last executing test programs: 4m24.577020741s ago: executing program 1 (id=45): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000140)=0xfe, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20102, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000440)={0x3ff, {{0xa, 0x4e21, 0xfe2e, @empty, 0x8}}, 0x0, 0x3, [{{0xa, 0x4e24, 0x9, @remote, 0x6}}, {{0xa, 0x4e21, 0x9, @mcast2, 0xffffffff}}, {{0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffffff8}}]}, 0x210) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x5c, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0x2f}, @fda={0x66646185, 0x8000000000000001, 0x0, 0x23}}, &(0x7f00000000c0)}, 0x400}, @reply={0x40406301, {0x4002, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x5b9618f387f52551, 0x1}, @flat=@handle={0x73682a85, 0xa, 0x1}, @flat=@handle={0x73682a85, 0x1000, 0x3}}, &(0x7f0000000080)={0x22, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4m24.455236842s ago: executing program 1 (id=46): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="aa", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="307ddfb9", 0x4}, {&(0x7f0000000340)="ced98c1a5f5a93258dfa9a8c31878af8d7be921a531da9e6c50efdba96722424d55ce610a4d9b534b3aa09618dfc04f5504e30a263ad3fedf0a7381a8a", 0x3d}], 0x2}}], 0x3, 0x2000c8c0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x202000) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x1, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8001, &(0x7f00000000c0)=[{0x4, 0x7ff, 0x19fa}], 0x1, 0x7f, 0x10, 0x4, 0x60, 0x8}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93503d", 0x3}], 0x1}}], 0x1, 0x40) recvmmsg(r1, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}, 0xc8b}], 0x1, 0x40000142, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000000c0)=""/157) 4m24.382456352s ago: executing program 1 (id=47): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x6e6bbb, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_lifetime={0x4, 0x3, 0x6, 0x4, 0x9, 0x4}]}, 0xc0}}, 0x0) read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) 4m24.308089023s ago: executing program 1 (id=48): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2040, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x10c000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x2010004, 0x0) stat(&(0x7f0000000100)='./file0/../file0/../file0\x00', &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) creat(0x0, 0xc7) socket$xdp(0x2c, 0x3, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x3ff, 0xe3, &(0x7f0000000000)={0x80, 0x3, 0xfff8, 0x4360, 0x4}, 0x8, 0x6, 0x7d, 0x3ffdb8, 0x10001, 0x101, 0x0}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x12, r0, 0x0) 4m24.307486923s ago: executing program 1 (id=49): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="700000000200000000000000aaaaaabb08004500452c00004000002f9078ac1e0001e00000010000655800189078040000000000000086ddffff00000000"], 0xfdef) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000002cc0)=0x4) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x7e, r3}) sendmmsg$sock(r1, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000000c0)="8bf0d03c402affa6bd3b38800e23eb7b483db9cf5988", 0x16}, {&(0x7f0000000340)="7a61bb11b8ee163cde9212c77019d3cb08861b854afd2494e733fd3cbe5a7659429bb3b020eb86ca21be2a9e5d00ed49d42bbe57364449b9a0d810c0e6cda4246c2ec485020d66cc4d0f2fe134a1ef5e6f10390a7b7aa1a7903a8cd6a9ea7bcc42fac63fbb3e98d4bd03e73bac0f2f4acaf2b5c2cb462c4bddaa7830f4b1ec2e60819513f94a6af998568e56c8419c1baac2f651b821e7fee36c9daeb343292e90698029eb46e3d78a784c28b41a898610e4f8f3ba8efa2e72715b1f93fb8e908229fb", 0xc3}, {&(0x7f0000000500)="4e3bfd57f2f6ff04b7ca99750ed6481d1f5a57036b9282d29cc3577dfe3efbb28040cbc55d7362fd578766592589f0ea0dbbcc406ea34c5befc434e984bcf296669f5907739fd82428c0bdcb5a2c552c9c3a4a4ccd0baf880f9a895f6ec50f0dbe76edd66105354f31a62aed48da3bca56b9e54bf4ac8d83f6b58171689c5a30654c14461e57631be43031a85a5c7f364861c13af8aba4a2f1c2efc83b5ae50290f3cb48352a9e33095cf3d795847cf024172fbe92bd151388e7b42bac6b318a45add8eadb0084c1b4fbe8d0534ff4c4819837fbdededeb7983c2e9b9d", 0xdd}, {&(0x7f0000000440)="bf6397c4d1b255d261d6c05a8af531947fe97cf99b5c07756dd2a68b0b8b72b4e4d5fdc2792b550100ed73b023fb5e0f63f65da10002fa2b60a5ba1d7b1b7276794cf4bed291ea3d1d4b7c2ab8e43e3e1e7f4a9c", 0x54}, {&(0x7f0000000600)="6352e24fb3ecb46f8fca8d8ba0a509c55f8b2c570b04700015daf89a7ad1b253ef23020fbad3242d7729423671565127ac84aa17c97251e4e257d778a3cf833d5fbdb4dce5d1eada5156478a218c1fac344031ee017f8c88d579a305e3a0a6ec43de5e91ecba134a957226f3d40269c5776df9490a4e86580a977826c985f485148d4bf8a687b57002ba45d6595defbd025d5c137283e2af7a43e586e9abc1cd29e5212aad55565c5b90cfa866dc127fcd16074d67a518af06fb4f9e249a7b9dd19fa4d187994633c9693d", 0xcb}, {&(0x7f0000000100)="476c37c037c45b4dd7d19e00c28076f26ddd422f616f09c41c45c808fb4debf7c94396470a67b06f343d59745cb9926c86d5146b", 0x34}, {&(0x7f0000000700)="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", 0xfd}], 0x7, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x24, 0x362}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffd}}, @txtime={{0x18, 0x1, 0x3d, 0x4000000000}}, @timestamping={{0x14, 0x1, 0x25, 0xff}}], 0x60}}, {{&(0x7f0000002980)=@can={0x1d, r3}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002a00)="cb3a11e3593ea66a1d8b7bf1ed9337f5ec7ec12f91c83d49d80316d629b1a598b736706543423172cb81244d4e5e03993b2ed138b1f714b5adbea716f600b9e906d6ac750d797d88a2196a5c5431075a162b882e08cfffbd011240f4ba6582b35c608e93df22a90b4b250dcdcdcb91281b495f8e04ae05feb6cff7bb398ff5d26a1d9fd5cc3ab30fa46d5a4c31dd93f7a0dece64c88a8a65506117dbd335a74065ce091d15fa6f0a03dfcc1991c328a2139d7b223303927f3d6eb109c5b2d730073186824a6030b4d462c113380ac67311cbe639aebb", 0xd6}, {&(0x7f00000002c0)="28b1f70f1a05a01fc8e11c3adb91fea7211e8eb7ed74203f484ad2a60c73bdc031a4ec86153148dc947ea05eb605b91a", 0x30}], 0x2, &(0x7f0000002b40)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0xa8}}], 0x2, 0x4044805) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x83, r7, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048854}, 0x4044094) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008080}, 0x4404c010) r10 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) r11 = syz_open_dev$evdev(&(0x7f0000000200), 0x96b7, 0x0) ioctl$EVIOCGKEY(r11, 0x80404518, &(0x7f0000000180)=""/76) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r12, 0x40046210, &(0x7f0000002c80)=0x1) sendmsg$nl_generic(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="060000002200210000001000000000000600000005000000000000078ce17272"], 0x20}}, 0x4001) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) 4m24.288722793s ago: executing program 1 (id=50): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x70bd06, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x20000040) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x10001, 0x3, 0x1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x3, 0x4, 0x80a0000, 0x1000, &(0x7f0000fa4000/0x1000)=nil}) ioctl$KVM_CREATE_DEVICE(r4, 0xc018aec0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x31, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000002000000450000002500000019000400440000000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m24.224255734s ago: executing program 32 (id=50): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x70bd06, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x20000040) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x10001, 0x3, 0x1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x3, 0x4, 0x80a0000, 0x1000, &(0x7f0000fa4000/0x1000)=nil}) ioctl$KVM_CREATE_DEVICE(r4, 0xc018aec0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x31, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000002000000450000002500000019000400440000000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.0531047s ago: executing program 3 (id=3542): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1280, 0x3}) (async) fsopen(0x0, 0x0) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="00006000bbbbbbbbbbbb0000000000008100000008060001080006eeff07aaaaaaaaaaaaac1e0001bbbbbbbbbbbbac141425"], 0x32) (async, rerun: 64) r5 = gettid() (rerun: 64) r6 = syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r6, &(0x7f0000000180)='1\x00', 0x2) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) (async, rerun: 64) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) (async) recvmmsg(r8, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10000, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0}) (async) preadv(r7, &(0x7f0000000900)=[{&(0x7f0000000180)=""/114, 0x72}, {&(0x7f0000000200)=""/246, 0xf6}, {&(0x7f0000000000)=""/46, 0x2e}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000400)=""/162, 0xa2}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000580)=""/145, 0x91}, {&(0x7f0000000640)=""/185, 0xb9}, {&(0x7f0000000780)=""/225, 0xe1}], 0x9, 0xe, 0x6) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001880)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000880)="e2f2819d3881ef541f0deedde03dbc81a22044c6d6ff868e2024240ce3ce33cd8c6713632a4f4992cb3de1bf5ace3263cad67409df9978e6beac5166773673a3d030ba1cf3500ac901c07f571d085966"}) 8.194635031s ago: executing program 3 (id=3542): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1280, 0x3}) (async) fsopen(0x0, 0x0) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="00006000bbbbbbbbbbbb0000000000008100000008060001080006eeff07aaaaaaaaaaaaac1e0001bbbbbbbbbbbbac141425"], 0x32) (async, rerun: 64) r5 = gettid() (rerun: 64) r6 = syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r6, &(0x7f0000000180)='1\x00', 0x2) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) (async, rerun: 64) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) (async) recvmmsg(r8, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10000, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0}) (async) preadv(r7, &(0x7f0000000900)=[{&(0x7f0000000180)=""/114, 0x72}, {&(0x7f0000000200)=""/246, 0xf6}, {&(0x7f0000000000)=""/46, 0x2e}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000400)=""/162, 0xa2}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000580)=""/145, 0x91}, {&(0x7f0000000640)=""/185, 0xb9}, {&(0x7f0000000780)=""/225, 0xe1}], 0x9, 0xe, 0x6) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001880)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000880)="e2f2819d3881ef541f0deedde03dbc81a22044c6d6ff868e2024240ce3ce33cd8c6713632a4f4992cb3de1bf5ace3263cad67409df9978e6beac5166773673a3d030ba1cf3500ac901c07f571d085966"}) 6.290063542s ago: executing program 3 (id=3542): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1280, 0x3}) (async) fsopen(0x0, 0x0) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="00006000bbbbbbbbbbbb0000000000008100000008060001080006eeff07aaaaaaaaaaaaac1e0001bbbbbbbbbbbbac141425"], 0x32) (async, rerun: 64) r5 = gettid() (rerun: 64) r6 = syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r6, &(0x7f0000000180)='1\x00', 0x2) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) (async, rerun: 64) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) (async) recvmmsg(r8, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10000, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0}) (async) preadv(r7, &(0x7f0000000900)=[{&(0x7f0000000180)=""/114, 0x72}, {&(0x7f0000000200)=""/246, 0xf6}, {&(0x7f0000000000)=""/46, 0x2e}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000400)=""/162, 0xa2}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000580)=""/145, 0x91}, {&(0x7f0000000640)=""/185, 0xb9}, {&(0x7f0000000780)=""/225, 0xe1}], 0x9, 0xe, 0x6) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001880)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000880)="e2f2819d3881ef541f0deedde03dbc81a22044c6d6ff868e2024240ce3ce33cd8c6713632a4f4992cb3de1bf5ace3263cad67409df9978e6beac5166773673a3d030ba1cf3500ac901c07f571d085966"}) 4.263345314s ago: executing program 2 (id=3676): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 4.262107734s ago: executing program 2 (id=3677): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x3ca) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000004c0)=@newsa={0x198, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x3, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x5e, 0x14, {{'cmac(aes)\x00'}, 0x90, 0x0, "0a55b0ca9cce75f5c9b871603e40f7ec06b2"}}]}, 0x198}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xc5) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) r1 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x7d4) 4.261400034s ago: executing program 2 (id=3678): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080089064803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r7, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, ':'}, {0x20, '/dev/rnullb0\x00'}, {0x20, '\'@+(#&'}, {0x20, '(-'}], 0xa, "30bd5f4b8b58e929f441a91a0960294893d90eb9bf36b65b4d95f0eb666c42e913fa406eb0dd6a5b5520aded496e9073bd3d1535e748ea9ad62a52d7aeaa77ec4af03a452a434bc98260df1b94f0718a0b646af3b949c2e03e37c4c387e46eb792dc1585add4e262b1d3f816c88d7286dde1dd1dca7d98c3adc46da78cd97ed67b51fe3844c0f4fa7428e0ecc6c387c76855cbff43088b1d18e7dd8f0e328f5673f8d543048dc9350933ffdf15643ad19cc0709b71c13d5c176c3a41355d5c77bc5e7cf4ca4ef87f223143cbb9325141a661c4069eddef88c37b4697"}, 0x101) write(r0, &(0x7f0000000400)="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", 0x1f000) 4.240420544s ago: executing program 3 (id=3542): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1280, 0x3}) (async) fsopen(0x0, 0x0) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="00006000bbbbbbbbbbbb0000000000008100000008060001080006eeff07aaaaaaaaaaaaac1e0001bbbbbbbbbbbbac141425"], 0x32) (async, rerun: 64) r5 = gettid() (rerun: 64) r6 = syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r6, &(0x7f0000000180)='1\x00', 0x2) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) (async, rerun: 64) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) (async) recvmmsg(r8, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10000, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0}) (async) preadv(r7, &(0x7f0000000900)=[{&(0x7f0000000180)=""/114, 0x72}, {&(0x7f0000000200)=""/246, 0xf6}, {&(0x7f0000000000)=""/46, 0x2e}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000400)=""/162, 0xa2}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000580)=""/145, 0x91}, {&(0x7f0000000640)=""/185, 0xb9}, {&(0x7f0000000780)=""/225, 0xe1}], 0x9, 0xe, 0x6) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001880)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000880)="e2f2819d3881ef541f0deedde03dbc81a22044c6d6ff868e2024240ce3ce33cd8c6713632a4f4992cb3de1bf5ace3263cad67409df9978e6beac5166773673a3d030ba1cf3500ac901c07f571d085966"}) 2.276082285s ago: executing program 4 (id=3680): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0xf) 2.275657345s ago: executing program 2 (id=3681): futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 2.274699736s ago: executing program 4 (id=3682): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x43c000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r0, 0x2}], 0x1, &(0x7f00000002c0)={r3, r4+60000000}, &(0x7f0000000300)={[0x6]}, 0x8) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x6e, 0x80000) getsockname$unix(r5, &(0x7f0000000400), &(0x7f0000000480)=0x6e) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x0, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x800}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TUPLE={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x2, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfffffffa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001) recvfrom$unix(r5, &(0x7f0000000740)=""/177, 0xb1, 0x0, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e23}, 0x6e) lgetxattr(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)=@random={'security.', '/selinux/context\x00'}, &(0x7f0000000900)=""/43, 0x2b) io_setup(0x7, &(0x7f0000000940)=0x0) io_getevents(r7, 0x800, 0x4, &(0x7f0000000980)=[{}, {}, {}, {}], 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000a00)={'ipvlan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x20010880}, 0x8000) setxattr$security_capability(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), &(0x7f0000000bc0)=@v3={0x3000000, [{0x6428, 0x5}, {0x77, 0x9}], r1}, 0x18, 0xd8141abde6893449) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000c00)='./binderfs/binder1\x00', 0x0, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) write$UHID_DESTROY(r8, &(0x7f0000000c80), 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000cc0)={'\x00', 0x5e, 0x9, 0x0, 0x8, 0x7, 0xffffffffffffffff}) syz_open_procfs$namespace(r9, &(0x7f0000000d40)='ns/cgroup\x00') clock_nanosleep(0x4, 0x1, &(0x7f0000000d80), &(0x7f0000000dc0)) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r10, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, 0x0, 0x10, 0x70bd2c, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80), &(0x7f0000000fc0)={'U+', 0x34}, 0x16, 0x4) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x10, 0x3f5, 0x2, 0x70bd2b, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20000054) 2.208136656s ago: executing program 2 (id=3685): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000000)=0x0) timer_settime(r1, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000280)={0x5e, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x56, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34f"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) 2.207276656s ago: executing program 0 (id=3686): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) write(r0, &(0x7f0000000100)="97", 0x1) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000340)="7800000018001f07b9409b0dffff000d0216be0400030605060140034300080012000000bf46d32345652b000000caaf6c26c291a34549935ade4a460c89b6ec0cff3943a59b3cb50b0ae854be4dc0c63359547f5090583a86c902000000004a3200637939cc1cd10400160012000a00800000000000000000", 0x79, 0x20004000, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000001a80)=""/85, 0x328000, 0x1000, 0x0, 0x3}, 0x20) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000300)={0x0, 0x1000000, 0x1000, 0x1, 0x2}, 0x20) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, r3, &(0x7f0000000340)='./file0\x00') ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000001800)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x1ea, &(0x7f0000001440)=ANY=[@ANYBLOB="12010003020000002505a1a44000010203010902d801020103300c0910000001020d00000824060001b449ae05240004000d240f0105000000fc9307000c06241a0200200c241b2a0c0800090003007f052415020035241303c6df04f18189cdabb7003d5af588773a8725937fa14d308133e7800f984476dcc6d97ed75c9a08386887aada18150d2f99e22413ca30b69f73bc65194cbd4fd89f5847893b830e67fe7fb62a8dd8d65defbcb8f31e31ddce60b58882aa02999bb0274fc5449991c411f1e5678fbf7893d4d61aee21ad530eb87596ee89349a6e79a47b2361c07e7497fb2eed94fc193cd0f31fc9f7c657d588b8a92f26eab94ad578ac6930470bd10faadaa45b8a7bf90f330c51c3f93fb7fa9d9e38abc339ac8e946c3640897e6ed64111b51c9957ffd3fc7608480b9d8c01ce7d850d3fe591958b6db1b7bb34db6cc29fa375a9e8ab1856a9ecd9580bfc87c72d596b798c8ea1ef4ff145e764e60c241b0100030006400800f445241305f4946bd947e8eed73a79ff1da6033db1c1bfde5896a5f6fe748acca889c12f858ae13fc047d7f33d1357b694b3372a729366cd459bb6c0743e808275e7513c6a070905810340000505070904010000020d00000904010102020d000009058202100002010709050302100081070f"], &(0x7f00000017c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x3, 0x98, 0x26, 0x20, 0x1}, 0xf, &(0x7f0000001740)=ANY=[@ANYRES64=r4], 0x3, [{0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x4001}}, {0xcd, &(0x7f00000018c0)=ANY=[@ANYBLOB="cd03a5379423472f4c89b98ac1f0e1ec52f940da4a8f0d70d90c2ad3b41f7c589436416319a4256ef812d2cdf3feaa501911776ac3a2801c7fe792d45ab4f169d1a57050bcbb90bd5f816f00bf3ad2c6fdaaf5be3a8f6a9559d3ffec87ebc553cd1d41d0d2ba6272a7c8e68b8289347d6e310f870d9b9e36cc4691d8894cb01cd52876fceb0a65de3fc5161c16389972f74a379db9a86f50192b129313353f1c56dab46b3e885608cdce185da61c2035ab00837347b9d3349e7da663ef2a844736618c50230098a51940e2bec163ee22462a7c25472b7154755ab75055380b89309e4e093520b30975"]}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r5, 0x45809000) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165902, 0x0) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000019c0)=ANY=[@ANYRES32=r4, @ANYRESDEC=r3, @ANYRESOCT=r3, @ANYRES32=r2, @ANYBLOB="9d5132961f7733df7c2c4a0681f061fe43431c24d333bd78947a41935c1a7790784e54a72e8354fdde102c530d48ef2826a79b44dab0e0d10e80c3763b", @ANYRESHEX, @ANYRESOCT=r5, @ANYRESHEX=r5, @ANYRES32], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000002c0)={0x2c, &(0x7f00000016c0)=ANY=[@ANYBLOB="00000610000006112c54a5ef509615563f7534fcf85c970005f6102a861de0ddc9dd85603e4d7d489ddfc00b2cb55db1d36cd67316d915fe6eea5ef2e4e3729f6c9872cc94d91d39c022052665b8c09ed4409626d4bcf9ec55ddceea0e03ff"], 0x0, 0x0, 0x0, 0x0}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(r6, 0x9) syz_clone3(&(0x7f00000013c0)={0x240040480, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/6, 0x6}, {0x0, 0x56}], 0x2, 0x0, 0x5245) ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f0000001840)={0x2, 0xfffffff9}) r9 = syz_clone(0x6002000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0)="5779377856374493573beed0a34827bac7d25e22ed0b013d42d4b5fab076e88fab32ef74ffa9ed64467297bc9f3b9513d88766203b3245636c86752e53dddbe637726f5215c6e4e2f11fe65353cba52f15344fc61147a4e7da204fff6b6159ef7e222018bd4985864e55b29c3d1338217707dd57176ce4f69b5592a92ae5f0422a086a09248d91f86e79dab686771bf4f065d896d7d3e961ee0553bee8e1e2b06206d34e7c863853ecda68918c350e207816400ef43d926584cfc90d013d6f14f137f08e93c873b99b8fb113cde34cfa38a9") sched_setaffinity(r9, 0x8, &(0x7f00000000c0)=0x7) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r10, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f00000015c0)=@newtfilter={0x24, 0x2c, 0x603, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0xffff, 0xa}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80) write$P9_RCREATE(r0, &(0x7f0000001880)={0x18, 0x73, 0x1, {{0x40, 0x2, 0x4}, 0x2}}, 0x18) write(r6, &(0x7f0000000400)="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", 0xfffffcf1) 2.173856627s ago: executing program 3 (id=3542): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1280, 0x3}) (async) fsopen(0x0, 0x0) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="00006000bbbbbbbbbbbb0000000000008100000008060001080006eeff07aaaaaaaaaaaaac1e0001bbbbbbbbbbbbac141425"], 0x32) (async, rerun: 64) r5 = gettid() (rerun: 64) r6 = syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r6, &(0x7f0000000180)='1\x00', 0x2) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) (async, rerun: 64) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) (async) recvmmsg(r8, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10000, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0}) (async) preadv(r7, &(0x7f0000000900)=[{&(0x7f0000000180)=""/114, 0x72}, {&(0x7f0000000200)=""/246, 0xf6}, {&(0x7f0000000000)=""/46, 0x2e}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000400)=""/162, 0xa2}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000580)=""/145, 0x91}, {&(0x7f0000000640)=""/185, 0xb9}, {&(0x7f0000000780)=""/225, 0xe1}], 0x9, 0xe, 0x6) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001880)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000880)="e2f2819d3881ef541f0deedde03dbc81a22044c6d6ff868e2024240ce3ce33cd8c6713632a4f4992cb3de1bf5ace3263cad67409df9978e6beac5166773673a3d030ba1cf3500ac901c07f571d085966"}) 111.565729ms ago: executing program 0 (id=3687): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) clock_gettime(0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000003c0)={r2}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket(0xa, 0x3, 0x3a) (async) close_range(r3, 0xffffffffffffffff, 0x0) 110.870139ms ago: executing program 4 (id=3688): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x56, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34f"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x6c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000940)={@ptr={0x70742a85, 0x0, &(0x7f0000000800)=""/153, 0x99, 0x0, 0x23}, @fda={0x66646185, 0x3, 0x0, 0x33}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000480)={0x0, 0x28, 0x48}}, 0x400}, @decrefs, @increfs_done, @register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x2000, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000001a40), 0x2, 0xa040) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000180)={0x0, 0x0, "2c348c1b8fe34a170bf542a516d673b9"}) 107.401969ms ago: executing program 2 (id=3689): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000002140)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) read(r3, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = dup(r2) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ppoll(&(0x7f0000000140)=[{r8}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000001540)=[{r5, 0x180}, {r8, 0x240}], 0x2, 0x0, 0x0, 0x0) close(r6) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) r10 = gettid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000040)={r10, 0x1, 0x70a818c4}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x6) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x1101, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 90.138489ms ago: executing program 4 (id=3690): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x200, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x5) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000100)=0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r1, &(0x7f0000000480)=[{{&(0x7f0000000000)=@in={0x2, 0x4e20, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x18}}], 0x1, 0x24000040) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0}) 76.186759ms ago: executing program 4 (id=3691): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="28020000", @ANYRES16=r2, @ANYBLOB="000225bd7000fbdbdf252100000008000300e2757cb14795d2950b2990b532cffec4ebdb6f40b47358f66b0f3dc3d75739751440368d2417a878cc5e5b255b14c21925066ee2993cee50099c55343a49c1f57c4e8aa99c3d07d610b77804ec8693b6e33b30e1879ea7fb0c13657da22e56319ede22b9ee166b8bffeb270791e5064e8667f893484c33986c5987a1e874c0af85b6e60b84e3d64f7fc7c8b9cf21b94cff92108a999792f73d4be61dd44fd4d4d117c0adaf73597ab1595ac8a8fa7af76286737b9a2214eb1fcb370fd5c59ea51a", @ANYRES32=r3, @ANYBLOB="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"], 0x228}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f000100080031000000000000000000", @ANYRES64=r4], 0x20}], 0x1, 0x0, 0x0, 0x4040040}, 0x20000000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="446e4ff3", @ANYRES16=r5, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e000000000000000000"], 0x44}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}], 0x33, 0x0, 0x0}) 11.624969ms ago: executing program 4 (id=3692): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000000300)=0x7f, 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_udp_int(r2, 0x88, 0x1, &(0x7f0000000080), 0x4) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x1) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) recvmmsg(r1, &(0x7f00000032c0)=[{{&(0x7f0000000340)=@hci, 0x80, &(0x7f00000003c0)=[{&(0x7f0000001440)=""/237, 0xed}], 0x1, &(0x7f0000001540)=""/74, 0x4a}, 0x2}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/95, 0x5f}, {&(0x7f0000001640)=""/219, 0xdb}, {&(0x7f0000001740)=""/110, 0x6e}, {&(0x7f00000017c0)=""/91, 0x5b}, {&(0x7f0000001840)=""/220, 0xdc}, {&(0x7f0000001940)=""/223, 0xdf}, {&(0x7f0000001a40)=""/77, 0x4d}], 0x8, &(0x7f0000001b40)=""/106, 0x6a}, 0x7}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000400)=""/54, 0x36}, {&(0x7f0000001bc0)=""/231, 0xe7}], 0x2}, 0x7c}, {{&(0x7f0000001d00)=@nfc_llcp, 0x80, &(0x7f0000003080)=[{&(0x7f0000001d80)=""/155, 0x9b}, {&(0x7f0000002f00)=""/152, 0x98}, {&(0x7f0000002fc0)=""/157, 0x9d}, {&(0x7f0000001e40)=""/104, 0x68}], 0x4, &(0x7f00000030c0)=""/150, 0x96}, 0x4}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000003180)=""/94, 0x5e}, {&(0x7f0000003200)=""/5, 0x5}], 0x2, &(0x7f0000003280)=""/57, 0x39}, 0x9}], 0x5, 0x40000100, &(0x7f0000003400)={0x0, 0x3938700}) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$KVM_SET_XSAVE(r8, 0x5000aea5, &(0x7f0000000440)={[0x4, 0x5, 0x101, 0x9, 0x7, 0x9c3, 0x752, 0x2, 0x7d, 0x827, 0xad, 0x81, 0x2f, 0x2, 0x3a393f2c, 0xff, 0x8, 0x8, 0xffff6391, 0x6efe, 0x8, 0x2, 0x7, 0xab70, 0xffffffff, 0x8, 0x3, 0xa219, 0x2290, 0x7ff, 0x5, 0x5, 0xb3d, 0x4, 0x401, 0x80000000, 0xe, 0xfffffffe, 0xffff, 0x8, 0x8, 0x6, 0x6, 0x6, 0x7, 0x9, 0x4, 0xff0, 0x8, 0x6e4, 0x3, 0x4, 0x0, 0xece0, 0x802, 0xb35, 0x4, 0x8, 0x1, 0xfffffffa, 0x5, 0x1, 0x6, 0x5, 0x80000000, 0xea, 0x6, 0xe, 0x9, 0x4, 0x8b85, 0x2, 0x7fffffff, 0x7, 0xd11, 0x1, 0xfffffff4, 0x8, 0x2, 0x8001, 0x3, 0x9, 0x8, 0x4455, 0xb873, 0x4, 0x1, 0x0, 0x2, 0x1, 0x3, 0x5, 0x101, 0x5b4f, 0x5, 0x7, 0x5, 0xf00, 0x70, 0x4, 0x9, 0x2, 0x5, 0x9, 0x7bc, 0x9, 0x67a1, 0xe4fd, 0x9, 0xfda, 0x8, 0x3, 0x6, 0x7, 0x0, 0x6, 0x1, 0x4, 0x8, 0x1, 0x4e3d, 0xfdef, 0x2, 0x401, 0x80000000, 0x9, 0xf, 0x6, 0xffa8, 0x7, 0x7, 0x8, 0x5, 0x1000, 0x2, 0x8001, 0x9, 0xd, 0x7, 0x7, 0x2, 0x7, 0x9, 0xfffffff8, 0x3, 0x8, 0x5, 0xfffffffd, 0x9, 0x6, 0x6096, 0x88b6, 0x1, 0x9, 0x3, 0x2, 0x8, 0x5, 0x6, 0x0, 0xc, 0xc2e9, 0x1, 0x80000001, 0x3, 0x0, 0x4fe, 0x3, 0x7, 0x8, 0x4, 0x6, 0x2, 0x8, 0x1, 0x9, 0x3, 0x1, 0x4, 0x4, 0xffffffff, 0x401, 0x10, 0x6, 0x3, 0x9, 0x2, 0x6, 0x3ff, 0xfffffffa, 0x10, 0x2, 0xa91a, 0x3, 0x5, 0x8, 0x6c, 0xffff3741, 0x8000, 0x9e8, 0xe, 0x2, 0x6, 0x5, 0x430f5e48, 0x1000, 0xef, 0x94cb320a, 0x4, 0x4, 0x8, 0xf, 0x4, 0x9, 0x8000, 0xfffffffe, 0x0, 0x1, 0x10, 0x101, 0x2, 0xc, 0x7, 0xe, 0x5, 0x9, 0xfff, 0x7, 0x9, 0x2, 0x257d, 0x0, 0x3bf8, 0x5, 0x3, 0x8, 0x42e, 0xa3, 0x7ff, 0x2, 0x101, 0x1, 0x7, 0x0, 0x2, 0x9, 0x2, 0x5, 0x3, 0x8000, 0x5, 0x8, 0x6, 0x800, 0x24, 0xf, 0x800, 0x4, 0x6, 0x8, 0x9, 0x4, 0x1000, 0x9, 0x30000, 0x3, 0x100, 0x537f, 0x2, 0x80000006, 0xffff, 0x9, 0x0, 0x1e71, 0x1, 0x6a7986c2, 0x9c, 0x500000, 0x8, 0x40000000, 0xffffb4c8, 0x800, 0x93, 0x7, 0xbd2, 0xe2dc, 0x10000, 0xa, 0x2, 0xffffff22, 0x80, 0xfffffff9, 0xa, 0x9, 0x9, 0x2, 0x4, 0x10000, 0x5, 0x0, 0x40, 0x8, 0x2, 0x7, 0x5, 0x8, 0x76, 0xffffffff, 0x7, 0x3, 0x2, 0x2, 0x2, 0x4, 0x9, 0xff, 0x7, 0xfffffff8, 0x2, 0x1, 0x2, 0x6, 0x0, 0xfffffff9, 0x6, 0xc, 0x455e, 0x1b, 0x8, 0x5, 0xb, 0x0, 0x3b01, 0x3, 0x800, 0xb4ad, 0x1000, 0x0, 0x80000001, 0x7fffffff, 0x8000, 0xfffffff7, 0x4000000, 0x5, 0x7fff, 0x4, 0x6, 0xffff, 0x6, 0x40, 0x400, 0xb58b, 0x7ff, 0x3, 0x1000, 0x80000000, 0x9, 0x7, 0x6, 0x100, 0x1, 0x200, 0xf6e, 0xffffff6a, 0x2, 0x4d, 0x4, 0x1, 0x7, 0x3, 0x3, 0x1000, 0x1, 0x7, 0xff, 0x7, 0x1, 0x9, 0x5, 0x2, 0x7, 0xd09, 0x0, 0x7, 0xf, 0x7, 0x240000, 0x2, 0x81, 0x39dbd0a7, 0x3, 0xcc, 0x7ff, 0x6, 0x4, 0x9, 0x7, 0x0, 0x5, 0x3624, 0x101, 0x3, 0x10000, 0x1, 0xffffffff, 0x5, 0x1000, 0x6, 0x9, 0x2, 0x1ff, 0xfa, 0x36c, 0x5, 0x9, 0x4, 0x7fff, 0x7fff, 0x6, 0xfffffff7, 0x4, 0xb, 0x8, 0x5, 0x4, 0x4, 0x6, 0x53b4, 0x23fd, 0x8, 0x8, 0x44c, 0x4, 0x1, 0x8, 0xffffffff, 0x4, 0x1ff, 0x6, 0x5, 0xbe42, 0x9, 0x80000001, 0x18c7, 0x0, 0x0, 0x6, 0x3, 0x2, 0x1, 0x7f, 0x40, 0x801, 0x2, 0x7, 0x3, 0xf, 0x83, 0x9, 0x0, 0x9132, 0x3, 0x3, 0x65, 0xfff, 0xff, 0xec, 0x7, 0x7fffffff, 0x7, 0xfffffeff, 0x1, 0x9, 0x0, 0xffffff81, 0x2, 0x33e, 0x5, 0x2ba, 0xc73b, 0x3, 0xe, 0x2, 0x3, 0x7, 0xde, 0xe, 0x4, 0x1, 0x0, 0x8, 0x9, 0x4, 0x6, 0x3, 0xe3ea, 0x100, 0xfffffffd, 0x80, 0x2, 0x80000000, 0x7ff, 0x6, 0x200, 0xffffffff, 0x7, 0x6, 0x1ff, 0x6, 0x100, 0x3, 0x1, 0x5, 0x2, 0x100, 0x2dd86f30, 0x2, 0x1000, 0x0, 0x1, 0x9, 0x3ff, 0x6, 0x8, 0xffffffff, 0x2, 0xe9d, 0xffffffff, 0x3, 0x7, 0xc5f, 0x0, 0x7, 0x8, 0x7ff, 0xec, 0x3, 0x8528, 0x2, 0x7, 0x3, 0x7, 0xe3, 0x6, 0x6, 0x0, 0xfffffffa, 0x120000, 0x86ae, 0x1, 0x4, 0x7fff, 0x8, 0x1ff, 0x4, 0x8a, 0x5, 0x4, 0x13, 0x23e, 0x1, 0x3, 0x64, 0x9, 0xffff, 0x8, 0xfffffff8, 0x622a, 0x4, 0x1, 0x2, 0x60495dcf, 0x0, 0x1, 0x4, 0x7, 0x0, 0x8, 0x9, 0xc, 0x5, 0x6, 0x0, 0x9, 0x0, 0x1, 0x7f97, 0x7, 0x2, 0xfffffff2, 0x40001, 0x3bc, 0x4, 0x6, 0x1, 0xfff, 0x2, 0x1, 0xfff, 0x4, 0x6, 0x3, 0x2, 0x5, 0x6, 0xd, 0x7f, 0xfffffffa, 0x7f, 0x10, 0xffffffff, 0x6, 0x3, 0x80000001, 0x2, 0xc80, 0x8000, 0x4e, 0x0, 0x9, 0x6, 0x3, 0x8, 0x45e, 0x80000001, 0x3ff, 0x0, 0x4, 0x100, 0x7, 0xffff4328, 0x4, 0x8, 0x6, 0xfffffffd, 0x6, 0xd1, 0xffffffff, 0x80000001, 0xd8, 0x0, 0x3, 0x9, 0x5, 0x4, 0xd, 0x6, 0x1, 0x10, 0x2, 0x5, 0x5, 0x62b8, 0x5, 0xff, 0x1, 0xfffffffa, 0x3252, 0xfa, 0xa3e3, 0xd39b, 0x2, 0x6, 0x8, 0xbbd, 0x7, 0x6, 0x8000, 0x7, 0x8, 0x3, 0x1ff, 0x7, 0x0, 0x3ff, 0x6, 0x14000, 0x8001, 0x5, 0x2, 0x9, 0x2d, 0x5, 0x0, 0x8ea, 0x81, 0x3a08528e, 0x5, 0x3, 0x7f, 0x5, 0xffff0001, 0xffffff80, 0x10, 0xc, 0x9, 0x7, 0x3, 0x778, 0x1, 0x0, 0x9, 0x9, 0x4f5, 0x2, 0x5, 0x0, 0x6, 0x6, 0x3, 0x97f, 0x5, 0x4, 0x9, 0xffff467b, 0x7, 0x6ede, 0x4, 0x5, 0xb909, 0x1, 0x565, 0x2, 0x26ee, 0x0, 0xda, 0x9a8b, 0x3, 0x7, 0x4, 0x4, 0x818, 0x10000, 0x9a3, 0x779, 0x7f, 0x2, 0x4, 0xffffe6b8, 0x0, 0x7, 0x46, 0xd988, 0x2, 0x4, 0x200, 0x3, 0x8, 0xffffffff, 0x7ff, 0x87d9, 0x4, 0x7, 0x9, 0x9, 0x40, 0xfffffffe, 0x8001, 0x0, 0xa9, 0x282e, 0xc5, 0x4, 0x1, 0x1, 0x4713000a, 0x8, 0x6b, 0xb9a, 0x2, 0x9ac8, 0x3, 0xfffffffd, 0x2, 0x6, 0x0, 0x5, 0x4, 0xce, 0x4, 0x2, 0xd9, 0x7fffffff, 0x20000000, 0x1, 0x4, 0x7, 0x3, 0x3, 0x7, 0x9, 0x4, 0x100, 0xdbff, 0x1, 0xc0000000, 0x10001, 0xba, 0x0, 0x5, 0x3de3, 0x0, 0x6, 0xbacd, 0x9, 0x400, 0x5, 0x200, 0x5, 0x9, 0x9, 0x9, 0x80000000, 0x6, 0x7, 0x200, 0x3, 0xfffffffe, 0xd, 0xf, 0x9, 0xffff7fff, 0x6, 0x7fffffff, 0x1, 0x7, 0x2, 0x0, 0x7, 0x8, 0xfffffffc, 0x7, 0x4, 0x1, 0x7d9b3c8d, 0x3ff, 0x800, 0xb4, 0xa743, 0x6, 0x1, 0x6, 0x427, 0xffffffff, 0x100, 0x1, 0x81, 0x400, 0x6b3, 0xe, 0xc1, 0x9, 0x3, 0x7, 0x6, 0x7fff, 0xa465, 0xf62, 0x2, 0x1, 0x80000000, 0x8, 0xbd, 0x40, 0x65928b78, 0x1, 0x5, 0x7, 0x4000000, 0xa0ae, 0xf8, 0x3, 0x0, 0x7, 0xfffff73a, 0xe00, 0x5, 0x7, 0x6, 0x401, 0x5, 0xfffffffc, 0xc0000, 0xb8, 0x7, 0x400, 0xf32f399a, 0x4d5, 0x6, 0x1b, 0x1, 0xfffffffc, 0x3, 0x3ff, 0xd, 0x9, 0x80000000, 0xfb, 0x9, 0x0, 0x5, 0x6, 0xffff, 0xc3e0, 0x7f, 0xb, 0x7, 0x6, 0x7, 0x100, 0x5, 0x6, 0xc0, 0x66, 0x2fc4, 0x1000, 0x4, 0xbe, 0x9, 0x6189, 0x7, 0xe409, 0xfffffff5, 0x3, 0x95a9, 0x82, 0x3, 0x40, 0x80, 0x1, 0x8, 0x6, 0x9, 0x6, 0x80, 0x7ce6, 0x80000000, 0xffffff0d, 0xe, 0x3, 0xe0, 0x40, 0x5, 0x8, 0x1ff, 0x1, 0x9, 0x2, 0x7, 0x1d, 0x2, 0x200, 0x9, 0xe, 0x4f3, 0xc18, 0x0, 0x5, 0xf5, 0x9, 0x486, 0x800, 0xd6e, 0x2, 0x4, 0xac1b, 0x1, 0x2, 0x7, 0x9, 0x1, 0x4, 0x2, 0x10001, 0x8000, 0xfff, 0x4, 0x9, 0x6, 0x8, 0x4, 0x4, 0x10001, 0xff, 0xa822, 0xfa40, 0x57c, 0x5000, 0x2, 0x101, 0x9, 0x7fff, 0x2, 0x80000000, 0x250, 0x10, 0x3ff, 0x5, 0x1c0, 0x5, 0x3, 0x7, 0x1, 0x1, 0x10, 0x4, 0xdb50, 0x1, 0xfffffc01, 0x0, 0x401, 0xd1b, 0x200, 0x0, 0x0, 0x13, 0x36c, 0x7, 0xa21, 0x3, 0x4, 0x8, 0xcc8, 0xfffff001]}) r9 = socket(0x10, 0x3, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000001c40)=0xfffffffd) ioctl$PPPIOCSMRU1(r10, 0x40047452, 0x0) sendmsg$TIPC_CMD_GET_NODES(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000c810}, 0x0) 10.644989ms ago: executing program 0 (id=3693): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) getsockopt$sock_timeval(r1, 0x1, 0x15, 0x0, &(0x7f0000000440)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x1a1081, 0x18) r3 = getpgrp(0xffffffffffffffff) fcntl$setown(r1, 0x8, r3) write$khugepaged_scan(r2, &(0x7f0000000000), 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/131, 0x83, 0x1, 0x26}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100)=0xd, 0x4) 10.2954ms ago: executing program 0 (id=3694): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[@out_dx={0xaa, 0x28, {0x3ac9, 0x4, 0x7fffffff}}, @wr_crn={0x46, 0x20, {0x0, 0x9}}, @wr_crn={0x46, 0x20, {0x0, 0xd}}, @in_dx={0x82, 0x20, {0xc9fc, 0x3}}, @code={0xa, 0x76, {"b805000000b938ffffff0f01d966baf80cb86b44f889ef66bafc0cec46f4b9850b00000f3266ba610066edc7442400e1000000c7442402395c050cff1c24c4024af76355f2400f08c7442400f4000000c74424020a000000ff1c2466ba610066b8005866ef"}}, @wr_drn={0x6e, 0x20, {0x7, 0x100}}, @wr_drn={0x6e, 0x20, {0x4, 0xfffffffffffffffd}}, @code={0xa, 0x72, {"0f20d835200000000f22d8f2470f51a3f0ffffffc4e1f9e6da66450fc77600b9c70b0000b87f680000ba000000000f302ef00fbaba0060e857fc400f01cbc4427958eb400f015cf40048b800000000008000000f23c80f21f835080080000f23f8"}}, @in_dx={0x82, 0x20, {0x63e9, 0x2}}, @in_dx={0x82, 0x20, {0xbf0c, 0x2}}, @code={0xa, 0x86, {"0fc73d0a8000000f20c035000000200f22c0b9b8090000b898000000ba000000000f3066baa00066b8cf0066efb9800000c00f3235000100000f30c744240000180000c744240200000100c7442406000000000f011c2466baf80cb8ac123a87ef66bafc0ced2e0f06410f426eb266b808010f00d8"}}, @wr_drn={0x6e, 0x20, {0x4, 0x58f}}, @wrmsr={0x1e, 0x20, {0xc001001f}}, @out_dx={0xaa, 0x28, {0x159d, 0x2}}, @cpuid={0x14, 0x18, {0x400, 0x3}}, @wrmsr={0x1e, 0x20, {0x81f}}, @uexit={0x0, 0x18, 0x8000000000000001}, @set_irq_handler={0xbe, 0x20, {0x89, 0x1}}], 0x34e}) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) 9.58678ms ago: executing program 0 (id=3695): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) socket$netlink(0x10, 0x3, 0x2) r2 = dup(r0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)=ANY=[@ANYBLOB="7472614800020000000000646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',afid=0x0000000000000008,k']) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) 1.149789ms ago: executing program 0 (id=3696): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x0, @local}}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe4, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x50, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @local}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x86e}, @CTA_LABELS_MASK={0x28, 0x17, [0x8000, 0x7, 0x10000, 0x8a, 0x9, 0x2, 0x7, 0x0, 0x8]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfd}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1ff}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x400c4}, 0x8000) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000240)=""/4096, &(0x7f0000001240)=0x1000) (async) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000001280), &(0x7f00000012c0)=0x4) (async) sendfile(r0, r0, &(0x7f0000001300)=0xdbd, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002f00)={'erspan0\x00', &(0x7f0000002e80)={'tunl0\x00', 0x0, 0x1, 0x8000, 0x3, 0xfffffffb, {{0xa, 0x4, 0x3, 0x6, 0x28, 0x64, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x81, @private=0xa010102, {[@timestamp_addr={0x44, 0x14, 0xa4, 0x1, 0xc, [{@broadcast, 0x2}, {@local}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000004cc0)={'sit0\x00', &(0x7f0000004c40)={'gretap0\x00', 0x0, 0x8000, 0x10, 0x5, 0x4, {{0xc, 0x4, 0x2, 0xf, 0x30, 0x66, 0x0, 0x4, 0x2f, 0x0, @multicast2, @loopback, {[@timestamp={0x44, 0x8, 0x2e, 0x0, 0x6, [0x1]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x80, [@empty, @rand_addr=0x64010101, @local]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000004e40)={'syztnl0\x00', &(0x7f0000004d00)={'ip_vti0\x00', 0x0, 0x1, 0x7, 0x3ff, 0x2, {{0x3f, 0x4, 0x3, 0x16, 0xfc, 0x68, 0x0, 0xc, 0x29, 0x0, @multicast1, @broadcast, {[@cipso={0x86, 0x2e, 0x0, [{0x6, 0x7, "22835cc8c6"}, {0x1, 0x7, "505e76bb74"}, {0x1, 0x6, "7e2f4bcf"}, {0x7, 0x11, "5333309ff0d82e835116d15116af89"}, {0x1, 0x3, '{'}]}, @timestamp={0x44, 0x28, 0xc6, 0x0, 0x0, [0x3ff, 0x4, 0x46, 0x384, 0xfffff405, 0x4, 0x10, 0x5, 0x8000]}, @ssrr={0x89, 0x17, 0xe9, [@remote, @private=0xa010100, @loopback, @loopback, @broadcast]}, @timestamp_addr={0x44, 0x14, 0x44, 0x1, 0x6, [{@private=0xa010100, 0x81}, {@remote, 0x2}]}, @ra={0x94, 0x4}, @generic={0x7, 0x4, "5da4"}, @cipso={0x86, 0x4a, 0x0, [{0x5, 0xc, "9154210b8647e3387cbb"}, {0x6, 0x7, "383efeefc4"}, {0x1, 0x3, '9'}, {0x1, 0xf, "7fc1300d447b224150ad62e2d7"}, {0x0, 0x6, "59a6c40f"}, {0x0, 0x4, "a9a3"}, {0x6, 0xc, "113f20056a29233cc815"}, {0x7, 0x9, "99cac83d753c8b"}]}, @timestamp={0x44, 0x14, 0x13, 0x0, 0x3, [0x400, 0x8, 0x3, 0x1]}]}}}}}) sendmmsg$inet(r0, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001340)="89342da8b71d3b4e7e214a1767f1692e89683af010968592ef0a1f910b706dd8e478fa65935dad100f188074b20f7aec5f3e6a575cf91037088de52762f67f9bde9755693b054b32b11d8ef7aa7cc643c74d7e3f75d8cee687b061fd1e5fe42bb2ce51f66ff33817fe05982ccea76c66db0a63c7e8acd8530c48854055789a9b56cd4644d98543d371ca77bdbae50fcd316b9b2c2ae8fb6a75ad3f48", 0x9c}, {&(0x7f0000001400)="3f70b614d24d79675489d25c57c20469427521a8510f134141ae3e2b746d2dc85c50a78e41e89795a76dfc97cd510bd6ae5786851fcd83022718a303a2ff4e387ef7d4f8db2c93e8e0a6eb10551d0a7242fcf468a587a8eee40d0c396ff15fc804870505cabdea3c2878e638f6ff1940fa4d6b0edc4bf7e7bd1258d6623df50d4fe05145c52b0fc554c9c7cca3db853acba01e8ae2aaf6b71f68cb121eb31de80331659381a33c3d3ce6d077bda6f41353a6c13ab1a3f7ad3124443152f52ca07010015eddd5d4c5da", 0xc9}, {&(0x7f0000001500)="cc8d8a8b8894610b3a4c168ee717cf0b47f0eaee377f7441e72333ea5d69a43c64c0fe3e1256a0df2b799b1fe904fa4cbc633d8a3d79f09d4157a670f7875f4d68934671145982f8b8d00699c1dd166872cf6b162fdcbb711bab44a0676d8c96da39ee1df5b64f784d9ce27d7bdca1dbd917840f1b38a293bb7e3645a258220ad489cf4b451e17eda819ca8deda201f854054b9209d0bd301598cafd1d80e42e20a1a998dafb7e5b23fb8770ecae9ac53dbaef9a57a7b035068697bd0007553b6d94c399f57af2ad094312c7f26f272dfd", 0xd1}, {&(0x7f0000001600)="cae8616983b772c6178e4459d0c1fc7f7fd1b5d399046923cb75eb43b2b9e1919c88d46af1cfde462c", 0x29}, {&(0x7f0000001640)="99445f5a29d94af26f735b66b4e55359dd3dfa636f018fc69f97fa279dff9843be576ad74e76e9cc9de1336af2eb4fcb9e5b3f991ca9ab0a1b31c4cdd00792f1f6392a81528af82f121a258df7a7e95d6cc7787224e3aa7967ab09", 0x5b}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f00000026c0)="cc9ab37e16f4f307b7583ed9241a03f1d3df1110a276b86aeb217f83a68a843cfd1490073dfacf69df7a82e644fc430d", 0x30}, {&(0x7f0000002700)="df3ebb86ea854a31f721b1915f40fbad423f1a6b92f5006b3292128f678903698d5b0cb8c3c07ca3ee68ec1cbf17e0a3b3b31477683ac3029c91fb37bd6ef931502b44655c7a5b209e0f8e3e122202ff783cb1ef329b08dfb092a3c5ac4d90099ae58b529068aecbe8c7950829ae7ff6f8c1a748013d0b2768ab9a892ab814ce1a7aade144f442f60d9be26fbb7c96c567170f3d2499839c0638eec59786b39148c5ac190024a42879b0731ed4a1475a9953c22db208eae0a2b0142949f73e5a6a0656f20fb005", 0xc7}], 0x8, &(0x7f0000002880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000028c0)="b81f90c83ae3f5c7437dae354f253ee5ff8eb5bfac0fa0a4ccefa892d09c98f15b72d78844ef1cf4275e5bf5e84dd5fbeca046919a12944ef1265a227a1a4acea7d9858d898896b177f26bd0c0c7b5c8a6b8601a2ff83c80962631dac6c69c737964669b10135a85356e11b283410427190826d80880bf55370f9d92e444f905b1697ebb6ca20a4403fd9121be34773efa9e1df342d3ad6352dcfec8ee9cf00a67c363fa8d72847c77c8823e6fcaeded61a8e307668af78f67ac8af47812f7193c7cd98d7b4b24a63c93db76976f8d5cc7a3050ac8808b6c728b61e12ee48fdd9ed2a670009ec602757f3fc9644b243d1a8b0bfb8bd514d5", 0xf8}, {&(0x7f00000029c0)="5c7720b89d7f4fea95d592c47477a570de61a8a1e52a6d28241ad5a7940fd3dee28a403b24d690", 0x27}, {&(0x7f0000002a00)="e84e632a1a32845e8dba730dc88871861a33b095395cc6d6e69ca40c3e2cbcd530ab0542e36c91eeb347efd04dbab767d3b8634c2a7081c4b4ce6d21e591853433e90f5fa737d3517e318794f9e70d26944f5899c5754fad52aae4a19cef6bd54c8df206feeedc4d6a2f7e50e2619f6cfd014a3fb13fd03b29c76c3f65d0af05d13b3767bb6a59d4a65fb0870bb2cce7aa329b5d1b7c3552e73328b1644475029d47658998fcb539dd6f71745d1ae81cba5e46a93c0c182887a22964a75398ad8e2dd8", 0xc3}], 0x3, &(0x7f0000002b40)=[@ip_tos_u8={{0x11}}], 0x18}}, {{&(0x7f0000002b80)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, &(0x7f0000002e40)=[{&(0x7f0000002bc0)="311ca20a5864ade0765c8578454d400b3d0c87ee9fcc3a68c7746112df6c2e48a01ba48fa4405fc8ff096a8ee2bcf0ab84b386478c40c25eee6b3886af642beeefa4621cc9f54daa5b827a81b0a79ba6520f3c645eac000f6116f59b5c9bfbe1fb60c0a60299cdfcd6a43e94d4d8b6ff073a076fe9708dfa6c822cfc428876b6f4bb5d9c824e9784e72e897e699a7e19602169f69839d658d570eb2803af793daa820097f1f26e259f8000a84152d15e98963120711ad915eda6c2df412f670a6ecdff77570e4d31d83c4df5c1f37e74262ae0f933e321dbf318868a27fe62433a5dca4d9fc59cc782", 0xe9}, {&(0x7f0000002cc0)="5bf17fb5fa4313e35d8bdcbbf06448e08a85403d03aae7cb5e9aae092c495a408da46779732595b50172a129b904d8d19cec8ad4e7b3a4f67bfb94de6ed23de19e4cdeb9a9824a881e81df326f6f090954e4326fea4d18d26bca5a4e69e9f60e9a84c72d164c1b83d56675", 0x6b}, {&(0x7f0000002d40)="580d46251f41163171e40544d76d378530ca42f1aacec0ddeb01e127705db5f16826e33802d0328c99952a5d7d5582de084730f21eb013ba924438275ad5b1a403b92a6fdc6286f2101d3e880924138dd7bfe167fba4ae2b46b4655e1353b724b5339151b179956be7b051f8afd3fcfacc562e99c82d80bd7b52223bb0e92044129983b4f97d6303784b28b233033c9385848c713d14830a99f4140c04029831a068a693583b205418b9420e12e76dbc4cf21326e25bb939fdcffe864c124ea24cf888f32d0075285f732573e6fe44a2209230e295c6e0ffdc2c99a5603b320680cb0f774959def0efcafd160d48eddd", 0xf0}], 0x3, &(0x7f0000002f40)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd562}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x80}}, {{&(0x7f0000002fc0)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000003140)=[{&(0x7f0000003000)="1c24008e309b8d227b305129b9b154dd4bb7254f9c980deb0767542b56219356464eda17ca2d48909226cf24ab4c7bf2356de2d6c872dcbc8e2c439df2d34d55dad2fead35beff9811076a48cfb71c5fcdd73fe69d600db076e1e11edf6e58e68aac00efd1ec0589e55b1710f3949b0c451e1b711f7a365b152ae4ce34ed8b1120735fdf7028d4301543cdd49c8b3fef303a2455b7c9ff3c7288f85a70faacc1ae2267a6af396cd97f082b60e2a75bb3a1adcef06ad36b2505ab08d4f06fb470bf900fda611c9dc20d1882454d32052d9e3474fa", 0xd4}, {&(0x7f0000003100)="02fd5564787b229225fb8e713c1c63eeeb0f64534cafe938998d231e974ce79cf02faa5c13dd38", 0x27}], 0x2, &(0x7f0000003180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x30}}, {{&(0x7f00000031c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000004580)=[{&(0x7f0000003200)="0fa40bd3908e35d76962351bc2e585cb57a3a14a458a4a8b6d9c4fb9b9cea7a9dabda06187f73705147630196f15c94c98b5ab165b68c13fbaf928d2257a6dc1a4469eb5a3abdf26e13295e800dd76570a7d5393cbcd88f0a210631ce71eac3c17ec202d406c805022f2ea89ada46e09d4bdffeaa21f69603c5483f99e96b42ab99361aa0c02cd7c44d5c3d767aa6bd3b1b0e5e32f08991b810f4d94f30adc57c97ff3589b61408f67887a0adc6051966c", 0xb1}, {&(0x7f00000032c0)="f5602ef72f5aacff70a6949d3b197308f2e90af52f5f171c82e40baada4fd65c18f7b0e69d62d0c3b4003ed516a21eb37730f85d28c08042793826afcbe527873b43e5cedf83c2d6b38324a623388922a5749f4649f16a656f78a7918f69a1ab8d50264e812ddd691d8f40249751b525495093beb3292582bf68b63e2d7c4787e4b99bba9dee58ea9160059b9d0c3e80337f684f7056864a4d56cc967a559a7c015ad12fc27a3f81f06832a1ad2c11aad9", 0xb1}, {&(0x7f0000003380)="bbcf58f4af0eeed0e764681262ad4e571895cea718dae80cfba70a54c4741d1696fb531b0ba601fcfa70afc177e342b31aa4e2734d488c89b31f09cc6ddb0889ec6e14d67a4f21ec4a5d1aff9db97db2aee2bfd61f07441fca5acd90d168bf0e68572edd15b4736939c65863392c0d60adf85f538e0bdc651bd4fc980a3a5e5796d6cfaa43bd2c9eb8bdfed25425ffe8c7fb2ba6482540fb9f3b9a9846cc53c0", 0xa0}, {&(0x7f0000003440)="84e4cb056af4563db7c1dae99aa5ba186d63c5dc1f0cb2fcc6a61cc1636ae41b", 0x20}, {&(0x7f0000003480)="e38cd3818a4eb36c6f2a0a9bc615b269c5c91c65843083bba365f268598b5584e762549fd3c00323a063abf620ae35f607dc3a86292a0a37323b91f795016675338a454e76563423a6153c0a8811c257b8c88d88c5f0099ab263cd48ae3dbce22681c1a7be66bd86b4d70fbfcd78967868a5439826536d570924e5af8de351c49f96", 0x82}, {&(0x7f0000003540)}, {&(0x7f0000003580)="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", 0x1000}], 0x7, &(0x7f0000004600)=[@ip_retopts={{0x7c, 0x0, 0x7, {[@cipso={0x86, 0x15, 0x3, [{0x5, 0x2}, {0x2, 0xd, "7430bac8c703fc14147d2c"}]}, @timestamp_prespec={0x44, 0xc, 0xbe, 0x3, 0xe, [{@private=0xa010101}]}, @ssrr={0x89, 0x1f, 0xc3, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @private=0xa010100, @local, @remote, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x3b, 0x1, 0x5, [{@private=0xa010102, 0x101}, {@rand_addr=0x64010102, 0x9}, {@multicast1, 0x4}]}, @lsrr={0x83, 0xf, 0x7a, [@local, @multicast1, @empty]}, @noop]}}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@cipso={0x86, 0x31, 0x2, [{0x5, 0x8, "e0f2dd5f635a"}, {0x7, 0x9, "83fb87282f4ee4"}, {0x6, 0xe, "95837b4756e037d18d254d6c"}, {0x1, 0xc, "de6d09eaa578d48a9688"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x56, 0x1, 0x3, [{@private=0xa010100, 0x32b}, {@local}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5f39}, {@loopback}]}, @end, @ssrr={0x89, 0x17, 0x5, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @remote, @multicast2]}, @rr={0x7, 0x1b, 0xdf, [@empty, @multicast2, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x31}, @empty]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}], 0x168}}, {{&(0x7f0000004780)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000004bc0)=[{&(0x7f00000047c0)="546197d96ec6e3a4a599725c8089412ef7abc6177a4da56888e98807a2883e7259a8229fb72850879d0c3ea0c5dcaadcb4da4337f2532c465b66e38236de732da1dddc2c426eb25e915fe1554d04fb7953d1aeee74c9b5fef3c017e88918f4d6", 0x60}, {&(0x7f0000004840)="bbe1969a9aea8dbb79abb619e6621061a6fa781948f86edecb7a094036f58e316f99c83d74f2191a974ec8f0cad4c17e3fe3cabff80f3bf470290fde2815a4ec49f350864e7095c3e373a38c5b7f0affb87e9887951aeae4cbe32ef169776c039ef23a15c3a3a7f349b862109d9ca03e0ac36de2967543cf38bb9d275663a4f3738d70262e4a17310226ad63ea6b7ad52c30acb2c144fba9187d5802b08abe802beedd36fb35e3dd94c8dcfd526bc654daa3a17e56c954cc2bb82509954750cd1daba4dbdf982b76adb205df885b60a3f9e3fd82453af5c1384a8088caba232a13c65429e090b4e9143fd211ca475e91bdaf35", 0xf3}, {&(0x7f0000004940)="aa03ae86438ca42d8f7e958ff6776e4e33596580e08d39ba314dbb31cd27d0b2adfb3cea12fb51c65fa104c7c11fbfcd2a4faa9f0c9c88c6ee5226508ba59dd84c2ed54497070bfa58bc06671318a4a9effe2498ef2973ac90eb42292b221474be01d9b0edabf9529fe96dc1693dff6aa4816c7cc3e461dd8151add77b4995dba7194d2146ff7a819f9fb3bee05e8ead9b399407aa130c21eb5749da0c1af2a4835f99f8812ddbb5972f7b5e7f7de8e2e9f8dd84e78a93655b", 0xb9}, {&(0x7f0000004a00)="eacc5831", 0x4}, {&(0x7f0000004a40)="f85cdfc5dea4cdf39c5841107f613c2de5722fad8f1bda4f41ed6dd895338e2a58c6e7c4f34255244e284cfe4cdf41607133074a37d194da6b948102c94b5a969cd232662bde38008393da8aea2c078337c771844ff3a7f8e2355eff57d73bfceebe52e7e2ddd004e38154c4dcf04ec01994efaf2b0a969458f3077a26b1ac8588133a3e66a21a949502ea37fcbaa27cd940105adda94631cf1d", 0x9a}, {&(0x7f0000004b00)="c1d7883d8dc544e5a04bcdd9c4c50ca13038ac8fcad40d09b445e4e5dbb1366e486ffb76bdfad9f00ef1ea7514ef3baef63f68151111d33c00de837d7ed96dcaa10b62a3e5d328b10d344b99605b8a876766d33c85ddace6b550ad13e51597d2c6b4db0c76", 0x65}, {&(0x7f0000004b80)}], 0x7, &(0x7f0000004e80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x134, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0xa1, 0x3, 0x6, [{@multicast1, 0x5}, {@private=0xa010100, 0x2}, {@empty, 0x5}, {@empty, 0x9}, {@multicast1, 0x7f}]}, @cipso={0x86, 0x27, 0x2, [{0x7, 0x10, "0260247a26c6df5e0966bbb70eb1"}, {0x1, 0xf, "45c3aa18fbe5292d8919b099e4"}, {0x2, 0x2}]}, @rr={0x7, 0x13, 0x56, [@loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, @multicast2]}, @end, @cipso={0x86, 0xc, 0x3, [{0x6, 0x6, "15590c9c"}]}, @lsrr={0x83, 0x23, 0x53, [@multicast2, @empty, @broadcast, @empty, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010100]}, @noop, @cipso={0x86, 0x61, 0x2, [{0x5, 0x7, "b8b582b26c"}, {0x5, 0xc, "9c9f590c8847e812bbba"}, {0x0, 0x4, '\vr'}, {0x7, 0x7, "4cdb80a5d8"}, {0x0, 0x10, "0cce899f03024254e1f6c1684811"}, {0x0, 0x10, "b8e5853242fc4d3e4c31a9999a20"}, {0x2, 0x12, "c959cab7122dcba40d135925c53c64f3"}, {0x7, 0xb, "bdebf49a42b68d63e6"}]}, @ssrr={0x89, 0x2b, 0x22, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1, @multicast1, @multicast1, @empty, @remote, @loopback, @rand_addr=0x64010101]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x1a8}}], 0x6, 0x24008894) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000051c0), 0x101000, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x9361, 0x238494bb) timer_create(0x1, &(0x7f0000005200)={0x0, 0xd, 0x0, @tid=r1}, &(0x7f0000005240)=0x0) timer_settime(r7, 0x1, &(0x7f0000005280)={{0x77359400}}, &(0x7f00000052c0)) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005300)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup(r8, &(0x7f0000005340)='syz1\x00', 0x200002, 0x0) listen(r2, 0xded) (async) timer_getoverrun(r7) (async) r9 = socket(0x15, 0x4, 0x8) getsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, &(0x7f0000005380), &(0x7f00000053c0)=0x4) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000005440), r9) sendmsg$BATADV_CMD_TP_METER(r9, &(0x7f0000005500)={&(0x7f0000005400), 0xc, &(0x7f00000054c0)={&(0x7f0000005480)={0x3c, r10, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffd}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc4890}, 0x0) (async) r11 = add_key$keyring(&(0x7f0000005600), &(0x7f0000005640)={'syz', 0x2}, 0x0, 0x0, 0x0) request_key(&(0x7f0000005540)='pkcs7_test\x00', &(0x7f0000005580)={'syz', 0x2}, &(0x7f00000055c0)='syztnl0\x00', r11) r12 = accept$inet(r9, &(0x7f0000005680)={0x2, 0x0, @local}, &(0x7f00000056c0)=0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r12, 0x8918, &(0x7f0000005700)={'batadv0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2f}}}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) mknod(&(0x7f0000005740)='./file0\x00', 0x80, 0x5) 0s ago: executing program 3 (id=3542): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1280, 0x3}) (async) fsopen(0x0, 0x0) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="00006000bbbbbbbbbbbb0000000000008100000008060001080006eeff07aaaaaaaaaaaaac1e0001bbbbbbbbbbbbac141425"], 0x32) (async, rerun: 64) r5 = gettid() (rerun: 64) r6 = syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r6, &(0x7f0000000180)='1\x00', 0x2) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) (async, rerun: 64) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) (async) recvmmsg(r8, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10000, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0}) (async) preadv(r7, &(0x7f0000000900)=[{&(0x7f0000000180)=""/114, 0x72}, {&(0x7f0000000200)=""/246, 0xf6}, {&(0x7f0000000000)=""/46, 0x2e}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000400)=""/162, 0xa2}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000580)=""/145, 0x91}, {&(0x7f0000000640)=""/185, 0xb9}, {&(0x7f0000000780)=""/225, 0xe1}], 0x9, 0xe, 0x6) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001880)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000880)="e2f2819d3881ef541f0deedde03dbc81a22044c6d6ff868e2024240ce3ce33cd8c6713632a4f4992cb3de1bf5ace3263cad67409df9978e6beac5166773673a3d030ba1cf3500ac901c07f571d085966"}) kernel console output (not intermixed with test programs): lready set [ 190.964169][ T7114] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.971117][ T7114] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.991661][ T7118] Invalid ELF header type: 3 != 1 [ 190.998949][ T7120] rust_binder: Error while translating object. [ 191.003212][ T36] audit: type=1400 audit(1779253588.735:522): avc: denied { module_load } for pid=7117 comm="syz.4.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 191.003230][ T7120] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 191.003253][ T7120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 191.065461][ T7122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1082 sclass=netlink_route_socket pid=7122 comm=syz.4.2256 [ 191.235530][ T7130] netlink: 'syz.4.2259': attribute type 1 has an invalid length. [ 191.243683][ T7129] /dev/rnullb0: Can't open blockdev [ 191.264847][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2244'. [ 191.277137][ T7132] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.2260'. [ 191.279900][ T1710] usb 4-1: USB disconnect, device number 55 [ 191.292640][ T430] usb 4-1-port1: config error [ 191.708518][ T7140] exFAT-fs (rnullb0): invalid boot record signature [ 191.715280][ T7140] exFAT-fs (rnullb0): failed to read boot sector [ 191.721677][ T7140] exFAT-fs (rnullb0): failed to recognize exfat type [ 191.824110][ T7150] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1047 [ 192.058391][ T1710] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 192.128391][ T430] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 192.198480][ T1710] usb 3-1: device descriptor read/64, error -71 [ 192.278367][ T430] usb 4-1: Using ep0 maxpacket: 32 [ 192.285430][ T430] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.296396][ T430] usb 4-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 192.309638][ T430] usb 4-1: config 1 interface 0 has no altsetting 0 [ 192.317897][ T430] usb 4-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.40 [ 192.327009][ T430] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.335044][ T430] usb 4-1: Product: Ї [ 192.339170][ T430] usb 4-1: Manufacturer: ఊ [ 192.343787][ T430] usb 4-1: SerialNumber: ␉ [ 192.438345][ T1710] usb 3-1: device descriptor read/64, error -71 [ 192.678396][ T1710] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 192.752830][ T430] usbhid 4-1:1.0: can't add hid device: -71 [ 192.758850][ T430] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 192.767527][ T430] usb 4-1: USB disconnect, device number 56 [ 192.808498][ T1710] usb 3-1: device descriptor read/64, error -71 [ 192.926864][ T7164] overlayfs: failed to resolve './file0': -2 [ 192.945971][ T7166] overlayfs: failed to clone upperpath [ 193.048414][ T1710] usb 3-1: device descriptor read/64, error -71 [ 193.158544][ T1710] usb usb3-port1: attempt power cycle [ 193.312570][ T7174] rust_binder: Error while translating object. [ 193.312605][ T7174] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 193.318859][ T7174] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1059 [ 193.338347][ T490] Bluetooth: hci0: command 0x1003 tx timeout [ 193.338762][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 193.508375][ T1710] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 193.529427][ T1710] usb 3-1: device descriptor read/8, error -71 [ 193.551549][ T7193] overlayfs: failed to resolve './file0': -2 [ 193.638620][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2284'. [ 193.659454][ T1710] usb 3-1: device descriptor read/8, error -71 [ 193.881614][ T7218] overlayfs: failed to resolve './file0': -2 [ 193.898607][ T1710] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 193.919449][ T1710] usb 3-1: device descriptor read/8, error -71 [ 194.049480][ T1710] usb 3-1: device descriptor read/8, error -71 [ 194.158743][ T1710] usb usb3-port1: unable to enumerate USB device [ 194.449157][ T7230] syz.3.2295 (7230): /proc/7229/oom_adj is deprecated, please use /proc/7229/oom_score_adj instead. [ 194.527407][ T7233] rust_binder: 7232 RLIMIT_NICE not set [ 194.527529][ T7233] rust_binder: 1081: no such ref 0 [ 194.621946][ T7234] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.629058][ T7234] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.636097][ T7234] bridge_slave_0: entered allmulticast mode [ 194.642789][ T7234] bridge_slave_0: entered promiscuous mode [ 194.654662][ T7234] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.661826][ T7234] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.668927][ T7234] bridge_slave_1: entered allmulticast mode [ 194.675136][ T7234] bridge_slave_1: entered promiscuous mode [ 194.725089][ T7234] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.732184][ T7234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.739502][ T7234] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.746545][ T7234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.766013][ T2331] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.773385][ T2331] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.783444][ T2341] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.790521][ T2341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.800124][ T2370] bridge_slave_1: left allmulticast mode [ 194.805793][ T2370] bridge_slave_1: left promiscuous mode [ 194.811746][ T2370] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.819319][ T2370] bridge_slave_0: left allmulticast mode [ 194.824958][ T2370] bridge_slave_0: left promiscuous mode [ 194.831203][ T2370] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.894059][ T2341] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.901187][ T2341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.943401][ T7234] veth0_vlan: entered promiscuous mode [ 194.954692][ T2370] veth1_macvtap: left promiscuous mode [ 194.960632][ T2370] veth0_vlan: left promiscuous mode [ 195.005191][ T7234] veth1_macvtap: entered promiscuous mode [ 195.040857][ T7249] netlink: 'syz.0.2296': attribute type 1 has an invalid length. [ 195.096868][ T7258] overlayfs: failed to resolve './file1': -2 [ 195.148165][ T7262] virtio-fs: tag not found [ 195.296177][ T430] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 195.336482][ T7268] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.336512][ T7268] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.346534][ T7268] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.353384][ T7268] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.360849][ T7268] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.367417][ T7268] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.374055][ T7268] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.380544][ T7268] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.478489][ T430] usb 1-1: Using ep0 maxpacket: 32 [ 195.501910][ T430] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.521639][ T430] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.538723][ T430] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 195.547817][ T430] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.565127][ T430] usb 1-1: config 0 descriptor?? [ 195.597253][ T7292] overlayfs: failed to resolve './file1': -2 [ 195.658412][ T64] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 195.809618][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.811209][ T430] usbhid 1-1:0.0: can't add hid device: -71 [ 195.832161][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.840226][ T430] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 195.855286][ T64] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.856103][ T430] usb 1-1: USB disconnect, device number 34 [ 195.883672][ T64] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.895796][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.913674][ T64] usb 3-1: config 0 descriptor?? [ 196.032541][ T7314] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 196.041477][ T7314] /dev/rnullb0: Can't open blockdev [ 196.177130][ T7322] overlayfs: failed to resolve './file1': -2 [ 196.210099][ T7324] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 196.210139][ T7324] rust_binder: Read failure Err(EFAULT) in pid:15 [ 196.255836][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.262737][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.269541][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.276193][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.282701][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.289358][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.295868][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.302489][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.309019][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.315648][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.322189][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.329011][ T457] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 196.344184][ T64] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 196.351728][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.351765][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.358368][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.364900][ T64] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 196.380128][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.380154][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.386812][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.393605][ T64] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 196.407693][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.407722][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.414249][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.420868][ T64] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 196.435077][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.435108][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.441639][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.448225][ T64] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 196.448426][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.454834][ T64] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 196.477596][ T64] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 196.485078][ T64] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 196.485175][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.492623][ T64] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 196.492727][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.499227][ T64] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 196.508720][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.513286][ T64] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 196.528420][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.539564][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.542481][ T64] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 196.558695][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.560046][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.562087][ T64] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 196.569506][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.580578][ T64] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 196.588546][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.594881][ T64] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 196.601459][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.608971][ T457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 196.619217][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.626364][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.627264][ T457] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 196.644672][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.648497][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.649043][ T64] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 196.655604][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.661680][ T457] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.669516][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.677378][ T64] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 196.703641][ T457] usb 5-1: config 0 descriptor?? [ 196.711982][ T7320] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 196.715346][ T64] usb 3-1: USB disconnect, device number 38 [ 196.725822][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.725847][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.732555][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.737041][ T7327] fido_id[7327]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 196.739462][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.767593][ T36] audit: type=1400 audit(1779253594.505:523): avc: denied { write } for pid=7328 comm="syz.3.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 196.769062][ T7329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7329 comm=syz.3.2320 [ 196.785851][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.806621][ T36] audit: type=1400 audit(1779253594.545:524): avc: denied { map } for pid=7328 comm="syz.3.2320" path="socket:[33316]" dev="sockfs" ino=33316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 196.825960][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.837783][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.844337][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.851498][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.857975][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.864496][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.877208][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.883851][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.893155][ T7340] rust_binder: Write failure EINVAL in pid:1125 [ 196.900708][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.907020][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.913726][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.920342][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.926798][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.933308][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.937197][ T457] hid-generic 0003:04F3:0755.0017: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 196.948354][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.965036][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.971922][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.978438][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.984909][ T7324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.163914][ T457] usb 5-1: USB disconnect, device number 14 [ 197.265703][ T7367] binder: Unknown parameter 'context[7' [ 197.289848][ T7370] rust_binder: 31: no such ref 0 [ 197.294848][ T7370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:31 [ 197.323976][ T7379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:38 [ 197.365756][ T7389] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.367133][ T7387] rust_binder: Error while translating object. [ 197.375322][ T7388] rust_binder: 245: no such ref 1 [ 197.381747][ T7387] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 197.388115][ T7388] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 197.393519][ T7387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46 [ 197.453684][ T7395] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 197.465895][ T7391] rust_binder: Error in use_page_slow: ESRCH [ 197.469704][ T36] audit: type=1400 audit(1779253595.215:525): avc: denied { create } for pid=7396 comm="syz.0.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 197.473841][ T7391] rust_binder: use_range failure ESRCH [ 197.499712][ T7391] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 197.505540][ T7391] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 197.515075][ T7391] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1127 [ 197.539190][ T7405] /dev/nbd2: Can't lookup blockdev [ 197.542637][ T7407] netlink: 'syz.0.2343': attribute type 4 has an invalid length. [ 197.582170][ T7410] cgroup: subsys name conflicts with all [ 197.647429][ T7411] kvm: kvm [7409]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000034) = 0x8 [ 197.745767][ T7426] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 197.753297][ T7426] rust_binder: Write failure EINVAL in pid:57 [ 197.918961][ T36] audit: type=1400 audit(1779253595.665:526): avc: denied { ioctl } for pid=7441 comm="syz.4.2356" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x1501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 197.998400][ T430] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 198.026908][ T7446] input: syz0 as /devices/virtual/input/input28 [ 198.149476][ T430] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.161069][ T430] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 198.172138][ T430] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 198.181944][ T430] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 198.195666][ T430] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.206251][ T430] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.215966][ T430] usb 1-1: config 0 descriptor?? [ 198.448012][ T7463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7463 comm=syz.2.2363 [ 198.488358][ T457] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 198.612248][ T36] audit: type=1400 audit(1779253596.355:527): avc: denied { setattr } for pid=7471 comm="syz.2.2366" name="RAWv6" dev="sockfs" ino=35104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 198.619110][ T7472] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2366'. [ 198.647739][ T430] plantronics 0003:047F:FFFF.0018: ignoring exceeding usage max [ 198.658389][ T457] usb 5-1: Using ep0 maxpacket: 16 [ 198.665039][ T430] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 198.672945][ T457] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 198.681539][ T457] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.693256][ T457] usb 5-1: config 0 has no interface number 0 [ 198.693361][ T430] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 198.701143][ T457] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 198.744331][ T457] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 198.759809][ T457] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 198.770863][ T457] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 198.780957][ T457] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 198.794193][ T457] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 198.798740][ T7485] rust_binder: Write failure EFAULT in pid:1142 [ 198.803317][ T457] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.818756][ T457] usb 5-1: config 0 descriptor?? [ 198.821901][ T7487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.823757][ T7487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.824022][ T7454] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 198.853784][ T6025] udevd[6025]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.126/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 198.879341][ T7492] rust_binder: Write failure EINVAL in pid:1149 [ 198.932801][ T36] audit: type=1400 audit(1779253596.675:528): avc: denied { read } for pid=7501 comm="syz.3.2376" lport=42 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.966269][ T430] usb 1-1: USB disconnect, device number 35 [ 199.041798][ T7504] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 199.047748][ T457] usb 5-1: USB disconnect, device number 15 [ 199.089470][ T64] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 199.149059][ T7507] rust_binder: inc_ref_done called when no active inc_refs [ 199.149085][ T7507] rust_binder: inc_ref_done called when no active inc_refs [ 199.156319][ T7507] rust_binder: 1162: no such ref 2 [ 199.168873][ T7507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1162 [ 199.168953][ T7507] rust_binder: 1162: no such ref 1 [ 199.249387][ T64] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 199.259515][ T64] usb 3-1: config 0 has no interface number 0 [ 199.265681][ T64] usb 3-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 199.277407][ T64] usb 3-1: config 0 interface 214 has no altsetting 0 [ 199.286090][ T64] usb 3-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 199.295481][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.304095][ T64] usb 3-1: Product: syz [ 199.308536][ T64] usb 3-1: Manufacturer: syz [ 199.313193][ T64] usb 3-1: SerialNumber: syz [ 199.319313][ T64] usb 3-1: config 0 descriptor?? [ 199.324650][ T7481] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 199.532894][ T7481] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 199.626406][ T7517] 9p: Unknown access argument : -22 [ 199.653629][ T7517] /dev/rnullb0: Can't open blockdev [ 199.738348][ T1710] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 199.868405][ T1710] usb 1-1: device descriptor read/64, error -71 [ 200.046602][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2384'. [ 200.056004][ T7531] netlink: 'syz.3.2384': attribute type 64 has an invalid length. [ 200.118376][ T1710] usb 1-1: device descriptor read/64, error -71 [ 200.198407][ T457] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 200.315262][ T36] audit: type=1400 audit(1779253598.055:529): avc: denied { execute } for pid=7551 comm="syz.3.2391" path="/dev/binderfs/binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 200.339488][ T7553] sit0: entered promiscuous mode [ 200.339519][ T36] audit: type=1400 audit(1779253598.055:530): avc: denied { map } for pid=7551 comm="syz.3.2391" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 200.345939][ T7553] netlink: 'syz.3.2391': attribute type 1 has an invalid length. [ 200.367327][ T1710] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 200.368591][ T7552] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=512 sclass=netlink_tcpdiag_socket pid=7552 comm=syz.3.2391 [ 200.375333][ T7553] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2391'. [ 200.404629][ T7554] netlink: 'syz.3.2391': attribute type 1 has an invalid length. [ 200.405271][ T457] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 200.412517][ T7554] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2391'. [ 200.423130][ T457] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 200.444825][ T457] usb 5-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 200.455288][ T457] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.464870][ T457] usb 5-1: config 0 descriptor?? [ 200.498461][ T1710] usb 1-1: device descriptor read/64, error -71 [ 200.668786][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 200.680230][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 200.691034][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 200.738366][ T1710] usb 1-1: device descriptor read/64, error -71 [ 200.748793][ T36] audit: type=1326 audit(1779253598.495:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7563 comm="syz.3.2393" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa7578f6c9 code=0x0 [ 200.858771][ T1710] usb usb1-port1: attempt power cycle [ 200.881337][ T457] wacom 0003:056A:00DD.0019: unknown main item tag 0x0 [ 200.888286][ T457] wacom 0003:056A:00DD.0019: unknown main item tag 0x0 [ 200.895205][ T457] wacom 0003:056A:00DD.0019: unknown main item tag 0x0 [ 200.902118][ T457] wacom 0003:056A:00DD.0019: unknown main item tag 0x0 [ 200.909048][ T457] wacom 0003:056A:00DD.0019: unknown main item tag 0x0 [ 200.916097][ T457] wacom 0003:056A:00DD.0019: Unknown device_type for 'HID 056a:00dd'. Assuming pen. [ 200.926160][ T457] wacom 0003:056A:00DD.0019: hidraw0: USB HID v1.01 Device [HID 056a:00dd] on usb-dummy_hcd.4-1/input0 [ 200.938626][ T457] input: Wacom Bamboo Connect Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00DD.0019/input/input29 [ 201.083243][ T7529] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 201.091251][ T7529] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 201.100008][ T7529] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 201.107992][ T7529] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 201.117214][ T31] usb 5-1: USB disconnect, device number 16 [ 201.208358][ T1710] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 201.229393][ T1710] usb 1-1: device descriptor read/8, error -71 [ 201.359403][ T1710] usb 1-1: device descriptor read/8, error -71 [ 201.517724][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 201.528895][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 201.540033][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 201.551178][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 201.562467][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 201.573572][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 201.584646][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 201.595649][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 201.598368][ T1710] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 201.606806][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 201.625253][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 201.629504][ T1710] usb 1-1: device descriptor read/8, error -71 [ 201.636395][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 201.653435][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 201.664877][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 201.672981][ T36] audit: type=1400 audit(1779253599.415:532): avc: denied { write } for pid=7567 comm="syz.4.2394" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.676751][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 201.708798][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 201.720060][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 201.731163][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 201.742710][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 201.754009][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 201.765347][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 201.777901][ T64] ax88179_178a 3-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 76:14:14:2e:a5:bf [ 201.779734][ T1710] usb 1-1: device descriptor read/8, error -71 [ 201.798710][ T64] usb 3-1: USB disconnect, device number 39 [ 201.807239][ T64] ax88179_178a 3-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 201.908497][ T1710] usb usb1-port1: unable to enumerate USB device [ 201.958374][ T430] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 202.088953][ T430] usb 5-1: device descriptor read/64, error -71 [ 202.272700][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 202.272717][ T36] audit: type=1326 audit(1779253600.015:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="syz.2.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c4b8f6c9 code=0x7fc00000 [ 202.328333][ T430] usb 5-1: device descriptor read/64, error -71 [ 202.539099][ T7614] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 202.548681][ T36] audit: type=1400 audit(1779253600.275:536): avc: denied { mounton } for pid=7613 comm="syz.0.2401" path="/file0" dev="ramfs" ino=35461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 202.570760][ T430] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 202.718358][ T430] usb 5-1: device descriptor read/64, error -71 [ 202.953854][ T36] audit: type=1326 audit(1779253600.695:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="syz.2.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56c4b2b779 code=0x7fc00000 [ 202.977216][ T430] usb 5-1: device descriptor read/64, error -71 [ 202.998357][ T457] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 203.010677][ T7621] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2404'. [ 203.035857][ T36] audit: type=1400 audit(1779253600.775:538): avc: denied { map } for pid=7623 comm="syz.2.2405" path="socket:[35870]" dev="sockfs" ino=35870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 203.096778][ T430] usb usb5-port1: attempt power cycle [ 203.138351][ T457] usb 1-1: device descriptor read/64, error -71 [ 203.308368][ T1710] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 203.378383][ T457] usb 1-1: device descriptor read/64, error -71 [ 203.438387][ T430] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 203.458481][ T1710] usb 3-1: Using ep0 maxpacket: 16 [ 203.464786][ T1710] usb 3-1: config 1 interface 0 altsetting 14 endpoint 0x1 has invalid maxpacket 1519, setting to 1024 [ 203.475906][ T430] usb 5-1: device descriptor read/8, error -71 [ 203.482114][ T1710] usb 3-1: config 1 interface 0 altsetting 14 bulk endpoint 0x1 has invalid maxpacket 1024 [ 203.492153][ T1710] usb 3-1: config 1 interface 0 altsetting 14 bulk endpoint 0x82 has invalid maxpacket 1023 [ 203.502247][ T1710] usb 3-1: config 1 interface 0 has no altsetting 0 [ 203.510339][ T1710] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 203.519429][ T1710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.527434][ T1710] usb 3-1: Product: п [ 203.531516][ T1710] usb 3-1: Manufacturer: ۠꧕됐봹嚹曓㤇鼚澳苒俜䝏᧭ﺄ衩팷囼ꦎỿ閤䁌ႛ๔轇剶깏⪥즚즗媝理탹؊ꋘ蕣䣋㷒懶촕갠ؗ鮊→눪硬偏튥෬焫烢︒⭫㓟袠慛뛡堲ꏜ摐꟢魶槵㟩꾞☣㦉춬炴㹙碊㊨듗䳀䯎爙휓䡊嗒鮦瑆偌憶ꅍ䆞䎧뗙䎠뭰ᤨ隉歷㉭㚷콬뮿韗冘㖰짬另饬䙄㏴肔ⱹ⣞폄 [ 203.567416][ T1710] usb 3-1: SerialNumber: 摺빐⺁㌴ſ쳝侘谴㼉ઘ콯윇ꧏᏅ羭狒餂됋찝㼣ᥞ쨠⛛鲚쥾∐蘰笉╭锬妦鷲㳙垴⳯Ꞗ嫥뛰跚ꎪ㏩꬜埜죰绿봞兝ﹻ﩯ℳ駯ᗓ뮂඼듁∎콳B覊ೢᯐ雎▪皐㘦昜믐 [ 203.593076][ T7626] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 203.600274][ T7626] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 203.609341][ T430] usb 5-1: device descriptor read/8, error -71 [ 203.618442][ T457] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 203.748360][ T457] usb 1-1: device descriptor read/64, error -71 [ 203.848338][ T430] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 203.869314][ T430] usb 5-1: device descriptor read/8, error -71 [ 203.988349][ T457] usb 1-1: device descriptor read/64, error -71 [ 204.009809][ T430] usb 5-1: device descriptor read/8, error -71 [ 204.016046][ T7626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.024557][ T7626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.033536][ T1710] usblp0: Disabling reads from problematic bidirectional printer [ 204.042166][ T1710] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 14 proto 3 vid 0x03F0 pid 0x0004 [ 204.054421][ T1710] usb 3-1: USB disconnect, device number 40 [ 204.062875][ T1710] usblp0: removed [ 204.098481][ T457] usb usb1-port1: attempt power cycle [ 204.118469][ T430] usb usb5-port1: unable to enumerate USB device [ 204.289692][ T7632] rust_binder: Error while translating object. [ 204.289734][ T7632] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 204.289917][ T7633] rust_binder: Error while translating object. [ 204.295936][ T7632] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1209 [ 204.306057][ T7633] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 204.320688][ T7633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1209 [ 204.438371][ T457] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 204.469461][ T457] usb 1-1: device descriptor read/8, error -71 [ 204.546664][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.552792][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.558447][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.559867][ T7637] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 204.563948][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.578409][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.583786][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.589249][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.594622][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.600059][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.605424][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.610957][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.616440][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.617129][ T457] usb 1-1: device descriptor read/8, error -71 [ 204.622220][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.633353][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.638789][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.644158][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.649571][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.654951][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.660378][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.665750][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.671156][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.676526][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.681971][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.687364][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.692795][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.698182][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.703666][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.709097][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.714498][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.719884][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.725244][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.730627][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.735985][ T7635] /dev/nullb0: Can't lookup blockdev [ 204.755926][ T7641] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 204.755953][ T7641] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:322 [ 204.794665][ T7649] rust_binder: Error while translating object. [ 204.803855][ T7649] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 204.810065][ T7649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:329 [ 204.825293][ T36] audit: type=1400 audit(1779253602.575:539): avc: denied { read write } for pid=7638 comm="syz.4.2411" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 204.858232][ T36] audit: type=1400 audit(1779253602.575:540): avc: denied { open } for pid=7638 comm="syz.4.2411" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 204.881568][ T457] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 204.897810][ T36] audit: type=1326 audit(1779253602.635:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7653 comm="syz.3.2416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa7578f6c9 code=0x0 [ 204.921869][ T457] usb 1-1: device descriptor read/8, error -71 [ 204.928418][ T7656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7656 comm=syz.2.2415 [ 204.949866][ T36] audit: type=1400 audit(1779253602.695:542): avc: denied { map } for pid=7653 comm="syz.3.2416" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 204.973103][ T36] audit: type=1400 audit(1779253602.695:543): avc: denied { execute } for pid=7653 comm="syz.3.2416" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 205.049457][ T457] usb 1-1: device descriptor read/8, error -71 [ 205.158434][ T457] usb usb1-port1: unable to enumerate USB device [ 205.577004][ T7659] netlink: 'syz.4.2417': attribute type 12 has an invalid length. [ 205.722168][ T7669] SELinux: security_context_str_to_sid (;) failed with errno=-22 [ 205.793274][ T7679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124 [ 205.827129][ T7687] rust_binder: Write failure EINVAL in pid:129 [ 205.836999][ T7687] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.848360][ T7690] rust_binder: Write failure EINVAL in pid:129 [ 205.934849][ T36] audit: type=1400 audit(1779253603.675:544): avc: denied { mounton } for pid=7698 comm="syz.0.2431" path="/proc/72/cgroup" dev="proc" ino=35981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 205.970908][ T7693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:133 [ 205.995949][ T7701] rust_binder: Error while translating object. [ 206.005270][ T7701] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 206.011529][ T7701] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136 [ 206.048339][ T457] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 206.066303][ T7710] rust_binder: Error while translating object. [ 206.066352][ T7710] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 206.071257][ T7712] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 206.072769][ T7710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:140 [ 206.082637][ T7712] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 206.107723][ T7712] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 206.115695][ T7712] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 206.126254][ T7714] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.133075][ T7714] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.141388][ T7714] input: syz0 as /devices/virtual/input/input32 [ 206.245829][ T7727] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 206.255166][ T457] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.265364][ T457] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.278355][ T457] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 206.287432][ T457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.301675][ T457] usb 3-1: config 0 descriptor?? [ 206.309248][ T457] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 206.365839][ T7731] incfs: Options parsing error. -22 [ 206.371111][ T7731] incfs: mount failed -22 [ 206.388338][ T1710] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 206.510719][ T7739] binder: Unknown parameter 'statS' [ 206.516539][ T7739] binder: Unknown parameter 'statS' [ 206.539475][ T1710] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 206.547746][ T1710] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 206.559962][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2448'. [ 206.562777][ T1710] usb 5-1: config 8 has no interface number 0 [ 206.575044][ T1710] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 206.603639][ T1710] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 206.612770][ T1710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.620824][ T1710] usb 5-1: Product: syz [ 206.628164][ T1710] usb 5-1: Manufacturer: syz [ 206.633844][ T1710] usb 5-1: SerialNumber: syz [ 206.645613][ T7751] loop7: detected capacity change from 0 to 7 [ 206.652270][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.661463][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.669652][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.678809][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.687096][ T7751] loop7: unable to read partition table [ 206.692870][ T7751] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 206.698241][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.713331][ T7753] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 206.715517][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.724213][ T7753] rust_binder: Write failure EINVAL in pid:1257 [ 206.732481][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.747890][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.756266][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.765535][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.777344][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.785284][ T7759] rust_binder: Write failure EFAULT in pid:1262 [ 206.786611][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.805775][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.814960][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.854821][ T7765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.864619][ T7765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.890434][ T7768] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 206.899055][ T7768] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1269 [ 206.933274][ T7770] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2457'. [ 206.957782][ T7770] exFAT-fs (rnullb0): invalid boot record signature [ 206.964578][ T7770] exFAT-fs (rnullb0): failed to read boot sector [ 206.970995][ T7770] exFAT-fs (rnullb0): failed to recognize exfat type [ 207.014729][ T7776] SELinux: security_context_str_to_sid () failed with errno=-22 [ 207.033595][ T7780] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 207.043033][ T430] usb 5-1: USB disconnect, device number 21 [ 207.348341][ T1710] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 207.498855][ T1710] usb 4-1: Using ep0 maxpacket: 8 [ 207.504991][ T1710] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 207.513326][ T1710] usb 4-1: config 179 has no interface number 0 [ 207.519679][ T1710] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 207.532259][ T1710] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 207.543507][ T1710] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 207.554653][ T1710] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 207.566070][ T1710] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 207.579339][ T1710] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 207.588840][ T1710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.597781][ T7782] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 207.630618][ T7790] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 207.645316][ T7792] rust_binder: Error while translating object. [ 207.653573][ T7792] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 207.659840][ T7792] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:150 [ 207.813054][ T457] usb 4-1: USB disconnect, device number 57 [ 207.813195][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 207.836689][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 207.912898][ T7806] rust_binder: Failed to allocate buffer. len:18446744073709551600, is_oneway:true [ 208.037583][ T7813] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2470'. [ 208.041765][ T7815] fuse: Bad value for 'user_id' [ 208.048739][ T7813] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 208.056301][ T7815] fuse: Bad value for 'user_id' [ 208.079596][ T7817] netlink: 'syz.3.2472': attribute type 11 has an invalid length. [ 208.087936][ T7817] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2472'. [ 208.176482][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2475'. [ 208.185770][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2475'. [ 208.219858][ T7834] overlayfs: failed to resolve './file0': -2 [ 208.221277][ T7836] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 208.233904][ T7836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1306 [ 208.331625][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 208.331646][ T36] audit: type=1400 audit(1779253606.075:556): avc: denied { setattr } for pid=7842 comm="syz.0.2480" path="/dev/binderfs/binder0" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 208.337946][ T7843] rust_binder: Error while translating object. [ 208.371116][ T7843] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 208.377276][ T7843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:105 [ 208.454290][ T7845] fuse: Bad value for 'group_id' [ 208.468437][ T7845] fuse: Bad value for 'group_id' [ 208.489718][ T7850] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:110 [ 208.668701][ T7866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7866 comm=syz.0.2487 [ 208.771755][ T848] usb 3-1: USB disconnect, device number 41 [ 208.821921][ T7872] __vm_enough_memory: pid: 7872, comm: syz.3.2490, bytes: 18014402804453376 not enough memory for the allocation [ 209.058513][ T7879] 9pnet_fd: Insufficient options for proto=fd [ 209.075164][ T7881] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 209.075464][ T7882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=7882 comm=syz.4.2493 [ 209.086180][ T36] audit: type=1400 audit(1779253606.835:557): avc: denied { relabelto } for pid=7880 comm="syz.4.2493" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 209.097914][ T7882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=7882 comm=syz.4.2493 [ 209.138081][ T36] audit: type=1400 audit(1779253606.835:558): avc: denied { associate } for pid=7880 comm="syz.4.2493" name="ptp0" dev="devtmpfs" ino=196 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 209.138650][ T7882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=7882 comm=syz.4.2493 [ 209.192241][ T7886] loop2: detected capacity change from 0 to 8388607 [ 209.228376][ T848] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 209.245842][ T7890] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 209.245864][ T7890] rust_binder: Error while translating object. [ 209.254618][ T7890] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 209.260832][ T7890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:170 [ 209.270622][ T7891] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 209.378329][ T848] usb 3-1: Using ep0 maxpacket: 32 [ 209.384537][ T848] usb 3-1: config 250 has an invalid interface number: 8 but max is 0 [ 209.393231][ T848] usb 3-1: config 250 has no interface number 0 [ 209.399540][ T848] usb 3-1: New USB device found, idVendor=0ac8, idProduct=3410, bcdDevice=b6.f9 [ 209.408646][ T848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.620281][ T848] usb 3-1: string descriptor 0 read error: -71 [ 209.628297][ T848] usb 3-1: USB disconnect, device number 42 [ 210.152844][ T7914] 9pnet_fd: Insufficient options for proto=fd [ 210.396012][ T7922] input: syz0 as /devices/virtual/input/input33 [ 210.408629][ T7928] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 210.414077][ T6053] udevd[6053]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 210.456143][ T36] audit: type=1400 audit(1779253608.195:559): avc: denied { setattr } for pid=7931 comm="syz.0.2508" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 210.553357][ T36] audit: type=1400 audit(1779253608.295:560): avc: denied { create } for pid=7941 comm="syz.4.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 210.668670][ T7937] rust_binder: 133: no such ref 0 [ 210.673783][ T7937] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 210.696859][ T7937] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:133 [ 210.822206][ T7964] bpf: Bad value for 'mode' [ 210.902437][ T7977] fuse: Bad value for 'fd' [ 210.907962][ T7977] overlayfs: failed to clone upperpath [ 210.994032][ T7998] overlayfs: failed to clone upperpath [ 211.027136][ T8004] overlayfs: failed to resolve './bus': -2 [ 211.139352][ T8032] netlink: 'syz.4.2541': attribute type 19 has an invalid length. [ 211.163975][ T36] audit: type=1400 audit(1779253608.914:561): avc: denied { accept } for pid=8034 comm="syz.4.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 211.183590][ T36] audit: type=1400 audit(1779253608.914:562): avc: denied { accept } for pid=8034 comm="syz.4.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 211.241264][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2546'. [ 211.292793][ T8054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2536'. [ 211.970406][ T8080] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 211.970429][ T8080] rust_binder: Read failure Err(EFAULT) in pid:1318 [ 211.979464][ T8080] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.059235][ T8085] rust_binder: 1323: no such ref 1 [ 212.066754][ T36] audit: type=1400 audit(1779253609.814:563): avc: denied { associate } for pid=8084 comm="syz.3.2554" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 212.104423][ T8097] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 212.104453][ T8097] rust_binder: Error while translating object. [ 212.122008][ T8097] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 212.128371][ T8097] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1326 [ 212.151659][ T8102] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4232, size: 18446744073709551613) [ 212.161059][ T8102] rust_binder: Error while translating object. [ 212.162652][ T8100] rust_binder: Error in use_page_slow: ESRCH [ 212.173302][ T8102] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 212.197575][ T8102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1328 [ 212.199652][ T8100] rust_binder: use_range failure ESRCH [ 212.226297][ T8111] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 212.249676][ T8100] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 212.249703][ T8100] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 212.268249][ T8100] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:378 [ 212.320813][ T36] audit: type=1400 audit(1779253610.074:564): avc: denied { ioctl } for pid=8120 comm="syz.2.2568" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 212.418332][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.422484][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.447952][ T8135] rust_binder: Write failure EFAULT in pid:162 [ 212.509479][ T36] audit: type=1400 audit(1779253610.264:565): avc: denied { create } for pid=8141 comm="syz.2.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 212.533677][ T8143] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.569453][ T8149] rust_binder: Write failure EFAULT in pid:397 [ 212.576087][ T8149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.582506][ T8149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.601896][ T8151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.612423][ T8152] rust_binder: Error in use_page_slow: ESRCH [ 212.619160][ T8152] rust_binder: use_range failure ESRCH [ 212.625256][ T8152] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 212.630809][ T8152] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 212.638877][ T8152] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:399 [ 213.097099][ T8163] rust_binder: Write failure EFAULT in pid:1333 [ 213.245951][ T8189] SELinux: failed to load policy [ 213.257562][ T8189] /dev/rnullb0: Can't open blockdev [ 213.358404][ T457] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 213.390861][ T8204] loop2: detected capacity change from 0 to 8388607 [ 213.509384][ T457] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 213.521118][ T457] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 213.532115][ T457] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 213.542112][ T457] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.555572][ T457] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.568347][ T457] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.577302][ T457] usb 4-1: config 0 descriptor?? [ 213.787854][ T457] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 213.801338][ T457] plantronics 0003:047F:FFFF.001A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 213.822669][ T457] usb 4-1: USB disconnect, device number 58 [ 213.837441][ T8233] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 213.837465][ T8233] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1346 [ 213.888373][ T430] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 213.901594][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 213.901614][ T36] audit: type=1400 audit(1779253611.654:567): avc: denied { connect } for pid=8242 comm="syz.3.2603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 213.943345][ T8245] rust_binder: 1358: no such ref 2 [ 213.994543][ T8249] __vm_enough_memory: pid: 8249, comm: syz.3.2606, bytes: 18014402804453376 not enough memory for the allocation [ 214.007069][ T8249] rust_binder: Failed to allocate buffer. len:232, is_oneway:false [ 214.048373][ T430] usb 3-1: Using ep0 maxpacket: 8 [ 214.068902][ T430] usb 3-1: unable to get BOS descriptor or descriptor too short [ 214.077401][ T430] usb 3-1: config 15 has an invalid interface number: 140 but max is 1 [ 214.085940][ T430] usb 3-1: config 15 has an invalid descriptor of length 189, skipping remainder of the config [ 214.096514][ T430] usb 3-1: config 15 has 1 interface, different from the descriptor's value: 2 [ 214.105636][ T430] usb 3-1: config 15 has no interface number 0 [ 214.112022][ T430] usb 3-1: config 15 interface 140 altsetting 13 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 214.123378][ T430] usb 3-1: config 15 interface 140 altsetting 13 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 214.135267][ T430] usb 3-1: config 15 interface 140 altsetting 13 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 214.146737][ T430] usb 3-1: config 15 interface 140 has no altsetting 0 [ 214.155619][ T430] usb 3-1: string descriptor 0 read error: -22 [ 214.161855][ T430] usb 3-1: New USB device found, idVendor=05c6, idProduct=9235, bcdDevice=40.ed [ 214.170923][ T430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.241679][ T8259] loop7: detected capacity change from 0 to 7 [ 214.248198][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.254745][ T36] audit: type=1400 audit(1779253612.004:568): avc: denied { read } for pid=8260 comm="syz.0.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 214.257374][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 214.286776][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.295984][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 214.303995][ T8259] loop7: unable to read partition table [ 214.316867][ T8259] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 214.330579][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.339764][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 214.348248][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.357453][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 214.365594][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.374784][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 214.383123][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.392403][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 214.403105][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.412288][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 214.428357][ T430] usb 3-1: USB disconnect, device number 43 [ 214.616068][ T8292] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2620'. [ 214.651576][ T8294] cgroup2: Unknown parameter 'n >' [ 214.664127][ T8294] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1377 [ 214.676314][ T36] audit: type=1400 audit(1779253612.424:569): avc: denied { mount } for pid=8295 comm="syz.4.2622" name="/" dev="pstore" ino=1766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 214.769053][ T8301] kvm: apic: phys broadcast and lowest prio [ 214.778652][ T8301] binder: Unknown parameter 'defcontext' [ 214.790161][ T36] audit: type=1400 audit(1779253612.534:570): avc: denied { write } for pid=8309 comm="syz.4.2626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 214.876544][ T8320] devpts: called with bogus options [ 214.917940][ T8325] rust_binder: Error while translating object. [ 214.918019][ T8325] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 214.931908][ T8325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1384 [ 214.954686][ T8329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 215.010799][ T8333] 9pnet_fd: Insufficient options for proto=fd [ 215.087167][ T36] audit: type=1400 audit(1779253612.834:571): avc: denied { setopt } for pid=8344 comm="syz.2.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 215.458326][ T848] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 215.521064][ T2331] Bluetooth: hci0: Frame reassembly failed (-84) [ 215.618332][ T848] usb 4-1: Using ep0 maxpacket: 16 [ 215.627963][ T848] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 215.636504][ T848] usb 4-1: config 0 has no interface number 0 [ 215.650131][ T848] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=fe.d1 [ 215.660216][ T848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.668664][ T848] usb 4-1: Product: syz [ 215.672949][ T848] usb 4-1: Manufacturer: syz [ 215.677584][ T848] usb 4-1: SerialNumber: syz [ 215.683809][ T848] usb 4-1: config 0 descriptor?? [ 215.690247][ T848] usb_ehset_test 4-1:0.16: probe with driver usb_ehset_test failed with error -32 [ 215.891812][ T429] usb 4-1: USB disconnect, device number 59 [ 216.277023][ T36] audit: type=1400 audit(1779253614.024:572): avc: denied { write } for pid=8435 comm="syz.0.2668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 216.797045][ T36] audit: type=1400 audit(1779253614.544:573): avc: denied { create } for pid=8450 comm="syz.3.2674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 217.168342][ T429] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 217.318327][ T429] usb 4-1: Using ep0 maxpacket: 8 [ 217.325201][ T429] usb 4-1: config 4 has an invalid interface number: 126 but max is 1 [ 217.333454][ T429] usb 4-1: config 4 has an invalid interface number: 30 but max is 1 [ 217.341593][ T429] usb 4-1: config 4 has no interface number 0 [ 217.347837][ T429] usb 4-1: config 4 has no interface number 1 [ 217.353967][ T429] usb 4-1: config 4 interface 126 has no altsetting 0 [ 217.362629][ T429] usb 4-1: string descriptor 0 read error: -22 [ 217.368848][ T429] usb 4-1: New USB device found, idVendor=0499, idProduct=1040, bcdDevice=7e.7d [ 217.377894][ T429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.387665][ T429] snd-usb-audio 4-1:4.126: probe with driver snd-usb-audio failed with error -2 [ 217.399730][ T429] snd-usb-audio 4-1:4.30: probe with driver snd-usb-audio failed with error -2 [ 217.406084][ T6053] udevd[6053]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.30/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 217.578332][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 217.578345][ T490] Bluetooth: hci0: command 0x1003 tx timeout [ 217.591794][ T8465] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 217.591822][ T8465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1419 [ 217.601685][ T8476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.615460][ T429] usb 4-1: USB disconnect, device number 60 [ 217.684926][ T8473] overlayfs: failed to resolve './file0/file0': -2 [ 218.152915][ T8491] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2686'. [ 218.408329][ T848] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 218.509096][ T8500] rust_binder: Error while translating object. [ 218.509140][ T8500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 218.509227][ T8501] rust_binder: Error while translating object. [ 218.515324][ T8500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1428 [ 218.530864][ T8501] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 218.540006][ T8501] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1428 [ 218.557731][ T8503] rust_binder: Write failure EFAULT in pid:1431 [ 218.568326][ T848] usb 3-1: Using ep0 maxpacket: 16 [ 218.580662][ T848] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.590837][ T848] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.601211][ T848] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.610500][ T848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.618567][ T848] usb 3-1: Product: syz [ 218.622742][ T848] usb 3-1: Manufacturer: syz [ 218.627353][ T848] usb 3-1: SerialNumber: syz [ 218.742754][ T8510] SELinux: Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped). [ 218.752853][ T36] audit: type=1400 audit(1779253616.504:574): avc: denied { relabelto } for pid=8509 comm="syz.4.2692" name="file0" dev="tmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:pinentry_exec_t:s0" [ 218.754938][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2692'. [ 218.808334][ T36] audit: type=1400 audit(1779253616.504:575): avc: denied { associate } for pid=8509 comm="syz.4.2692" name="file0" dev="tmpfs" ino=731 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:pinentry_exec_t:s0" [ 218.848637][ T848] usb 3-1: 0:2 : does not exist [ 218.856632][ T848] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 218.866260][ T8523] overlayfs: failed to resolve './file1/file0': -2 [ 218.868492][ T429] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 218.882448][ T848] usb 3-1: USB disconnect, device number 44 [ 218.892921][ T6053] udevd[6053]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 218.960294][ T8530] devpts: called with bogus options [ 219.038360][ T429] usb 4-1: Using ep0 maxpacket: 32 [ 219.044951][ T429] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 219.053209][ T429] usb 4-1: config 0 has no interface number 0 [ 219.059336][ T429] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 219.069371][ T429] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 48 [ 219.080682][ T429] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 219.089761][ T429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.097746][ T429] usb 4-1: Product: syz [ 219.101918][ T429] usb 4-1: Manufacturer: syz [ 219.106516][ T429] usb 4-1: SerialNumber: syz [ 219.111744][ T429] usb 4-1: config 0 descriptor?? [ 219.116966][ T8504] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 219.124239][ T8504] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 219.332110][ T429] usb 4-1: USB disconnect, device number 61 [ 219.598357][ T430] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 219.628336][ T429] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 219.750708][ T8548] mmap: syz.4.2706 (8548) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 219.751360][ T430] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 219.771757][ T430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.779912][ T430] usb 3-1: Product: syz [ 219.784237][ T430] usb 3-1: Manufacturer: syz [ 219.788988][ T430] usb 3-1: SerialNumber: syz [ 219.799658][ T429] usb 4-1: config 1 has an invalid descriptor of length 123, skipping remainder of the config [ 219.810005][ T429] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.820442][ T429] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.829534][ T429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.837549][ T429] usb 4-1: Product: 唲宨蛓嗌롒騟쎿ᲃꈫ⥉ᰄ榞⭽広蘑䗇瘖脫膍워孞鍉弽꜐ᅼ藆㢈Ӡ◮渃ｶ㼓㆞ΰၵ᪡鑒摭뺃澲䤨ࢸ᭓ﵼ塧峛ゑ莶騈꼉⁶卛䧳﹗襻襀溮㉑쎞崋豃Ԫ홇눶䒒란ﱻ擽྇씤➛獷ꎐ璨謙ଗ쑖 [ 219.862676][ T429] usb 4-1: Manufacturer: 荕롪೸ˑ㖣匥㮼铷⤞棚箉媰텃枲晜㰶즓秕੿琍婠ꨊ䋖뗺㏗μ鼫펄ꤿ屒㷁⋀ዂ릖ᣟ頸廑뢑苂ᳫ㽡덶阓㇣ㄅᕧ劯ↆᲡ⑾ᴡ [ 219.882364][ T429] usb 4-1: SerialNumber: к [ 220.357562][ T8564] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2714'. [ 220.368697][ T8564] 9pnet_fd: Insufficient options for proto=fd [ 220.601357][ T429] usb 4-1: 0:2 : does not exist [ 220.608508][ T429] usb 4-1: USB disconnect, device number 62 [ 220.616511][ T6053] udevd[6053]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 220.810066][ T8572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2718'. [ 221.060585][ T8593] netlink: 182 bytes leftover after parsing attributes in process `syz.4.2727'. [ 221.129824][ T36] audit: type=1400 audit(1779253618.884:576): avc: denied { map } for pid=8597 comm="syz.4.2730" path="socket:[39913]" dev="sockfs" ino=39913 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 221.254431][ T8620] sockfs: Unknown parameter '@T(~BK+DGD5j Z脟;vxy_{6ucK.ǀ*VA/0 [ 221.254431][ T8620] ')R7a9:Zl6R@_w0I [ 221.254431][ T8620] JHВp' [ 221.346345][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2744'. [ 221.366044][ T2331] Bluetooth: hci0: Frame reassembly failed (-84) [ 222.376766][ T430] usb 3-1: USB disconnect, device number 45 [ 222.462741][ T36] audit: type=1400 audit(1779253620.217:577): avc: denied { remount } for pid=8657 comm="syz.2.2752" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 222.463146][ T8658] option changes via remount are deprecated (pid=8657 comm=syz.2.2752) [ 222.491615][ T8658] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 222.532824][ T8662] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 222.583805][ T8663] rust_binder: 474: no such ref 0 [ 222.825970][ T8667] netlink: 'syz.0.2756': attribute type 16 has an invalid length. [ 222.833841][ T8667] netlink: 'syz.0.2756': attribute type 2 has an invalid length. [ 222.841730][ T8667] netlink: 64110 bytes leftover after parsing attributes in process `syz.0.2756'. [ 222.931228][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2760'. [ 222.951286][ T8679] 9pnet_fd: Insufficient options for proto=fd [ 223.060829][ T8690] netlink: 'syz.0.2764': attribute type 30 has an invalid length. [ 223.410922][ T36] audit: type=1400 audit(1779253621.157:578): avc: denied { execute } for pid=8716 comm="syz.2.2775" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 223.434202][ T490] Bluetooth: hci0: command 0x1003 tx timeout [ 223.440430][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 223.454334][ T8720] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 223.454389][ T8721] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 223.467996][ T8721] rust_binder: 479: no such ref 4 [ 223.473170][ T8721] rust_binder: Error while translating object. [ 223.473203][ T8721] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 223.479422][ T8721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:479 [ 223.489310][ T36] audit: type=1400 audit(1779253621.237:579): avc: denied { module_load } for pid=8718 comm="syz.2.2776" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=1461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 223.634552][ T8730] loop5: detected capacity change from 0 to 7 [ 223.771313][ T8731] Invalid logical block size (1) [ 223.829902][ T8740] binder: Unknown parameter '0xffffffffffffffff' [ 224.007766][ T8758] rust_binder: Read failure Err(EAGAIN) in pid:1446 [ 224.138540][ T64] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 224.189813][ T8778] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2797'. [ 224.264452][ T8794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=8794 comm=syz.0.2802 [ 224.277695][ T8797] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2803'. [ 224.319551][ T64] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 224.327863][ T64] usb 3-1: config 0 has no interface number 0 [ 224.334368][ T64] usb 3-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 224.345771][ T64] usb 3-1: config 0 interface 214 has no altsetting 0 [ 224.353972][ T64] usb 3-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 224.363311][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.371351][ T64] usb 3-1: Product: syz [ 224.375520][ T64] usb 3-1: Manufacturer: syz [ 224.383189][ T64] usb 3-1: SerialNumber: syz [ 224.389007][ T64] usb 3-1: config 0 descriptor?? [ 224.394479][ T8751] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 224.415821][ T8808] netlink: 'syz.4.2807': attribute type 4 has an invalid length. [ 224.423582][ T8808] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2807'. [ 224.602352][ T8751] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 224.708338][ T457] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 224.859397][ T457] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 224.870385][ T457] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 224.879448][ T457] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.888206][ T457] usb 4-1: config 0 descriptor?? [ 224.893701][ T8810] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 225.171095][ T8821] overlayfs: empty lowerdir [ 225.200602][ T8826] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2813'. [ 225.305612][ T457] hid-generic 0003:04F3:0755.001B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 225.728725][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 225.740976][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 225.751834][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 225.829623][ T8864] overlayfs: failed to clone upperpath [ 225.911376][ T8880] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 225.915360][ T8881] netlink: 'syz.4.2831': attribute type 46 has an invalid length. [ 225.934735][ T8888] netlink: 'syz.0.2832': attribute type 4 has an invalid length. [ 225.944616][ T8888] netlink: 'syz.0.2832': attribute type 4 has an invalid length. [ 226.548347][ T457] usb 4-1: reset full-speed USB device number 63 using dummy_hcd [ 226.566322][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 226.578095][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 226.589275][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 226.600410][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 226.611554][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 226.622740][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 226.633771][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 226.644838][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 226.655902][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 226.667000][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 226.678114][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 226.689239][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 226.700598][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 226.711777][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 226.722900][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 226.733908][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 226.745086][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 226.756372][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 226.767787][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 226.779053][ T64] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 226.792822][ T64] ax88179_178a 3-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 96:92:87:e9:e1:f1 [ 226.810390][ T64] usb 3-1: USB disconnect, device number 46 [ 226.816857][ T64] ax88179_178a 3-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 226.937164][ T8919] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 226.947149][ T36] audit: type=1400 audit(1779253624.697:580): avc: denied { relabelto } for pid=8918 comm="syz.4.2837" name="file0" dev="tmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 226.974814][ T36] audit: type=1400 audit(1779253624.697:581): avc: denied { associate } for pid=8918 comm="syz.4.2837" name="file0" dev="tmpfs" ino=1050 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_lib_t:s0" [ 227.013188][ T36] audit: type=1400 audit(1779253624.717:582): avc: denied { unlink } for pid=7042 comm="syz-executor" name="file0" dev="tmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 227.097082][ T8942] overlayfs: missing 'lowerdir' [ 227.323973][ T8952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 227.324447][ T36] audit: type=1400 audit(1779253625.067:583): avc: denied { write } for pid=8951 comm="syz.2.2845" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 227.370744][ T8954] netlink: 'syz.2.2846': attribute type 29 has an invalid length. [ 227.378665][ T8954] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2846'. [ 227.388834][ T36] audit: type=1400 audit(1779253625.137:584): avc: denied { accept } for pid=8953 comm="syz.2.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 227.422809][ T36] audit: type=1400 audit(1779253625.167:585): avc: denied { read } for pid=8955 comm="syz.2.2847" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 227.446474][ T36] audit: type=1400 audit(1779253625.167:586): avc: denied { ioctl } for pid=8955 comm="syz.2.2847" path="/180/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 227.522556][ T8970] overlayfs: missing 'lowerdir' [ 227.552591][ T8974] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 227.559384][ T8974] rust_binder: Error in use_page_slow: ESRCH [ 227.559401][ T8974] rust_binder: use_range failure ESRCH [ 227.565488][ T8974] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 227.571226][ T8974] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 227.580275][ T8974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:532 [ 227.725310][ T8987] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 227.734616][ T8988] rust_binder: Error while translating object. [ 227.741160][ T8988] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 227.747327][ T8988] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:541 [ 227.768300][ T36] audit: type=1400 audit(1779253625.507:587): avc: denied { read } for pid=8990 comm="syz.2.2860" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 227.770781][ T8991] rust_binder: Write failure EFAULT in pid:545 [ 227.777507][ T36] audit: type=1400 audit(1779253625.507:588): avc: denied { open } for pid=8990 comm="syz.2.2860" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 227.835916][ T8993] overlayfs: missing 'lowerdir' [ 227.838148][ T457] usb 4-1: device descriptor read/64, error -71 [ 227.842900][ T36] audit: type=1400 audit(1779253625.517:589): avc: denied { ioctl } for pid=8990 comm="syz.2.2860" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 227.911464][ T9000] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 227.958759][ T457] usb 4-1: device reset changed ep0 maxpacket size! [ 227.964775][ T9001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:554 [ 227.965487][ T848] usb 4-1: USB disconnect, device number 63 [ 228.118343][ T848] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 228.218321][ T9022] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 228.227167][ T9022] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 228.235502][ T9022] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 228.273741][ T848] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 228.281986][ T848] usb 4-1: config 0 has no interface number 0 [ 228.288083][ T848] usb 4-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 228.298997][ T848] usb 4-1: config 0 interface 214 has no altsetting 0 [ 228.307335][ T848] usb 4-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 228.316514][ T848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.324547][ T848] usb 4-1: Product: syz [ 228.328741][ T848] usb 4-1: Manufacturer: syz [ 228.333344][ T848] usb 4-1: SerialNumber: syz [ 228.338833][ T848] usb 4-1: config 0 descriptor?? [ 228.344112][ T8968] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 228.551890][ T8968] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 228.913194][ T9042] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.953633][ T9051] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 228.974042][ T9051] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 228.982403][ T9051] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 228.984512][ T9053] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.991756][ T9053] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2 [ 229.005868][ T9053] rust_binder: Write failure EINVAL in pid:576 [ 229.542224][ T9076] netlink: 'syz.2.2888': attribute type 4 has an invalid length. [ 229.688847][ T848] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 229.700170][ T848] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 229.711053][ T848] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 229.911806][ T9085] netlink: 'syz.0.2891': attribute type 16 has an invalid length. [ 230.032481][ T9092] overlayfs: failed to clone lowerpath [ 230.065567][ T9098] overlayfs: failed to clone upperpath [ 230.409056][ T9110] 9pnet_fd: Insufficient options for proto=fd [ 230.525147][ T848] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 230.533561][ T9123] overlayfs: failed to clone upperpath [ 230.537357][ T848] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 230.552957][ T848] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 230.564096][ T848] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 230.575362][ T848] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 230.578747][ T9125] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2905'. [ 230.587138][ T848] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 230.606486][ T848] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 230.617670][ T848] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 230.629008][ T848] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 230.642175][ T848] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 230.653677][ T848] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 230.671311][ T848] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 230.682498][ T848] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 230.693867][ T848] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 230.706007][ T848] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 230.717727][ T848] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 230.735385][ T848] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 230.747149][ T848] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 230.758735][ T848] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 230.771481][ T848] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 230.790361][ T848] ax88179_178a 4-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.3-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, f2:df:7d:15:c3:fc [ 230.816477][ T848] usb 4-1: USB disconnect, device number 64 [ 230.826059][ T9146] overlayfs: failed to clone upperpath [ 230.828338][ T848] ax88179_178a 4-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.3-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 231.177353][ T9179] netlink: 'syz.3.2917': attribute type 27 has an invalid length. [ 231.187666][ T9179] sit0: left promiscuous mode [ 231.245234][ T9189] netlink: 328 bytes leftover after parsing attributes in process `syz.3.2919'. [ 231.312030][ T9198] overlayfs: failed to clone upperpath [ 231.360387][ T9208] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 231.360410][ T9208] rust_binder: Error while translating object. [ 231.372500][ T9208] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 231.378865][ T9208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1484 [ 231.640751][ T9248] overlayfs: failed to clone upperpath [ 231.657392][ T9250] 9pnet_fd: Insufficient options for proto=fd [ 231.694422][ T9255] netlink: 'syz.4.2942': attribute type 4 has an invalid length. [ 231.702260][ T9255] netlink: 'syz.4.2942': attribute type 2 has an invalid length. [ 231.771153][ T9272] netlink: 'syz.4.2947': attribute type 3 has an invalid length. [ 232.439429][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 232.439449][ T36] audit: type=1400 audit(1779253630.187:595): avc: denied { setopt } for pid=9320 comm="syz.2.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 232.447231][ T9321] tipc: Started in network mode [ 232.471147][ T9321] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 232.481266][ T9321] tipc: Enabled bearer , priority 10 [ 232.527581][ T36] audit: type=1326 audit(1779253630.267:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9328 comm="syz.2.2970" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56c4b8f6c9 code=0x0 [ 233.392385][ T9386] overlayfs: failed to clone upperpath [ 233.501581][ T9404] overlayfs: failed to clone upperpath [ 233.546398][ T9411] SELinux: Context ϧ-):E2٭ؾ)đJu36ޢ{@m[ is not valid (left unmapped). [ 233.608332][ T457] tipc: Node number set to 4269801488 [ 233.618370][ T430] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 233.649538][ T9422] overlayfs: failed to resolve './file0': -2 [ 233.721293][ T36] audit: type=1400 audit(1779253887.469:597): avc: denied { map } for pid=9412 comm="syz.2.3004" path="socket:[42714]" dev="sockfs" ino=42714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 233.745019][ T36] audit: type=1400 audit(1779253887.479:598): avc: denied { listen } for pid=9412 comm="syz.2.3004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 233.789513][ T430] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 233.800551][ T430] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 233.809660][ T430] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.818618][ T430] usb 4-1: config 0 descriptor?? [ 233.824579][ T9384] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 233.836419][ T9426] overlayfs: failed to clone upperpath [ 233.934822][ T9455] overlayfs: failed to clone upperpath [ 234.036859][ T430] hid-generic 0003:04F3:0755.001C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 234.051114][ T430] usb 4-1: USB disconnect, device number 65 [ 234.073273][ T36] audit: type=1400 audit(1779253887.819:599): avc: denied { shutdown } for pid=9460 comm="syz.0.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 234.080768][ T9459] fido_id[9459]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 234.170892][ T9481] 9pnet_fd: Insufficient options for proto=fd [ 234.192735][ T9483] overlayfs: failed to clone upperpath [ 234.263810][ T9501] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 159) [ 234.263840][ T9501] rust_binder: Error while translating object. [ 234.274586][ T9501] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 234.280837][ T9501] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1529 [ 234.280907][ T9503] netlink: 'syz.2.3034': attribute type 2 has an invalid length. [ 234.308077][ T9501] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 234.316808][ T9501] rust_binder: 1529: no such ref 1 [ 234.384981][ T9523] overlayfs: failed to clone upperpath [ 234.535419][ T9551] overlayfs: failed to clone upperpath [ 234.589300][ T9559] netlink: 'syz.0.3053': attribute type 1 has an invalid length. [ 234.597063][ T9559] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3053'. [ 234.609077][ T9555] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 234.657469][ T9555] rust_binder: 1538: no such ref 3 [ 234.678489][ T9555] rust_binder: inc_ref_done called when no active inc_refs [ 234.678511][ T9555] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 234.702982][ T9555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1538 [ 234.769305][ T9565] rust_binder: Got transaction with invalid offset. [ 234.788375][ T9565] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 234.795020][ T9565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1542 [ 234.868787][ T9585] overlayfs: failed to clone upperpath [ 235.030192][ T9610] overlayfs: failed to clone upperpath [ 235.154184][ T36] audit: type=1400 audit(1779253888.899:600): avc: denied { create } for pid=9627 comm="syz.0.3076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 235.615902][ T9666] overlayfs: failed to clone upperpath [ 235.643927][ T9670] 9pnet_fd: Insufficient options for proto=fd [ 235.650562][ T9670] overlayfs: failed to clone lowerpath [ 235.658354][ T2254] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 235.662940][ T9674] netlink: 'syz.2.3092': attribute type 17 has an invalid length. [ 235.755704][ T9699] overlayfs: failed to clone upperpath [ 235.790125][ T9704] overlayfs: failed to clone upperpath [ 235.808314][ T2254] usb 4-1: Using ep0 maxpacket: 16 [ 235.816275][ T2254] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 235.827032][ T2254] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=20 [ 235.839725][ T2254] usb 4-1: SerialNumber: syz [ 235.845100][ T2254] usb 4-1: config 0 descriptor?? [ 235.852081][ T9711] x_tables: unsorted underflow at hook 3 [ 235.859506][ T2254] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 235.874119][ T2254] usb 4-1: Detected FT232A [ 235.888471][ T2254] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 235.896284][ T9717] overlayfs: failed to clone upperpath [ 235.919523][ T9717] 8021q: VLANs not supported on lo [ 236.028924][ T9734] overlayfs: failed to clone lowerpath [ 236.069287][ T9646] binder: Binderfs stats mode cannot be changed during a remount [ 236.077317][ T848] usb 4-1: USB disconnect, device number 66 [ 236.084502][ T848] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 236.096317][ T848] ftdi_sio 4-1:0.0: device disconnected [ 236.266964][ T9761] 9pnet_fd: Insufficient options for proto=fd [ 236.273845][ T9761] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=118 sclass=netlink_tcpdiag_socket pid=9761 comm=syz.4.3126 [ 236.487485][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3130'. [ 237.051463][ T9823] overlayfs: failed to clone upperpath [ 237.462436][ T9849] overlayfs: failed to clone upperpath [ 237.494749][ T9855] overlayfs: failed to clone upperpath [ 237.517756][ T9857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=9857 comm=syz.4.3158 [ 237.699339][ T9867] 9pnet_fd: Insufficient options for proto=fd [ 238.169515][ T9886] /dev/loop0: Can't lookup blockdev [ 238.196859][ T36] audit: type=1400 audit(1779253891.939:601): avc: denied { create } for pid=9887 comm="syz.0.3170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 238.372789][ T9890] rust_binder: Error while translating object. [ 238.372837][ T9890] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 238.379242][ T9890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1587 [ 238.500658][ T9905] overlayfs: failed to clone lowerpath [ 238.500667][ T9904] overlayfs: failed to clone lowerpath [ 239.252737][ T9950] Unsupported ieee802154 address type: 0 [ 239.252756][ T36] audit: type=1400 audit(1779253892.999:602): avc: denied { bind } for pid=9949 comm="syz.3.3193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 239.278471][ T36] audit: type=1400 audit(1779253893.009:603): avc: denied { listen } for pid=9949 comm="syz.3.3193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 240.458580][ T457] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 240.610405][ T457] usb 4-1: Using ep0 maxpacket: 32 [ 240.616682][ T457] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 240.625170][ T457] usb 4-1: config 0 has no interface number 0 [ 240.632924][ T457] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 240.642116][ T457] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.650178][ T457] usb 4-1: Product: syz [ 240.654370][ T457] usb 4-1: Manufacturer: syz [ 240.659012][ T457] usb 4-1: SerialNumber: syz [ 240.664193][ T457] usb 4-1: config 0 descriptor?? [ 240.670537][ T457] smsc95xx v2.0.0 [ 240.701264][ T9992] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3208'. [ 241.271308][ T9977] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1602 [ 241.271577][ T457] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 241.291852][ T457] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 241.303793][ T457] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 241.314642][ T457] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 241.323933][ T457] usb 4-1: USB disconnect, device number 67 [ 241.389222][T10015] overlayfs: failed to clone upperpath [ 241.646438][T10046] overlay: Unknown parameter 'fowner' [ 242.090552][T10081] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3241'. [ 242.099751][T10081] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3241'. [ 242.109351][T10081] rust_binder: 1620: no such ref 0 [ 242.114541][T10081] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 242.121734][T10081] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 242.128789][T10081] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 242.135953][T10081] rust_binder: 1620: no such ref 0 [ 242.207212][T10094] overlay: ./file0 is not a directory [ 242.212988][T10094] fuse: Bad value for 'user_id' [ 242.217894][T10094] fuse: Bad value for 'user_id' [ 242.245078][T10100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 242.253863][T10100] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 242.262178][T10100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 242.366173][T10112] overlayfs: conflicting options: userxattr,verity=require [ 242.398330][ T430] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 242.548422][ T430] usb 4-1: Using ep0 maxpacket: 32 [ 242.554736][ T430] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.565646][ T430] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 242.574702][ T430] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.583263][ T430] usb 4-1: config 0 descriptor?? [ 242.990391][ T430] elo 0003:04E7:0009.001D: unknown main item tag 0x4 [ 243.000452][ T430] elo 0003:04E7:0009.001D: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.3-1/input0 [ 243.047170][ T36] audit: type=1400 audit(1779253896.789:604): avc: denied { relabelfrom } for pid=10144 comm="syz.0.3267" name="NETLINK" dev="sockfs" ino=46090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 243.071542][ T36] audit: type=1400 audit(1779253896.789:605): avc: denied { relabelto } for pid=10144 comm="syz.0.3267" name="NETLINK" dev="sockfs" ino=46090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 243.199120][T10088] rust_binder: Write failure EINVAL in pid:1627 [ 243.200180][ T457] usb 4-1: USB disconnect, device number 68 [ 243.430586][ T36] audit: type=1400 audit(1779253897.179:606): avc: denied { nlmsg_read } for pid=10161 comm="syz.4.3273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 243.497997][T10164] x_tables: unsorted entry at hook 1 [ 243.533000][T10168] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3276'. [ 243.542057][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3276'. [ 243.613032][T10182] overlayfs: failed to clone upperpath [ 243.784191][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3285'. [ 243.793802][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3285'. [ 243.903270][T10199] overlayfs: failed to clone upperpath [ 244.469500][T10206] netlink: 'syz.2.3290': attribute type 4 has an invalid length. [ 244.477264][T10206] netlink: 'syz.2.3290': attribute type 5 has an invalid length. [ 244.485030][T10206] netlink: 'syz.2.3290': attribute type 1 has an invalid length. [ 244.507629][T10208] fuse: Bad value for 'group_id' [ 244.512673][T10208] fuse: Bad value for 'group_id' [ 244.532852][T10214] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3294'. [ 244.545537][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3295'. [ 244.591402][T10225] netlink: 'syz.2.3299': attribute type 1 has an invalid length. [ 244.599416][T10225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10225 comm=syz.2.3299 [ 244.601120][T10230] rust_binder: Write failure EFAULT in pid:1636 [ 244.612417][T10226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10226 comm=syz.2.3299 [ 244.668059][T10244] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3305'. [ 244.858517][ T429] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 245.009516][ T429] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.019888][ T429] usb 4-1: config 1 interface 0 has no altsetting 0 [ 245.026900][ T429] usb 4-1: language id specifier not provided by device, defaulting to English [ 245.037000][ T429] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 245.046114][ T429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.054145][ T429] usb 4-1: Product: syz [ 245.058367][ T429] usb 4-1: Manufacturer: ޿ṕ즒꡴婵皰磈㠁缥鉓堫췟芄嶦ꓡ᧼啠㌂座∺티먌ꭖ쓻╝㈺﵁債隥굄糶䵎孜 [ 245.071537][ T429] usb 4-1: SerialNumber: syz [ 245.231606][T10256] IPv6: NLM_F_CREATE should be specified when creating new route [ 245.329761][T10264] SELinux: Context is not valid (left unmapped). [ 245.337096][ T36] audit: type=1400 audit(1779253899.079:607): avc: denied { relabelto } for pid=10261 comm="syz.0.3312" name="251" dev="tmpfs" ino=1446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="" [ 245.398310][ T36] audit: type=1400 audit(1779253899.079:608): avc: denied { associate } for pid=10261 comm="syz.0.3312" name="251" dev="tmpfs" ino=1446 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="" [ 245.441158][ T36] audit: type=1400 audit(1779253899.119:609): avc: denied { write } for pid=7234 comm="syz-executor" name="251" dev="tmpfs" ino=1446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="" [ 245.468328][ T36] audit: type=1400 audit(1779253899.119:610): avc: denied { remove_name } for pid=7234 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="" [ 245.493174][ T36] audit: type=1400 audit(1779253899.119:611): avc: denied { rmdir } for pid=7234 comm="syz-executor" name="251" dev="tmpfs" ino=1446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="" [ 245.518885][ T429] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 245.532712][ T429] usb 4-1: USB disconnect, device number 69 [ 245.550616][ T36] audit: type=1400 audit(1779253899.299:612): avc: denied { listen } for pid=10277 comm="syz.2.3317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 246.181262][T10322] overlayfs: conflicting options: userxattr,metacopy=on [ 246.256260][T10327] __nla_validate_parse: 2 callbacks suppressed [ 246.256277][T10327] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3333'. [ 246.797801][T10347] overlayfs: failed to clone upperpath [ 246.924057][ T36] audit: type=1326 audit(1779253900.669:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10359 comm="syz.0.3347" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb712f8f6c9 code=0x0 [ 246.976455][T10363] 9p: Unknown uid 00000000004294967295 [ 247.047950][T10365] rust_binder: Write failure EFAULT in pid:1650 [ 247.090264][T10367] binder: Unknown parameter 'measure' [ 247.112483][T10369] rust_binder: Error while translating object. [ 247.112517][T10369] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 247.119011][T10369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1654 [ 247.209823][T10375] __vm_enough_memory: pid: 10375, comm: syz.3.3353, bytes: 18014402804453376 not enough memory for the allocation [ 247.231560][T10375] __vm_enough_memory: pid: 10375, comm: syz.3.3353, bytes: 18014402804453376 not enough memory for the allocation [ 247.253664][T10380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.305682][T10381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.321633][T10381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.330749][T10381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.339461][T10381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.698342][ T2254] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 247.849366][ T2254] usb 4-1: config 0 has an invalid interface number: 182 but max is 1 [ 247.857630][ T2254] usb 4-1: config 0 has no interface number 1 [ 247.863863][ T2254] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 247.872951][ T2254] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.881541][ T2254] usb 4-1: config 0 descriptor?? [ 248.090484][T10386] overlay: ./file0 is not a directory [ 248.162858][T10418] overlayfs: failed to clone upperpath [ 248.939692][ T36] audit: type=1326 audit(1779253902.689:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10404 comm="syz.2.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c4b8f6c9 code=0x7fc00000 [ 250.384036][ T430] usb 4-1: USB disconnect, device number 70 [ 265.097178][T10494] overlayfs: failed to clone upperpath [ 265.117836][T10498] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 265.124883][T10497] tipc: Failed to remove unknown binding: 66,1,1/0:1956829794/1956829796 [ 265.136751][ T36] audit: type=1400 audit(1779253918.889:615): avc: denied { relabelto } for pid=10496 comm="syz.3.3399" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 265.138497][T10497] tipc: Failed to remove unknown binding: 66,1,1/0:1956829794/1956829796 [ 265.169650][ T36] audit: type=1400 audit(1779253918.889:616): avc: denied { associate } for pid=10496 comm="syz.3.3399" name="rnullb0" dev="devtmpfs" ino=31 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:boot_t:s0" [ 265.177606][T10497] tipc: Failed to remove unknown binding: 66,1,1/0:1956829794/1956829796 [ 265.223770][T10506] netlink: 'syz.0.3403': attribute type 4 has an invalid length. [ 265.232996][ T36] audit: type=1326 audit(1779253918.979:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10507 comm="syz.2.3404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56c4b8f6c9 code=0x0 [ 265.235404][T10506] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3403'. [ 265.324430][T10523] overlayfs: failed to clone upperpath [ 265.360567][ T36] audit: type=1326 audit(1779253919.109:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.3.3411" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa7578f6c9 code=0x0 [ 265.484478][ T36] audit: type=1400 audit(1779253919.229:619): avc: denied { read append } for pid=10550 comm="syz.3.3418" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 265.511496][ T36] audit: type=1400 audit(1779253919.229:620): avc: denied { open } for pid=10550 comm="syz.3.3418" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 265.545125][ T36] audit: type=1400 audit(1779253919.289:621): avc: denied { write } for pid=10556 comm="syz.3.3419" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 265.978377][ T430] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 266.129513][ T430] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 266.137776][ T430] usb 4-1: config 1 has no interface number 0 [ 266.143931][ T430] usb 4-1: config 1 interface 105 has no altsetting 0 [ 266.152084][ T430] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 266.161282][ T430] usb 4-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 266.169814][ T430] usb 4-1: Product: syz [ 266.173973][ T430] usb 4-1: Manufacturer: syz [ 266.178592][ T430] usb 4-1: SerialNumber: syz [ 266.319345][T10581] overlayfs: failed to clone upperpath [ 266.985741][ T430] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 267.144182][T10618] overlayfs: failed to resolve './file1': -2 [ 267.248918][ T430] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 267.261438][ T430] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 9e:67:1c:5a:cb:30 [ 267.275580][ T430] usb 4-1: USB disconnect, device number 71 [ 267.281997][ T430] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 267.331500][ T430] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 267.342273][ T430] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 267.352119][ T430] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 268.038332][ T430] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 268.199420][ T430] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 268.233538][ T430] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 268.252791][ T430] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.268419][ T430] usb 4-1: config 0 descriptor?? [ 268.278032][T10675] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 268.453946][T10704] overlayfs: failed to clone upperpath [ 268.691241][ T430] hid-generic 0003:04F3:0755.001E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 268.890878][ T430] usb 4-1: USB disconnect, device number 72 [ 269.052251][T10720] netlink: 'syz.0.3464': attribute type 46 has an invalid length. [ 269.105019][T10737] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3470'. [ 269.126062][ T36] audit: type=1400 audit(1779253922.869:622): avc: denied { create } for pid=10738 comm="syz.2.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 269.510882][ T36] audit: type=1400 audit(1779253923.259:623): avc: denied { map } for pid=10751 comm="syz.3.3474" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 269.771909][T10776] overlayfs: missing 'workdir' [ 269.947210][T10797] overlayfs: failed to clone upperpath [ 269.971600][ T36] audit: type=1400 audit(1779253923.719:624): avc: denied { map } for pid=10799 comm="syz.2.3492" path="pipe:[25495]" dev="pipefs" ino=25495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 270.128325][ T2254] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 270.288341][ T2254] usb 4-1: Using ep0 maxpacket: 32 [ 270.294644][ T2254] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.305158][ T2254] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 270.320345][ T2254] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.329703][ T2254] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 270.337892][ T2254] usb 4-1: SerialNumber: syz [ 270.344547][ T2254] cdc_acm 4-1:1.0: Zero length descriptor references [ 270.351459][ T2254] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 270.534162][T10818] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3499'. [ 270.546123][ T64] usb 4-1: USB disconnect, device number 73 [ 270.679372][ T36] audit: type=1326 audit(1779253924.429:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.2.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c4b8f6c9 code=0x7fc00000 [ 271.084279][T10853] overlayfs: overlapping lowerdir path [ 271.303430][ T36] audit: type=1400 audit(1779253925.049:626): avc: denied { read } for pid=10871 comm="syz.2.3515" name="file0" dev="tmpfs" ino=2185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 271.326128][T10874] overlay: ./file0 is not a directory [ 271.479547][T10862] rust_binder: 1763: no such ref 0 [ 271.510006][T10906] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3528'. [ 271.758356][ T430] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 271.908350][ T430] usb 4-1: Using ep0 maxpacket: 8 [ 271.916492][ T430] usb 4-1: unable to get BOS descriptor or descriptor too short [ 271.924199][ T430] usb 4-1: no configurations [ 271.928912][ T430] usb 4-1: can't read configurations, error -22 [ 271.966138][T10914] 9pnet_fd: Insufficient options for proto=fd [ 272.463186][T10940] No source specified [ 277.729220][ T36] audit: type=1400 audit(1779253931.479:627): avc: denied { create } for pid=11052 comm="syz.2.3576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 279.004853][T11093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11093 comm=syz.4.3588 [ 281.650169][T11160] tipc: Enabling of bearer rejected, failed to enable media [ 283.038300][ T36] audit: type=1326 audit(1779253936.779:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11172 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb712f8f6c9 code=0x7ffc0000 [ 283.062472][ T36] audit: type=1326 audit(1779253936.779:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11172 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fb712f8f6c9 code=0x7ffc0000 [ 283.092315][T11177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=11177 comm=syz.2.3612 [ 283.106076][ T36] audit: type=1326 audit(1779253936.779:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11172 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb712f8f6c9 code=0x7ffc0000 [ 283.145042][ T36] audit: type=1326 audit(1779253936.779:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11172 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb712f8f6c9 code=0x7ffc0000 [ 283.181184][ T36] audit: type=1326 audit(1779253936.779:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11172 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb712f8f6c9 code=0x7ffc0000 [ 283.204790][T11186] netlink: 'syz.4.3618': attribute type 4 has an invalid length. [ 283.218334][ T36] audit: type=1326 audit(1779253936.779:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11172 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb712f8f6c9 code=0x7ffc0000 [ 283.228293][T11186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3618'. [ 283.262419][ T36] audit: type=1326 audit(1779253936.779:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11172 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb712f8f6c9 code=0x7ffc0000 [ 283.290281][ T36] audit: type=1326 audit(1779253936.779:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11172 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb712f8f6c9 code=0x7ffc0000 [ 283.313693][ T36] audit: type=1326 audit(1779253936.779:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11172 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb712f8f6c9 code=0x7ffc0000 [ 283.337235][ T36] audit: type=1326 audit(1779253936.779:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11172 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fb712f8f6c9 code=0x7ffc0000 [ 284.695249][T11198] netlink: 'syz.4.3621': attribute type 4 has an invalid length. [ 284.714609][T11198] netlink: 'syz.4.3621': attribute type 4 has an invalid length. [ 284.983566][T11237] netlink: 'syz.4.3631': attribute type 28 has an invalid length. [ 286.484601][T11248] Invalid ELF header magic: != ELF [ 288.310841][T11276] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3645'. [ 288.405544][T11293] fuse: Bad value for 'user_id' [ 288.411434][T11293] fuse: Bad value for 'user_id' [ 288.438536][T11283] /dev/loop0: Can't lookup blockdev [ 290.280503][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 290.280520][ T36] audit: type=1326 audit(1779253944.029:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11321 comm="syz.4.3661" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d0958f6c9 code=0x0 [ 290.321193][ T36] audit: type=1326 audit(1779253944.059:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11321 comm="syz.4.3661" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d0958f6c9 code=0x0 [ 292.242551][ T36] audit: type=1400 audit(1779253945.989:647): avc: denied { listen } for pid=11338 comm="syz.2.3668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 292.296235][T11349] overlayfs: failed to clone upperpath [ 292.331594][T11356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3674'. [ 294.452896][T11393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3686'. [ 296.587042][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3691'. SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=3 req=3542 state=3 status=67 (errno 11: Resource temporarily unavailable) [ 296.664248][T11422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11422 comm=syz.4.3692 [ 296.701881][ T36] audit: type=1400 audit(1779253950.449:648): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[2468]" dev="pipefs" ino=2468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 296.942144][ T2370] bridge_slave_1: left allmulticast mode [ 296.947827][ T2370] bridge_slave_1: left promiscuous mode [ 296.953501][ T2370] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.961161][ T2370] bridge_slave_0: left allmulticast mode [ 296.966823][ T2370] bridge_slave_0: left promiscuous mode [ 296.972566][ T2370] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.140950][ T2370] veth1_macvtap: left promiscuous mode [ 297.146486][ T2370] veth0_vlan: left promiscuous mode [ 297.451015][ T2370] bridge_slave_1: left allmulticast mode [ 297.456664][ T2370] bridge_slave_1: left promiscuous mode [ 297.462337][ T2370] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.469895][ T2370] bridge_slave_0: left allmulticast mode [ 297.475560][ T2370] bridge_slave_0: left promiscuous mode [ 297.481314][ T2370] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.488968][ T2370] bridge_slave_1: left allmulticast mode [ 297.494605][ T2370] bridge_slave_1: left promiscuous mode [ 297.500445][ T2370] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.507864][ T2370] bridge_slave_0: left allmulticast mode [ 297.513567][ T2370] bridge_slave_0: left promiscuous mode [ 297.519235][ T2370] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.700656][ T2370] tipc: Disabling bearer [ 297.706011][ T2370] tipc: Left network mode [ 297.711559][ T2370] veth1_macvtap: left promiscuous mode [ 297.717056][ T2370] veth0_vlan: left promiscuous mode [ 297.722629][ T2370] veth1_macvtap: left promiscuous mode