad, &(0x7f0000000140)={0x5, 0xf, 0xad, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xb, 0x9, 0x6}, @generic={0x41, 0x10, 0x3, "859ab08bc6a0c105946cbc13914e9b274c3bd098d76a2f163aade2a3368f7ef2790950d61e540e2e897f88b77cc0e309b9d36c2127ea684814df4f6d3ee2"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x5, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x1, 0x5, 0x8000}, @generic={0x4c, 0x10, 0x1, "7a7f09f5f8b0f6063da35feedd124ff2da04b4f00c9167e0197abc4d28d6429cdf5ec45e61e76cd412b27a199649459f80ea25e44cdc635d01bad0ddfddf654f31d37e5c90950fb1ca"}]}, 0x2, [{0xbd, &(0x7f00000004c0)=@string={0xbd, 0x3, "bbbf08ed296efbae911d8c0b37fc4f682345119acf0b35b9cf3c75d225fdd45efce686c8a5fe999a00aefd2337e7fd2178a8a16f3e0c16366f083e5da7563e86f2c0038f864943738ad4e833d98708af07d45526d70fccdc6bb9d442f4995bd9f4acc5f2e3443b81cc1e89f2458d8c4726018e262e2c5d61a3a93e2a77ad4e91e7240ef69b0f7e27ce55c55b47b5ab228d05bbebccc00085d278397aae53ad5f2902a98824bc64643386aa132d07dba6eef72a28a1849e65c55765"}}, {0x27, &(0x7f0000000240)=@string={0x27, 0x3, "2c6fe31dcde4edb9e30fca9773ebbddff576bb6946cb27ec08e71229fa9550c053a7733f45"}}]}) (async) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x5, 0x8, 0x62}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0xd, 0xef}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x5c, 0x5, 0xf9, 0xff, 0x7}, 0xad, &(0x7f0000000140)={0x5, 0xf, 0xad, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xb, 0x9, 0x6}, @generic={0x41, 0x10, 0x3, "859ab08bc6a0c105946cbc13914e9b274c3bd098d76a2f163aade2a3368f7ef2790950d61e540e2e897f88b77cc0e309b9d36c2127ea684814df4f6d3ee2"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x5, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x1, 0x5, 0x8000}, @generic={0x4c, 0x10, 0x1, "7a7f09f5f8b0f6063da35feedd124ff2da04b4f00c9167e0197abc4d28d6429cdf5ec45e61e76cd412b27a199649459f80ea25e44cdc635d01bad0ddfddf654f31d37e5c90950fb1ca"}]}, 0x2, [{0xbd, &(0x7f00000004c0)=@string={0xbd, 0x3, "bbbf08ed296efbae911d8c0b37fc4f682345119acf0b35b9cf3c75d225fdd45efce686c8a5fe999a00aefd2337e7fd2178a8a16f3e0c16366f083e5da7563e86f2c0038f864943738ad4e833d98708af07d45526d70fccdc6bb9d442f4995bd9f4acc5f2e3443b81cc1e89f2458d8c4726018e262e2c5d61a3a93e2a77ad4e91e7240ef69b0f7e27ce55c55b47b5ab228d05bbebccc00085d278397aae53ad5f2902a98824bc64643386aa132d07dba6eef72a28a1849e65c55765"}}, {0x27, &(0x7f0000000240)=@string={0x27, 0x3, "2c6fe31dcde4edb9e30fca9773ebbddff576bb6946cb27ec08e71229fa9550c053a7733f45"}}]}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x10000042, 0x4004, 0x1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'vlan0\x00', @multicast}) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201"], 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xfffb}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) listen(0xffffffffffffffff, 0x23e) (async) listen(0xffffffffffffffff, 0x23e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$inet(0x2, 0x1, 0x6) (async) r4 = socket$inet(0x2, 0x1, 0x6) sendto$inet(r4, &(0x7f0000000580)="72c042f616e0640590606ca15f97555df73cbee67d48551db6a9e592f673b4809a44050529fecd9664eea4333772c6dfdc3034080c66db09c2f532393822de0d71dc16069b70884bffbc1351efcd9efa02c20b69778c9119f5376ab44f0fa6689ffe9e0d778ecbc73b64cbdcb83e15da6819b15b1164dcc5fbb481a930dd974c758729d6baf3fe22a93daae78a3e9d2c0f704ac633e7e956e490733deaeb3aa0807ec53ca2de55930001b80266cf6d4232bb7df546e44fcd7c9a89629b46bdf75b49e7adafae9e389f49a181ba0ea7", 0xcf, 0x4001, &(0x7f0000000440)={0x2, 0x4e20, @multicast1}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) bind$bt_l2cap(r5, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) (async) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) listen(r5, 0x3) fstat(r3, &(0x7f00000000c0)) (async) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r6, r6) r7 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r8}, 0xc) (async) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r8}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@private=0xa010102, 0x4e21, 0xfffc, 0x0, 0x0, 0x2, 0x20, 0x0, 0x3c, r8, r6}, {0x0, 0x0, 0x2, 0x2, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {0x4, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000, 0x2}}, 0xe8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) 39.570733386s ago: executing program 4 (id=1910): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b"], 0x0) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = gettid() prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigqueueinfo(r2, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) (async, rerun: 32) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@remote, @dev, 0x0}, &(0x7f0000000040)=0xc) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000000c0)={'erspan0\x00', r3, 0x8000, 0x0, 0xd7, 0xff, {{0x8, 0x4, 0x1, 0x3, 0x20, 0x66, 0x0, 0x8, 0x2f, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0xb, 0xf0, [@dev={0xac, 0x14, 0x14, 0x11}, @empty]}]}}}}}) 39.570484856s ago: executing program 4 (id=1911): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) (async) 39.441757456s ago: executing program 4 (id=1912): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, 0x1e, 0x9, 0x2, 0x25dfdbff, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, 0x1e, 0x9, 0x2, 0x25dfdbff, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x211000, 0x1000}, 0x20) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a0015"], 0x1c}], 0x1}, 0x4000080) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x12c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @register_looper, @dead_binder_done, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/92, 0x5c, 0x0, 0x18}, @flat=@weak_handle={0x77682a85, 0x10a}, @fda={0x66646185, 0x7, 0x2, 0x17}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @acquire={0x40046305, 0x2}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x3, &(0x7f00000002c0)=""/151, 0x97, 0x2, 0x3f}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/53, 0x35, 0x2, 0x25}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000400)={0x0, 0x28, 0x50}}}, @acquire_done={0x40106309, 0x3}, @release={0x40046306, 0x2}, @acquire={0x40046305, 0x3}, @dead_binder_done, @register_looper, @dead_binder_done], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 39.398706s ago: executing program 33 (id=1912): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, 0x1e, 0x9, 0x2, 0x25dfdbff, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, 0x1e, 0x9, 0x2, 0x25dfdbff, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x211000, 0x1000}, 0x20) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a0015"], 0x1c}], 0x1}, 0x4000080) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x12c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @register_looper, @dead_binder_done, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/92, 0x5c, 0x0, 0x18}, @flat=@weak_handle={0x77682a85, 0x10a}, @fda={0x66646185, 0x7, 0x2, 0x17}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @acquire={0x40046305, 0x2}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x3, &(0x7f00000002c0)=""/151, 0x97, 0x2, 0x3f}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/53, 0x35, 0x2, 0x25}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000400)={0x0, 0x28, 0x50}}}, @acquire_done={0x40106309, 0x3}, @release={0x40046306, 0x2}, @acquire={0x40046305, 0x3}, @dead_binder_done, @register_looper, @dead_binder_done], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 3.85230111s ago: executing program 3 (id=2425): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async, rerun: 64) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x428002, 0x0) (rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x5}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r3 = fcntl$dupfd(r2, 0x0, r2) sendmmsg$inet6(r3, &(0x7f0000007940)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000200)}], 0x1, &(0x7f0000002540)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x2c, 0x0, '\x00', [@generic={0xcd}, @enc_lim]}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000002680)="8430860fbe420d4e432cb0f64c4922371470b0db67bced479d6ff38598e9663006edbec45cc5b99ac1a6196959acc72e802a68cbfc799007de92b9b27f73368a2069d2a728a8a2009332240b7ceb61dec9aae565a89bc8885be18f21434f690302a1760d0be9acd48e8118e7484c929f8ed50975e9777902b2653b96637b4254c02cc25eb1d819b1bd97f221cc9e2ae587913de7fba8365037bc93fd7f7b6f5cf2f528ff8ae0eea7e9ed506b2b379efae57ea07de079bb7dbd7aaa7370070b19bd3d4382f5a1ca39", 0xc8}], 0x1, &(0x7f00000028c0)}}, {{0x0, 0x0, &(0x7f0000003080)}}, {{0x0, 0x0, &(0x7f00000034c0)}}], 0x4, 0x15) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r3) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e22, @loopback}, 0x10) (async) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) (async) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) r8 = getpgid(0x0) ptrace(0x4207, r8) (async, rerun: 32) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)={0x70, r4, 0xf20, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dvmrp1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4010}, 0x800) (async, rerun: 32) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) fcntl$dupfd(r1, 0x406, r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async, rerun: 64) r10 = getpid() (rerun: 64) sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) 3.745451149s ago: executing program 3 (id=2427): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) lseek(r1, 0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000040)) 3.744879098s ago: executing program 3 (id=2428): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) request_key(&(0x7f0000000100)='ceph\x00', 0x0, 0x0, 0xfffffffffffffffb) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x262659b}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(r4, 0x0, r4) (async) setresgid(r4, 0x0, r4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) 3.681896974s ago: executing program 3 (id=2434): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x7cab6ced6415608, 0x3}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003500), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000280)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)=ANY=[@ANYBLOB="15000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf2530000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xffffbffffffffffd) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1be2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001e80), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001ec0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_PAGE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001e80), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000001ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, r10, 0x1, 0x70bd2a, 0x25dfdc00, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="00f22dbd7000fcdbdf250a00869d"], 0x14}, 0x1, 0x0, 0x0, 0x400c080}, 0x4048094) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r13, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r12, 0x407, 0x7000001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) socket(0x10, 0x3, 0x0) 3.398726786s ago: executing program 3 (id=2437): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x11d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00041f0000001f63fd3bc518194b120c1e73d54cfc4ad2841ef400"/37], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'veth0_to_bridge\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'bridge_slave_1\x00', @remote}) close_range(r0, 0xffffffffffffffff, 0x0) 2.034807336s ago: executing program 3 (id=2447): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000001010100000000000000000200de0104001640240001801483d68008000100e009000108000200e00000010c00028005000100657f84beca878907a09b319f"], 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x1, 0x0, &(0x7f0000000040)) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) utime(&(0x7f0000000040)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000007a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x10}}], 0x30, 0x20040840}}], 0x1, 0x4000000) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000406a0523030000000000010902240001000040030904e1efdedccb38389cc9bb0000010300b52e8300380f96252208"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000580)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="0025ac0000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_usb_connect$uac1(0x5, 0xfe, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xd7, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec, 0x3, 0x1, 0xff, 0xf0, 0xc, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x80, 0x7f}, [@selector_unit={0xb, 0x24, 0x5, 0x1, 0x7, "70bdb52a11fe"}, @processing_unit={0x9, 0x24, 0x7, 0x5, 0x4, 0x2, "f8c6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x5f42, 0x0, "264b89d431c09dbb57"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x7f, 0x3, "72d1", 'n'}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x4, 0x3, "dfcbfe"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x81, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x94, 0xf9, 0x22, {0x7, 0x25, 0x1, 0x82, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x2, 0xff, 0x5, "fa", "f9"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7, 0x4, 0x3}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x9, 0x3, 0x7, 0xf6, "371677431a77794756"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0x6, 0x0, "c77cbf"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8, 0x1, 0x60, 0x4, "cb908b"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x10, 0x1, 0x6, 0x1, "4f63264576f1c6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x81, 0x5, 0xff, {0x7, 0x25, 0x1, 0x80, 0xc, 0x7f}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2}, 0x110, &(0x7f00000005c0)={0x5, 0xf, 0x110, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x6, 0x81, 0x33, 0x3, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x310, 0xf00, 0x72b2, [0xcf]}, @generic={0xad, 0x10, 0x1, "756810730c947b98c1ac863cbe717ec9a1917896c6fad10320b753e4992e4d4ea0b2cffc546298f58bf7075de82bf5e78e2f639e672800019b26ab32d98f265309997b32ef559418fd6b2ba2203d2cd210d6be43c46ae40e9c7c2b456085cee19585f0902d589f83ccf01688daa951c1a137e223351511230a3d3f130c6a8e4da70db746fb7cf5eb226e2d6b345a0de88e868a50a2bd274eb1dfadafa50316986b4ea6347893af03c266"}, @ssp_cap={0x18, 0x10, 0xa, 0xde, 0x3, 0x2, 0x0, 0x7, [0xff0000, 0xff3fc0, 0x3fc0]}, @ssp_cap={0x20, 0x10, 0xa, 0x26, 0x5, 0xb, 0x0, 0x2, [0xc000, 0xffffc0, 0x3faf, 0x3f, 0x8080c0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x82, 0x9, 0x1, 0x3ff, 0x3}]}, 0xa, [{0x12, &(0x7f0000000280)=@string={0x12, 0x3, "97a7ea753b571c76074b94b4cfe155f9"}}, {0x3f, &(0x7f00000002c0)=@string={0x3f, 0x3, "9bc9fe2ae899c87e15fe96d3f1c33383ccc89b18453c5e9380d7edf1f2204e9428d1740a8a990dc139e19f0d4073761224f53b3dee7bd7c4047915300d"}}, {0x2a, &(0x7f0000000300)=@string={0x2a, 0x3, "957d0b4f4b6a264f70416eb8bdd6c03a5d6f3eeedb42ca8270b8e8540076c65172a9ca4f9781e57e"}}, {0x50, &(0x7f0000000480)=@string={0x50, 0x3, "39f00a7db42722630131b00b7a3b74c846165e0aa1f22a2f145ba3a3eb01fba60aed2da55538cc25f46223a21348ccaacbd0a65302ba5a4e490bac40b272684912fd8b71fabcb579e06b6cbc4d3a"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x426}}, {0x82, &(0x7f0000000700)=@string={0x82, 0x3, "6ea4c2e8566ae473f1724ba5e84de532ad9040a1c94356d34462480667b39ee5b2d66ae1583406c847921a6dbaefec18d16facf38c33e27d9840486befdac3186e487df9274d579acda28d503ca262f948edec670ac19fae6ee9d844184d3451c39c57d500bccac06e31f9d86c2f93b1c90ef7adc4406629acd0e48fb01d0fa6"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x1801}}, {0x46, &(0x7f00000008c0)=@string={0x46, 0x3, "78de966cbd64a4e045eea591c94bd769c955d313750fa2b256740017ace1e702d08bb3b83ddc2ffb56253d12c15f003877b04a613f6f6ac8f9557adfe184e7ddeb49a88c"}}]}) syz_usb_control_io$uac1(r7, &(0x7f0000000b00)={0x14, &(0x7f0000000840)={0x20, 0x21, 0x31, {0x31, 0xa, "502cb926a5e565f9074361bdc9bab4f1d959f12b2a91344e7819d039862e16fde40ca05c3426e2d6d4c02e68baab41"}}, &(0x7f0000000a00)={0x0, 0x3, 0xe0, @string={0xe0, 0x3, "a68c774ab37f0eecb01aa465fa5b00fe386a013a405c2010cb4f49d865146cb0a3925082b1568b0255f687e13efa6b7114fb87a33e112bf8a2c03e2d313f5fc16078f564cd5edde5a56e1e6e1256c94385f687ea51846945c1d3f16b24751fc2ab8d9d4812b405aefc24a69f973a7bbe4623d8302364ecf0fb21d4dc73204b2b27388a81631a097675695e819827ac0d89bdd706a96beaa143c405955e37da27e80ba246eea93cb12bc1f9b05242204b607a013c36c43df0c57a6fe59554c38ed3852f2cef0e2d5c8a17453d42de98f92c82bc3182a9660f4a93d6429116"}}}, &(0x7f0000000e40)={0x44, &(0x7f0000000b40)={0x40, 0x6, 0xfe, "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"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000d00)={0x20, 0x81, 0x2, 'uY'}, &(0x7f0000000d40)={0x20, 0x82, 0x1, '7'}, &(0x7f0000000d80)={0x20, 0x83, 0x3, "adf56f"}, &(0x7f0000000dc0)={0x20, 0x84, 0x1, "b4"}, &(0x7f0000000e00)={0x20, 0x85, 0x3, "989122"}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x800000000002}) 1.966692921s ago: executing program 5 (id=2450): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x60004ce) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) syz_io_uring_complete(0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x24) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085507, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.920343705s ago: executing program 5 (id=2451): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) ptrace$setsig(0x4203, r0, 0x2, &(0x7f0000000380)={0x25, 0x9, 0x3ff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'macsec0\x00', 0x400}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x3]}, &(0x7f0000000080), 0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/230, 0x0, 0x1, 0x32}, @flat=@weak_binder={0x77622a85, 0x10a}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000080)}, 0x40}], 0xfffffffffffffeeb, 0x0, 0x0}) 1.817614554s ago: executing program 5 (id=2455): ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x12, 0xd6, &(0x7f0000000040)="9d6045e594d85b61eeed4579927e082ee5ccf7898da9e9570617430cc4124bdba089a2f3de095f1a36af698ae609811efc0bd494f83298daee0ac91a80fa147aab1af84b6a507d2eea42494f09a724e1685353415ab6a4e83c929ca299c8d9b205736cc1c9d9e1db4d14ab0ba4e595616b9c18c2269f8bc2616d047a0e27addac3ffe37dae56cf5e79584ec5758694fd21e20ca057ed0003a047843ed24ecae1bab222162e979b144702f029b5ef08aacfb64006c95df6cf17303e27b2a76bd91a2f155ddd42fc0e2b9e31fb259d6ae1ebe667ddf340"}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b42, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}, {0x0}], 0x2, 0xffffffff, 0x8, 0xd) (async) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'geneve0\x00', 0x1}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) sendto(r5, &(0x7f0000001200)="8660061e65b86718aae97eab9d94c43903be908ffc8f5864dd3043eafefd37d2ecc1cfcd8d029dd3b3237d82e565f260697b1848fbbaf6a4cc9129c48b47189b4404355135f96b3589cbd689a6e6a17809c22f458f56c5de7077571bdca20415a703f59df9cfeb3f9181c1c5547fb7ff179123ebd26123acb564874b6eaf5ffcc2c224d79d2a588da2071cb9ae3bc8568d75306100f01166397b27", 0x9b, 0x44010, 0x0, 0x0) (async) readv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4104, 0x1008}, {0x0}], 0x2) 1.785705246s ago: executing program 5 (id=2456): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @broadcast, @remote}}}}) (async, rerun: 32) r1 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async, rerun: 64) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000000380)=0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) (async) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) (async) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file0'}}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, '+\xd6}\''}}, {@appraise}]}) (rerun: 32) chdir(&(0x7f00000001c0)='./bus\x00') (async) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async, rerun: 64) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newae={0x5c, 0x1e, 0x5e74984b1e295b5f, 0x70bd25, 0x25dfdbfc, {{@in=@private=0xa010101, 0x4d5, 0x0, 0x3c}, @in=@multicast1, 0x5, 0x34ff}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd2d, 0x7ff8}}, @mark={0xc, 0x15, {0x35075d}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x850}, 0x20004810) (async, rerun: 32) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000240)={0x60003, 0x0, [0x6, 0x3, 0x401, 0x404, 0x100, 0x6, 0x0, 0x81]}) (rerun: 32) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000100)="660fc7b5f3ffffff0fc73f47c44111f5c10c0cb8ab000f00d00f01cb66470fc7b60400000048b88bc00000000000000f23d80f21f835800000c00f23f848b8af890000000000000f23d00f21f835100000020f23218d8db86d2c6d2cfe6f1e", 0x5f}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) readv(r4, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 1.73804353s ago: executing program 2 (id=2457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12029000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048880}, 0x20048000) r2 = fsmount(0xffffffffffffffff, 0x1, 0x88) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r4, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb53}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000300)=@can, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)=""/79, 0x4f}, {&(0x7f0000000400)=""/214, 0xd6}], 0x2, &(0x7f0000000540)=""/244, 0xf4}, 0x6}], 0x1, 0x40, &(0x7f0000000680)={0x0, 0x3938700}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000b40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000700)={0x3f4, r3, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa275}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_BEARER={0x12c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x400, @empty, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff3274}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x46c6}]}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x60}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x683c941b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5a2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @private2, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x59c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4dc4d52a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3e04707b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4000080}, 0x808) r6 = accept(r0, &(0x7f0000000b80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000c00)=0x80) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x24000000) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x54, r1, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000001340)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001300)={&(0x7f0000000ec0)={0x438, 0x3f4, 0x200, 0x70bd26, 0x25dfdbfe, {0x2, 0x2, 0x1f, [0x8000000, 0x6d, 0x6, 0x2, 0x1, 0xb49, 0x8001, 0x7ff, 0x1, 0x1, 0x8, 0x0, 0x7fffffff, 0x0, 0x59, 0x2, 0x10, 0xb455, 0x7, 0xfff, 0x9, 0x7, 0x3, 0x8, 0x4, 0x200, 0x3, 0x8ff, 0xff, 0x126a, 0x9, 0x5, 0xb9, 0x5, 0xe, 0x6, 0x8, 0x400, 0xffffffde, 0x3, 0x4, 0x0, 0x1, 0x9, 0x3, 0x40, 0x9, 0xfffff800, 0x5, 0x0, 0x1, 0x2d63, 0x6, 0x7, 0x2, 0x3, 0x3, 0x9, 0x7, 0x10, 0xfff, 0x3, 0x9, 0x8], [0x8, 0xb, 0x10, 0x7, 0xa, 0xfffffffb, 0x2, 0x2, 0x6, 0x400, 0x0, 0x3, 0x4, 0xa, 0x5, 0x3, 0xb, 0x0, 0xa, 0x5, 0xfffffffc, 0x3, 0xe, 0x8, 0x4, 0x7fffffff, 0xf, 0xeb, 0x401, 0x5, 0x401, 0xffffffff, 0x9, 0xffff0001, 0x80000000, 0x9, 0x0, 0x1, 0xfffffffc, 0xe79, 0x6, 0x5, 0x50000000, 0x2, 0xfffffff7, 0xe6da, 0x0, 0x8000, 0x7fffffff, 0x9, 0x0, 0x5, 0xfff, 0x719, 0x418cc5b5, 0x5, 0x40, 0x1, 0x6aa, 0x0, 0xd, 0x7ff, 0x0, 0x7af800], [0x3, 0x3, 0x6, 0x0, 0x1, 0xaf, 0x0, 0x1, 0x2, 0x2, 0x9, 0x6, 0xd, 0x6, 0x7fff, 0x2, 0x1, 0x9, 0x100, 0x4, 0x0, 0x6, 0x2, 0xf9, 0x6, 0xd6, 0x8, 0x10001, 0x9236, 0x19e, 0x8, 0x3b, 0x4e4e33f5, 0x7, 0x0, 0x800000, 0x4, 0xa, 0x8, 0x3, 0x5, 0x5, 0x6, 0x8, 0x1, 0x0, 0x1, 0x4, 0x10, 0x407, 0x8, 0x2, 0x7fffffff, 0x4, 0x401, 0x4, 0xf5b, 0x9, 0xa2, 0x4, 0x7, 0x4, 0x5a7, 0x1], [0x5, 0x3, 0x3, 0x1d7, 0x1, 0x3, 0x7716, 0x7, 0xffffffff, 0x73c5, 0x4, 0x8, 0x4, 0x88b, 0x17a000, 0x6, 0x5, 0xea, 0xfffffffe, 0x2, 0x800, 0xde, 0x3, 0x139, 0x0, 0xfffffffa, 0x7fac, 0x7fff0, 0x7, 0x101, 0x4, 0xb, 0x9, 0xfffffff8, 0x1, 0x7c, 0x0, 0x9, 0x3ff, 0x9f, 0x1, 0xf, 0xb51, 0xfffffffc, 0x8, 0x7, 0x3, 0x1, 0x8, 0x7, 0x6, 0x9, 0x6, 0x7fffffff, 0x2, 0x5, 0x3, 0xe3, 0x7, 0xb, 0x70, 0x3, 0x20000000, 0x7], 0x17, ['(.-\x00', ')\x00', 'xfrm0\x00', 'SMC_PNETID\x00']}}, 0x438}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000045) connect$unix(r2, &(0x7f0000001380)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, r8, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000c84c) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r10, 0x8982, &(0x7f0000001580)) r11 = getpgrp(0xffffffffffffffff) syz_clone3(&(0x7f0000001800)={0x200000800, &(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640), {0x5}, &(0x7f0000001680)=""/156, 0x9c, &(0x7f0000001740)=""/72, &(0x7f00000017c0)=[r11, 0xffffffffffffffff], 0x2}, 0x58) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000002e40)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002e00)={&(0x7f00000018c0)={0x1508, 0x1, 0x5, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x8000}, 0x6, 0x6, 0x9, 0x7f, 0x18, 'syz1\x00', "27e32d6a19d1e7b745c67d0258797e059bf40360bff1e5c3f40c311e5802984d", "d94888c536d7f5cbd9fabc8e52963dce4e11fa087344f489c16532d1bfeff410", [{0x1ff, 0x3, {0x0, 0x7}}, {0xe0d, 0x8, {0x2, 0x7}}, {0x2, 0x8, {0x3, 0x7}}, {0x4, 0x7f, {0x2}}, {0x0, 0x4, {0x0, 0x2}}, {0xa2, 0x7, {0x1, 0x4}}, {0x0, 0x7f, {0x2, 0x6}}, {0x9, 0xe5c5, {0x3, 0x200}}, {0xff, 0x200, {0x2, 0x2}}, {0x9, 0xa0, {0x3, 0x8}}, {0x0, 0x8, {0x2, 0x6}}, {0x1, 0x400, {0x2, 0x7}}, {0xf, 0x450, {0x0, 0x5}}, {0xff0a, 0x193, {0x3, 0x3}}, {0x1, 0xfffc, {0x3}}, {0x5, 0xaa1, {0x0, 0x3f}}, {0x401, 0x726, {0x1, 0x9}}, {0x0, 0xd194, {0x2, 0x10001}}, {0x0, 0xfff, {0x2, 0x9}}, {0x1, 0xc29, {0x1, 0x400}}, {0x5, 0x7f, {0x2, 0x9}}, {0x3, 0x51, {0x3, 0x1}}, {0x0, 0xf3b, {0x3, 0x800}}, {0x8, 0x2, {0x0, 0x10}}, {0x80, 0xe, {0x0, 0x7}}, {0x5, 0x0, {0x0, 0x5}}, {0x3d, 0x4, {0x1, 0x8}}, {0x3ae, 0x4, {0x2, 0xf83}}, {0x1, 0x7f, {0x2, 0x1}}, {0x1, 0x4, {0x1, 0x10}}, {0x1, 0x1, {0x2, 0x5}}, {0x6, 0x1, {0x2, 0xffff}}, {0xe0f4, 0x5, {0x0, 0x81}}, {0x200, 0x3, {0x3, 0x1e}}, {0x7, 0x0, {0x3}}, {0x4, 0x5b8e}, {0x8000, 0xa6, {0x3, 0x1ff}}, {0x5fcb, 0x7, {0x1, 0x3}}, {0x8, 0x1, {0x2, 0x4}}, {0x1, 0x4, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0x68, 0x3, 0x7ff, 0xfffa, 0x2, 'syz1\x00', "d40ee8f69f0a0742150c024adfd7e0e63ee3fa26b994d1f10e74f671d1a515cd", "8c420ce5a84d666870197e8f74099cb631195e6f4a09b3e9c07cac1d7d20df04", [{0x8, 0x9, {0x3, 0x6}}, {0x400, 0x8, {0x0, 0x3}}, {0x9, 0x7, {0x2, 0x9}}, {0x7, 0x8, {0x1, 0xf}}, {0x7, 0xfffc, {0x0, 0x1}}, {0x101, 0x0, {0x3, 0x8001}}, {0xb, 0x6, {0x1}}, {0x2, 0x8, {0x2, 0x5}}, {0x9, 0xe, {0x0, 0xc}}, {0x7, 0x3, {0x1, 0x46}}, {0x200, 0x0, {0x2, 0x8}}, {0x2c, 0x25, {0x3, 0x5}}, {0x5, 0x68a, {0x2, 0xfffffc00}}, {0x2, 0x7, {0x2, 0x3}}, {0xe088, 0x8, {0x1, 0x101}}, {0x3, 0x2, {0x2, 0x7fffffff}}, {0x1, 0x1000, {0x0, 0x2}}, {0x5, 0xe, {0x1, 0x6}}, {0x1e, 0x401, {0x1, 0x5}}, {0x6, 0x2, {0x2, 0x3}}, {0x6, 0x9, {0x3, 0x9}}, {0x0, 0x1, {0x0, 0x6}}, {0x4, 0x0, {0x1, 0x1}}, {0x3, 0x0, {0x0, 0x3}}, {0x5, 0x4, {0x0, 0x100}}, {0x4, 0x2, {0x1}}, {0x4000, 0x68, {0x0, 0x4}}, {0x7ff, 0x0, {0x2, 0x2}}, {0x2, 0x8, {0x1, 0x28db}}, {0xe, 0x5, {0x3, 0x7}}, {0x0, 0xe80, {0x0, 0x7d72}}, {0x2, 0x8001, {0x1, 0x9}}, {0x6cf, 0x1, {0x1, 0xffffffff}}, {0x6, 0x1ff, {0x1, 0x8}}, {0x6, 0x2, {0x2, 0x2}}, {0x3, 0xb0, {0x3, 0x200}}, {0x101, 0x9, {0x2, 0x4}}, {0x81, 0x2, {0x3, 0xfffffff9}}, {0x6, 0x84, {0x0, 0x3}}, {0x7, 0x8000, {0x1, 0x6}}]}}}, {{0x254, 0x1, {{}, 0x3, 0x65, 0xa, 0x4, 0x26, 'syz0\x00', "e09a66f1b99c5d223cfa721769f9ee66cb61723d26ce05e22ebb1c0d91154a5d", "460499d35e599eb13ffe9e810f24ceeb74a010738be78a4c8d1d1d6ef922952d", [{0x8, 0x6, {0x0, 0xfffffff7}}, {0x5c, 0x2, {0x2, 0x6}}, {0x3, 0x9, {0x2, 0x2}}, {0x85a, 0xfff9, {0x2, 0x7}}, {0x1, 0x8, {0x1, 0x4}}, {0x80, 0x5, {0x0, 0x406}}, {0x0, 0x5, {0x1, 0x23a}}, {0xff, 0xa36, {0x2, 0x8}}, {0x9, 0xfff9, {0x1, 0x7ff}}, {0x8, 0x5, {0x1, 0x1}}, {0xd5, 0x6, {0x3, 0x1}}, {0x4, 0x4, {0x1, 0x80}}, {0x9, 0x0, {0x0, 0xb}}, {0x2, 0xff, {0x1}}, {0x2, 0xfff9, {0x2, 0x800}}, {0x8, 0xfffd, {0x2, 0x5}}, {0xa8, 0xbb4, {0x0, 0x7}}, {0x8, 0x85c, {0x3, 0xffff}}, {0x8, 0xc4, {0x0, 0x8}}, {0x0, 0xff83, {0x3, 0x6}}, {0x8, 0x4, {0x2, 0x3}}, {0x401, 0x0, {0x1, 0x7fff}}, {0x0, 0x1, {0x1, 0xffff}}, {0x1, 0x7, {0x2, 0x10}}, {0x2, 0x9, {0x0, 0x4d}}, {0x3, 0xcb, {0x0, 0x8}}, {0xfff2, 0x7, {0x1, 0xf}}, {0x4, 0x7f, {0x2, 0x6}}, {0x2, 0xd, {0x0, 0x91f7}}, {0x5, 0x31c0, {0x1, 0x2}}, {0x8, 0x4f1, {0x0, 0xa03}}, {0x0, 0xfffa, {0x1, 0xffff}}, {0x3, 0x400, {0x1, 0x4}}, {0x1, 0x8000, {0x0, 0xf}}, {0x0, 0x7, {0x3, 0x7}}, {0x81, 0x8, {0x2, 0xd}}, {0x6dea, 0x5, {0x2}}, {0x8000, 0x2, {0x1, 0x2}}, {0x80, 0x0, {0x0, 0x8}}, {0x4, 0x1, {0x0, 0x10}}]}}}, {{0x254, 0x1, {{0x0, 0x6}, 0x80, 0x0, 0xe7fd, 0x40, 0x7, 'syz0\x00', "be927958c9631ef230f516182eb9a022984775646f6ca98972a1d28689ae6701", "bff443efd667130ac930755ff8037f64bade8cbcada1280045d08da04c895385", [{0x994, 0x4a, {0x2, 0xffff5dd1}}, {0xfffa, 0x3, {0x1, 0x3}}, {0x5, 0x6, {0x2, 0xfffffffc}}, {0x8, 0x80, {0x92f1092643a4c54d, 0x765d}}, {0x7f, 0x6, {0x0, 0x8c8b}}, {0xb9, 0x6, {0x0, 0x1000}}, {0xf, 0x400, {0x1, 0xfffffffe}}, {0x447f, 0x9, {0x1, 0x33ff}}, {0x5, 0xfff4, {0x1, 0x3}}, {0x9, 0x54, {0x2, 0x9}}, {0x10, 0x257, {0x3, 0x6}}, {0x3c, 0xfff8, {0x1, 0x10}}, {0x7, 0x4, {0x2, 0xb}}, {0x3, 0x443, {0x3, 0x3}}, {0xff, 0x41a, {0x1, 0x4}}, {0x680, 0x3, {0x0, 0x3}}, {0x40, 0x0, {0x1, 0x200}}, {0xfffb, 0x8, {0x0, 0x5}}, {0x2, 0x6, {0x3, 0x6}}, {0xff, 0x3, {0x3, 0x8}}, {0xc2, 0x4, {0x1, 0x2}}, {0xb0, 0x6, {0x3, 0x8}}, {0x9, 0x2, {0x1, 0x1}}, {0x5, 0x7ff, {0x2, 0x7}}, {0x3, 0xf5, {0x2, 0x93}}, {0x0, 0x1, {0x2, 0x2}}, {0x312, 0x7, {0x0, 0x10}}, {0xfffb, 0x800, {0x2, 0x10}}, {0x7f, 0x9, {0x2, 0x10000}}, {0xb, 0x6, {0x0, 0x1}}, {0x2, 0x200, {0x1, 0x9}}, {0x4, 0x1, {0x1, 0xff}}, {0x40, 0x66, {0x0, 0x4}}, {0x6, 0x9, {0x1, 0xffff}}, {0x8, 0x4, {0x0, 0xffffff92}}, {0x7, 0x8, {0x3, 0x8001}}, {0x2, 0x1, {0x0, 0x3}}, {0xcf50, 0x5, {0x2, 0x80}}, {0x6, 0xffff, {0x3, 0x1000}}, {0xffff, 0xb, {0x2, 0xfffffffb}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x2, 0x41, 0x2, 0x2, 0x1e, 'syz1\x00', "70295936690e7a8d838f82a8f838b693472984cb8ad69160170b3e86ad7ee07b", "6756be657ac890bcd66fbd683abece3eccb40b2c535d99da316859e3888f5d4d", [{0x18, 0x6, {0x0, 0x6}}, {0x3, 0x6, {0x2, 0x6}}, {0x6, 0x401, {0x2, 0x80000000}}, {0x6, 0x1, {0x3, 0x4}}, {0xd, 0xc3, {0x2, 0x4}}, {0x9, 0x2, {0x0, 0x60}}, {0x5, 0xe6af, {0x2, 0x3}}, {0x927f, 0x5, {0x3, 0xea0}}, {0x5, 0x4, {0x0, 0xdd5}}, {0x0, 0xf7, {0x3, 0x6}}, {0x3, 0x2, {0x0, 0x67}}, {0x8, 0xe7, {0x1}}, {0x8, 0xd, {0x0, 0x8}}, {0x2, 0xfff9, {0x3, 0x3}}, {0x0, 0xca, {0x0, 0xd}}, {0x3, 0x7, {0x2, 0x66}}, {0x8, 0x3, {0x2, 0x7}}, {0x946f, 0x8218, {0x2, 0x1}}, {0x3d, 0x8, {0x3, 0x2}}, {0x6, 0x344b, {0x2}}, {0xe000, 0x1, {0x1, 0x8}}, {0xb8, 0xffff, {0x1, 0x8000}}, {0x8, 0x10, {0x3, 0x2}}, {0x3, 0x7f, {0x0, 0xd7}}, {0x5, 0x3ff, {0x0, 0x9}}, {0xa, 0x0, {0x3, 0x1}}, {0xffd6, 0xad0, {0x1, 0x9}}, {0x7, 0x3, {0x3, 0x1}}, {0x66, 0xfff9, {0x1}}, {0x3, 0x9, {0x1, 0xaf89}}, {0x3, 0xffff, {0x1, 0x160a}}, {0x1, 0x2, {0x0, 0x400}}, {0x4, 0x6, {0x3, 0x1}}, {0x8000, 0x0, {0x2, 0x8}}, {0x800, 0x4, {0x0, 0x2}}, {0xffff, 0xb0, {0x3, 0x8}}, {0x8, 0xc000, {0x3, 0x9}}, {0x7, 0x101, {0x1, 0x1}}, {0x1, 0x5, {0x1, 0x9}}, {0x8001, 0x7ff, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0xc}, 0x5, 0x2, 0x67, 0x5, 0x10, 'syz1\x00', "e7603e65c0f63284eb04334e544ba3f5ffa000452817cc9c6c921f29504157ec", "25077bd05f294b1be16868aaa67a3c37a16dacfa24195d56e19adab07206e1c2", [{0x4, 0x9, {0x2, 0xd}}, {0xf, 0x9, {0x3, 0x3}}, {0x0, 0xfff7, {0x0, 0x1000}}, {0x3, 0xa215, {0x0, 0xffff815a}}, {0x9, 0x7e, {0x0, 0x1}}, {0x8001, 0x2, {0x0, 0x80}}, {0x8, 0x800, {0x0, 0x4}}, {0x2c2, 0x5, {0x3}}, {0x22, 0x92bc, {0x0, 0xff}}, {0x7, 0xd, {0x2, 0xffffffff}}, {0x2, 0x5569, {0x1, 0xfffffffd}}, {0x9, 0x8e92, {0x3, 0x5}}, {0x9, 0x6, {0x1, 0x10}}, {0x7, 0x5, {0x2, 0x800}}, {0xbe, 0xffff, {0x2, 0x7}}, {0x5, 0x800, {0x2, 0x7}}, {0x6, 0x5e, {0x3, 0x7f}}, {0xb708, 0x2, {0x3, 0x1}}, {0xc000, 0x7fed, {0x2, 0x46e73154}}, {0x101, 0x9ba4, {0x2, 0x8}}, {0xe72d, 0x2, {0x3, 0x4}}, {0x6, 0x0, {0x3, 0x7}}, {0x1400, 0x9, {0x0, 0x5c}}, {0x0, 0x0, {0x2, 0x800}}, {0x8, 0x3, {0x3, 0x7f}}, {0xd, 0x1ff, {0x3}}, {0x4, 0xa, {0x0, 0x1}}, {0x9, 0x7f}, {0x800, 0x3, {0x0, 0x169}}, {0x2, 0xd3a0, {0x3, 0xffff}}, {0x1000, 0x400, {0x2, 0x1}}, {0x0, 0x1, {0x0, 0x8a8c}}, {0x1c4, 0x5, {0x1, 0x9a4}}, {0x80, 0x400, {0x0, 0x4}}, {0x8ee0, 0x41, {0x3, 0x4}}, {0x0, 0x1638, {0x0, 0x5}}, {0x2, 0x100, {0x1}}, {0xe, 0xa, {0x1, 0x6}}, {0x5, 0x4}, {0x9, 0x3357, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x101}, 0xff, 0x6, 0x77d, 0x0, 0xc, 'syz0\x00', "cb7e99f601ed038e8dcb00b4c3583ac53071c61df15fb3aaf492475d74353b58", "4795cb4ca7d95cd74886304e0616fca5144203ff957598bd73fb838b2a3b7192", [{0x0, 0x4, {0x1, 0x6}}, {0x1, 0x7ff, {0x2, 0xc}}, {0x61, 0x22, {0x0, 0x8}}, {0x61, 0x200, {0x2, 0x5}}, {0x8, 0xfffb, {0x2, 0x1}}, {0x3, 0x8a2, {0x1, 0xfff}}, {0x0, 0x7f, {0x3, 0x7}}, {0x6, 0x9, {0x1, 0x3ff00000}}, {0x0, 0x9, {0x2, 0x7}}, {0x2, 0x8d64, {0x1, 0x9}}, {0x6, 0x9, {0x0, 0x8001}}, {0x1, 0x8, {0x3, 0x5}}, {0x7, 0x4, {0x2, 0x5}}, {0x0, 0x2, {0x3, 0x10}}, {0x5, 0x1000, {0x1, 0x3}}, {0xba, 0xe, {0x1, 0xebd}}, {0x7, 0x400, {0x3, 0x8}}, {0x2, 0x1, {0x2, 0x3}}, {0xe, 0x7, {0x1, 0x4}}, {0x3, 0x401, {0x2, 0x7}}, {0xfff9, 0x0, {0x2, 0x4}}, {0x0, 0x3, {0x1, 0x8}}, {0x9, 0x6, {0x0, 0x7}}, {0x954, 0x10ad, {0x3, 0x5}}, {0x0, 0x1ff, {0x0, 0xaf}}, {0x66, 0xfffc, {0xee89c8673827c4e9, 0x8000}}, {0x3, 0x1, {0x0, 0x9}}, {0xe604, 0x5, {0x1, 0xf}}, {0x8, 0x6, {0x2, 0xce9e}}, {0x0, 0x81, {0x3, 0x8}}, {0x3, 0x165, {0x0, 0x4}}, {0x6, 0x3, {0x2, 0xfffffff7}}, {0x5, 0x0, {0x0, 0x4}}, {0x3, 0x5, {0x2, 0x80000000}}, {0xa6, 0x2, {0x1, 0x4}}, {0x7, 0x7, {0x1, 0x2}}, {0x9, 0x0, {0x3, 0x7f8}}, {0xfffd, 0x2, {0x3, 0x4}}, {0x9, 0x8, {0x1, 0x5}}, {0x2, 0x4, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x8}, 0x9d, 0xf, 0x6, 0x1, 0xa, 'syz0\x00', "2598f56f5848acd22f92a533aa8fc96d252282bac9a537235676244261d6b440", "eac58e954b1c9f2b79f704eed0f83a76a6b6c8d15d118dbdec21daa3e521e56f", [{0x9, 0xf1, {0x1, 0x1}}, {0xde, 0xb1, {0x0, 0x5}}, {0x5, 0xc, {0x2, 0x10}}, {0x2, 0x100, {0x2, 0x51}}, {0x3ff, 0x9}, {0xf, 0x1, {0x2, 0xe1ca}}, {0x87, 0x40, {0x0, 0x100}}, {0x4, 0x9, {0x1, 0x8}}, {0x7, 0x0, {0x2, 0xbce}}, {0xceb6, 0xb, {0x2, 0x101}}, {0x9, 0x5, {0x0, 0x6}}, {0x4, 0x758, {0x1, 0xc}}, {0x9, 0x2, {0x2, 0x3}}, {0x6, 0xa, {0x1, 0x7d}}, {0xe0, 0x5, {0x1, 0x7b71}}, {0x4, 0x4, {0x1, 0x343b}}, {0x5, 0x1, {0x3, 0x7}}, {0x2, 0x6, {0x5, 0x80000001}}, {0x1, 0x6, {0x1, 0x6}}, {0x2612, 0x4f, {0x1, 0x7ff}}, {0x8, 0xfffb, {0x2, 0x1ff}}, {0x8000, 0x3ff, {0x0, 0x60000000}}, {0xfffa, 0xe0d, {0x0, 0x7}}, {0x2, 0x7, {0x2, 0x93}}, {0x1000, 0x3, {0x0, 0x10}}, {0x1ff, 0x0, {0x2, 0x3}}, {0x70, 0x8, {0x3, 0x2}}, {0x1, 0x1, {0x2, 0x10001}}, {0xf0d0, 0x1, {0x2, 0x762}}, {0x1, 0x4000, {0x1, 0x7}}, {0x800, 0x3, {0x0, 0x7}}, {0x6, 0x3, {0x2, 0x80}}, {0xa00, 0x9, {0x2, 0x10}}, {0x7ff, 0x7, {0x2, 0x259}}, {0x0, 0x63f5, {0x1, 0x3}}, {0x7fff, 0xb, {0x1, 0x6}}, {0x9, 0x520, {0x3, 0x1}}, {0xffff, 0x101, {0x3, 0x2530}}, {0x9, 0xa, {0x1, 0xb06a}}, {0xfff, 0x7527, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0x8}, 0x2, 0x4, 0x1, 0x6, 0x1a, 'syz1\x00', "131a20ac23f08c39ff1cbaac893dc993f0d5ec6d805c7bfec3853aad0e8e84d0", "62033a4096141992cc133e230e2929b3f3463da76cb2f2378e2dbd1fa880d0b0", [{0xc, 0x3, {0x2, 0xba9}}, {0x4, 0x7f, {0x1, 0xd8}}, {0x4, 0x7f, {0x3, 0x4}}, {0x8, 0x49, {0x1, 0x4}}, {0x8c97, 0x7, {0x2, 0x600}}, {0x3dc, 0x7, {0x3, 0x3635}}, {0x1, 0x5, {0x3, 0x4}}, {0xbf6d, 0x7ff, {0x3, 0x1}}, {0xc66, 0xe, {0x2, 0x7}}, {0xba2, 0x3, {0x1, 0x9}}, {0x401, 0x9, {0x3, 0x21e}}, {0xb5c4, 0x0, {0x3, 0xc}}, {0x40, 0x3, {0x0, 0xa}}, {0xb385, 0x83b5, {0x0, 0x5}}, {0xe0, 0x5, {0x3, 0x7}}, {0x9, 0x0, {0x1, 0x80000001}}, {0x81, 0x6, {0x3, 0x800}}, {0x3ff, 0x8, {0x1, 0x2}}, {0xd, 0x2, {0x2, 0x2}}, {0x3, 0x8, {0x2, 0x3}}, {0xcc, 0x80, {0x0, 0x8001}}, {0x0, 0x6, {0x2, 0x1}}, {0x8000, 0x5, {0x3, 0xffffff00}}, {0xb, 0xf, {0x3}}, {0x6, 0x4, {0x0, 0x5}}, {0x4, 0x7, {0x2}}, {0x2, 0x1, {0x1, 0x1ff}}, {0x1, 0x9a, {0x3, 0x8}}, {0x8, 0x84, {0x1, 0x4}}, {0x5, 0x8, {0x2, 0xda67}}, {0x7, 0x9, {0x1, 0xfffffff7}}, {0xfff3, 0x3, {0x2, 0xffff485a}}, {0x0, 0x8000, {0x1, 0x44b9}}, {0xe2, 0x1ff, {0x3, 0x8001}}, {0x5a7, 0x40, {0x3, 0x1ff}}, {0xe3, 0x0, {0x3, 0x7}}, {0x81, 0x1, {0x1, 0xed}}, {0x3, 0x3, {0x3, 0xff}}, {0xcf91, 0x4, {0x2, 0x3ff}}, {0x2, 0x7, {0x0, 0xffffe4d8}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x4000014}, 0x20004005) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000002f80)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x5c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}]}, 0x5c}}, 0x40884) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003000), r6) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000003140)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003100)={&(0x7f0000003040)={0xa0, r12, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf43}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x77}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff800000}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000003180), 0x1, 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003240), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000003640)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003600)={&(0x7f0000003280)={0x380, r13, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0xd8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa8, 0x5, "640afb06576b367fd7eeff54845cf950dbe2a4362d84bb0feb0ea2fa63aaffe6f79e098f65604fd894e6adde117fddfddaea8c77cf04585c44b9da11fc02473fb733340605a0fe65fafbf26f3d1314e5439554a4e3dd4688a7c63502c89d69ac0e02098b4f3a7975132afef05da855b3c719a0db024c1bd795af1d8528c3dbee674397d8a411e3a7fa6e3f91bfee584b5a64aeffab588184c1b3a29ef703ac589dc40e33"}, @ETHTOOL_A_BITSET_VALUE={0x2b, 0x4, "e9d158414345798461dcb38a5ad0a1a61c713b20c0b65bf1a4ac2e91df13c4c76eac1240a30582"}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xd}, @ETHTOOL_A_LINKMODES_OURS={0x26c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x118, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x684}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\):\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'udp:syz2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe91d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.-#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb6c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'udp:syz1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ',%!*\x11#\'+\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'udp:syz2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_MASK={0xcd, 0x5, "bdf40b1453d9e219309955dbd2e9ff16ef61ec2116f4b4875c3e3b5b13cd0942b1a969d30157fb110c8e889030cfe5f9f79d96a2180daddb467b095adfd6f69ca43af6881f3455d6cee76273a65098a15f375a3a98af2f86c60153ec572ddc5b7ddae7edb40dd8e20e2cc1dac019a2cba26cdd0323efbab93922d3ee4f47688579c93a339560219fe6ab76aa305ad24b843f4aaa759a7308b491dadefa549aacc10bc5f3983a4c0472aea21d952ff0fd77c4fc0cf90c68f3138316b7e1f5758866f9e4c1420cbda629"}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}]}]}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xc}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x10}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x380}, 0x1, 0x0, 0x0, 0x800}, 0xd0) 1.73722366s ago: executing program 2 (id=2458): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0x0, 0xfffffffa, {{0x2d, 0x4, 0x2, 0x19, 0xb4, 0x64, 0x0, 0xff, 0x29, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x12, 0x2, [{0x1, 0xc, "9a8b130d19a1d6d62534"}]}, @timestamp_prespec={0x44, 0xc, 0x16, 0x3, 0x0, [{@broadcast, 0x8}]}, @ssrr={0x89, 0x17, 0xb7, [@local, @local, @multicast1, @remote, @remote]}, @timestamp={0x44, 0x20, 0x44, 0x0, 0x5, [0x7f, 0x8000000, 0x544bcf1d, 0xffff0000, 0xfffff140, 0x7, 0x7]}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x0, 0xd, "67ca278a36a2e47a0e58a8"}]}, @ssrr={0x89, 0x13, 0x7a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2, @multicast1]}, @timestamp_prespec={0x44, 0x24, 0xaa, 0x3, 0x0, [{@rand_addr=0x64010102, 0x6}, {@remote, 0xfffffff9}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x401}, {@multicast1, 0x1}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x5) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000340)={'ip_vti0\x00', r2, 0x7800, 0x7800, 0xfffffffc, 0x7ff, {{0x28, 0x4, 0x2, 0x2, 0xa0, 0x66, 0x0, 0x2, 0x69, 0x0, @rand_addr=0x64010101, @multicast1, {[@cipso={0x86, 0x4a, 0x3, [{0x0, 0x12, "1b7cb1df06c2bfb7c0305e2187dfb11b"}, {0x7, 0x10, "2b3f301e3484ea822336e7e62038"}, {0x7, 0x2}, {0x7, 0xf, "7cd3b0abffc82b481e4dcdd46a"}, {0x6, 0x11, "6d02b7e1b6cc94dc2f68bb031f2da3"}]}, @end, @end, @noop, @rr={0x7, 0x13, 0x67, [@rand_addr=0x64010102, @empty, @rand_addr=0x64010102, @multicast1]}, @noop, @lsrr={0x83, 0x1f, 0x9d, [@broadcast, @empty, @multicast1, @remote, @private=0xa010101, @multicast1, @multicast1]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x4f, [@local]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'gre0\x00', &(0x7f0000000440)={'syztnl0\x00', r2, 0x1, 0x81, 0x6, 0x8, {{0x31, 0x4, 0x0, 0x2, 0xc4, 0x64, 0x0, 0xa, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x14}, {[@rr={0x7, 0x7, 0xf3, [@loopback]}, @noop, @cipso={0x86, 0x59, 0xffffffffffffffff, [{0x6, 0xf, "9d3abb4afb5c06372afddbf25d"}, {0xdcd63c493f57d65c, 0x10, "b0b1baf5f88336be0940398e3fcd"}, {0x5, 0x5, 'GzE'}, {0x5, 0xf, "fec5379b8e9268684ad030fda8"}, {0x1, 0x12, "9dd7d88b108b19c18c520c77501a09e2"}, {0x1, 0xe, "5c7e70a07b0ee3f0cef2d64a"}]}, @timestamp_prespec={0x44, 0x4c, 0x80, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@private=0xa010101, 0x7}, {@broadcast, 0x380}, {@broadcast}, {@multicast1, 0x6}, {@broadcast, 0x2}, {@rand_addr=0x64010101, 0x3}, {@private=0xa010101, 0xb25}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x59b9}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000880)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0x2a4, r1, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x84}, 0x50) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000900)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @private=0xa010101}, {0x2, 0x4e22, @local}, 0x0, 0x0, 0x0, 0x0, 0x8d, &(0x7f00000008c0)='macvtap0\x00', 0x0, 0x8, 0x1}) (async, rerun: 64) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) (rerun: 64) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) (async) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f00000009c0), 0x4) (async) syz_usb_connect(0x3, 0x548, &(0x7f0000000a00)={{0x12, 0x1, 0x250, 0xbc, 0x6a, 0x4d, 0x8, 0x12d1, 0x5858, 0xecbe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x536, 0x2, 0xaa, 0x2, 0x30, 0x7, [{{0x9, 0x4, 0x82, 0xca, 0x8, 0xff, 0x4, 0x34, 0x64, [@uac_as, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "9ac37469ca4e"}, {0x5, 0x24, 0x0, 0xc}, {0xd, 0x24, 0xf, 0x1, 0xffffff21, 0x9, 0x8}}], [{{0x9, 0x5, 0xb, 0x3, 0x40, 0x8, 0xfa}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x4, 0xff, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x4}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x4, 0x5, 0xa, [@generic={0xfb, 0x22, "2c72e3c02c272ca4ded5249f9427402132196c15e509e88a614f8db0d0996662a46bf43435df0941b98a6aef93b158571508b6476a18b9a359b9e00ae9691fbc51d0269275fe09c47e6b88f726779dc316ac81091c1c7276ffb187b436e070efdbe2b87f81a8967d85fde3115e1c4d01ab02b2e89913f963e17586fe36894af0b2d3724cc4a310736fb3fdbb65f9c4d5ad746e66f06f48d6e0d59456dbad71075615ef2da7cef85e911718e04dd9884a5a44eaf823bb84c2d464fad63624735c3ce295cf76be940681a49727bf49a253872997e2b2dce7b2721c63d5693e093ac3e60b7ea524df7eb5d039bedd2d1deb1c9b6962c361949e91"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0x9, 0x2, 0x2, [@generic={0xf7, 0x8, "9a05ff7bfbccf686d86432392f2675ecca0636c98cfcce8f293d94e0386efa6bde0b8b5af907f2dbc9795b5e8436328457a2a3ba5570b58f26f4229865ef23b52dd5cbdc3697b69f9ab7f2e3fbdb0cc6227c90cd56c5b37a8f8455b0a299269fe14f16412cddbfe32ad7dde691a5e4bdea5bd698f5d2e3d6268fd7b383992e2b9679a7f86481f3fc579240a2401c42576a3f5b70038b5f9a0fed51335c03be0ad77dc745e1822c5ba02b6e70b27185bb10e0be37d0a5ade432ad4b59fdc61730eef40a8e8df46329b1be2f005d247fa729a705914e81bf2e8d3ab8f9ce7774e76387199b56742f02649a4fb2af02f0fc045d6576db"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x9}]}}, {{0x9, 0x5, 0xa, 0x1, 0x400, 0x4, 0x9e, 0x7, [@generic={0xdb, 0xb, "08482d4df49f6df2b46a4791b3bfe31b74078fba0a942ad02d3931e2b75298016d8a8fb8dd6ef6fdf6a3ac9ca883415333888bdc5f88de34394afae95a98c60f3b0c89b9513aa72c49e2242afce37b36a072b0cd260a1728681c6559d53053551f0c9154a3343cbea4e68b1018ca084054c8d07837da2f3752bc0be142a56bd73140151c27257f7348936bc66e998f4fe63870bb445ad0710b43f271874220bb0cfa827c2ab2c9b802fb5b5398f9940fd6f17a5a559baf5ba63daf66fc85994a11e757c2c0ecd173df406d53bde95c2317a9d8272177b9a159"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x7, 0xb, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x7, 0x65, 0x95, [@generic={0x61, 0x3a, "2327ee79fe7d367867c4dc94a0333cbeeda35741006dd3f60770cac56d981eac8b4df7c8b94543c2be2a6e1173555a8526c80aad041b608ff2f4c8a885fc05369b6597560d7157dff76b3e66ab500777959e4c8020f4caf55b171af3c643ee"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x400, 0x14, 0x7, 0x4}}]}}, {{0x9, 0x4, 0x3c, 0x10, 0x5, 0x2f, 0x6f, 0xa, 0x3, [], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0x80, 0x5, 0xa3, [@generic={0x4b, 0x24, "1980cffa5243ba0e05c2b124e53ab278ae20b08ddc10689bf0a1fea62ba80acda4ffbfe5c2d5bb390a4a2b093f6950ea09c78c8e2aba4684a5ba660a46b6ca0605fabf21512e10529d"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x0, 0x2, 0x0, [@generic={0xc5, 0xc, "f2a6ca0063dee6f93643d4fba02c206b081601f72da9095ee18da73dee7bd3fde1cff6ef91342ca79119fb113031126ab08e7531737919822092a5981c652f435be2a847ef4855b415b1e590ca4d338f4f14c507107cee19f09efd9181bfc9e75d6ff3e71a64bf25ea3663eb1955bffc7a4762d10aa70e7a40470558a943d851bacd3978dc106b63243e3e1655e2228231b05e51922cfe2956c175ad9855be6169eed34c373811f93297e49ed0546d64813f137f66f32ac71669bee9f633f2aca39ba4"}, @generic={0x21, 0x11, "8f79e5abb454368cf2a04977dbcd5bb2b82f42b54044f7bd9fb498c976d8d5"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x640, 0x2, 0x1, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xca, 0x588}]}}, {{0x9, 0x5, 0xe, 0x4, 0x0, 0xe, 0x9, 0x5}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x2, 0x7, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x4}]}}]}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x201, 0x9, 0x3, 0x5, 0x20, 0xe}, 0x35, &(0x7f0000000fc0)={0x5, 0xf, 0x35, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x10, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x6f, 0x0, 0x7f, 0x5, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x40, 0x1, 0x10000, 0x11f0f, 0x1, [0xf0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x80, 0x101, 0x8}]}, 0x4, [{0x3d, &(0x7f0000001000)=@string={0x3d, 0x3, "6908dc0fbd19babf0e5b3d7120ec818948a4801d43a67af2117be04752cf5414d1dba467bde6a1c795d9790c80dc8f1b6b5846491eda5338c37959"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x1009}}]}) close_range(r6, r6, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) (async, rerun: 32) r7 = socket(0x1, 0x800, 0x6) (async) r8 = syz_open_procfs$userns(0x0, &(0x7f0000001180)) setns(r8, 0x1c000000) (async, rerun: 64) bind$inet6(r6, &(0x7f00000011c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) (async, rerun: 64) ioctl$SIOCGETVIFCNT(r7, 0x89e0, &(0x7f0000001200)={0xffffffffffffffff}) ioctl$NS_GET_USERNS(r8, 0xb701, 0x0) (async) r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001240), 0x8c00, 0x0) ioctl$KVM_GET_NESTED_STATE(r9, 0xc080aebe, &(0x7f0000001280)={{0x1, 0x0, 0x80, {0x0, 0xdddd1000}}, "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", "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"}) (async) ioctl(r0, 0xec6, &(0x7f0000003300)="ca591c9ea1c4344587003bb5094e7c31904012fc7a6bbd3b9fbc925f8ef09b517090c70b1a91684bbac6fe5c0e278dfd286e85053b512c0faabcfde714394ecff9159c2f0f766533bf1f523b530123b3d73a3b9cca4ad6e40cb9f50337e0400df977ed6fb726461b93a2ba0ea7f270c32f8bb8079f2c5355a142cf6f02dacf27f59898a5dcf42f61ceccff23bf39675962d3c4853b08b7f68685b8832ad8f59f23a3ef92369cb8a327a53c8e7b5b8a292fc89c21fe8afe5bd67a8a41fd35675c386c8030787e4ada1f61aac81f1c70fed39be13154d87bd1dddd3c15143fc7e3484c1aaed2c803ce8048cdd1a94da8bbeb7cbb54") ioctl$FUSE_DEV_IOC_BACKING_OPEN(r9, 0x4010e501, &(0x7f0000003400)={r9}) (async) syncfs(r7) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003480), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000003580)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003540)={&(0x7f00000034c0)={0x48, r10, 0x420, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x50890}, 0x4) (async) ioctl$BTRFS_IOC_SET_FEATURES(r6, 0x40309439, &(0x7f00000035c0)={0x0, 0x3}) (async) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000003600)='syzkaller0\x00', 0x10) 1.725034521s ago: executing program 5 (id=2459): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r4, 0xae80, 0x0) keyctl$revoke(0x3, r1) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) close(r0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x981b00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r5, 0x45809000) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000000), 0x2, 0x0) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x12, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap$usbmon(&(0x7f000085b000/0x1000)=nil, 0x1000, 0x2000001, 0x11, r6, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r9 = accept4$inet(0xffffffffffffffff, &(0x7f0000000880)={0x2, 0x0, @remote}, &(0x7f00000008c0)=0x10, 0x80000) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r9, 0x8008f513, &(0x7f0000000900)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000940), 0x204040, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r10, 0xc4089434, &(0x7f0000000440)={r8, 0x8000, 0x1, [0x0, 0xffffffffffffffff, 0x5, 0x8, 0xfffffffffffff95a], [0x200, 0x10004, 0x1, 0x9, 0x3, 0x232, 0x80, 0xfffffffffffffffa, 0x10, 0x6, 0x7fff, 0x4, 0x7, 0x3, 0x6, 0x9, 0x80, 0x7fff, 0x1ff, 0xdb4d, 0xd, 0x7, 0x4, 0x1, 0x7, 0x3, 0x67eb, 0xa, 0x8, 0x0, 0x6, 0x7f4d, 0x7f, 0x3, 0x8, 0x4, 0x4, 0x3, 0x5, 0x3, 0x1ff, 0x0, 0x7, 0x207, 0x1, 0x3, 0x6f4c, 0x5, 0x1, 0x5, 0x6, 0xb, 0x90000, 0x3b46697e, 0x7f, 0x4, 0xfffffffffffffff9, 0x8, 0x60, 0x1, 0xfffffffffffffff9, 0x2, 0x3, 0x2, 0x1, 0x7, 0x5, 0xffffffff80000000, 0x7, 0x0, 0x7, 0x2, 0x7fffffffffffffff, 0xfffffffffffff7e4, 0x4, 0x3, 0x8, 0x5e, 0x6, 0x3, 0x8, 0x4, 0x1, 0x10000, 0x2bd, 0x80000000, 0x1, 0x10000000000000, 0x5, 0x3, 0x9838, 0x280000000000000, 0x2, 0x9, 0x6, 0x800006, 0xf, 0x80000001, 0x5, 0x2, 0x4, 0x4, 0x8000, 0x8, 0x0, 0x9, 0x7bd, 0x1000, 0x6, 0x10, 0x7, 0x4, 0x0, 0x10, 0x0, 0x4, 0x4, 0x4, 0xff, 0x4800000000000, 0x200]}) 1.699762163s ago: executing program 2 (id=2460): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x20, 0x1c, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r1}]}, 0x20}], 0x1}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0xffff0000, @private2, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000340)}, {0x0}], 0x2, &(0x7f0000002640)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x4b}}}], 0x18}}], 0x1, 0x4001c00) pwritev(r4, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x4}], 0x10000000000000a3, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002f40)=ANY=[@ANYBLOB="240600001a0001002abd7000000000000a00fc003a2a5e247b00000008061b800106dc"], 0x624}], 0x1, 0x0, 0x0, 0x20400}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x20, 0x1c, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r1}]}, 0x20}], 0x1}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0xffff0000, @private2, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000340)}, {0x0}], 0x2, &(0x7f0000002640)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x4b}}}], 0x18}}], 0x1, 0x4001c00) (async) pwritev(r4, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x4}], 0x10000000000000a3, 0x0, 0x0) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002f40)=ANY=[@ANYBLOB="240600001a0001002abd7000000000000a00fc003a2a5e247b00000008061b800106dc"], 0x624}], 0x1, 0x0, 0x0, 0x20400}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1.48684818s ago: executing program 2 (id=2461): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r3) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000140)='smaps\x00') syz_usb_disconnect(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 1.48652472s ago: executing program 5 (id=2462): open$dir(&(0x7f0000000080)='./file2\x00', 0x20802, 0x8) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d55000905020200020200000905820200020000004359a3da46432b6117863b66254c10219e288532474600c1e1fe13d44962cb1daeaa3bb6c630669eb6f900411c5acc249bf6db4a089d0ad157970f7548347f093eea69da1dc518622c54e7fc22f550a3cba5d65ca8f1e594602fdd95ca486cd4c2dd4bb59113020000000ecac1ca853762f59cc1fdef5b2029f1c485083cc98b79db2e2763077f8cdb2142bfebe2c9502aedff943af2e95a2c7c4d58b69811e6dded91abb8bab53c4024f684ab6478f652c8b060534bcedd14f234713c30b3567a21963a5c50cac47804823d9dae9634b0631ca0d74d5d04ce4b18b512c079be1abd4fb5039e74b496a6b170e09dab0b11f7a7758baebdfc157a85dd40e7f38f7aedd5159700612ff53faa0702fa21c73f554602f3ab781a93b1dc480aab9fb54bd824a7eea1f7a6f3eeb29e34768d4c8457806c9c"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000012c0)={0x24, &(0x7f0000000d80)={0x40, 0x0, 0x4, "5e54b339"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff000660000000000000003030", @ANYRES64], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0xffffff12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.025430787s ago: executing program 0 (id=2463): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005f40)={0x34, r2, 0x1, 0x70bd2d, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x6cb9}]}, 0x34}}, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) 982.290621ms ago: executing program 0 (id=2464): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (async, rerun: 32) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'gretap0\x00'}) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x8, 0x3}}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x714}}, 0x2000c004) (async, rerun: 64) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) (rerun: 64) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r5) (async) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x8a800) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000500)={0x7, 0x1000eaf0, 0x480, 0x0, 0x1}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (rerun: 64) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f470", 0x27, 0x40008c1, 0x0, 0x0) r6 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f00000000c0)={0x6, 'syz_tun\x00', {0xff0}, 0xfcc}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 922.713775ms ago: executing program 0 (id=2465): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f0000000380)=[@dead_binder_done, @exit_looper, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) socket$can_raw(0x1d, 0x3, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r1}, @increfs], 0x0, 0x0, 0x0}) 788.577106ms ago: executing program 2 (id=2466): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x5e1f, 0x7, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)="7957d404736da65f9d132319c6a55a72a932122e28f7a3e15055620509f8ada5e1f0ad3c236813bd7cdf2446fc4483ca047742fc4e5eccadbddd0d809dc47aa57f2f0ca096f3c120c3048ab52f5e23a7478137b13a", 0x55}], 0x1, &(0x7f00000020c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000000000020001000740000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695e85000000a53600d5031b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a5efe6c7115774effe28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c2511eb0f9600a0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe95bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6d997eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e641036a8afa2ccdb47d7990d5a007faccb2f86664179f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab92739be0bdf5b76f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d841c351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918000000000000002900000037"], 0x590}}], 0x1, 0x8000041) 765.928678ms ago: executing program 2 (id=2467): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00"], 0x0) pwritev2(r0, 0x0, 0x0, 0x100000, 0x0, 0x9) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) close_range(r0, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406c256e0000000000000109022400e4ff00000009040000010300000000000001220300090581030000000000bcf3080fdded4684a54246acb3589746f480ddec502bc0b467c09bd433e3ea83da1587955d4a9e68781b39a62ea59f83c9e8"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x18, &(0x7f0000000000)={0x0, 0x0, 0x4, {0x4, 0x0, 'Z}'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x11) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0xc, 0x3332f004, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 78.833334ms ago: executing program 0 (id=2468): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xbd563000) madvise(&(0x7f0000366000/0x2000)=nil, 0x2000, 0x11) write(r0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r1, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000080)={0x5, 0x1, 0x8000, 0x81, 0xf, 0xce74}) 51.986986ms ago: executing program 0 (id=2469): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b99f0800000f3266b837018ec80f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x4c}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000b0000000d00000098"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x6, 0x0, 0x129, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x800, 0x0}, {0x1, 0x0, 0x180000, 0x0}, {0x1, 0x0, 0x3cb0, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x1, 0x0, 0x4e00000, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x7ffffffe, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x200000, 0x0}, {0x1, 0x0, 0x80000002, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=2470): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x20, r4, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@void, @val={0xc}}}}, 0x20}}, 0x0) fchdir(r2) r5 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote}) r7 = socket$inet6(0xa, 0x80002, 0x0) fcntl$addseals(r7, 0x409, 0x2b43439fd6abeb77) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000140)='smaps\x00') syz_usb_disconnect(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.206' (ED25519) to the list of known hosts. [ 23.275551][ T36] audit: type=1400 audit(1756464353.250:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.277001][ T281] cgroup: Unknown subsys name 'net' [ 23.298472][ T36] audit: type=1400 audit(1756464353.250:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.325766][ T36] audit: type=1400 audit(1756464353.280:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.325958][ T281] cgroup: Unknown subsys name 'devices' [ 23.531074][ T281] cgroup: Unknown subsys name 'hugetlb' [ 23.536716][ T281] cgroup: Unknown subsys name 'rlimit' [ 23.631491][ T36] audit: type=1400 audit(1756464353.610:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.654714][ T36] audit: type=1400 audit(1756464353.610:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.679517][ T36] audit: type=1400 audit(1756464353.610:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.692695][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.711675][ T36] audit: type=1400 audit(1756464353.690:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.737362][ T36] audit: type=1400 audit(1756464353.690:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.774594][ T36] audit: type=1400 audit(1756464353.750:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.800303][ T36] audit: type=1400 audit(1756464353.750:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.800367][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.678218][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.685401][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.692570][ T288] bridge_slave_0: entered allmulticast mode [ 24.699187][ T288] bridge_slave_0: entered promiscuous mode [ 24.712598][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.719714][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.726800][ T288] bridge_slave_1: entered allmulticast mode [ 24.733188][ T288] bridge_slave_1: entered promiscuous mode [ 24.742045][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.749248][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.756332][ T290] bridge_slave_0: entered allmulticast mode [ 24.762672][ T290] bridge_slave_0: entered promiscuous mode [ 24.780010][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.787075][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.794332][ T290] bridge_slave_1: entered allmulticast mode [ 24.800632][ T290] bridge_slave_1: entered promiscuous mode [ 24.829555][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.836731][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.844055][ T291] bridge_slave_0: entered allmulticast mode [ 24.850487][ T291] bridge_slave_0: entered promiscuous mode [ 24.860208][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.867287][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.874485][ T289] bridge_slave_0: entered allmulticast mode [ 24.880835][ T289] bridge_slave_0: entered promiscuous mode [ 24.887197][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.894307][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.901467][ T291] bridge_slave_1: entered allmulticast mode [ 24.907742][ T291] bridge_slave_1: entered promiscuous mode [ 24.917796][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.924876][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.931975][ T289] bridge_slave_1: entered allmulticast mode [ 24.938220][ T289] bridge_slave_1: entered promiscuous mode [ 25.088301][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.095502][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.102835][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.109901][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.137789][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.144894][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.152208][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.159276][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.181549][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.188741][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.196043][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.203118][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.224848][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.231931][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.239239][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.246281][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.270937][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.278534][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.286011][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.293490][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.300872][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.308253][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.315711][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.323057][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.346798][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.353934][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.361769][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.368830][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.376374][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.383434][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.395548][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.402743][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.423043][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.430217][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.447170][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.454247][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.463162][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.470241][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.480000][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.487061][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.518026][ T288] veth0_vlan: entered promiscuous mode [ 25.530456][ T291] veth0_vlan: entered promiscuous mode [ 25.552780][ T288] veth1_macvtap: entered promiscuous mode [ 25.564074][ T291] veth1_macvtap: entered promiscuous mode [ 25.605549][ T290] veth0_vlan: entered promiscuous mode [ 25.617571][ T289] veth0_vlan: entered promiscuous mode [ 25.623933][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.632030][ T290] veth1_macvtap: entered promiscuous mode [ 25.689641][ T289] veth1_macvtap: entered promiscuous mode [ 25.757041][ T341] pim6reg1: entered promiscuous mode [ 25.778133][ T341] pim6reg1: entered allmulticast mode [ 25.998537][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.148503][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 26.154898][ T31] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 26.163471][ T31] usb 2-1: config 0 has no interface number 0 [ 26.169950][ T31] usb 2-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 26.180244][ T31] usb 2-1: config 0 interface 214 has no altsetting 0 [ 26.188460][ T330] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.188673][ T31] usb 2-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 26.205107][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.213173][ T31] usb 2-1: Product: syz [ 26.217353][ T31] usb 2-1: Manufacturer: syz [ 26.222067][ T31] usb 2-1: SerialNumber: syz [ 26.227912][ T31] usb 2-1: config 0 descriptor?? [ 26.233277][ T342] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 26.339661][ T330] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.350019][ T330] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 26.359728][ T330] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 26.368925][ T330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 26.376985][ T330] usb 1-1: SerialNumber: syz [ 26.444742][ T342] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 26.540631][ T358] rust_binder: Write failure EFAULT in pid:7 [ 26.560867][ T358] SELinux: failed to load policy [ 26.591766][ T330] usb 1-1: 0:2 : does not exist [ 26.596914][ T330] usb 1-1: unit 5: unexpected type 0x09 [ 26.618832][ T330] usb 1-1: USB disconnect, device number 2 [ 26.623166][ T362] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.679153][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.878449][ T10] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 27.038468][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 27.109698][ T398] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.118508][ T367] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 27.168514][ T10] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 27.291544][ T367] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 27.300687][ T367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.309515][ T367] usb 4-1: config 0 descriptor?? [ 27.328463][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 27.334027][ T10] usb usb3-port1: attempt power cycle [ 27.569076][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 27.678476][ T10] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 27.698811][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 27.721313][ T367] nintendo 0003:057E:200E.0001: unknown main item tag 0x5 [ 27.729430][ T367] nintendo 0003:057E:200E.0001: hidraw0: USB HID v81.01 Device [HID 057e:200e] on usb-dummy_hcd.3-1/input0 [ 27.798555][ T367] nintendo 0003:057E:200E.0001: Failed charging grip handshake [ 27.806189][ T367] nintendo 0003:057E:200E.0001: Failed to initialize controller; ret=-110 [ 27.815991][ T367] nintendo 0003:057E:200E.0001: probe - fail = -110 [ 27.822823][ T367] nintendo 0003:057E:200E.0001: probe with driver nintendo failed with error -110 [ 27.838469][ T10] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 27.859187][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 27.864649][ T10] usb usb3-port1: unable to enumerate USB device [ 27.921089][ T403] ======================================================= [ 27.921089][ T403] WARNING: The mand mount option has been deprecated and [ 27.921089][ T403] and is ignored by this kernel. Remove the mand [ 27.921089][ T403] option from the mount to silence this warning. [ 27.921089][ T403] ======================================================= [ 27.921173][ T396] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 27.956643][ T403] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 27.986130][ T408] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 27.987315][ T408] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.997469][ T408] mmap: syz.0.24 (408) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 28.018457][ T408] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.018510][ T408] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 28.020379][ T10] usb 4-1: USB disconnect, device number 2 [ 28.083832][ T416] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.534492][ T420] rust_binder: Error while translating object. [ 28.541017][ T420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 28.547506][ T420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:37 [ 28.785992][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 28.806582][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 28.818572][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.818737][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 28.837473][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 28.848638][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 28.859667][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 28.870890][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 28.882103][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 28.893326][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 28.904604][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 28.915916][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 28.927410][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 28.938670][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 28.949996][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 28.955339][ T428] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.960927][ T10] usb 4-1: device descriptor read/64, error -71 [ 28.961124][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 28.974217][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 28.996269][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 29.007536][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 29.019078][ T31] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 29.032944][ T31] ax88179_178a 2-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 24:20:d5:0c:c6:e4 [ 29.051072][ T31] usb 2-1: USB disconnect, device number 2 [ 29.057557][ T31] ax88179_178a 2-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 29.077477][ T36] kauditd_printk_skb: 100 callbacks suppressed [ 29.077497][ T36] audit: type=1400 audit(1756464359.050:174): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.112753][ T36] audit: type=1400 audit(1756464359.090:175): avc: denied { create } for pid=434 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 29.132057][ T36] audit: type=1400 audit(1756464359.090:176): avc: denied { connect } for pid=434 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 29.151428][ T36] audit: type=1400 audit(1756464359.090:177): avc: denied { ioctl } for pid=434 comm="syz.0.31" path="socket:[4299]" dev="sockfs" ino=4299 ioctlcmd=0xae82 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 29.175602][ T36] audit: type=1400 audit(1756464359.090:178): avc: denied { read } for pid=434 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 29.196674][ T36] audit: type=1400 audit(1756464359.090:179): avc: denied { write } for pid=434 comm="syz.0.31" path="socket:[4300]" dev="sockfs" ino=4300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 29.206374][ T439] rust_binder: Error while translating object. [ 29.219912][ T10] usb 4-1: device descriptor read/64, error -71 [ 29.221540][ T439] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 29.227016][ T36] audit: type=1400 audit(1756464359.090:180): avc: denied { setopt } for pid=434 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.243004][ T439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:43 [ 29.261120][ T36] audit: type=1400 audit(1756464359.150:181): avc: denied { ioctl } for pid=436 comm="syz.0.32" path="socket:[4313]" dev="sockfs" ino=4313 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.295064][ T36] audit: type=1400 audit(1756464359.150:182): avc: denied { setattr } for pid=436 comm="syz.0.32" name="NETLINK" dev="sockfs" ino=4311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.318639][ T36] audit: type=1400 audit(1756464359.150:183): avc: denied { create } for pid=436 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 29.458460][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.598472][ T10] usb 4-1: device descriptor read/64, error -71 [ 29.713677][ T469] rust_binder: Error while translating object. [ 29.713705][ T469] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.720004][ T469] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 29.729574][ T469] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:13 [ 29.747824][ T31] rust_binder: 468: removing orphan mapping 0:24 [ 29.848567][ T10] usb 4-1: device descriptor read/64, error -71 [ 29.898434][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.958780][ T10] usb usb4-port1: attempt power cycle [ 29.968447][ T425] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.038440][ T9] usb 2-1: device descriptor read/64, error -71 [ 30.118460][ T425] usb 1-1: Using ep0 maxpacket: 32 [ 30.124863][ T425] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 30.133356][ T425] usb 1-1: config 0 has no interface number 0 [ 30.139864][ T425] usb 1-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 30.150237][ T425] usb 1-1: config 0 interface 214 has no altsetting 0 [ 30.164712][ T425] usb 1-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 30.175576][ T425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.183932][ T425] usb 1-1: Product: syz [ 30.188302][ T425] usb 1-1: Manufacturer: syz [ 30.193250][ T425] usb 1-1: SerialNumber: syz [ 30.199612][ T425] usb 1-1: config 0 descriptor?? [ 30.208365][ T472] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 30.298491][ T9] usb 2-1: device descriptor read/64, error -71 [ 30.305035][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 30.329919][ T10] usb 4-1: device descriptor read/8, error -71 [ 30.365230][ T492] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 30.415790][ T493] rust_binder: Write failure EINVAL in pid:33 [ 30.419659][ T472] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 30.479558][ T10] usb 4-1: device descriptor read/8, error -71 [ 30.548449][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.678454][ T9] usb 2-1: device descriptor read/64, error -71 [ 30.718460][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 30.739548][ T10] usb 4-1: device descriptor read/8, error -71 [ 30.869544][ T10] usb 4-1: device descriptor read/8, error -71 [ 30.918446][ T9] usb 2-1: device descriptor read/64, error -71 [ 30.978555][ T10] usb usb4-port1: unable to enumerate USB device [ 31.028547][ T9] usb usb2-port1: attempt power cycle [ 31.158823][ T497] fuse: Bad value for 'fd' [ 31.368866][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 31.389491][ T9] usb 2-1: device descriptor read/8, error -71 [ 31.519632][ T9] usb 2-1: device descriptor read/8, error -71 [ 31.548883][ T425] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 31.606590][ T510] capability: warning: `syz.3.55' uses deprecated v2 capabilities in a way that may be insecure [ 31.758447][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 31.779579][ T9] usb 2-1: device descriptor read/8, error -71 [ 31.909594][ T9] usb 2-1: device descriptor read/8, error -71 [ 32.018530][ T9] usb usb2-port1: unable to enumerate USB device [ 32.368440][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 32.519675][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.529641][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.547477][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 32.550969][ T524] 9pnet_fd: Insufficient options for proto=fd [ 32.557092][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.570961][ T425] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 32.576948][ T31] usb 3-1: config 0 descriptor?? [ 32.592862][ T526] fuse: Bad value for 'fd' [ 32.597605][ T425] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 32.608862][ T425] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 32.620210][ T425] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 32.631499][ T425] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 32.642765][ T425] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 32.654084][ T425] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 32.665203][ T425] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 32.676662][ T425] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 32.687911][ T425] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 32.708471][ T425] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 32.719912][ T425] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 32.731419][ T425] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 32.742662][ T425] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 32.753864][ T425] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 32.766963][ T425] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 32.778339][ T425] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 32.797788][ T425] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 32.812806][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 32.818592][ T425] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 32.828515][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 32.830882][ T425] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 32.841311][ T367] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 32.856962][ T31] usb 3-1: USB disconnect, device number 6 [ 32.870602][ T425] ax88179_178a 1-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 24:20:d5:0c:c6:e4 [ 32.871485][ T534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 32.890494][ T425] usb 1-1: USB disconnect, device number 3 [ 32.907272][ T425] ax88179_178a 1-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 32.976062][ T538] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 33.008423][ T367] usb 4-1: Using ep0 maxpacket: 8 [ 33.034144][ T367] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 72, changing to 10 [ 33.058446][ T367] usb 4-1: config 1 interface 0 has no altsetting 0 [ 33.066555][ T367] usb 4-1: New USB device found, idVendor=046d, idProduct=4002, bcdDevice= 0.40 [ 33.078415][ T367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.086442][ T367] usb 4-1: Product: î­ì¬—푆뛈㬚嗂㉑ꈡé¼á¬¯7㌀쎔ᰋ꠆ꀯ䳤ä‘㓰昅ド⺭⃗臫ࠣ릨蹢ì²ë“¶á‹¦æ†¬çž•é®¨êˆ ç¦ç†Šâ—˜æ©¨î™®î¸›ä‰ˆ [ 33.115706][ T367] usb 4-1: Manufacturer: ည [ 33.121693][ T367] usb 4-1: SerialNumber: Э [ 33.136713][ T546] /dev/rnullb0: Can't open blockdev [ 33.271273][ T552] rust_binder: Write failure EFAULT in pid:23 [ 33.348090][ T367] usbhid 4-1:1.0: can't add hid device: -71 [ 33.371918][ T367] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 33.380507][ T561] /dev/rnullb0: Can't open blockdev [ 33.392279][ T367] usb 4-1: USB disconnect, device number 7 [ 33.448585][ T425] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.608429][ T425] usb 1-1: Using ep0 maxpacket: 8 [ 33.614770][ T425] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.624981][ T425] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 33.634333][ T425] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.643489][ T425] usb 1-1: config 0 descriptor?? [ 33.708442][ T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 33.858434][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 33.875162][ T45] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 33.894917][ T45] usb 2-1: config 0 has no interface number 0 [ 33.908654][ T45] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.928546][ T45] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.939054][ T45] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 33.948330][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.957446][ T45] usb 2-1: config 0 descriptor?? [ 34.059777][ T425] kone 0003:1E7D:2CED.0002: item fetching failed at offset 0/2 [ 34.072322][ T425] kone 0003:1E7D:2CED.0002: parse failed [ 34.078085][ T425] kone 0003:1E7D:2CED.0002: probe with driver kone failed with error -22 [ 34.158511][ T367] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 34.274976][ T31] usb 1-1: USB disconnect, device number 4 [ 34.285235][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 34.285256][ T36] audit: type=1400 audit(1756464364.260:216): avc: denied { write } for pid=589 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 34.318446][ T367] usb 4-1: Using ep0 maxpacket: 32 [ 34.329111][ T367] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 34.337399][ T367] usb 4-1: config 0 has no interface number 0 [ 34.343793][ T367] usb 4-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 34.355649][ T367] usb 4-1: config 0 interface 214 has no altsetting 0 [ 34.363852][ T367] usb 4-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 34.373067][ T367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.384273][ T367] usb 4-1: Product: syz [ 34.388561][ T367] usb 4-1: Manufacturer: syz [ 34.393334][ T367] usb 4-1: SerialNumber: syz [ 34.401485][ T367] usb 4-1: config 0 descriptor?? [ 34.406811][ T575] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 34.484368][ T599] tmpfs: Unknown parameter '00000000000000000000000' [ 34.491903][ T36] audit: type=1400 audit(1756464364.470:217): avc: denied { read } for pid=598 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.581769][ T45] uclogic 0003:28BD:0094.0003: pen parameters not found [ 34.588955][ T45] uclogic 0003:28BD:0094.0003: interface is invalid, ignoring [ 34.615537][ T575] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 34.783636][ T425] usb 2-1: USB disconnect, device number 7 [ 35.026482][ T603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:79 [ 35.040201][ T36] audit: type=1400 audit(1756464365.020:218): avc: denied { setopt } for pid=604 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.096969][ T36] audit: type=1400 audit(1756464365.070:219): avc: denied { write } for pid=608 comm="syz.2.87" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.101455][ T610] input: syz1 as /devices/virtual/input/input4 [ 35.127453][ T36] audit: type=1400 audit(1756464365.100:220): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=457 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.150743][ T36] audit: type=1400 audit(1756464365.100:221): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=457 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.174080][ T36] audit: type=1400 audit(1756464365.100:222): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=457 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.268435][ T614] rust_binder: Write failure EFAULT in pid:90 [ 35.313097][ T36] audit: type=1400 audit(1756464365.290:223): avc: denied { bind } for pid=621 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.339779][ T36] audit: type=1400 audit(1756464365.320:224): avc: denied { attach_queue } for pid=621 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 35.360899][ T622] wireguard: wg2: Could not create IPv4 socket [ 35.371022][ T36] audit: type=1400 audit(1756464365.340:225): avc: denied { ioctl } for pid=621 comm="syz.1.91" path="socket:[5086]" dev="sockfs" ino=5086 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.748909][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 36.082789][ T652] netlink: 57 bytes leftover after parsing attributes in process `syz.0.103'. [ 36.098241][ T652] fuse: Unknown parameter 'useá…~.¤¯…/‰0WÛ´ÿ£_¶Dr_id' [ 36.291155][ T674] incfs: Error accessing: ./file0. [ 36.296370][ T674] incfs: mount failed -2 [ 36.316769][ T681] fuse: Bad value for 'fd' [ 36.321745][ T681] raw_sendmsg: syz.1.113 forgot to set AF_INET. Fix it! [ 36.390142][ T698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'. [ 36.598470][ T712] overlayfs: failed to resolve './file0': -2 [ 36.763795][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 36.775080][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 36.786265][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 36.797592][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 36.809254][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 36.820886][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 36.832023][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 36.843064][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 36.854625][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 36.865893][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 36.877147][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 36.888345][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 36.899567][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 36.911217][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 36.922328][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 36.933450][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 36.944726][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 36.955847][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 36.967055][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 36.978217][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.990935][ T367] ax88179_178a 4-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.3-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 24:20:d5:0c:c6:e4 [ 37.008254][ T367] usb 4-1: USB disconnect, device number 8 [ 37.014844][ T367] ax88179_178a 4-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.3-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 37.314718][ T789] rust_binder: Write failure EFAULT in pid:68 [ 37.368438][ T619] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 37.377311][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 37.618482][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 37.688614][ T494] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 37.768451][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 37.775026][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 37.783661][ T31] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 37.791930][ T31] usb 4-1: config 0 has no interface number 0 [ 37.798034][ T31] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 37.809048][ T31] usb 4-1: config 0 interface 88 has no altsetting 0 [ 37.817852][ T31] usb 4-1: string descriptor 0 read error: -22 [ 37.824159][ T31] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 37.833296][ T31] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 37.845453][ T31] usb 4-1: config 0 descriptor?? [ 37.856980][ T494] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.858060][ T31] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input6 [ 37.872424][ T494] usb 3-1: config 0 has no interfaces? [ 37.889072][ T812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 37.904088][ T494] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 37.913504][ T494] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 37.921694][ T494] usb 3-1: Product: syz [ 37.925972][ T494] usb 3-1: Manufacturer: syz [ 37.931406][ T494] usb 3-1: SerialNumber: syz [ 37.936805][ T494] usb 3-1: config 0 descriptor?? [ 38.005915][ T828] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.059318][ T31] usb 4-1: USB disconnect, device number 9 [ 38.145291][ T494] usb 3-1: USB disconnect, device number 7 [ 38.688316][ T855] rust_binder: Write failure EFAULT in pid:106 [ 38.938456][ T425] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 38.978433][ T404] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 39.018222][ T889] fuse: Bad value for 'user_id' [ 39.023160][ T889] fuse: Bad value for 'user_id' [ 39.029425][ T889] overlayfs: failed to clone lowerpath [ 39.108435][ T425] usb 4-1: Using ep0 maxpacket: 8 [ 39.119473][ T425] usb 4-1: unable to get BOS descriptor or descriptor too short [ 39.127873][ T425] usb 4-1: config 6 has an invalid interface number: 215 but max is 0 [ 39.138573][ T404] usb 3-1: Using ep0 maxpacket: 8 [ 39.138696][ T425] usb 4-1: config 6 has no interface number 0 [ 39.145028][ T404] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 39.158749][ T425] usb 4-1: config 6 interface 215 altsetting 5 endpoint 0xB has invalid maxpacket 1999, setting to 1024 [ 39.170985][ T404] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 39.172533][ T425] usb 4-1: config 6 interface 215 altsetting 5 bulk endpoint 0xB has invalid maxpacket 1024 [ 39.185399][ T404] usb 3-1: config 0 interface 0 has no altsetting 0 [ 39.185437][ T404] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 39.211701][ T425] usb 4-1: config 6 interface 215 altsetting 5 bulk endpoint 0x6 has invalid maxpacket 64 [ 39.211793][ T404] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.228448][ T425] usb 4-1: config 6 interface 215 has no altsetting 0 [ 39.231902][ T404] usb 3-1: config 0 descriptor?? [ 39.243063][ T425] usb 4-1: New USB device found, idVendor=0c52, idProduct=2442, bcdDevice=f8.3f [ 39.258429][ T425] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.266480][ T425] usb 4-1: Product: syz [ 39.271146][ T425] usb 4-1: Manufacturer: syz [ 39.276227][ T425] usb 4-1: SerialNumber: syz [ 39.289064][ T850] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 39.296512][ T850] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 39.330300][ T36] kauditd_printk_skb: 43 callbacks suppressed [ 39.330320][ T36] audit: type=1400 audit(1756464369.310:269): avc: denied { create } for pid=909 comm="syz.1.184" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 39.429897][ T920] Zero length message leads to an empty skb [ 39.475762][ T923] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 39.490811][ T36] audit: type=1400 audit(1756464369.470:270): avc: denied { map } for pid=922 comm="syz.0.189" path="socket:[5933]" dev="sockfs" ino=5933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 39.519221][ T850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.531893][ T850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.542356][ T425] ftdi_sio 4-1:6.215: FTDI USB Serial Device converter detected [ 39.552468][ T425] ftdi_sio ttyUSB0: unknown device type: 0xf83f [ 39.565305][ T425] usb 4-1: USB disconnect, device number 10 [ 39.583227][ T425] ftdi_sio 4-1:6.215: device disconnected [ 39.640456][ T36] audit: type=1400 audit(1756464369.620:271): avc: denied { mount } for pid=937 comm="syz.1.193" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 39.649976][ T404] gt683r_led 0003:1770:FF00.0004: invalid report_size -795022069 [ 39.670678][ T404] gt683r_led 0003:1770:FF00.0004: item 0 4 1 7 parsing failed [ 39.680971][ T404] gt683r_led 0003:1770:FF00.0004: hid parsing failed [ 39.687807][ T404] gt683r_led 0003:1770:FF00.0004: probe with driver gt683r_led failed with error -22 [ 39.874216][ T948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.882939][ T948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.929571][ T10] usb 3-1: USB disconnect, device number 8 [ 40.051339][ T36] audit: type=1400 audit(1756464370.030:272): avc: denied { create } for pid=958 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 40.109897][ T966] rust_binder: Write failure EFAULT in pid:81 [ 40.161037][ T36] audit: type=1400 audit(1756464370.140:273): avc: denied { append } for pid=974 comm="syz.3.205" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.430700][ T36] audit: type=1400 audit(1756464370.410:274): avc: denied { bind } for pid=982 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.521272][ T990] tipc: Enabling of bearer rejected, failed to enable media [ 40.530104][ T990] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 40.721799][ T992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=992 comm=syz.0.212 [ 40.734444][ T992] netlink: 32 bytes leftover after parsing attributes in process `syz.0.212'. [ 40.743926][ T992] netlink: 44 bytes leftover after parsing attributes in process `syz.0.212'. [ 40.752836][ T992] netlink: 43 bytes leftover after parsing attributes in process `syz.0.212'. [ 40.761828][ T992] netlink: 'syz.0.212': attribute type 6 has an invalid length. [ 40.769616][ T992] netlink: 'syz.0.212': attribute type 5 has an invalid length. [ 40.777368][ T992] netlink: 43 bytes leftover after parsing attributes in process `syz.0.212'. [ 40.786754][ T992] netlink: 'syz.0.212': attribute type 29 has an invalid length. [ 40.882785][ T36] audit: type=1400 audit(1756464370.860:275): avc: denied { create } for pid=1000 comm="syz.0.215" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.903410][ T36] audit: type=1400 audit(1756464370.860:276): avc: denied { write } for pid=1000 comm="syz.0.215" name="file0" dev="tmpfs" ino=582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.930149][ T36] audit: type=1400 audit(1756464370.860:277): avc: denied { open } for pid=1000 comm="syz.0.215" path="/103/file0" dev="tmpfs" ino=582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.953003][ T36] audit: type=1400 audit(1756464370.860:278): avc: denied { ioctl } for pid=1000 comm="syz.0.215" path="/103/file0" dev="tmpfs" ino=582 ioctlcmd=0x1263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.040590][ T1023] overlayfs: disabling nfs_export due to verity=require [ 41.047640][ T1023] overlayfs: missing 'workdir' [ 41.121116][ T1034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:130 [ 41.123570][ T1034] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 41.133108][ T1034] rust_binder: Read failure Err(EFAULT) in pid:130 [ 41.543135][ T1062] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 41.979215][ T31] rust_binder: 1072: removing orphan mapping 0:24 [ 42.018046][ T1080] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 42.370865][ T1123] overlayfs: failed to clone upperpath [ 42.408606][ T10] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 42.556986][ T1153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 42.584633][ T1153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.262'. [ 42.602343][ T10] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 42.618857][ T10] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 64, setting to 8 [ 42.629938][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 42.638315][ T10] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.40 [ 42.647694][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.667690][ T10] usb 3-1: Product: à „ [ 42.672106][ T10] usb 3-1: Manufacturer: áˆê³­ç€´å©œé³…ꕉ轕ï³é¡è¦áŸ‡ç¨ŸìŸµè˜Šè‚ºï‹ªî½ä½¿í‡·í‘¤æˆ“徾䴮á•êŒ­ï­€â¿›å‹¹ì¬‡êºƒï²šè½¾íˆ§îŸ†ç¬žê˜®çŠ›îªšåŠéˆ·è­±áª¦ [ 42.688235][ T10] usb 3-1: SerialNumber: ဠ[ 42.699136][ T1093] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 42.706448][ T1093] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 42.993620][ T1162] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 43.140463][ T10] usbhid 3-1:1.0: can't add hid device: -71 [ 43.148448][ T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 43.167862][ T10] usb 3-1: USB disconnect, device number 9 [ 43.512790][ T1190] rust_binder: Write failure EFAULT in pid:108 [ 43.630879][ T1214] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.688442][ T1227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:114 [ 43.695093][ T1227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:114 [ 43.744807][ T1231] netlink: 'syz.1.300': attribute type 4 has an invalid length. [ 43.764600][ T1231] netlink: 'syz.1.300': attribute type 4 has an invalid length. [ 43.774207][ T1231] af_packet: tpacket_rcv: packet too big, clamped from 65532 to 3944. macoff=96 [ 43.803618][ T1233] devtmpfs: Unknown parameter 'fuse' [ 43.918450][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 43.929671][ T1255] overlayfs: failed to clone upperpath [ 44.079585][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.089811][ T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 44.098759][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 44.113158][ T31] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 44.122849][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.130947][ T31] usb 3-1: Product: syz [ 44.135245][ T31] usb 3-1: Manufacturer: syz [ 44.139952][ T31] usb 3-1: SerialNumber: syz [ 44.145811][ T31] usb 3-1: config 0 descriptor?? [ 44.436661][ T9] usb 3-1: USB disconnect, device number 10 [ 44.679274][ T1283] capability: warning: `syz.1.319' uses 32-bit capabilities (legacy support in use) [ 44.691702][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 44.691721][ T36] audit: type=1400 audit(1756464374.670:301): avc: denied { accept } for pid=1284 comm="syz.3.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.968885][ T1305] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.969245][ T1305] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 44.983127][ T1305] rust_binder: Write failure EINVAL in pid:162 [ 44.983445][ T1305] rust_binder: 162: no such ref 3 [ 44.994789][ T1305] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 45.001886][ T1305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:162 [ 45.017235][ T1305] rust_binder: 162: no such ref 0 [ 45.193168][ T36] audit: type=1400 audit(1756464375.170:302): avc: denied { getopt } for pid=1310 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 45.379817][ T36] audit: type=1400 audit(1756464375.360:303): avc: denied { mount } for pid=1341 comm="syz.0.339" name="/" dev="configfs" ino=1658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 45.403365][ T36] audit: type=1400 audit(1756464375.380:304): avc: denied { search } for pid=1341 comm="syz.0.339" name="/" dev="configfs" ino=1658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.426348][ T36] audit: type=1400 audit(1756464375.380:305): avc: denied { write } for pid=1341 comm="syz.0.339" name="/" dev="configfs" ino=1658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.449201][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 45.588422][ T31] usb 3-1: device descriptor read/64, error -71 [ 45.603226][ T1372] netlink: 72 bytes leftover after parsing attributes in process `syz.1.349'. [ 45.696629][ T1387] overlayfs: missing 'lowerdir' [ 45.703741][ T1387] overlayfs: missing 'lowerdir' [ 45.848455][ T31] usb 3-1: device descriptor read/64, error -71 [ 45.948428][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 45.998637][ T36] audit: type=1400 audit(1756464375.980:306): avc: denied { write } for pid=1421 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.098444][ T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 46.099670][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 46.117331][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 46.126476][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.134513][ T10] usb 4-1: Product: syz [ 46.138726][ T10] usb 4-1: Manufacturer: syz [ 46.143376][ T10] usb 4-1: SerialNumber: syz [ 46.148969][ T10] usb 4-1: config 0 descriptor?? [ 46.228568][ T31] usb 3-1: device descriptor read/64, error -71 [ 46.468467][ T31] usb 3-1: device descriptor read/64, error -71 [ 46.578556][ T31] usb usb3-port1: attempt power cycle [ 46.918498][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 46.946867][ T31] usb 3-1: device descriptor read/8, error -71 [ 47.079506][ T31] usb 3-1: device descriptor read/8, error -71 [ 47.123371][ T1432] netlink: 'syz.1.369': attribute type 12 has an invalid length. [ 47.165625][ T1434] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 47.176010][ T36] audit: type=1400 audit(1756464377.150:307): avc: denied { relabelto } for pid=1433 comm="syz.1.370" name=6D656D66643A2F2E2F2F5C2602272A2A dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 47.205651][ T36] audit: type=1400 audit(1756464377.150:308): avc: denied { associate } for pid=1433 comm="syz.1.370" name=6D656D66643A2F2E2F2F5C2602272A2A dev="tmpfs" ino=49 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 47.328442][ T31] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 47.349564][ T31] usb 3-1: device descriptor read/8, error -71 [ 47.479517][ T31] usb 3-1: device descriptor read/8, error -71 [ 47.588585][ T31] usb usb3-port1: unable to enumerate USB device [ 47.721156][ T1436] bridge0: port 3(ip6gretap0) entered blocking state [ 47.728017][ T1436] bridge0: port 3(ip6gretap0) entered disabled state [ 47.735468][ T1436] ip6gretap0: entered allmulticast mode [ 47.741949][ T1436] ip6gretap0: entered promiscuous mode [ 47.747902][ T1436] bridge0: port 3(ip6gretap0) entered blocking state [ 47.754700][ T1436] bridge0: port 3(ip6gretap0) entered forwarding state [ 47.764517][ T36] audit: type=1400 audit(1756464377.740:309): avc: denied { create } for pid=1435 comm="syz.1.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 47.784823][ T36] audit: type=1400 audit(1756464377.740:310): avc: denied { sys_admin } for pid=1435 comm="syz.1.371" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 47.855769][ T1444] overlayfs: failed to clone lowerpath [ 48.480544][ T1453] __vm_enough_memory: pid: 1453, comm: syz.2.376, bytes: 18014402804453376 not enough memory for the allocation [ 48.725540][ T10] usb 4-1: USB disconnect, device number 11 [ 48.731247][ T1485] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 48.731741][ T1485] rust_binder: Failed to allocate buffer. len:1144, is_oneway:false [ 48.863092][ T1520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.872103][ T1520] rust_binder: Error while translating object. [ 48.878670][ T1520] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 48.884960][ T1520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:146 [ 49.072361][ T1522] tmpfs: Invalid uid '0x00000000ffffffff' [ 49.668968][ T1545] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.669001][ T1545] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.885806][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 49.885827][ T36] audit: type=1400 audit(1756464379.860:326): avc: denied { create } for pid=1575 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 49.920109][ T36] audit: type=1400 audit(1756464379.900:327): avc: denied { ioctl } for pid=1577 comm="syz.0.413" path="socket:[9655]" dev="sockfs" ino=9655 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.961886][ T1583] rust_binder: 163: no such ref 2 [ 50.480470][ T1590] __vm_enough_memory: pid: 1590, comm: syz.2.417, bytes: 21199821664256 not enough memory for the allocation [ 50.515466][ T1596] netlink: 'syz.2.420': attribute type 4 has an invalid length. [ 50.526101][ T1597] netlink: 'syz.2.420': attribute type 4 has an invalid length. [ 50.666111][ T1623] rust_binder: 197: no such ref 0 [ 50.908454][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 51.058461][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 51.065131][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 51.073590][ T9] usb 3-1: config 1 interface 0 altsetting 106 bulk endpoint 0x1 has invalid maxpacket 64 [ 51.083566][ T9] usb 3-1: config 1 interface 0 altsetting 106 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 51.103139][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 51.112934][ T9] usb 3-1: string descriptor 0 read error: -22 [ 51.119235][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 51.128472][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.141273][ T1623] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 51.148583][ T1623] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 51.244774][ T1643] netlink: 'syz.3.435': attribute type 19 has an invalid length. [ 51.252728][ T1643] netlink: 5 bytes leftover after parsing attributes in process `syz.3.435'. [ 51.362632][ T1623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.371282][ T1623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.498662][ T1656] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 51.505950][ T1656] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 51.553663][ T36] audit: type=1400 audit(1756464381.530:328): avc: denied { bind } for pid=1654 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.575766][ T404] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 51.729557][ T404] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 51.740564][ T404] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 51.749654][ T404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.758640][ T404] usb 4-1: config 0 descriptor?? [ 51.763944][ T1643] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 51.862845][ T36] audit: type=1400 audit(1756464381.840:329): avc: denied { write } for pid=1660 comm="syz.0.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.973458][ T404] usbhid 4-1:0.0: can't add hid device: -71 [ 51.979567][ T404] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 51.988230][ T404] usb 4-1: USB disconnect, device number 12 [ 52.398350][ T36] audit: type=1400 audit(1756464382.370:330): avc: denied { mount } for pid=1690 comm="syz.0.454" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.507464][ T36] audit: type=1400 audit(1756464382.480:331): avc: denied { ioctl } for pid=1714 comm="syz.0.462" path="socket:[10014]" dev="sockfs" ino=10014 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.602854][ T36] audit: type=1400 audit(1756464382.580:332): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.674258][ T1741] syz.3.471: attempt to access beyond end of device [ 52.674258][ T1741] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 52.756466][ T1744] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.069736][ T36] audit: type=1400 audit(1756464383.050:333): avc: denied { mounton } for pid=1758 comm="syz.1.476" path="/159/file0" dev="tmpfs" ino=882 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 53.100801][ T1759] 9pnet_fd: p9_fd_create_unix (1759): problem connecting socket: ./file0: -111 [ 53.258534][ T1773] netlink: 76 bytes leftover after parsing attributes in process `syz.1.482'. [ 53.268041][ T1774] netlink: 76 bytes leftover after parsing attributes in process `syz.1.482'. [ 53.350351][ T1788] batadv_slave_0: entered promiscuous mode [ 53.357364][ T1788] batadv_slave_0: left promiscuous mode [ 53.413013][ T1801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1801 comm=syz.0.490 [ 53.502778][ T36] audit: type=1400 audit(1756464383.480:334): avc: denied { getopt } for pid=1814 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.626521][ T1818] rust_binder: 200: no such ref 3 [ 53.632824][ T1819] rust_binder: 200: no such ref 3 [ 53.694190][ T36] audit: type=1400 audit(1756464383.660:335): avc: denied { create } for pid=1817 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 53.707083][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 106 proto 1 vid 0x0525 pid 0xA4A8 [ 53.728078][ T9] usb 3-1: USB disconnect, device number 15 [ 53.737016][ T9] usblp0: removed [ 53.795418][ T1829] netlink: 'syz.3.497': attribute type 12 has an invalid length. [ 54.348822][ T1838] netlink: 'syz.1.501': attribute type 16 has an invalid length. [ 54.356700][ T1838] netlink: 'syz.1.501': attribute type 3 has an invalid length. [ 54.364597][ T1838] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.501'. [ 54.648336][ T1852] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.648880][ T1853] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 54.662722][ T1853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:215 [ 54.778500][ T1861] pim6reg1: entered promiscuous mode [ 54.793456][ T1861] pim6reg1: entered allmulticast mode [ 54.905837][ T1870] fuse: Unknown parameter 'ø¥0x0000000000000005' [ 54.919011][ T1872] 9pnet_fd: Insufficient options for proto=fd [ 54.970342][ T1885] 9pnet_fd: Insufficient options for proto=fd [ 54.993311][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 54.993331][ T36] audit: type=1400 audit(1756464384.970:337): avc: denied { getopt } for pid=1888 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.030552][ T1887] netlink: 200 bytes leftover after parsing attributes in process `syz.0.520'. [ 55.039585][ T1887] tc_dump_action: action bad kind [ 55.065087][ T36] audit: type=1400 audit(1756464385.040:338): avc: denied { map } for pid=1895 comm="syz.0.523" path="socket:[10401]" dev="sockfs" ino=10401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.088135][ T36] audit: type=1400 audit(1756464385.040:339): avc: denied { read } for pid=1895 comm="syz.0.523" path="socket:[10401]" dev="sockfs" ino=10401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.118435][ T367] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 55.268451][ T367] usb 4-1: Using ep0 maxpacket: 32 [ 55.274846][ T367] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 55.283133][ T367] usb 4-1: config 0 has no interface number 0 [ 55.289342][ T367] usb 4-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 55.299378][ T367] usb 4-1: config 0 interface 214 has no altsetting 0 [ 55.307718][ T367] usb 4-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 55.316851][ T367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.324987][ T367] usb 4-1: Product: syz [ 55.329207][ T367] usb 4-1: Manufacturer: syz [ 55.333866][ T367] usb 4-1: SerialNumber: syz [ 55.339249][ T367] usb 4-1: config 0 descriptor?? [ 55.344531][ T1863] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 55.553369][ T1863] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 55.591308][ T1920] fuse: Unknown parameter 'smackfsdef' [ 55.699519][ T1931] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 55.706526][ T1932] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 55.808955][ T36] audit: type=1400 audit(1756464385.790:340): avc: denied { map } for pid=1951 comm="syz.0.545" path="socket:[11546]" dev="sockfs" ino=11546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.035647][ T36] audit: type=1400 audit(1756464386.010:341): avc: denied { bind } for pid=1967 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.054952][ T36] audit: type=1400 audit(1756464386.010:342): avc: denied { name_bind } for pid=1967 comm="syz.1.551" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 56.075725][ T36] audit: type=1400 audit(1756464386.010:343): avc: denied { node_bind } for pid=1967 comm="syz.1.551" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 56.096627][ T36] audit: type=1400 audit(1756464386.010:344): avc: denied { read } for pid=1967 comm="syz.1.551" path="socket:[10458]" dev="sockfs" ino=10458 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.222298][ T733] ip6gretap0: left allmulticast mode [ 56.227723][ T733] ip6gretap0: left promiscuous mode [ 56.233113][ T733] bridge0: port 3(ip6gretap0) entered disabled state [ 56.240755][ T733] bridge_slave_1: left allmulticast mode [ 56.246572][ T733] bridge_slave_1: left promiscuous mode [ 56.252610][ T733] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.261346][ T733] bridge_slave_0: left allmulticast mode [ 56.267455][ T733] bridge_slave_0: left promiscuous mode [ 56.273457][ T733] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.348130][ T36] audit: type=1400 audit(1756464386.320:345): avc: denied { mounton } for pid=1980 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.391217][ T1980] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.398296][ T1980] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.405569][ T1980] bridge_slave_0: entered allmulticast mode [ 56.412118][ T1980] bridge_slave_0: entered promiscuous mode [ 56.419586][ T733] veth1_macvtap: left promiscuous mode [ 56.425143][ T733] veth0_vlan: left promiscuous mode [ 56.491346][ T1980] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.498773][ T1980] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.505871][ T1980] bridge_slave_1: entered allmulticast mode [ 56.512307][ T1980] bridge_slave_1: entered promiscuous mode [ 56.566429][ T1980] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.573567][ T1980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.580938][ T1980] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.587993][ T1980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.611142][ T734] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.618695][ T734] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.628062][ T724] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.635173][ T724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.644503][ T734] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.651594][ T734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.678957][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 56.680824][ T1980] veth0_vlan: entered promiscuous mode [ 56.702580][ T1980] veth1_macvtap: entered promiscuous mode [ 56.723055][ T36] audit: type=1400 audit(1756464386.700:346): avc: denied { mounton } for pid=1980 comm="syz-executor" path="/root/syzkaller.geSAEf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.771981][ T2002] rust_binder: 2: no such ref 3 [ 56.777007][ T2002] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 56.894490][ T2011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.566'. [ 56.905441][ T2011] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 56.914257][ T2011] rust_binder: Write failure EINVAL in pid:8 [ 57.899594][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 57.917439][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 57.930899][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 57.942599][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 57.957864][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 57.974066][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 57.985624][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 57.998153][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 58.021347][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 58.047736][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 58.074353][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 58.104232][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 58.136334][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 58.159848][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 58.181767][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 58.215487][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 58.228464][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 58.241836][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 58.261598][ T367] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 58.298525][ T367] ax88179_178a 4-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.3-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 24:20:d5:0c:c6:e4 [ 58.324678][ T367] usb 4-1: USB disconnect, device number 13 [ 58.356409][ T367] ax88179_178a 4-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.3-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 58.828456][ T367] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 58.854641][ T2118] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 58.893642][ T2120] process 'syz.2.593' launched './file1' with NULL argv: empty string added [ 58.978460][ T367] usb 4-1: Using ep0 maxpacket: 32 [ 58.984882][ T367] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.996884][ T367] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 59.006136][ T367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.014180][ T367] usb 4-1: Product: syz [ 59.018437][ T367] usb 4-1: Manufacturer: syz [ 59.023072][ T367] usb 4-1: SerialNumber: syz [ 59.028342][ T367] usb 4-1: config 0 descriptor?? [ 59.034245][ T367] usb 4-1: bad CDC descriptors [ 59.039319][ T367] usb 4-1: unsupported MDLM descriptors [ 59.235400][ T2100] rust_binder: Failed copying into alloc: EFAULT [ 59.235421][ T2100] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 59.241968][ T2100] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 59.250345][ T2100] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:233 [ 59.261216][ T9] usb 4-1: USB disconnect, device number 14 [ 59.678503][ T2150] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 59.686835][ T2150] rust_binder: Write failure EINVAL in pid:53 [ 59.876005][ T2170] netlink: 'syz.4.606': attribute type 4 has an invalid length. [ 60.008448][ T425] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 60.159853][ T425] usb 4-1: unable to get BOS descriptor or descriptor too short [ 60.168149][ T425] usb 4-1: not running at top speed; connect to a high speed hub [ 60.176744][ T425] usb 4-1: config 1 has an invalid interface number: 29 but max is 0 [ 60.185115][ T425] usb 4-1: config 1 has no interface number 0 [ 60.191400][ T425] usb 4-1: config 1 interface 29 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 60.202260][ T425] usb 4-1: config 1 interface 29 has no altsetting 0 [ 60.210580][ T425] usb 4-1: New USB device found, idVendor=05a9, idProduct=2643, bcdDevice=49.45 [ 60.219704][ T425] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.227715][ T425] usb 4-1: Product: syz [ 60.231941][ T425] usb 4-1: Manufacturer: syz [ 60.236565][ T425] usb 4-1: SerialNumber: syz [ 60.242326][ T2160] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 60.324046][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 60.324066][ T36] audit: type=1400 audit(1756464390.300:363): avc: denied { rename } for pid=2176 comm="syz.0.611" name="file0" dev="tmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 60.470845][ T425] usb 4-1: Found UVC 0.00 device syz (05a9:2643) [ 60.484934][ T425] usb 4-1: No valid video chain found. [ 60.499825][ T425] usb 4-1: USB disconnect, device number 15 [ 60.530158][ T2198] overlayfs: missing 'lowerdir' [ 60.535975][ T36] audit: type=1400 audit(1756464390.510:364): avc: denied { create } for pid=2197 comm="syz.0.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 60.557263][ T36] audit: type=1400 audit(1756464390.510:365): avc: denied { write } for pid=2197 comm="syz.0.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 60.603968][ T36] audit: type=1400 audit(1756464390.580:366): avc: denied { write } for pid=2203 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.794122][ T36] audit: type=1400 audit(1756464390.770:367): avc: denied { listen } for pid=2208 comm="syz.2.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.878455][ T367] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.966939][ T2220] netlink: 188 bytes leftover after parsing attributes in process `syz.3.626'. [ 61.030052][ T367] usb 5-1: device descriptor read/all, error -61 [ 61.104765][ T2223] overlayfs: failed to clone upperpath [ 61.178414][ T367] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 61.328419][ T367] usb 5-1: device descriptor read/64, error -71 [ 61.578449][ T367] usb 5-1: device descriptor read/64, error -71 [ 61.642657][ T2260] rust_binder: 264: no such ref 1 [ 61.647893][ T2260] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 61.655199][ T2260] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 61.698494][ T367] usb usb5-port1: attempt power cycle [ 61.796829][ T2260] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 61.804210][ T2260] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 61.898449][ T404] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 62.011522][ T36] audit: type=1400 audit(1756464391.990:368): avc: denied { create } for pid=2275 comm="syz.0.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 62.038627][ T367] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 62.059495][ T367] usb 5-1: device descriptor read/8, error -71 [ 62.134149][ T2296] overlayfs: failed to clone upperpath [ 62.199161][ T367] usb 5-1: device descriptor read/8, error -71 [ 62.438443][ T367] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 62.459453][ T367] usb 5-1: device descriptor read/8, error -71 [ 62.515128][ T36] audit: type=1326 audit(1756464392.490:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2316 comm="syz.3.663" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a18f8ebe9 code=0x0 [ 62.599553][ T367] usb 5-1: device descriptor read/8, error -71 [ 62.710028][ T367] usb usb5-port1: unable to enumerate USB device [ 62.860469][ T36] audit: type=1400 audit(1756464392.840:370): avc: denied { nlmsg_read } for pid=2346 comm="syz.0.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.123014][ T36] audit: type=1326 audit(1756464394.100:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2391 comm="syz.3.688" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a18f8ebe9 code=0x0 [ 64.168511][ T494] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 64.228342][ T36] audit: type=1400 audit(1756464394.200:372): avc: denied { listen } for pid=2391 comm="syz.3.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.328548][ T494] usb 5-1: Using ep0 maxpacket: 32 [ 64.335239][ T494] usb 5-1: unable to get BOS descriptor or descriptor too short [ 64.343867][ T494] usb 5-1: config 195 has an invalid descriptor of length 125, skipping remainder of the config [ 64.354468][ T494] usb 5-1: config 195 has 0 interfaces, different from the descriptor's value: 1 [ 64.365879][ T494] usb 5-1: string descriptor 0 read error: -22 [ 64.372301][ T494] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 64.381413][ T494] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.494441][ T2400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 64.543359][ T2406] netlink: 100 bytes leftover after parsing attributes in process `syz.0.694'. [ 64.594473][ T2380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79 [ 64.595924][ T494] usb 5-1: USB disconnect, device number 6 [ 64.637178][ T2418] x_tables: unsorted underflow at hook 4 [ 64.890191][ T2440] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 64.897469][ T2440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:279 [ 64.950167][ T2442] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.960079][ T2442] rust_binder: Error while translating object. [ 64.966603][ T2442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.973160][ T2442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:279 [ 65.057714][ T2450] overlayfs: failed to clone upperpath [ 65.193387][ T2477] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=40 [ 65.193416][ T2477] rust_binder: Error while translating object. [ 65.202308][ T2477] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.208590][ T2477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:88 [ 65.480662][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 65.480682][ T36] audit: type=1400 audit(1756464395.460:376): avc: denied { ioctl } for pid=2526 comm="syz.3.736" path="socket:[14155]" dev="sockfs" ino=14155 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.520567][ T36] audit: type=1400 audit(1756464395.460:377): avc: denied { read } for pid=2526 comm="syz.3.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.540441][ T36] audit: type=1400 audit(1756464395.480:378): avc: denied { setopt } for pid=2529 comm="syz.3.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.692350][ T734] Bluetooth: hci0: Frame reassembly failed (-84) [ 65.791964][ T2576] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 65.804434][ T2576] syz.0.753(2576): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 65.818419][ T36] audit: type=1326 audit(1756464395.790:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2575 comm="syz.0.753" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59e018ebe9 code=0x0 [ 65.834484][ T2580] netlink: 188 bytes leftover after parsing attributes in process `syz.3.755'. [ 66.452498][ T36] audit: type=1400 audit(1756464396.430:380): avc: denied { create } for pid=2602 comm="syz.3.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 66.497883][ T2613] netlink: 'syz.3.767': attribute type 16 has an invalid length. [ 66.648430][ T404] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 66.799641][ T404] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 66.810520][ T404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.821455][ T404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.831271][ T404] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 66.845050][ T404] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 66.854164][ T404] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 66.862373][ T404] usb 5-1: Manufacturer: syz [ 66.867605][ T404] usb 5-1: config 0 descriptor?? [ 67.074846][ T404] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 67.082329][ T404] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 67.090980][ T404] appleir 0003:05AC:8243.0005: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 67.679140][ T2599] netlink: 'syz.4.762': attribute type 4 has an invalid length. [ 67.687010][ T2599] netlink: 17 bytes leftover after parsing attributes in process `syz.4.762'. [ 67.697350][ T2599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.762'. [ 67.706920][ T36] audit: type=1400 audit(1756464397.680:381): avc: denied { append } for pid=2597 comm="syz.4.762" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 67.768442][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 67.768437][ T619] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 67.879989][ T494] usb 5-1: USB disconnect, device number 7 [ 68.404339][ T36] audit: type=1400 audit(1756464398.380:382): avc: denied { ioctl } for pid=2637 comm="syz.4.774" path="socket:[14370]" dev="sockfs" ino=14370 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.562526][ T2666] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 68.562566][ T2666] rust_binder: Error in use_page_slow: EBUSY [ 68.573189][ T2666] rust_binder: use_range failure EBUSY [ 68.579417][ T2666] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 68.584983][ T2666] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 68.593255][ T2666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:128 [ 68.615935][ T36] audit: type=1400 audit(1756464398.590:383): avc: denied { setattr } for pid=2671 comm="syz.4.787" name="secretmem" dev="secretmem" ino=15477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 68.616991][ T2672] rust_binder: Failed copying remainder into alloc: EFAULT [ 68.648140][ T2672] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 68.655464][ T2672] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 68.663785][ T2672] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:130 [ 68.715457][ T2678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2678 comm=syz.4.790 [ 68.748241][ T2686] fuse: Unknown parameter 'rootmtde' [ 68.778421][ T2692] netlink: 'syz.3.794': attribute type 63 has an invalid length. [ 68.786196][ T2692] netlink: 5 bytes leftover after parsing attributes in process `syz.3.794'. [ 68.795292][ T2692] gretap0: entered allmulticast mode [ 68.800996][ T2692] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 68.872987][ T36] audit: type=1326 audit(1756464398.850:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2711 comm="syz.0.801" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59e018ebe9 code=0x0 [ 68.998449][ T404] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 69.149953][ T404] usb 5-1: config 8 has an invalid interface number: 185 but max is 2 [ 69.158298][ T404] usb 5-1: config 8 has an invalid interface number: 134 but max is 2 [ 69.166548][ T404] usb 5-1: config 8 has an invalid interface number: 235 but max is 2 [ 69.175597][ T404] usb 5-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 69.184386][ T404] usb 5-1: config 8 has no interface number 0 [ 69.190523][ T404] usb 5-1: config 8 has no interface number 1 [ 69.196618][ T404] usb 5-1: config 8 has no interface number 2 [ 69.202851][ T404] usb 5-1: config 8 interface 185 altsetting 117 endpoint 0x5 has invalid maxpacket 1592, setting to 64 [ 69.214281][ T404] usb 5-1: config 8 interface 185 altsetting 117 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 69.225456][ T404] usb 5-1: config 8 interface 185 altsetting 117 has a duplicate endpoint with address 0x5, skipping [ 69.236352][ T404] usb 5-1: config 8 interface 185 altsetting 117 has a duplicate endpoint with address 0x2, skipping [ 69.247277][ T404] usb 5-1: config 8 interface 185 altsetting 117 has a duplicate endpoint with address 0x2, skipping [ 69.258391][ T404] usb 5-1: config 8 interface 185 altsetting 117 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 69.269750][ T404] usb 5-1: config 8 interface 185 altsetting 117 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 69.280926][ T404] usb 5-1: config 8 interface 134 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 69.291813][ T404] usb 5-1: config 8 interface 134 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 69.302826][ T404] usb 5-1: config 8 interface 134 altsetting 4 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 69.313836][ T404] usb 5-1: config 8 interface 134 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 69.324577][ T404] usb 5-1: config 8 interface 235 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 69.335333][ T404] usb 5-1: config 8 interface 235 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 69.346376][ T404] usb 5-1: config 8 interface 235 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 69.357288][ T404] usb 5-1: config 8 interface 235 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 69.368201][ T404] usb 5-1: config 8 interface 235 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 69.379309][ T404] usb 5-1: config 8 interface 235 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 69.390063][ T404] usb 5-1: config 8 interface 235 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 69.400819][ T404] usb 5-1: config 8 interface 235 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 69.411592][ T404] usb 5-1: config 8 interface 185 has no altsetting 0 [ 69.418593][ T404] usb 5-1: config 8 interface 134 has no altsetting 0 [ 69.425399][ T404] usb 5-1: config 8 interface 235 has no altsetting 0 [ 69.437636][ T404] usb 5-1: Dual-Role OTG device on HNP port [ 69.443932][ T404] usb 5-1: New USB device found, idVendor=0c33, idProduct=0010, bcdDevice=50.b3 [ 69.453974][ T404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.462088][ T404] usb 5-1: Product: ç‹¿å„茞炚㿖î‹ê£ ì©æ®¤éŒ¨ë”¤ã²æ•›ï“®ï¶­é±˜èˆâ€¼é¯€ä˜Šê¡¿î«µî˜ˆáŸ•ï¾—Û«è¥è²¬ï¤é­‡äƒ¤êƒ­å¨¢â¬´ï•—縀얓җ콩å°å»îŠ¹à±½â†£å§›é£‚ë“­ì¿¥é´å©¿é“¶å¿¨é“¾ì’橄鎈튎井èžä‹°à¨¼è«Žã¸«î……îž‘îŽë‚‡îè–‰èªâ­Ÿë±­å¢å³›á‚ºà¤”Ｄ듌䒥ѯ [ 69.491177][ T404] usb 5-1: Manufacturer:   [ 69.495899][ T404] usb 5-1: SerialNumber: 韖仳鼠꼓è èžŠâ€¥ëƒ¹â¨³ã˜˜ì„¤ééµâ†Šáš‹é¯˜ë²ë᱓娫ᬼꕄéšâ†ˆé›²æº¬ê»³â³©í‹•îžœã©¢æ°å›³ç›£ì‰ºç®’뿷 [ 69.512213][ T2688] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 69.520956][ T2688] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 69.529361][ T2743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.811'. [ 69.553517][ T2745] overlayfs: failed to clone upperpath [ 69.587067][ T36] audit: type=1400 audit(1756464399.560:385): avc: denied { accept } for pid=2751 comm="syz.3.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.741403][ T404] ftdi_sio 5-1:8.185: FTDI USB Serial Device converter detected [ 69.755004][ T404] ftdi_sio ttyUSB0: unknown device type: 0x50b3 [ 69.763991][ T404] ftdi_sio 5-1:8.134: FTDI USB Serial Device converter detected [ 69.772527][ T404] ftdi_sio ttyUSB1: unknown device type: 0x50b3 [ 69.782563][ T404] ftdi_sio 5-1:8.235: FTDI USB Serial Device converter detected [ 69.790897][ T404] ftdi_sio ttyUSB2: unknown device type: 0x50b3 [ 69.806015][ T404] usb 5-1: USB disconnect, device number 8 [ 69.816888][ T404] ftdi_sio 5-1:8.185: device disconnected [ 69.826967][ T404] ftdi_sio 5-1:8.134: device disconnected [ 69.834359][ T404] ftdi_sio 5-1:8.235: device disconnected [ 69.859886][ T2780] 9pnet_fd: Insufficient options for proto=fd [ 69.922462][ T2790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.818'. [ 69.930944][ T2792] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2792 comm=syz.3.827 [ 69.931934][ T2790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.818'. [ 70.051356][ T2805] Invalid ELF header magic: != ELF [ 70.348434][ T404] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 70.499616][ T404] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.509914][ T404] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.519631][ T404] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 70.528867][ T404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 70.536869][ T404] usb 5-1: SerialNumber: syz [ 70.806316][ T404] usb 5-1: 0:2 : does not exist [ 70.811361][ T404] usb 5-1: unit 5 not found! [ 70.817628][ T404] usb 5-1: USB disconnect, device number 9 [ 70.826622][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.919535][ T2820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.838'. [ 71.401889][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 71.401907][ T36] audit: type=1400 audit(1756464401.380:387): avc: denied { mounton } for pid=2835 comm="syz.4.843" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.401914][ T2836] binder: Unknown parameter '7ax' [ 71.708449][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 71.773840][ T36] audit: type=1326 audit(1756464401.750:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2824 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a18f8ebe9 code=0x7fc00000 [ 71.869507][ T31] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 71.885833][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.905440][ T31] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.914942][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.934480][ T31] usb 5-1: config 0 descriptor?? [ 71.945487][ T31] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 72.211270][ T31] usb 5-1: USB disconnect, device number 10 [ 72.808456][ T36] audit: type=1400 audit(1756464402.780:389): avc: denied { view } for pid=2906 comm="syz.2.869" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 72.958519][ T31] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 73.109732][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 73.122729][ T31] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 73.131832][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.140817][ T31] usb 5-1: config 0 descriptor?? [ 73.168145][ T2915] syz.0.873 uses obsolete (PF_INET,SOCK_PACKET) [ 73.175303][ T2915] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 73.233134][ T36] audit: type=1400 audit(1756464403.210:390): avc: denied { watch } for pid=2930 comm="syz.3.878" path="/203" dev="tmpfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.284245][ T2937] netlink: 'syz.0.881': attribute type 5 has an invalid length. [ 73.292065][ T2937] netlink: 'syz.0.881': attribute type 5 has an invalid length. [ 73.299823][ T2937] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.881'. [ 73.345231][ T36] audit: type=1326 audit(1756464403.320:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2940 comm="syz.0.883" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59e018ebe9 code=0x0 [ 73.570247][ T31] petalynx 0003:18B1:0037.0006: unknown main item tag 0x0 [ 73.577474][ T31] petalynx 0003:18B1:0037.0006: unknown main item tag 0x0 [ 73.584760][ T31] petalynx 0003:18B1:0037.0006: unknown main item tag 0x0 [ 73.592593][ T31] petalynx 0003:18B1:0037.0006: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.4-1/input0 [ 73.770499][ T2905] binder: Bad value for 'max' [ 73.778659][ T494] usb 5-1: USB disconnect, device number 11 [ 74.483441][ T2992] netlink: 'syz.3.902': attribute type 4 has an invalid length. [ 74.494025][ T2992] netlink: 'syz.3.902': attribute type 17 has an invalid length. [ 74.628478][ T494] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 74.758440][ T494] usb 5-1: device descriptor read/64, error -71 [ 74.974461][ T3011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.910'. [ 74.979820][ T36] audit: type=1400 audit(1756464404.960:392): avc: denied { execheap } for pid=3010 comm="syz.2.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 75.002941][ T494] usb 5-1: device descriptor read/64, error -71 [ 75.248432][ T494] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 75.263839][ T36] audit: type=1400 audit(1756464405.240:393): avc: denied { accept } for pid=3045 comm="syz.2.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.378450][ T494] usb 5-1: device descriptor read/64, error -71 [ 75.410026][ T36] audit: type=1400 audit(1756464405.390:394): avc: denied { create } for pid=3070 comm="syz.2.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 75.618435][ T494] usb 5-1: device descriptor read/64, error -71 [ 75.640425][ T36] audit: type=1326 audit(1756464405.620:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3084 comm="syz.2.939" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7dd78ebe9 code=0x0 [ 75.728559][ T494] usb usb5-port1: attempt power cycle [ 76.068458][ T494] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 76.092106][ T494] usb 5-1: device descriptor read/8, error -71 [ 76.229524][ T494] usb 5-1: device descriptor read/8, error -71 [ 76.468477][ T494] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 76.489636][ T494] usb 5-1: device descriptor read/8, error -71 [ 76.619550][ T494] usb 5-1: device descriptor read/8, error -71 [ 76.728564][ T494] usb usb5-port1: unable to enumerate USB device [ 77.444419][ T36] audit: type=1400 audit(1756464407.420:396): avc: denied { map } for pid=3137 comm="syz.4.956" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.484789][ T36] audit: type=1326 audit(1756464407.460:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3139 comm="syz.3.957" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a18f8ebe9 code=0x0 [ 77.918639][ T3165] x_tables: unsorted underflow at hook 2 [ 78.317056][ T3183] netlink: 'syz.3.966': attribute type 32 has an invalid length. [ 78.359226][ T36] audit: type=1400 audit(1756464408.340:398): avc: denied { read } for pid=3189 comm="syz.3.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.424610][ T36] audit: type=1400 audit(1756464408.400:399): avc: denied { getopt } for pid=3192 comm="syz.3.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.726029][ T36] audit: type=1400 audit(1756464408.700:400): avc: denied { create } for pid=3205 comm="syz.4.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 78.790436][ T36] audit: type=1400 audit(1756464408.770:401): avc: denied { shutdown } for pid=3209 comm="syz.4.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.819709][ T36] audit: type=1400 audit(1756464408.800:402): avc: denied { shutdown } for pid=3209 comm="syz.4.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.872784][ T3217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:212 [ 79.431141][ T36] audit: type=1400 audit(1756464409.410:403): avc: denied { mount } for pid=3236 comm="syz.2.984" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 79.431452][ T3237] overlayfs: failed to clone lowerpath [ 79.440691][ T3238] overlayfs: failed to clone lowerpath [ 79.475239][ T3237] overlay: ./file0 is not a directory [ 79.557254][ T3246] netlink: 'syz.0.988': attribute type 16 has an invalid length. [ 79.565059][ T3246] netlink: 'syz.0.988': attribute type 25 has an invalid length. [ 79.572880][ T3246] netlink: 64094 bytes leftover after parsing attributes in process `syz.0.988'. [ 79.594296][ T3248] EXT4-fs: dax option not supported [ 79.615440][ T36] audit: type=1326 audit(1756464409.590:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3253 comm="syz.0.991" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59e018ebe9 code=0x0 [ 79.638241][ T36] audit: type=1326 audit(1756464409.590:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3253 comm="syz.0.991" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59e018ebe9 code=0x0 [ 79.737326][ T3261] 9pnet_fd: Insufficient options for proto=fd [ 79.838461][ T494] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 79.988432][ T494] usb 5-1: Using ep0 maxpacket: 32 [ 79.994656][ T494] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.005866][ T494] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.015745][ T494] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 80.025091][ T494] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.034232][ T494] usb 5-1: config 0 descriptor?? [ 80.040435][ T494] hub 5-1:0.0: USB hub found [ 80.245269][ T494] hub 5-1:0.0: 1 port detected [ 80.858760][ T494] hub 5-1:0.0: activate --> -90 [ 81.259801][ T494] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 81.261226][ T404] usb 5-1: USB disconnect, device number 16 [ 81.825311][ T3301] fuse: Unknown parameter '01777777777777777777777 ' [ 82.298387][ T3322] overlayfs: failed to clone upperpath [ 82.552196][ T3331] fuse: Unknown parameter '01777777777777777777777 ' [ 82.653214][ T3343] cgroup: noprefix used incorrectly [ 82.741658][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 82.741676][ T36] audit: type=1400 audit(1756464412.720:406): avc: denied { map } for pid=3348 comm="syz.4.1025" path="socket:[17651]" dev="sockfs" ino=17651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 83.094663][ T36] audit: type=1326 audit(1756464413.070:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3358 comm="syz.0.1029" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59e018ebe9 code=0x0 [ 83.174042][ T3370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 83.181343][ T3370] IPv6: NLM_F_CREATE should be set when creating new route [ 83.188652][ T3370] IPv6: NLM_F_CREATE should be set when creating new route [ 83.197087][ T3370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3370 comm=syz.2.1034 [ 83.548454][ T494] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 83.708441][ T494] usb 5-1: Using ep0 maxpacket: 32 [ 83.714832][ T494] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 83.723464][ T494] usb 5-1: config 0 has no interface number 0 [ 83.729443][ T3379] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3379 comm=syz.2.1038 [ 83.730296][ T494] usb 5-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 83.742676][ T3379] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3379 comm=syz.2.1038 [ 83.752681][ T494] usb 5-1: config 0 interface 214 has no altsetting 0 [ 83.773487][ T494] usb 5-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 83.782934][ T494] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.791285][ T494] usb 5-1: Product: syz [ 83.797099][ T494] usb 5-1: Manufacturer: syz [ 83.802046][ T494] usb 5-1: SerialNumber: syz [ 83.808876][ T494] usb 5-1: config 0 descriptor?? [ 83.815727][ T3377] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 83.893345][ T36] audit: type=1400 audit(1756464413.870:408): avc: denied { mount } for pid=3392 comm="syz.2.1045" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 83.915093][ T36] audit: type=1400 audit(1756464413.870:409): avc: denied { setopt } for pid=3392 comm="syz.2.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.024447][ T3377] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 84.548904][ T3457] overlayfs: missing 'workdir' [ 84.857537][ T3488] 9pnet_fd: Insufficient options for proto=fd [ 84.914093][ T36] audit: type=1400 audit(1756464414.890:410): avc: denied { map } for pid=3497 comm="syz.0.1089" path="socket:[16860]" dev="sockfs" ino=16860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 84.916917][ T3498] batadv_slave_0: entered promiscuous mode [ 84.946056][ T3497] batadv_slave_0: left promiscuous mode [ 85.080819][ T3536] bpf: Bad value for 'mode' [ 85.085781][ T3536] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1100'. [ 85.291899][ T36] audit: type=1400 audit(1756464415.270:411): avc: denied { create } for pid=3572 comm="syz.0.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 85.334589][ T494] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 85.345499][ T494] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 85.349074][ T36] audit: type=1400 audit(1756464415.330:412): avc: denied { setattr } for pid=3578 comm="syz.0.1118" name="NETLINK" dev="sockfs" ino=17994 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.483766][ T3584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1120'. [ 85.637522][ T36] audit: type=1400 audit(1756464415.610:413): avc: denied { relabelfrom } for pid=3602 comm="syz.2.1128" name="NETLINK" dev="sockfs" ino=18027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.661907][ T36] audit: type=1400 audit(1756464415.610:414): avc: denied { relabelto } for pid=3602 comm="syz.2.1128" name="NETLINK" dev="sockfs" ino=18027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 85.687002][ T36] audit: type=1400 audit(1756464415.610:415): avc: denied { accept } for pid=3602 comm="syz.2.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 86.086865][ T3658] 9pnet_fd: Insufficient options for proto=fd [ 86.110145][ T3665] tc_dump_action: action bad kind [ 86.166603][ T494] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 86.185319][ T494] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 86.197230][ T494] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 86.211804][ T494] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 86.223122][ T494] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 86.234616][ T494] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 86.237127][ T3678] overlayfs: failed to clone upperpath [ 86.248639][ T494] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 86.263000][ T494] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 86.274795][ T494] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 86.286499][ T494] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 86.298187][ T494] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 86.309969][ T494] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 86.321445][ T494] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 86.332744][ T494] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 86.344039][ T494] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 86.355187][ T494] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 86.366685][ T494] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 86.378223][ T494] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 86.389482][ T494] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 86.400738][ T494] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 86.413385][ T494] ax88179_178a 5-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, a2:65:1b:43:2f:73 [ 86.432800][ T494] usb 5-1: USB disconnect, device number 17 [ 86.440949][ T494] ax88179_178a 5-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 86.655183][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.661047][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.667187][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.673058][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.678908][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.684787][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.690741][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.696952][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.703165][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.709007][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.715014][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.721178][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.721492][ T3721] proc: Unknown parameter '184467440737095516150x00000000ffffffff' [ 86.727013][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.741410][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.747190][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.753163][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.759606][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.765374][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.771970][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.777725][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.783551][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.789479][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.795245][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.801022][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.806771][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.812580][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.818332][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.824233][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.830009][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.835928][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.841710][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.847475][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.853470][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.859410][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.865163][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.871303][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.877227][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.883130][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.889118][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.894863][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.901156][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.906923][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.912706][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.918503][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.924320][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.930142][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.936069][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.942018][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.947776][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.956025][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.962088][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.967937][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.973887][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.979710][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.985533][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.991459][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 86.997223][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 87.002982][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 87.008777][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 87.014508][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 87.020398][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 87.026132][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 87.031941][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 87.037963][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 87.043792][ T3719] ext4: Unknown parameter ''´/Û({^]ƒ^'^' [ 87.255300][ T404] rust_binder: 3753: removing orphan mapping 0:8 [ 87.263130][ T3757] binder: Bad value for 'max' [ 87.268070][ T3757] binder: Bad value for 'max' [ 87.441834][ T3772] netlink: 'syz.2.1179': attribute type 10 has an invalid length. [ 87.563789][ T3784] netlink: 'syz.3.1183': attribute type 27 has an invalid length. [ 87.624985][ T3790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3790 comm=syz.3.1183 [ 87.688448][ T404] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 87.818420][ T404] usb 5-1: device descriptor read/64, error -71 [ 88.058455][ T404] usb 5-1: device descriptor read/64, error -71 [ 88.298451][ T404] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 88.428442][ T404] usb 5-1: device descriptor read/64, error -71 [ 88.668460][ T404] usb 5-1: device descriptor read/64, error -71 [ 88.778541][ T404] usb usb5-port1: attempt power cycle [ 88.962653][ T3834] overlayfs: failed to clone upperpath [ 88.991042][ T3838] fuse: Unknown parameter 'Ñ؉MHÅ*‡DOz[GÆÛïÓ¬Ïa—3m‹@Ô] H¿K' [ 89.063719][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 89.063738][ T36] audit: type=1400 audit(1756464419.040:422): avc: denied { create } for pid=3839 comm="syz.2.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 89.118419][ T404] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 89.139519][ T404] usb 5-1: device descriptor read/8, error -71 [ 89.269480][ T404] usb 5-1: device descriptor read/8, error -71 [ 89.508419][ T404] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 89.529449][ T404] usb 5-1: device descriptor read/8, error -71 [ 89.659603][ T404] usb 5-1: device descriptor read/8, error -71 [ 89.768532][ T404] usb usb5-port1: unable to enumerate USB device [ 90.308094][ T3870] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 90.698447][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 90.849554][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 90.860584][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.871570][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.881361][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 90.895112][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 90.904228][ T10] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 90.912479][ T10] usb 5-1: Manufacturer: syz [ 90.917809][ T10] usb 5-1: config 0 descriptor?? [ 91.000814][ T3896] overlay: Bad value for 'xino' [ 91.125816][ T3914] tmpfs: Bad value for 'nr_blocks' [ 91.324684][ T10] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 91.332064][ T10] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 91.340943][ T10] appleir 0003:05AC:8243.0007: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 91.526886][ T367] usb 5-1: USB disconnect, device number 22 [ 91.556572][ T3945] No source specified [ 91.706251][ T3954] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1242'. [ 92.338425][ T367] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 92.488781][ T367] usb 5-1: Using ep0 maxpacket: 8 [ 92.495480][ T367] usb 5-1: unable to get BOS descriptor or descriptor too short [ 92.504123][ T367] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 92.512284][ T367] usb 5-1: config 0 has no interface number 0 [ 92.518448][ T367] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 92.529470][ T367] usb 5-1: config 0 interface 88 has no altsetting 0 [ 92.539808][ T36] audit: type=1326 audit(1756464422.520:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e018ebe9 code=0x7fc00000 [ 92.563970][ T367] usb 5-1: string descriptor 0 read error: -22 [ 92.570312][ T367] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 92.579509][ T367] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 92.588865][ T367] usb 5-1: config 0 descriptor?? [ 92.596265][ T367] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input8 [ 92.796582][ T36] audit: type=1400 audit(1756464422.770:424): avc: denied { accept } for pid=3967 comm="syz.4.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.797253][ T3968] ªªªªª$: renamed from bridge_slave_0 (while UP) [ 92.826993][ T367] usb 5-1: USB disconnect, device number 23 [ 93.129238][ T3991] incfs: Error accessing: ./file0. [ 93.129591][ T36] audit: type=1400 audit(1756464423.110:425): avc: denied { mounton } for pid=3989 comm="syz.2.1254" path="/255/file0/file0" dev="tmpfs" ino=1378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 93.134618][ T3991] incfs: mount failed -20 [ 93.847044][ T4040] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 94.238995][ T4050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.246399][ T4050] IPv6: NLM_F_CREATE should be set when creating new route [ 94.253679][ T4050] IPv6: NLM_F_CREATE should be set when creating new route [ 94.357954][ T4057] tipc: Enabling of bearer rejected, media not registered [ 94.416372][ T36] audit: type=1400 audit(1756464424.390:426): avc: denied { create } for pid=4063 comm="syz.0.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 94.599019][ T36] audit: type=1400 audit(1756464424.580:427): avc: denied { execute } for pid=4071 comm="syz.3.1283" path="/dev/rnullb0" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.648509][ T4078] fuse: Unknown parameter '' [ 94.653450][ T36] audit: type=1400 audit(1756464424.630:428): avc: denied { mounton } for pid=4077 comm="syz.3.1284" path="/257/file0" dev="tmpfs" ino=1410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.832736][ T733] tipc: Subscription rejected, illegal request [ 95.881976][ T4145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1304'. [ 96.178453][ T367] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 96.308466][ T367] usb 5-1: device descriptor read/64, error -71 [ 96.548464][ T367] usb 5-1: device descriptor read/64, error -71 [ 96.785347][ T36] audit: type=1400 audit(1756464426.760:429): avc: denied { create } for pid=4171 comm="syz.2.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.805760][ T367] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 96.885960][ T36] audit: type=1400 audit(1756464426.860:430): avc: denied { write } for pid=4181 comm="syz.2.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.906240][ T36] audit: type=1400 audit(1756464426.860:431): avc: denied { nlmsg_write } for pid=4181 comm="syz.2.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.953630][ T4201] netlink: 'syz.3.1326': attribute type 4 has an invalid length. [ 96.961480][ T367] usb 5-1: device descriptor read/64, error -71 [ 96.982574][ T36] audit: type=1400 audit(1756464426.960:432): avc: denied { ioctl } for pid=4202 comm="syz.3.1327" path="socket:[19125]" dev="sockfs" ino=19125 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.198463][ T367] usb 5-1: device descriptor read/64, error -71 [ 97.308492][ T367] usb usb5-port1: attempt power cycle [ 97.507820][ T4241] overlayfs: failed to clone upperpath [ 97.648478][ T367] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 97.678622][ T4262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=4262 comm=syz.2.1346 [ 97.692216][ T367] usb 5-1: device descriptor read/8, error -71 [ 97.829492][ T367] usb 5-1: device descriptor read/8, error -71 [ 97.975633][ T4278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'. [ 98.068436][ T367] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 98.089537][ T367] usb 5-1: device descriptor read/8, error -71 [ 98.220692][ T367] usb 5-1: device descriptor read/8, error -71 [ 98.335999][ T367] usb usb5-port1: unable to enumerate USB device [ 98.487839][ T4301] overlayfs: failed to clone upperpath [ 98.948564][ T4322] rust_binder: 321: no such ref 1 [ 98.954150][ T4322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.986672][ T4333] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 99.000457][ T4333] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 99.007498][ T4333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:332 [ 99.013454][ T4333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.023179][ T4333] rust_binder: Error while translating object. [ 99.029769][ T4333] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 99.036085][ T4333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:332 [ 99.139243][ T36] audit: type=1400 audit(1756464429.120:433): avc: denied { setopt } for pid=4348 comm="syz.4.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.207793][ T4349] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4349 comm=syz.4.1378 [ 99.250095][ T4363] ip6gretap0: mtu less than device minimum [ 99.305330][ T4375] cgroup: Invalid name [ 99.310480][ T4375] overlayfs: failed to clone upperpath [ 99.310593][ T4377] rust_binder: Write failure EFAULT in pid:350 [ 99.347577][ T36] audit: type=1400 audit(1756464429.320:434): avc: denied { mounton } for pid=4384 comm="syz.4.1392" path="/114/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 99.387808][ T36] audit: type=1400 audit(1756464429.360:435): avc: denied { unmount } for pid=1980 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 99.411283][ T4394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65306 sclass=netlink_route_socket pid=4394 comm=syz.2.1395 [ 99.480350][ T4407] overlay: ./file0 is not a directory [ 99.480630][ T36] audit: type=1400 audit(1756464429.460:436): avc: denied { mounton } for pid=4406 comm="syz.4.1399" path="/117/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.509488][ T36] audit: type=1400 audit(1756464429.490:437): avc: denied { write } for pid=4406 comm="syz.4.1399" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.529495][ T4410] overlayfs: failed to resolve './file1': -2 [ 99.530199][ T36] audit: type=1400 audit(1756464429.490:438): avc: denied { append } for pid=4406 comm="syz.4.1399" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.638118][ T4420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1405'. [ 99.672560][ T36] audit: type=1400 audit(1756464429.650:439): avc: denied { create } for pid=4430 comm="syz.2.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.706673][ T36] audit: type=1400 audit(1756464429.680:440): avc: denied { setopt } for pid=4435 comm="syz.2.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.727829][ T36] audit: type=1400 audit(1756464429.700:441): avc: denied { ioctl } for pid=4435 comm="syz.2.1410" path="socket:[20320]" dev="sockfs" ino=20320 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 99.804543][ T4433] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:366 [ 99.811599][ T367] rust_binder: 4432: removing orphan mapping 0:24 [ 99.828443][ T367] rust_binder: 0: removing orphan mapping 24:1112 [ 100.482404][ T36] audit: type=1326 audit(1756464430.460:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.3.1417" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a18f8ebe9 code=0x0 [ 100.690012][ T4475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=4475 comm=syz.0.1424 [ 100.714379][ T36] audit: type=1326 audit(1756464430.690:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4476 comm="syz.0.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e018ebe9 code=0x7ff00000 [ 100.737911][ T36] audit: type=1326 audit(1756464430.690:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4476 comm="syz.0.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e018ebe9 code=0x7ff00000 [ 100.761717][ T36] audit: type=1326 audit(1756464430.690:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4476 comm="syz.0.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e018ebe9 code=0x7ff00000 [ 101.060568][ T4493] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 191) [ 101.060598][ T4493] rust_binder: Error while translating object. [ 101.071556][ T4493] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 101.077813][ T4493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:381 [ 101.113808][ T733] Bluetooth: hci0: Frame reassembly failed (-84) [ 101.373079][ T4509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1435'. [ 101.668244][ T4553] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=52 sclass=netlink_tcpdiag_socket pid=4553 comm=syz.2.1448 [ 102.211200][ T4568] GUP no longer grows the stack in syz.3.1453 (4568): 200000005000-200000008000 (200000004000) [ 102.221832][ T4568] CPU: 1 UID: 0 PID: 4568 Comm: syz.3.1453 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 102.221874][ T4568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.221894][ T4568] Call Trace: [ 102.221901][ T4568] [ 102.221911][ T4568] __dump_stack+0x21/0x30 [ 102.221958][ T4568] dump_stack_lvl+0x10c/0x190 [ 102.221990][ T4568] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.222023][ T4568] dump_stack+0x19/0x20 [ 102.222052][ T4568] fixup_user_fault+0x63d/0x6d0 [ 102.222080][ T4568] fault_in_user_writeable+0x76/0xe0 [ 102.222103][ T4568] futex_lock_pi+0x258/0xa10 [ 102.222129][ T4568] ? futex_unqueue+0x136/0x160 [ 102.222153][ T4568] ? __cfi_futex_lock_pi+0x10/0x10 [ 102.222181][ T4568] ? __cfi_futex_wake_mark+0x10/0x10 [ 102.222211][ T4568] ? futex_setup_timer+0xb4/0xd0 [ 102.222233][ T4568] ? __cfi_futex_wake_mark+0x10/0x10 [ 102.222263][ T4568] ? mas_find+0x358/0x5f0 [ 102.222286][ T4568] ? __kasan_check_write+0x18/0x20 [ 102.222320][ T4568] do_futex+0x25c/0x500 [ 102.222343][ T4568] ? __cfi_do_futex+0x10/0x10 [ 102.222366][ T4568] ? __vm_munmap+0x2c7/0x370 [ 102.222388][ T4568] __se_sys_futex+0x28f/0x300 [ 102.222413][ T4568] ? __x64_sys_futex+0x110/0x110 [ 102.222437][ T4568] ? __kasan_check_write+0x18/0x20 [ 102.222471][ T4568] __x64_sys_futex+0xe9/0x110 [ 102.222495][ T4568] x64_sys_call+0x227f/0x2ee0 [ 102.222529][ T4568] do_syscall_64+0x58/0xf0 [ 102.222560][ T4568] ? clear_bhb_loop+0x50/0xa0 [ 102.222583][ T4568] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.222607][ T4568] RIP: 0033:0x7f9a18f8ebe9 [ 102.222631][ T4568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.222659][ T4568] RSP: 002b:00007f9a19e3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 102.222694][ T4568] RAX: ffffffffffffffda RBX: 00007f9a191b5fa0 RCX: 00007f9a18f8ebe9 [ 102.222713][ T4568] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 102.222731][ T4568] RBP: 00007f9a19011e19 R08: 0000000000000000 R09: 0000000000000000 [ 102.222747][ T4568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.222763][ T4568] R13: 00007f9a191b6038 R14: 00007f9a191b5fa0 R15: 00007ffc116d90f8 [ 102.222784][ T4568] [ 103.128414][ T619] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 103.128430][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 103.177794][ T4592] SELinux: Context system_u:object_r:ping_exec_t:s0 is not valid (left unmapped). [ 103.202295][ T4594] rust_binder: Failed to allocate buffer. len:12288, is_oneway:false [ 103.202671][ T4595] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.223295][ T4599] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.229799][ T4599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:398 [ 103.250464][ T4601] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1466'. [ 103.889052][ T4643] overlayfs: failed to clone upperpath [ 103.943556][ T4652] netlink: 'syz.3.1485': attribute type 15 has an invalid length. [ 104.508398][ T494] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 104.661182][ T494] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 104.672136][ T494] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.683100][ T494] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.692865][ T494] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 104.706660][ T494] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 104.716037][ T494] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 104.722794][ T4719] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1510'. [ 104.724620][ T494] usb 5-1: Manufacturer: syz [ 104.734491][ T4719] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1510'. [ 104.742843][ T494] usb 5-1: config 0 descriptor?? [ 104.747103][ T4719] netlink: 'syz.3.1510': attribute type 6 has an invalid length. [ 104.759745][ T4719] netlink: 'syz.3.1510': attribute type 5 has an invalid length. [ 104.767531][ T4719] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1510'. [ 104.815846][ T4727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4727 comm=syz.3.1512 [ 105.154719][ T494] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 105.162076][ T494] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 105.170845][ T494] appleir 0003:05AC:8243.0008: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 105.341241][ T4740] overlayfs: failed to clone upperpath [ 105.408918][ T367] usb 5-1: USB disconnect, device number 28 [ 105.480866][ T4744] netlink: 'syz.0.1520': attribute type 4 has an invalid length. [ 105.497960][ T4744] netlink: 'syz.0.1520': attribute type 4 has an invalid length. [ 105.509077][ T4744] overlayfs: failed to clone upperpath [ 105.554418][ T4750] futex_wake_op: syz.2.1522 tries to shift op by -1; fix this program [ 105.564309][ T36] kauditd_printk_skb: 6552 callbacks suppressed [ 105.564327][ T36] audit: type=1326 audit(1756464435.540:6998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.2.1522" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7dd78ebe9 code=0x0 [ 106.461198][ T4819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1544'. [ 106.471075][ T36] audit: type=1400 audit(1756464436.450:6999): avc: denied { read } for pid=4816 comm="syz.0.1544" name="/" dev="configfs" ino=1658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.488441][ T425] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 106.493369][ T36] audit: type=1400 audit(1756464436.450:7000): avc: denied { open } for pid=4816 comm="syz.0.1544" path="/" dev="configfs" ino=1658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.522896][ T36] audit: type=1400 audit(1756464436.450:7001): avc: denied { setattr } for pid=4816 comm="syz.0.1544" name="/" dev="configfs" ino=1658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.648433][ T425] usb 5-1: Using ep0 maxpacket: 8 [ 106.654962][ T425] usb 5-1: unable to get BOS descriptor or descriptor too short [ 106.663341][ T425] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 106.671533][ T425] usb 5-1: config 0 has no interface number 0 [ 106.677656][ T425] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 106.688707][ T425] usb 5-1: config 0 interface 88 has no altsetting 0 [ 106.697390][ T425] usb 5-1: string descriptor 0 read error: -22 [ 106.703657][ T425] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 106.712784][ T425] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 106.721631][ T425] usb 5-1: config 0 descriptor?? [ 106.728212][ T425] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input10 [ 106.927085][ T4823] 9pnet_fd: Insufficient options for proto=fd [ 106.933758][ T367] usb 5-1: USB disconnect, device number 29 [ 107.448484][ T4834] No source specified [ 107.468440][ T4836] rust_binder: Error while translating object. [ 107.468477][ T4836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 107.474811][ T4836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:444 [ 107.718430][ T367] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 107.883166][ T367] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 107.893428][ T367] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 107.902517][ T367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.912650][ T367] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 108.113220][ T425] usb 5-1: USB disconnect, device number 30 [ 108.338017][ T36] audit: type=1326 audit(1756464438.310:7002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.2.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dd78ebe9 code=0x7fc00000 [ 108.370089][ T36] audit: type=1326 audit(1756464438.350:7003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.2.1558" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7dd78ebe9 code=0x0 [ 109.396174][ T4878] binder: Bad value for 'stats' [ 109.403014][ T4878] rust_binder: Error while translating object. [ 109.403052][ T4878] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 109.409353][ T4878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:448 [ 109.530848][ T4887] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 109.655245][ T4894] rust_binder: Error while translating object. [ 109.655285][ T4894] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 109.661717][ T4894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:457 [ 109.683052][ T4898] overlayfs: failed to clone upperpath [ 109.780391][ T4916] overlayfs: failed to clone upperpath [ 110.297840][ T36] audit: type=1400 audit(1756464440.270:7004): avc: denied { getattr } for pid=4938 comm="syz.0.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 110.575225][ T4981] rust_binder: 470: no such ref 3 [ 110.828412][ T404] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 110.958019][ T36] audit: type=1400 audit(1756464440.930:7005): avc: denied { execute_no_trans } for pid=4992 comm="syz.0.1602" path="/543/file1" dev="tmpfs" ino=2948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.983485][ T404] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.993860][ T404] usb 5-1: config 0 has no interfaces? [ 111.001113][ T404] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 111.010431][ T404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 111.018721][ T404] usb 5-1: Product: syz [ 111.023041][ T404] usb 5-1: Manufacturer: syz [ 111.027637][ T404] usb 5-1: SerialNumber: syz [ 111.033067][ T404] usb 5-1: config 0 descriptor?? [ 111.245276][ T404] usb 5-1: USB disconnect, device number 31 [ 111.571526][ T5022] netlink: 'syz.0.1613': attribute type 13 has an invalid length. [ 112.048411][ T404] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 112.178412][ T404] usb 5-1: device descriptor read/64, error -71 [ 112.418411][ T404] usb 5-1: device descriptor read/64, error -71 [ 112.635611][ T5059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1626'. [ 112.635611][ T36] audit: type=1400 audit(1756464442.610:7006): avc: denied { nlmsg_read } for pid=5058 comm="syz.2.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.665282][ T404] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 112.745791][ T5071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1630'. [ 112.798456][ T404] usb 5-1: device descriptor read/64, error -71 [ 113.038403][ T404] usb 5-1: device descriptor read/64, error -71 [ 113.148521][ T404] usb usb5-port1: attempt power cycle [ 113.198897][ T5084] netlink: 'syz.3.1635': attribute type 1 has an invalid length. [ 113.217495][ T5089] tmpfs: Unknown parameter '' [ 113.488462][ T404] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 113.509434][ T404] usb 5-1: device descriptor read/8, error -71 [ 113.639456][ T404] usb 5-1: device descriptor read/8, error -71 [ 113.878431][ T404] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 113.899544][ T404] usb 5-1: device descriptor read/8, error -71 [ 114.029562][ T404] usb 5-1: device descriptor read/8, error -71 [ 114.142564][ T404] usb usb5-port1: unable to enumerate USB device [ 114.151229][ T5136] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1655'. [ 114.307703][ T36] audit: type=1326 audit(1756464444.280:7007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.3.1661" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a18f8ebe9 code=0x0 [ 115.238906][ T36] audit: type=1326 audit(1756464445.220:7008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5189 comm="syz.0.1675" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59e018ebe9 code=0x0 [ 115.390092][ T5203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1679'. [ 115.660045][ T5228] TCP: out of memory -- consider tuning tcp_mem [ 116.458426][ T425] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 116.629484][ T425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.640463][ T425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.650521][ T425] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 116.659848][ T425] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.668745][ T425] usb 5-1: config 0 descriptor?? [ 116.707005][ T36] audit: type=1400 audit(1756464446.680:7009): avc: denied { create } for pid=5274 comm="syz.3.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 116.875804][ T5258] input: syz1 as /devices/virtual/input/input12 [ 117.087017][ T425] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 117.094754][ T425] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 117.286351][ T425] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE [ 117.498157][ T425] cp2112 0003:10C4:EA90.0009: error requesting SMBus config [ 117.506133][ T425] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -71 [ 117.516455][ T425] usb 5-1: USB disconnect, device number 36 [ 117.898553][ T5310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1716'. [ 118.146719][ T5333] rust_binder: Error while translating object. [ 118.146752][ T5333] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 118.153057][ T5333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:514 [ 118.162998][ T5334] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.233894][ T5339] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 118.284466][ T5338] rust_binder: Write failure EINVAL in pid:519 [ 118.518404][ T425] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 118.658435][ T425] usb 5-1: device descriptor read/64, error -71 [ 118.898454][ T425] usb 5-1: device descriptor read/64, error -71 [ 118.923136][ T36] audit: type=1326 audit(1756464448.900:7010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a18f8ebe9 code=0x7fc00000 [ 118.946865][ T36] audit: type=1326 audit(1756464448.900:7011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a18f8ebe9 code=0x7fc00000 [ 118.970614][ T36] audit: type=1326 audit(1756464448.900:7012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a18f8ebe9 code=0x7fc00000 [ 119.138423][ T425] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 119.150701][ T5354] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.157852][ T5354] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.165123][ T5354] bridge_slave_0: entered allmulticast mode [ 119.171784][ T5354] bridge_slave_0: entered promiscuous mode [ 119.178433][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.185577][ T5354] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.192724][ T5354] bridge_slave_1: entered allmulticast mode [ 119.199049][ T5354] bridge_slave_1: entered promiscuous mode [ 119.205131][ T734] bridge_slave_1: left allmulticast mode [ 119.210884][ T734] bridge_slave_1: left promiscuous mode [ 119.216511][ T734] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.224197][ T734] bridge_slave_0: left allmulticast mode [ 119.229974][ T734] bridge_slave_0: left promiscuous mode [ 119.235640][ T734] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.268434][ T425] usb 5-1: device descriptor read/64, error -71 [ 119.434066][ T734] veth1_macvtap: left promiscuous mode [ 119.439711][ T734] veth0_vlan: left promiscuous mode [ 119.508431][ T425] usb 5-1: device descriptor read/64, error -71 [ 119.540086][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.547171][ T5354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.554528][ T5354] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.561610][ T5354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.588551][ T724] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.596167][ T724] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.608606][ T733] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.615698][ T733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.624554][ T733] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.631630][ T733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.639827][ T425] usb usb5-port1: attempt power cycle [ 119.664698][ T5354] veth0_vlan: entered promiscuous mode [ 119.679272][ T5354] veth1_macvtap: entered promiscuous mode [ 119.988454][ T425] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 120.009706][ T425] usb 5-1: device descriptor read/8, error -71 [ 120.150030][ T425] usb 5-1: device descriptor read/8, error -71 [ 120.408642][ T425] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 120.449399][ T425] usb 5-1: device descriptor read/8, error -71 [ 120.579488][ T425] usb 5-1: device descriptor read/8, error -71 [ 120.688544][ T425] usb usb5-port1: unable to enumerate USB device [ 121.206161][ T5471] netlink: 'syz.3.1768': attribute type 16 has an invalid length. [ 121.214150][ T5471] netlink: 'syz.3.1768': attribute type 2 has an invalid length. [ 121.222145][ T5471] netlink: 64086 bytes leftover after parsing attributes in process `syz.3.1768'. [ 121.232450][ T5471] overlayfs: missing 'lowerdir' [ 121.357469][ T5494] rust_binder: Write failure EINVAL in pid:525 [ 121.514706][ T5523] binder: Unknown parameter 'fscontext?}' [ 121.608720][ T5532] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 121.657969][ T5537] tmpfs: Unknown parameter './file0' [ 121.667212][ T5538] netlink: 'syz.0.1790': attribute type 4 has an invalid length. [ 121.758420][ T404] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 121.903551][ T36] audit: type=1400 audit(1756464451.880:7013): avc: denied { read } for pid=5546 comm="syz.2.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.924446][ T404] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 121.935379][ T404] usb 5-1: Dual-Role OTG device on HNP port [ 121.942136][ T404] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=c6.a5 [ 121.951850][ T404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.959908][ T404] usb 5-1: Product: syz [ 121.964093][ T404] usb 5-1: Manufacturer: syz [ 121.968748][ T404] usb 5-1: SerialNumber: syz [ 121.974952][ T404] usb 5-1: config 0 descriptor?? [ 122.048446][ T367] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 122.186197][ T5525] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1787'. [ 122.196140][ T5525] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1787'. [ 122.205300][ T367] usb 1-1: Using ep0 maxpacket: 32 [ 122.212263][ T367] usb 1-1: unable to get BOS descriptor or descriptor too short [ 122.222804][ T367] usb 1-1: config 7 has an invalid interface number: 128 but max is 0 [ 122.232509][ T367] usb 1-1: config 7 has an invalid interface descriptor of length 4, skipping [ 122.241920][ T367] usb 1-1: config 7 has an invalid descriptor of length 208, skipping remainder of the config [ 122.254549][ T425] usb 5-1: USB disconnect, device number 41 [ 122.260918][ T367] usb 1-1: config 7 has no interface number 0 [ 122.267141][ T367] usb 1-1: config 7 interface 128 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 122.285633][ T367] usb 1-1: config 7 interface 128 has no altsetting 0 [ 122.293098][ T5554] overlayfs: failed to clone upperpath [ 122.300480][ T367] usb 1-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 122.315660][ T367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.323945][ T367] usb 1-1: Product: syz [ 122.328590][ T367] usb 1-1: Manufacturer: syz [ 122.333227][ T367] usb 1-1: SerialNumber: syz [ 122.388653][ T36] audit: type=1400 audit(1756464452.370:7014): avc: denied { mounton } for pid=5559 comm="syz.3.1799" path="/384/file0" dev="tmpfs" ino=2101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 122.388719][ T5560] fuse: Bad value for 'group_id' [ 122.417036][ T5560] fuse: Bad value for 'group_id' [ 122.424732][ T36] audit: type=1400 audit(1756464452.400:7015): avc: denied { read } for pid=5559 comm="syz.3.1799" name="file0" dev="tmpfs" ino=2101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 122.425969][ T5560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1799'. [ 122.544235][ T5543] rust_binder: Error in use_page_slow: ESRCH [ 122.544262][ T5543] rust_binder: use_range failure ESRCH [ 122.551506][ T5543] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 122.557417][ T5543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 122.565645][ T5543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:36 [ 122.581532][ T367] usb 1-1: MIDIStreaming interface descriptor not found [ 122.605746][ T36] audit: type=1400 audit(1756464452.580:7016): avc: denied { execstack } for pid=5586 comm="syz.2.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 122.605998][ T367] usb 1-1: USB disconnect, device number 5 [ 122.783847][ T36] audit: type=1326 audit(1756464452.760:7017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.4.1810" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe425f8ebe9 code=0x0 [ 123.022327][ T367] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.030448][ T367] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 123.049920][ T5602] fido_id[5602]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 123.088927][ T36] audit: type=1400 audit(1756464453.070:7018): avc: denied { read write } for pid=5605 comm="syz.4.1816" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.112222][ T36] audit: type=1400 audit(1756464453.070:7019): avc: denied { open } for pid=5605 comm="syz.4.1816" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.159113][ T5614] rust_binder: Error while translating object. [ 123.159165][ T5614] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 123.165828][ T5614] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:566 [ 123.178410][ T36] audit: type=1400 audit(1756464453.150:7020): avc: denied { ioctl } for pid=5618 comm="syz.0.1820" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.233094][ T36] audit: type=1326 audit(1756464453.210:7021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.2.1824" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7dd78ebe9 code=0x0 [ 123.418400][ T494] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 123.468450][ T367] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 123.578401][ T494] usb 1-1: Using ep0 maxpacket: 32 [ 123.584840][ T494] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 123.593236][ T494] usb 1-1: config 0 has no interface number 0 [ 123.599656][ T494] usb 1-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 123.608419][ T367] usb 5-1: device descriptor read/64, error -71 [ 123.609727][ T494] usb 1-1: config 0 interface 214 has no altsetting 0 [ 123.624454][ T494] usb 1-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 123.633630][ T494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.641688][ T494] usb 1-1: Product: syz [ 123.645867][ T494] usb 1-1: Manufacturer: syz [ 123.650498][ T494] usb 1-1: SerialNumber: syz [ 123.655880][ T494] usb 1-1: config 0 descriptor?? [ 123.661212][ T5622] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 123.668998][ T494] ax88179_178a 1-1:0.214: probe with driver ax88179_178a failed with error -22 [ 123.725881][ T5636] overlayfs: failed to clone upperpath [ 123.848728][ T367] usb 5-1: device descriptor read/64, error -71 [ 124.088422][ T367] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 124.151085][ T5657] 9pnet_fd: Insufficient options for proto=fd [ 124.218406][ T367] usb 5-1: device descriptor read/64, error -71 [ 124.458459][ T367] usb 5-1: device descriptor read/64, error -71 [ 124.568746][ T367] usb usb5-port1: attempt power cycle [ 124.776541][ T36] audit: type=1400 audit(1756464454.750:7022): avc: denied { checkpoint_restore } for pid=5685 comm="syz.3.1844" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 124.800795][ T5687] netlink: 1304 bytes leftover after parsing attributes in process `syz.2.1842'. [ 124.908442][ T367] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 124.929389][ T367] usb 5-1: device descriptor read/8, error -71 [ 125.059657][ T367] usb 5-1: device descriptor read/8, error -71 [ 125.298408][ T367] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 125.319580][ T367] usb 5-1: device descriptor read/8, error -71 [ 125.449749][ T367] usb 5-1: device descriptor read/8, error -71 [ 125.558542][ T367] usb usb5-port1: unable to enumerate USB device [ 125.622148][ T5724] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5724 comm=syz.2.1857 [ 126.189679][ T494] usb 1-1: USB disconnect, device number 6 [ 126.298282][ T5742] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 126.299134][ T5741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.708448][ T494] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 126.868406][ T494] usb 1-1: Using ep0 maxpacket: 32 [ 126.874852][ T494] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 126.883094][ T494] usb 1-1: config 0 has no interface number 0 [ 126.889363][ T494] usb 1-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 126.899556][ T494] usb 1-1: config 0 interface 214 has no altsetting 0 [ 126.907963][ T494] usb 1-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 126.917178][ T494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.925264][ T494] usb 1-1: Product: syz [ 126.929507][ T494] usb 1-1: Manufacturer: syz [ 126.934255][ T494] usb 1-1: SerialNumber: syz [ 126.939626][ T494] usb 1-1: config 0 descriptor?? [ 126.944894][ T5758] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.031468][ T5769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1872'. [ 127.153467][ T5758] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.301314][ T5784] kvm: kvm [5783]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 127.309979][ T5784] kvm: kvm [5783]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 127.332884][ T5784] exFAT-fs (rnullb0): invalid boot record signature [ 127.339753][ T5784] exFAT-fs (rnullb0): failed to read boot sector [ 127.346119][ T5784] exFAT-fs (rnullb0): failed to recognize exfat type [ 127.648428][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 127.799465][ T9] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 127.807955][ T9] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 127.818361][ T9] usb 5-1: config 220 has no interface number 2 [ 127.824640][ T9] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 127.837849][ T9] usb 5-1: config 220 interface 0 has no altsetting 0 [ 127.844682][ T9] usb 5-1: config 220 interface 76 has no altsetting 0 [ 127.851642][ T9] usb 5-1: config 220 interface 1 has no altsetting 0 [ 127.859904][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 127.869053][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.877061][ T9] usb 5-1: Product: syz [ 127.881258][ T9] usb 5-1: Manufacturer: syz [ 127.885886][ T9] usb 5-1: SerialNumber: syz [ 128.278858][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 128.290334][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 128.301322][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 128.571521][ T5800] fuse: Unknown parameter 'roojmode' [ 128.609029][ T9] usb 5-1: selecting invalid altsetting 0 [ 128.617573][ T9] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 128.634702][ T9] usb 5-1: No valid video chain found. [ 128.643306][ T9] usb 5-1: USB disconnect, device number 46 [ 129.314909][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 129.328426][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 129.339743][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 129.353704][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 129.364920][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 129.376047][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 129.387429][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 129.402534][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 129.423058][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 129.428665][ T5843] vlan0: entered promiscuous mode [ 129.439218][ T5843] vlan0: entered allmulticast mode [ 129.441938][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 129.444518][ T5843] veth0_vlan: entered allmulticast mode [ 129.458775][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 129.473788][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 129.473805][ T36] audit: type=1400 audit(1756464459.450:7024): avc: denied { ioctl } for pid=5842 comm="syz.4.1900" path="socket:[25115]" dev="sockfs" ino=25115 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 129.479284][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 129.517576][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 129.533034][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 129.547440][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 129.558788][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 129.569997][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 129.570203][ T5857] fuse: blksize only supported for fuseblk [ 129.581381][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 129.598423][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 129.612449][ T494] ax88179_178a 1-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 02:4c:18:d4:e2:0d [ 129.632449][ T494] usb 1-1: USB disconnect, device number 7 [ 129.643692][ T494] ax88179_178a 1-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 130.111401][ T734] bridge_slave_1: left allmulticast mode [ 130.117194][ T734] bridge_slave_1: left promiscuous mode [ 130.123079][ T734] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.130720][ T734] ªªªªª$: left allmulticast mode [ 130.135688][ T734] ªªªªª$: left promiscuous mode [ 130.140892][ T734] bridge0: port 1(ªªªªª$) entered disabled state [ 130.140933][ T494] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 130.208166][ T36] audit: type=1400 audit(1756464460.180:7025): avc: denied { setattr } for pid=5907 comm="syz.2.1914" name="XDP" dev="sockfs" ino=26066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 130.293250][ T734] veth1_macvtap: left promiscuous mode [ 130.308402][ T494] usb 1-1: Using ep0 maxpacket: 8 [ 130.314715][ T494] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 130.324185][ T494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.334526][ T494] usb 1-1: config 0 descriptor?? [ 130.389725][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.396911][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.404076][ T5911] bridge_slave_0: entered allmulticast mode [ 130.410594][ T5911] bridge_slave_0: entered promiscuous mode [ 130.417123][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.424360][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.431536][ T5911] bridge_slave_1: entered allmulticast mode [ 130.438456][ T5911] bridge_slave_1: entered promiscuous mode [ 130.503324][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.510437][ T5911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.517744][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.524820][ T5911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.543173][ T494] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 130.552978][ T733] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.560579][ T733] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.570816][ T724] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.577906][ T724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.587769][ T733] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.594854][ T733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.624088][ T5911] veth0_vlan: entered promiscuous mode [ 130.636194][ T5911] veth1_macvtap: entered promiscuous mode [ 130.743279][ T494] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 130.754599][ T494] asix 1-1:0.0: probe with driver asix failed with error -32 [ 130.898776][ T404] usb 1-1: USB disconnect, device number 8 [ 131.198475][ T404] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 131.348391][ T404] usb 1-1: Using ep0 maxpacket: 32 [ 131.354896][ T404] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 131.368583][ T404] usb 1-1: config 0 has no interface number 0 [ 131.376363][ T404] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 131.385549][ T404] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.393635][ T404] usb 1-1: Product: syz [ 131.397946][ T404] usb 1-1: Manufacturer: syz [ 131.402588][ T404] usb 1-1: SerialNumber: syz [ 131.407815][ T404] usb 1-1: config 0 descriptor?? [ 131.413702][ T404] smsc95xx v2.0.0 [ 131.443751][ T36] audit: type=1326 audit(1756464461.420:7026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.5.1928" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd320b8ebe9 code=0x0 [ 131.815388][ T404] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 131.826489][ T404] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 132.342905][ T494] rust_binder: 5961: removing orphan mapping 0:8 [ 132.352072][ T5965] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 132.730057][ T36] audit: type=1400 audit(1756464462.710:7027): avc: denied { mounton } for pid=5989 comm="syz.2.1941" path="/488/file0" dev="tmpfs" ino=2627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 132.756823][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1938'. [ 132.785930][ T5999] mmap: syz.2.1943 (5999): VmData 29081600 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 133.042398][ T404] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 133.053295][ T404] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 133.249249][ T5936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.257859][ T5936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.267636][ T404] usb 1-1: USB disconnect, device number 9 [ 133.720365][ T36] audit: type=1400 audit(1756464463.700:7028): avc: denied { relabelfrom } for pid=6025 comm="syz.3.1955" name="TCP" dev="sockfs" ino=26393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 133.720378][ T6026] SELinux: Context ethtool is not valid (left unmapped). [ 133.761136][ T36] audit: type=1400 audit(1756464463.700:7029): avc: denied { relabelto } for pid=6025 comm="syz.3.1955" name="TCP" dev="sockfs" ino=26393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="ethtool" [ 133.819914][ T6036] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1958'. [ 133.851398][ T6036] rtc_cmos 00:00: Alarms can be up to one day in the future [ 133.999379][ T6047] netlink: 'syz.0.1961': attribute type 58 has an invalid length. [ 134.017134][ T6048] netlink: 'syz.0.1961': attribute type 58 has an invalid length. [ 134.177972][ T6056] rust_binder: validate_parent_fixup: new_min_offset=31, sg_entry.length=0 [ 134.178014][ T6056] rust_binder: Error while translating object. [ 134.203383][ T6056] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 134.220405][ T6056] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:31 [ 134.294756][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 134.328964][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 134.336756][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 134.344901][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 134.359305][ T31] rtc rtc0: __rtc_set_alarm: err=-22 [ 134.842598][ T6071] veth0_vlan: left promiscuous mode [ 135.069428][ T6097] netlink: 'syz.2.1981': attribute type 12 has an invalid length. [ 135.078151][ T6097] overlayfs: failed to clone upperpath [ 135.137249][ T6106] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 135.180989][ T6108] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 135.262091][ T494] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 135.370872][ T6130] tipc: Can't bind to reserved service type 1 [ 135.403513][ T367] rust_binder: 6134: removing orphan mapping 0:4120 [ 135.414336][ T6140] overlayfs: failed to clone upperpath [ 135.418388][ T494] usb 6-1: Using ep0 maxpacket: 32 [ 135.426549][ T494] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 135.440721][ T494] usb 6-1: config 0 has no interface number 0 [ 135.448706][ T494] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 135.457974][ T494] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.474344][ T494] usb 6-1: Product: syz [ 135.478794][ T494] usb 6-1: Manufacturer: syz [ 135.483543][ T494] usb 6-1: SerialNumber: syz [ 135.491125][ T494] usb 6-1: config 0 descriptor?? [ 135.497018][ T494] smsc95xx v2.0.0 [ 135.791347][ T6196] veth1: entered allmulticast mode [ 135.796646][ T6196] veth1: left allmulticast mode [ 135.828872][ T6203] sit0: entered promiscuous mode [ 135.835559][ T6203] netlink: 'syz.3.2018': attribute type 1 has an invalid length. [ 135.843638][ T6203] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2018'. [ 135.881064][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2020'. [ 135.898866][ T494] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 135.909796][ T494] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 136.660031][ T6235] rust_binder: 109: no such ref 0 [ 137.124695][ T494] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 137.135774][ T494] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 137.331020][ T6091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.339763][ T6091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.349849][ T367] usb 6-1: USB disconnect, device number 2 [ 137.398388][ T36] audit: type=1326 audit(1756464467.370:7030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6236 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a18f8ebe9 code=0x7fc00000 [ 137.423905][ T6253] rust_binder: Error while translating object. [ 137.423947][ T6253] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 137.430216][ T6253] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112 [ 137.452937][ T36] audit: type=1400 audit(1756464467.430:7031): avc: denied { append } for pid=6258 comm="syz.0.2039" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 137.496864][ T6262] fuse: Unknown parameter 'à' [ 137.501704][ T36] audit: type=1400 audit(1756464467.480:7032): avc: denied { create } for pid=6260 comm="syz.0.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 137.939391][ T6283] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 4194304 [ 137.947144][ T6283] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:129 [ 138.178455][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 138.314876][ T6307] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 138.343957][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.357078][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 138.364577][ T6316] binder: Unknown parameter 'zwÌ' [ 138.369385][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 138.383180][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.396412][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.405760][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.415845][ T31] usb 1-1: config 0 descriptor?? [ 138.631370][ T31] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 138.646596][ T31] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 138.666573][ T31] usb 1-1: USB disconnect, device number 10 [ 138.732448][ T36] audit: type=1400 audit(1756464468.710:7033): avc: denied { append } for pid=6346 comm="syz.0.2070" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 138.858403][ T367] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 139.008384][ T367] usb 6-1: device descriptor read/64, error -71 [ 139.028467][ T6362] netlink: 'syz.3.2074': attribute type 16 has an invalid length. [ 139.037134][ T6362] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2074'. [ 139.252532][ T367] usb 6-1: device descriptor read/64, error -71 [ 139.268989][ T36] audit: type=1400 audit(1756464469.240:7034): avc: denied { lock } for pid=6377 comm="syz.2.2079" path="socket:[28540]" dev="sockfs" ino=28540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 139.508392][ T367] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 139.648423][ T367] usb 6-1: device descriptor read/64, error -71 [ 139.838475][ T6403] overlayfs: failed to clone upperpath [ 139.888430][ T367] usb 6-1: device descriptor read/64, error -71 [ 139.998508][ T367] usb usb6-port1: attempt power cycle [ 140.018389][ T494] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 140.148388][ T494] usb 1-1: device descriptor read/64, error -71 [ 140.338425][ T367] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 140.359583][ T367] usb 6-1: device descriptor read/8, error -71 [ 140.398425][ T494] usb 1-1: device descriptor read/64, error -71 [ 140.489566][ T367] usb 6-1: device descriptor read/8, error -71 [ 140.638454][ T494] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 140.728402][ T367] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 140.749457][ T367] usb 6-1: device descriptor read/8, error -71 [ 140.768437][ T494] usb 1-1: device descriptor read/64, error -71 [ 140.879572][ T367] usb 6-1: device descriptor read/8, error -71 [ 140.988490][ T367] usb usb6-port1: unable to enumerate USB device [ 141.008400][ T494] usb 1-1: device descriptor read/64, error -71 [ 141.118523][ T494] usb usb1-port1: attempt power cycle [ 141.345865][ T6425] overlayfs: failed to clone upperpath [ 141.383127][ T6435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2099'. [ 141.428134][ T6441] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2102'. [ 141.468418][ T494] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 141.489767][ T494] usb 1-1: device descriptor read/8, error -71 [ 141.619422][ T494] usb 1-1: device descriptor read/8, error -71 [ 141.858401][ T494] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 141.879432][ T494] usb 1-1: device descriptor read/8, error -71 [ 142.009496][ T494] usb 1-1: device descriptor read/8, error -71 [ 142.118492][ T494] usb usb1-port1: unable to enumerate USB device [ 142.295406][ T36] audit: type=1326 audit(1756464472.270:7035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.2.2105" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7dd78ebe9 code=0x0 [ 142.683157][ T6512] 9pnet_fd: Insufficient options for proto=fd [ 142.718414][ T404] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 142.848540][ T404] usb 6-1: device descriptor read/64, error -71 [ 143.088408][ T404] usb 6-1: device descriptor read/64, error -71 [ 143.098427][ T425] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 143.248397][ T425] usb 1-1: Using ep0 maxpacket: 16 [ 143.254636][ T425] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.265697][ T425] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.275668][ T425] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 143.284789][ T425] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.293496][ T425] usb 1-1: config 0 descriptor?? [ 143.328535][ T404] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 143.458417][ T404] usb 6-1: device descriptor read/64, error -71 [ 143.698409][ T404] usb 6-1: device descriptor read/64, error -71 [ 143.712397][ T425] usbhid 1-1:0.0: can't add hid device: -71 [ 143.724027][ T425] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 143.737452][ T425] usb 1-1: USB disconnect, device number 15 [ 143.776257][ T36] audit: type=1400 audit(1756464473.750:7036): avc: denied { getopt } for pid=6555 comm="syz.0.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.776436][ T6556] tmpfs: Invalid uid '0x00000000ffffffff' [ 143.808508][ T404] usb usb6-port1: attempt power cycle [ 144.066991][ T36] audit: type=1400 audit(1756464474.040:7037): avc: denied { load_policy } for pid=6582 comm="syz.0.2146" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 144.067537][ T6583] SELinux: failed to load policy [ 144.095446][ T6583] netlink: 'syz.0.2146': attribute type 12 has an invalid length. [ 144.158450][ T404] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 144.179449][ T404] usb 6-1: device descriptor read/8, error -71 [ 144.278121][ T36] audit: type=1400 audit(1756464474.250:7038): avc: denied { setopt } for pid=6599 comm="syz.0.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 144.319565][ T404] usb 6-1: device descriptor read/8, error -71 [ 144.518444][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 144.558400][ T404] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 144.579486][ T404] usb 6-1: device descriptor read/8, error -71 [ 144.648550][ T31] usb 1-1: device descriptor read/64, error -71 [ 144.696244][ T6616] overlayfs: failed to clone upperpath [ 144.709623][ T404] usb 6-1: device descriptor read/8, error -71 [ 144.818536][ T404] usb usb6-port1: unable to enumerate USB device [ 144.888426][ T31] usb 1-1: device descriptor read/64, error -71 [ 145.128430][ T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 145.258406][ T31] usb 1-1: device descriptor read/64, error -71 [ 145.498383][ T31] usb 1-1: device descriptor read/64, error -71 [ 145.608636][ T31] usb usb1-port1: attempt power cycle [ 145.643892][ T6658] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 145.776603][ T6678] veth1: entered allmulticast mode [ 145.783682][ T6678] /dev/rnullb0: Can't lookup blockdev [ 145.796429][ T6678] veth1: left allmulticast mode [ 145.814282][ T36] audit: type=1400 audit(1756464475.790:7039): avc: denied { unmount } for pid=5911 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 145.834540][ T36] audit: type=1400 audit(1756464475.800:7040): avc: denied { setopt } for pid=6683 comm="syz.5.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 145.919015][ T6686] /dev/loop0: Can't lookup blockdev [ 145.948385][ T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 145.979562][ T31] usb 1-1: device descriptor read/8, error -71 [ 146.109423][ T31] usb 1-1: device descriptor read/8, error -71 [ 146.205549][ T36] audit: type=1400 audit(1756464476.180:7041): avc: denied { map } for pid=6692 comm="syz.5.2187" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.315064][ T6695] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6695 comm=syz.5.2188 [ 146.358422][ T31] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 146.379671][ T31] usb 1-1: device descriptor read/8, error -71 [ 146.405168][ T36] audit: type=1326 audit(1756464476.380:7042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6702 comm="syz.5.2192" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd320b8ebe9 code=0x0 [ 146.510699][ T31] usb 1-1: device descriptor read/8, error -71 [ 146.618520][ T31] usb usb1-port1: unable to enumerate USB device [ 146.758433][ T425] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 146.908474][ T425] usb 6-1: Using ep0 maxpacket: 32 [ 146.914662][ T425] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 146.922875][ T425] usb 6-1: config 0 has no interface number 0 [ 146.930780][ T425] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 146.940026][ T425] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.948030][ T425] usb 6-1: Product: syz [ 146.952234][ T425] usb 6-1: Manufacturer: syz [ 146.956848][ T425] usb 6-1: SerialNumber: syz [ 146.962123][ T425] usb 6-1: config 0 descriptor?? [ 146.967915][ T425] smsc95xx v2.0.0 [ 147.158000][ T6760] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.165200][ T6760] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.172705][ T6760] bridge_slave_0: entered allmulticast mode [ 147.179517][ T6760] bridge_slave_0: entered promiscuous mode [ 147.185929][ T6760] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.193022][ T6760] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.200167][ T6760] bridge_slave_1: entered allmulticast mode [ 147.206656][ T6760] bridge_slave_1: entered promiscuous mode [ 147.292022][ T6760] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.299160][ T6760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.306494][ T6760] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.313560][ T6760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.339086][ T732] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.346780][ T732] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.364703][ T724] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.371808][ T724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.379921][ T425] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 147.393597][ T732] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.400701][ T732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.405308][ T425] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 147.441422][ T6760] veth0_vlan: entered promiscuous mode [ 147.459063][ T6760] veth1_macvtap: entered promiscuous mode [ 147.596180][ T36] audit: type=1400 audit(1756464477.570:7043): avc: denied { ioctl } for pid=6812 comm="syz.2.2222" path="pid:[4026532955]" dev="nsfs" ino=4026532955 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 147.674154][ T6818] rust_binder: 203: no such ref 1 [ 147.679638][ T6818] rust_binder: Error while translating object. [ 147.679671][ T6818] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 147.685984][ T6818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:203 [ 147.711192][ T6820] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 147.720523][ T6820] rust_binder: Read failure Err(EFAULT) in pid:205 [ 147.908405][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 147.948516][ T6826] 9pnet: p9_errstr2errno: server reported unknown error ottle.io_service_bytes_recursive [ 148.088457][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 148.358383][ T494] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 148.409640][ T6850] tipc: Started in network mode [ 148.414915][ T6850] tipc: Node identity cad97972b42d, cluster identity 4711 [ 148.422831][ T6850] tipc: Enabled bearer , priority 0 [ 148.522601][ T494] usb 1-1: config 128 has an invalid interface number: 164 but max is 1 [ 148.531124][ T494] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 148.548619][ T494] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 2 [ 148.557814][ T494] usb 1-1: config 128 has no interface number 0 [ 148.567943][ T494] usb 1-1: config 128 interface 164 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 148.582886][ T494] usb 1-1: config 128 interface 164 has no altsetting 0 [ 148.591592][ T494] usb 1-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=3b.3b [ 148.600943][ T494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.618406][ T494] usb 1-1: Product: syz [ 148.622746][ T494] usb 1-1: Manufacturer: syz [ 148.627396][ T494] usb 1-1: SerialNumber: syz [ 148.653581][ T425] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 148.668531][ T425] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 148.742058][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 148.750917][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 148.759090][ T10] usb 3-1: can't read configurations, error -71 [ 148.834730][ T36] audit: type=1400 audit(1756464478.810:7044): avc: denied { append } for pid=6832 comm="syz.0.2230" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.859077][ T494] zaurus 1-1:128.164: skipping garbage [ 148.867717][ T6722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.868398][ T494] usb 1-1: bad CDC descriptors [ 148.877701][ T6722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.890486][ T31] usb 6-1: USB disconnect, device number 11 [ 148.894691][ T494] usb 1-1: USB disconnect, device number 20 [ 148.968942][ T6857] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2238'. [ 149.500803][ T6894] rust_binder: Write failure EFAULT in pid:114 [ 149.538443][ T31] tipc: Node number set to 2129951090 [ 149.628409][ T494] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 149.709009][ T6904] lo: MTU too low for tipc bearer [ 149.714078][ T6904] tipc: Enabling of bearer rejected, failed to enable media [ 149.722815][ T6904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2254'. [ 149.748394][ T367] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 149.778398][ T494] usb 1-1: Using ep0 maxpacket: 32 [ 149.784700][ T494] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 149.793466][ T494] usb 1-1: config 0 has no interface number 0 [ 149.799622][ T494] usb 1-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 149.809771][ T494] usb 1-1: config 0 interface 214 has no altsetting 0 [ 149.817890][ T494] usb 1-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 149.827009][ T494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.835098][ T494] usb 1-1: Product: syz [ 149.839320][ T494] usb 1-1: Manufacturer: syz [ 149.843930][ T494] usb 1-1: SerialNumber: syz [ 149.849219][ T494] usb 1-1: config 0 descriptor?? [ 149.854496][ T6884] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 149.898389][ T367] usb 6-1: Using ep0 maxpacket: 32 [ 149.904760][ T367] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.917706][ T367] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 149.926812][ T367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.935715][ T367] usb 6-1: config 0 descriptor?? [ 150.063373][ T6884] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 150.344077][ T367] steelseries 0003:1038:1410.000C: not enough fields in HID_OUTPUT_REPORT 0 [ 150.428433][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 150.546859][ T367] usb 6-1: USB disconnect, device number 12 [ 150.567659][ T6915] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2259'. [ 150.577070][ T36] audit: type=1400 audit(1756464480.550:7045): avc: denied { read } for pid=6914 comm="syz.3.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 150.579155][ T6915] 9pnet_fd: p9_fd_create_tcp (6915): problem connecting socket to 127.0.0.1 [ 150.597525][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 150.612163][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 150.620509][ T10] usb 3-1: config 0 has no interface number 0 [ 150.628224][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 150.637340][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.645378][ T10] usb 3-1: Product: syz [ 150.649608][ T10] usb 3-1: Manufacturer: syz [ 150.654238][ T10] usb 3-1: SerialNumber: syz [ 150.657235][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2262'. [ 150.663842][ T10] usb 3-1: config 0 descriptor?? [ 150.674143][ T6924] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2262'. [ 150.675362][ T10] smsc95xx v2.0.0 [ 151.074719][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 151.085585][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 151.188738][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 151.200007][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 151.211148][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 151.930155][ T36] audit: type=1400 audit(1756464481.910:7046): avc: denied { mounton } for pid=6947 comm="syz.5.2271" path="/42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 152.224076][ T6966] overlayfs: failed to clone upperpath [ 152.230150][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 152.242008][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 152.253430][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 152.264705][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 152.276132][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 152.289206][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 152.302754][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 152.313876][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 152.324899][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 152.334478][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 152.347497][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 152.359024][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 152.370346][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 152.388161][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 152.408602][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 152.439883][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 152.459629][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 152.488420][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 152.507657][ T6911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.508745][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 152.516482][ T6911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.537542][ T45] usb 3-1: USB disconnect, device number 19 [ 152.544630][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 152.571320][ T494] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 152.595466][ T494] ax88179_178a 1-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 36:80:f1:74:04:c4 [ 152.613103][ T494] usb 1-1: USB disconnect, device number 21 [ 152.619584][ T494] ax88179_178a 1-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 152.673784][ T6997] netlink: 57 bytes leftover after parsing attributes in process `syz.3.2289'. [ 152.684909][ T331] udevd[331]: setting mode of /dev/bus/usb/001/021 to 020664 failed: No such file or directory [ 152.695932][ T331] udevd[331]: setting owner of /dev/bus/usb/001/021 to uid=0, gid=0 failed: No such file or directory [ 153.184067][ T7033] cgroup: fork rejected by pids controller in /syz2 [ 153.846398][ T36] audit: type=1400 audit(1756464483.820:7047): avc: denied { create } for pid=7109 comm="syz.3.2307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 153.903242][ T7114] rust_binder: Error while translating object. [ 153.903285][ T7114] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 153.914053][ T7114] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:159 [ 154.188394][ T45] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 154.264939][ T7134] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.272393][ T7134] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.288457][ T7134] bridge_slave_0: entered allmulticast mode [ 154.295962][ T7134] bridge_slave_0: entered promiscuous mode [ 154.309147][ T7134] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.318534][ T7134] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.325745][ T7134] bridge_slave_1: entered allmulticast mode [ 154.336863][ T7134] bridge_slave_1: entered promiscuous mode [ 154.378412][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 154.386590][ T45] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 154.396507][ T45] usb 6-1: config 0 has no interface number 0 [ 154.409968][ T45] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 154.422255][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.430585][ T45] usb 6-1: Product: syz [ 154.442563][ T45] usb 6-1: Manufacturer: syz [ 154.447216][ T45] usb 6-1: SerialNumber: syz [ 154.453305][ T45] usb 6-1: config 0 descriptor?? [ 154.459566][ T45] smsc95xx v2.0.0 [ 154.461908][ T7134] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.470421][ T7134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.477739][ T7134] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.484833][ T7134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.513734][ T732] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.521586][ T732] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.531465][ T724] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.538770][ T724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.548170][ T733] bridge_slave_1: left allmulticast mode [ 154.553928][ T733] bridge_slave_1: left promiscuous mode [ 154.559751][ T733] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.567583][ T733] bridge_slave_0: left allmulticast mode [ 154.573509][ T733] bridge_slave_0: left promiscuous mode [ 154.579422][ T733] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.632486][ T732] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.639720][ T732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.668676][ T7134] veth0_vlan: entered promiscuous mode [ 154.675374][ T733] veth1_macvtap: left promiscuous mode [ 154.681001][ T733] veth0_vlan: left promiscuous mode [ 154.742209][ T7134] veth1_macvtap: entered promiscuous mode [ 154.860404][ T45] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 154.871275][ T45] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 155.230846][ T7185] loop7: detected capacity change from 0 to 16384 [ 155.363088][ T7187] syzkaller0: entered promiscuous mode [ 155.368763][ T7187] syzkaller0: entered allmulticast mode [ 155.409261][ T7191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:117 [ 155.438542][ T7185] loop7: detected capacity change from 16384 to 16383 [ 155.605893][ T7208] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.605925][ T7208] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.647105][ T7214] rust_binder: Error while translating object. [ 155.653692][ T7214] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 155.660330][ T7214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:133 [ 155.767839][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2342'. [ 156.107703][ T45] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 156.128556][ T45] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 156.310021][ T7122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.318718][ T7122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.327315][ T10] usb 6-1: USB disconnect, device number 13 [ 156.368437][ T330] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 156.489093][ T7251] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 156.508580][ T330] usb 3-1: device descriptor read/64, error -71 [ 156.539497][ T7250] rust_binder: Write failure EINVAL in pid:23 [ 156.739982][ T7255] fuseblk: Bad value for 'fd' [ 156.748426][ T330] usb 3-1: device descriptor read/64, error -71 [ 156.988399][ T330] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 157.091408][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2360'. [ 157.128708][ T330] usb 3-1: device descriptor read/64, error -71 [ 157.157152][ T7273] rust_binder: 177: no such ref 3 [ 157.162307][ T7273] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 157.329244][ T36] audit: type=1400 audit(1756464487.310:7048): avc: denied { mounton } for pid=7279 comm="syz.0.2362" path="mnt:[4026532473]" dev="nsfs" ino=4026532473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 157.368577][ T330] usb 3-1: device descriptor read/64, error -71 [ 157.488463][ T330] usb usb3-port1: attempt power cycle [ 157.598402][ T45] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 157.758382][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 157.764708][ T45] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 157.774084][ T45] usb 1-1: config 0 has no interface number 0 [ 157.782160][ T45] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 157.791425][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.799506][ T45] usb 1-1: Product: syz [ 157.803739][ T45] usb 1-1: Manufacturer: syz [ 157.808407][ T45] usb 1-1: SerialNumber: syz [ 157.813623][ T45] usb 1-1: config 0 descriptor?? [ 157.819442][ T45] smsc95xx v2.0.0 [ 157.828647][ T330] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 157.849520][ T330] usb 3-1: device descriptor read/8, error -71 [ 157.979455][ T330] usb 3-1: device descriptor read/8, error -71 [ 158.132031][ T36] audit: type=1400 audit(1756464488.110:7049): avc: denied { connect } for pid=7305 comm="syz.3.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.168514][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 158.223722][ T45] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 158.228380][ T330] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 158.251485][ T45] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 158.267179][ T1198] tipc: Resetting bearer [ 158.274138][ T330] usb 3-1: device descriptor read/8, error -71 [ 158.310547][ T1198] tipc: Disabling bearer [ 158.318367][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 158.327310][ T10] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 158.336207][ T10] usb 6-1: config 0 has no interface number 0 [ 158.348389][ T10] usb 6-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 158.368372][ T10] usb 6-1: config 0 interface 214 has no altsetting 0 [ 158.376785][ T10] usb 6-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 158.386224][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.396099][ T10] usb 6-1: Product: syz [ 158.406253][ T10] usb 6-1: Manufacturer: syz [ 158.411773][ T10] usb 6-1: SerialNumber: syz [ 158.416930][ T330] usb 3-1: device descriptor read/8, error -71 [ 158.426807][ T10] usb 6-1: config 0 descriptor?? [ 158.432852][ T425] rust_binder: 0: removing orphan mapping 0:24 [ 158.440955][ T7302] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 158.471700][ T7316] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.479747][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.486957][ T7316] bridge_slave_0: entered allmulticast mode [ 158.494309][ T7316] bridge_slave_0: entered promiscuous mode [ 158.504707][ T7316] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.512071][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.519430][ T7316] bridge_slave_1: entered allmulticast mode [ 158.525985][ T7316] bridge_slave_1: entered promiscuous mode [ 158.532304][ T330] usb usb3-port1: unable to enumerate USB device [ 158.615786][ T7316] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.622948][ T7316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.630312][ T7316] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.637367][ T7316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.653531][ T7302] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 158.675183][ T732] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.683290][ T732] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.695272][ T732] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.702385][ T732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.712307][ T732] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.719549][ T732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.754522][ T7316] veth0_vlan: entered promiscuous mode [ 158.767882][ T7316] veth1_macvtap: entered promiscuous mode [ 159.070001][ T7302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.078951][ T7302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.285275][ T36] audit: type=1400 audit(1756464489.260:7050): avc: denied { lock } for pid=7331 comm="syz.2.2377" path="/dev/binderfs/binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 159.511857][ T45] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 159.522824][ T45] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 159.639294][ T36] audit: type=1326 audit(1756464489.620:7051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.5.2370" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd320b8ebe9 code=0x0 [ 159.713698][ T404] usb 1-1: USB disconnect, device number 22 Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.