last executing test programs: 55.279495169s ago: executing program 2 (id=321): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000600)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0xf35, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004011}, 0x20000000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, r4, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xed}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) 55.234139053s ago: executing program 2 (id=323): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x1, 0x1, 0x3, 0x0, 0x400, 0x5}, 0x20) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syslog(0x2, &(0x7f0000000280)=""/196, 0xc4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x1, 0x1, 0x0, 0x3, 0xfff, 0x800}, 0x20) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) mmap(&(0x7f0000577000/0x1000)=nil, 0x1000, 0xf, 0x4008031, r2, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000040000/0x4000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000000040)=0x1) 55.067296216s ago: executing program 2 (id=324): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0xfffffffffffffffc, 0x0, 0x8) (async) tkill(r1, 0x7) (async) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r0], 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000200)={0x0, 0x0, "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", "aa234239db3054eac8fecec9de8aac8002b857d17270b8246419bde6317525162a2049b09d3c062f749fe918778597f0aa5c1916bbfaa4d2a8f5c82321be74e9e35c88cccaf6282bd0cf96a7f9c54467fe402c1100a4f07a2c8140560dc90f990216dc15cb550a440b3c754609ecc44942dcf2c6d685a82c058a23fde2a0570b698ae6f631ad7fc14aef9e539e7f35976beed7eafd4f85ca5d069c6d0ce30fbffabb4e7f06ca646affcf6d5e4a7a4c211321b568fcf270b7b243a6671b2270cc1eb3a0c332d01a1a10ebef0d49b559da2b77124eb474b46867cb81bb621a167f69e4803d160aa2d44b1580f1e7917b4c2629c68424faa0eb0fffcb853d0952c69abe37f101d69f758cd7adc0306d997426e84c1771b658b5e5f34841747d16a2e9dd01b55f86bac1229f708ff9fac906b393c01b90079851a0612c199e080c44ab1ae72efadf38a320a763692960867ece170f8dbe84b52306a68ad6f56fe9992d11410d4ff0044a7adf58adb8d037f8d8fc15c898b8cc5687144b29ec3270496326e9c60335d4c7e1035638eb3d8e67733ea963a386ff8162f04d450848db5dc89c620a8e93680a09eac7d1b957b5b961cd355ced7e3a81c2be4e6637810f1163b5b1b2f5b3b747d70669cd8fe82207677ce7bc290a08982a923006b38f344b0b6f44d033393241bbf81efdbf2afc31aaee63652c6aeeb2c5ccc043c8ade59a1eacf234b623f4e95058793c1291ef98d848bbccae1f9d9c52194e8e7e9c57e07f0416d1f1c0857272997d5308833fcdebd4a60ce7bcb0bd276a008d42cce0e9eea097ee6a64a9919db55b1a316492c3e770e6c70127cf4fb5968bbfe78a3d30a11050ebbe136e7e21d5706961a2f0eb5185e2b47d0714696338c68922dde6621921acb3049fe740f6702cc2ae84231aa57c3ca4c0a8077dbdaa2778f75f2771c4fc0b745accb2d050f997470a4db0da9ef5ad62af7f0e948b4a41d49bc8f0b8cf3ee300b2f8c345bd38045752fbca51ee567c87379ddfbcd2fa044b6de7f38c924d721969a8cc5388c9e5cf85e9279f3ae25a4220b8048f4758652be1cfe9f6edf96d6a3091d5ed82322a0bbe15cff8bbd315ef2626dba72cf7c0945f825e0d4b780bed9cc839ad8741269744d77782579152ca45a629ec3df354df6e1e03a8b16b12bd168a90fcd3a85be71fbe190712b525bbe90a4fb890693a9924832b2d811f61e79ea19c5b266356bb2c80ff6419ee28c2a117c954716917e4e67744d9c9533a423b38c83708d3c7bf83ece49af5d93c3dba9df088a22389cbcbbac8cf348dab3783f84c2824201350d87ddef589d389c9f90fefb876dbd08db6f3e7deebdf02fc52b4c98974e3f7f9a5d2c1c8b4e4067bb97f4f4a5a0861f18ac2452d77d71c7fbc0c65c1c02933f088fc4e67ca3cb0169f692a2f43d50eee186047f03c9cede9d689c30d7a0e291f8296884bc422565be86a1297acd099618ccd2732ae6d850aa3de6eb2ae96c4507d818ac58a323535f8a4616440b847da27782382f29c62850477e7e5e55cf114096a50ad9715d13e27043c55c893eb2494045837b305e9dbdfddf39f1109a54c2a131c03753ceb10073b3def7474f1d55784607e682fbf1a8326893cedeebd1f6826442fae6f5f22feebf5f0a208610a8c64d6d23a8cc8a7a1642e8e3dfd3dbb305e7db0401a54ad5e534802beafe0fadb16ae8006dabf48dd678e118ee645312fa7df3963ce938004671d2cc13a6d1ad78c34daea61980a1aa1c046bb86cb0f75aeddeaaab47bdc28c489236be7a12a50af6e1363d5b00ae251397b28db1d193bc93be5e5e9fe9c68e41e4e57bbe3c4e7724f5889a7230854acb0cfd0b028ec5d571e15892af5bda8829a41adb2e13137710e1c12fd4c9fddc5f8e92e2587cdc44e185d644cde823e08072f3d4b87d2e3f3603da7058001cffcf2bf88f29fa93a63fc140bc9f50f02ba842097d29e05cf8820677c802a88d841e9c5309b0c36acce07b810bafa05c0ac13c72f42ce2b3e6bcff69bc02c75ac8ee8c998fef080c8a56ce9885f48b1b2f01dbff87897613e5b8bfecfa202f24efbae6e65146b0d7bda7ac76e2f9c6060a7bc007ba5cb2ba87481a98c9e10cfb8cd9f260089f9f107bc2629b4279e52a80b296269455297ca3e7d127756ecffd574ecad447f377aa72ea5f7e6ed9fa91ad20aaf56f869d30c22a726c5e8e65150326e92324fb58897a83b043d9023dd88a4f70ad731a1b2afa28596eda5aab2c90d445a6ae0a3692d86d8d958c313eb0807f43bbf3d14a02e0b3f54fa5135b40c0116813e666a0a696c3e2560fd61686ce1949e8f21532b776296aa8190d398ee716d32b65b221b86594eab9ab1b5232d39a5297d787633afd050f9547340ff7ca892f9232156d7958e19660c6cff547ae9e4b05c8423848421dc20ef713b278fa6902fc89ec4c1755b5e003bbbb2092e8cea23e357eac392db58e3f72e491f87e9e3a9ef38c53352eda32f19ebc00fbbaebd412f61948656dd8f60b67cce3fb7d69a6660a60082f548eebd2dcc034b521d76ab5d2479129056aeacd1a5367d11a9e399969c29997aec5b0bf45968ebb96e5e30cca0698d14cb822665d59a3e7e48eab291a34117618c8c2f4a6882d2775330af410b0af3199c993cae09cef63d42831d17dc564f6969f0243ef9ee9e992a506d3d212b517cb9c5c8cd8306b5151cb0654fb70db18395781fd5764e7b1b88b21ae5988d5a8c957661a8e65193e92523d44f05453a82c72eb54533f57e0884d7cf44abf439cbf6ccc06b8c6dce516ca86ca3fb2e5de88135e7e9e4813de213c7280167a3944a96c2da8166438a4b18511bbfef8d97919994699ef2330acc9bb013ebbd63039e21e33ff046616d9ea377563f1fe15c2bc2c717c0fe2d8130d49592dff7083fdd8146be5f2fbe5246018cdcc0c932f5ed0b1e1ddb6e069624cea95e3e61c8d20dfc95e8a9052821b858955ebac69170493af5364d03284249a7aa53f7e33a0c55df9e0486366857466301752e7985b222bf9380294eb3e9c848f1d91581b06372118fb50c244a3fd008bc83bcf2a9c2fab8bd0258f0608e5a0c278896f16abd53082b65c57f2918895fe31cfa8802bbe0656ece24bcd25a9bde61e31163a57345c11b28077be8027f1e051636aeb55da60a1c2cbeccf5d9afe50b388ef727a5c07f2cb778bd7d6fae4f467e8324822aee98415d8c368a70c4f142cf9335223c67e292e9dcdef1b0b25e94d4344295f992b787f0abef9adb568354d4da63a4667d07e2b788fb26bc27c0035e30a3b87e9a3c8282791139edde31247033aa8cc4d045ef164b248d8d7f0877989704951abfb12baed36a15e3d07699c4c04e4ce74ed89bacb31c42df19e40e0bfaf8663054439cccd08981ba75bd0f5f9aa88c1608d16b652660ccc592ace188763f1a2b4fce1d840f750f03ae2f388823267fbe8d7cdf22d7f32edfd644beb92bd808cc49df3776ce4751a06bba0e2528057c1c5779a11dd8f3b2109c1efb78c068b30fdd36e55921f51a822cd08c4237610032166bd2e9b0c4820af6604a5af09ca8aa3a389e012dc73898f861692b16107e0fbf64f9e944ddca7395e8c591d4d970a5049598d81cd25df9348a2dd880287c60f05e78f27c18bdec47ffeff7d008c18ce7b3efcc9c093908d0eee805c5d43803145d1603e8bd9c8505304ce460c1411e5d65ae8d087e2e5928301b6356fa07333ba3f01cf434d7b48647ccd9e3a2aa77aa16f05babe09d72b4af76ed02033743b19b02fcfc8fdbc8bb029acf28cc9d792127ee46d32cf6f0933c0b20ea3e112827e5b6c78a3796c85c438df24eb597c9f883b32c26003678868198b69d65e55dabe8e4bdac369f98046d2f3d9eaeb79edbeaf9cb6c8bdd7b588ef811f970cb26206cecf27e6c35ea8ae9534935e123faebd46e2bda1153dc161ee8e14c5b59fbb2669d648057dfc2f7db7e64b418cb5f752d331ea516376551f6cbd7f57a4db6661fbe9f5405d4dd183aa063873586226a0c8b36be72f26dd153387eeef7ad810b146a68891979e857166c6c2948fe269c55bba33a732e617648ffe01a82fea801f04e8a6cfa2ee1b7bc054fa6ebf49aebc2939b0b8f0f2e37da1ca73d8708287f8ccd7856d19dc533b70da791bb81d27f331d7c0e367dbaf9e073cd79b4916ebf103d3a6b60ba76f80bd5a2247f58d1d953948a319f1a663ef5074e419b9de5a2932f664969e0505c958c92ae039539a148b4b5472ef0155613ccc9e62ac4c07047501f2b385170273a166e50149c1bf43ef1fb678e70e319c371776fb59fb177caf7461e08f02a20d5d714ba5427a2dbeadc6babd1f74b7c0600a669303422d9164b0c115827d4834c6f8c40a98a2aec4c79df956e8700ada47cd8c587679d8e3df63bfb407ce9ce1cae281a96a2e8b9aa15982fc2b17149c142837da858bd8b963fff8104e6c4493bd9d4ba8a27023e99c96b5cc9f4636ce5958578224ce4f964b510b4c97b572e27d2ecb0fe14f0db6f59698290da6eb41cbcd37bc9be952f96360639aabb83ea46c4d38fbad2efd36e9e46b89abae2a7146f2b9d2cb39374ca6f89bf0953a1ae0acfebf0eb1247fc92efdb47e6db94ffd3828f96e54647d4a344b14523f6ac17f0e2f49684a4e6e75e8d234c2129e5ac325a01ac623cc401ab057b33fd56cc26a7b6c02c067e98342bf71d46558177abb88b747a9fb2d38bc0a889a14a6afbb8ac449f5420cf100dd3e2b798efd37f627c5e69fd0ccfaa97d93ef74cca5812e901eeb2b9e8825371fc68d04d4e1d9307b7fefa837392544f560e95ef0e84a84dc725f69b4907cdebbeb4e516b96a38bb1513cf4e07408e22fc381d7031a70c9d0c481dbbfe45b6f0849a7383a7364daa66a5c0e45d7f1f0446d7e282fc7832852089e61c79f05bebeb3a7179680c31cbea27df568e63d4df22f80b40e77c729fac64151691c69f5608657a18ce378a7ccbb20c72f91492d4c90b46ace5ac0f4b0d7b134a17b7c67af12053e7c2ddef8d8abe5ca927f363f62598f984069821f081d57e80043316179535361a4d6494c22ef5f75cc9ec202c6492408626a5de0c384b397710d9531b4075efb7925fc00f84762aca18e13f575df30defe95ffbba79eaae7e9927c4e988d5a585bcae72d55b785d675899fa1d684287d93d783d68dfcbb94eab166d3f2bc2ba67e75901af4d6d8f27d06ce0e436cac63d3d8ded852aa15378d8312dda9bdccd8bf83154b11ae50ea5239bd3f4e6c096b4ff91056a598ebf57864639ca19de06a5346dc1f3c7a4068e75377bf12beabb75602c556ca5bee1697e90a26da88d55d5354be8573532dc376275c0030b191a44942665b14eb7620b86e9f0012d338e"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001200)={0x0, r3, "2c08e1f7dd09ade75db1f85afea245c836525d4d177b16c7d1956b51933fe93f3660ac72ab3498a7e0861ef43f6eef139f9119e5e36f11e8b31b3fda2762baa4b18ec7e11fbe57adf760f1ba13ad3f77b0f1790caf6efec99ee5813f2f18ce0b2e147a9710ba5d286fee0308a3db89d5198b1ca563e5f1ce25148589dd5ab524f6f3534559007ea12de7b46404d1e212adf3edc2b0f7e079b4c6ed63b511bdf06ae3949e5f4883c80618922998e40a1b569fcc9ef627760ccf5db70de4d19398bc69531233e9da9590d9afcd1529ddba8919be3f4f9642223aa5100075df98e76a7f740de8a90cb29fa5c6fd877c41e8f5a052eddb7d1966449e7e9cc27ae2d1", "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"}) (async) syz_clone3(&(0x7f0000000380)={0xc0300100, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x3}, 0x58) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000180)) 55.042881889s ago: executing program 2 (id=325): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000021c0)='lo\x00', 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x0, &(0x7f0000002140)=""/4110, &(0x7f00000000c0)=0x100e) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000100)=0xe11, 0x4) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x10000042, 0x4004, 0x1}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x0, 0xbbb, 0x7}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000100}, 0xc000) fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) write(0xffffffffffffffff, &(0x7f00000002c0)="5b806084", 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x4, 0x7}, @timestamp, @mss={0x2, 0x7}, @mss={0x2, 0x10}, @window={0x3, 0x8, 0x6}, @timestamp, @timestamp, @window={0x3, 0xffff, 0xdc}], 0x8) sendto$inet(r3, &(0x7f0000000400)="25d7196cdf3006d1ed5b6155b965d6871f6aaaec82bf7a1c8200bbf73b657b74712e698b098ffd5836e578dd6f4bb5c5b3f6217d171025db5ecada639bd31f45", 0x40, 0x240500d4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x8, 0x2000000000032, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x408, 0x0) setsockopt$inet6_int(r7, 0x29, 0x48, &(0x7f0000000080)=0x6, 0x4) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x4) rt_sigsuspend(&(0x7f0000000300)={[0x3]}, 0x8) 54.959689215s ago: executing program 2 (id=326): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000003e000100fcff07000400000001000000040000008c0001808800108009000880a831985351cb3d4a57729361f10318be72cb433d11a9b4781da90ad1a200b17485433caa6c97072c59b89aaa3987b4bfce08fe13e090413b9606330beb137e"], 0xb0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000140), 0x1e) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/102, 0x66}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/158, 0x9e}, 0xffffff01}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141444e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x400c6313, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 54.825387676s ago: executing program 2 (id=328): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r2) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r4, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r4, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf251c00"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, 0x0, 0x8091) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd@rfdno=', @ANYRESHEX=r5, @ANYRES16=r0, @ANYRESHEX=r0, @ANYBLOB=',\x00']) 39.681565267s ago: executing program 32 (id=328): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r2) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r4, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r4, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf251c00"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, 0x0, 0x8091) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd@rfdno=', @ANYRESHEX=r5, @ANYRES16=r0, @ANYRESHEX=r0, @ANYBLOB=',\x00']) 3.255946939s ago: executing program 3 (id=1040): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002080), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f00000020c0)) r1 = epoll_create(0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x810, r1, 0x41df000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x5, 0x5, 0x81, 0x9c48}, {0x3, 0x8, 0x5, 0x5}, {0x1, 0x2, 0xe, 0x745c}, {0x7, 0x4, 0x6, 0xfffffff5}, {0x8001, 0x3, 0x8}]}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = epoll_create(0x7) r4 = epoll_create1(0x0) r5 = epoll_create(0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) setsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f00000005c0)=0x3, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, 0x0, &(0x7f0000000c40)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000100)) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r10, &(0x7f0000000400)="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", 0x1f000) 3.147417978s ago: executing program 3 (id=1044): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$FICLONE(r3, 0x40049409, r3) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45fd11", "bd14060000000000000092f94413582b", "00001000", "9ad10b1731130c4c"}, 0x28) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000640)=ANY=[@ANYBLOB="12010f2a48fc0ed6343b3de5000200080005a1a44000de02030909020aedfd69d255a82257972ddb13132fe4033f9e56a399b549c2cfea05e6fbd82a4a6b37d682a44b1af9e9a55ea5d1153ecb7dd8fed8b53c7e211fbb3115a722cd995b4002f72e91403432855518e5736ce39f4ce1e46c5c09939370ab2d4f87b53b62a8c993105f69445b9a6f92284e", @ANYRES32=r2], 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000340)='c', 0x1}], 0x1) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(0x0, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x4, 0x5, 0x6}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) pipe(&(0x7f0000000280)) fcntl$setpipe(r6, 0x407, 0x2006fffffd) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000002c0)={0x200000, 0x200003, 0x80007, 0x1f, 0xffffffff, 0xfffffffd}) pipe2$9p(&(0x7f00000001c0), 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x31, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x54, 0x0, &(0x7f0000000100)="ba47245b1b09a8bf0efe865c4ab5b93456de7a8f310399c48e6f12e80a2677143c77644c58902f61d6fe2ea4a97ec4bbf3827bed9120df5aba7d95a5d4b0014eaf5e12539742b5aae524bcf4e82424489d3af253"}) 3.050782956s ago: executing program 1 (id=1047): syz_io_uring_setup(0x500, &(0x7f0000000080)={0x0, 0x4000000, 0xb2, 0x0, 0x4, 0x0, 0x0}, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x15, "0062ba7d820000a75e0000000000fcff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x44) write$P9_RREAD(r3, &(0x7f0000000100)={0xb, 0x75, 0x2}, 0xb) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a00000000000001"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 3.050405636s ago: executing program 1 (id=1048): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040080010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003"], 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="1c00000018000718ab092500090007000a0700000000000600003693", 0x1c) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0xf3) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) 2.326865154s ago: executing program 1 (id=1056): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x8, 0x8000, 0x3, 0x9, {{0x5, 0x4, 0x0, 0xf, 0x14, 0x66, 0xfffe, 0x3, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @remote}}}}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000300)=[{{0x1, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x2}}], 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000040)={0x1d, r4}, 0x10) bind$can_raw(r5, &(0x7f0000000400)={0x1d, r4}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.324406074s ago: executing program 1 (id=1057): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c2abd70000000000081ff80003a3e5e247b0000005c001b80570000007d00c62617dde4c88fa60f1a5475dac6136b6022cb43dae3034ebf30bd3f0cfca9b5f031064f062d48b3fbd7d0e710a64f92e3ddb658cdc79152e500e300a36a444abd29d8f02663fffffffffffffff9de83d225ad591efaa67687dbf9770101e00000000000000000"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8211505}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="59ad71c97074265667245dfe2ba0b3ef9c9b6accd1d800b8cc0c3b3ec96cff150189ee9641f62ecea06a6d479ecad2258da9c236bac4a1a75581f64e23401a70beb791a3e901021e1dd072261db3be159251598e57a7ef420064ffe4ea4881d9cc0205", @ANYRES16=r3, @ANYBLOB="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"], 0x338}}, 0x4004900) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) (async) sendmsg$netlink(r4, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="200000001e00230700e6bb00000000000500a980080026006401010204000e00cdd54ed26e2267f432699a"], 0x20}], 0x1, 0x0, 0x0, 0x24008015}, 0x20040010) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="80010000", @ANYRES16=r6, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x20004004}, 0x400c800) ioctl$KVM_CREATE_VCPU(r0, 0x81007702, 0x1) 2.274489288s ago: executing program 1 (id=1058): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async, rerun: 32) mprotect(&(0x7f00004d8000/0x4000)=nil, 0x4000, 0x1) (rerun: 32) ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={0x0}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f0000000200)="bab2ff018d0d5ac6cb119d86938971212964432c571e5992d2cd8500c3d66ec94115aacb2c6bb826955ac5f406a3235518a70e951911457f8d33", 0x3a}, {&(0x7f0000000040)="a04bb189e6f282be1c6f0b3245911b0cc1e0", 0x12}, {&(0x7f0000001680)="16cc567a38d94a260743fd7f71e14e6358c08c0c91c38d2eb8110a6d220def71c2d66777378b1e9b996a4dfd8be2500c5ca51bfbe8a9b2441a27aead83b05f2c563985d3cefef5a18367c6df1361529762e5bcb734692201d8543cca82f670733eaf8edb2e1224e841be5381a8ea3796c0448f09a331d8bb7db6c7f46d6530be7ad36e05e0ed357e6cdc0dcc51691cf72c582fc178ccabf4415c2dc341be9a9ce9a0efc160847d4021bf8dc41c4501a69df5b35265b3c688a411", 0xba}, {&(0x7f0000000080)}, {&(0x7f0000000580)="3bd0a966e5f023af7c0a1c6ff66febab7f4272f44b5990a1af1a75932502138a9e9896476af5d3cd5e3a4da7a9c96ddeb6a6c2ff81e47749e1b07a9a8ed4591117f3d4f660af4d49002d5d3e474fa3e1f52fc62b39390c671a0e15e4dbd0f11e0917dcfc3769b7f1edc517e741ad6563db6febce335b78e29e9c72209dbca5d302577e84e559a65d88eb9e96f97ae1854ea42ab5ad3e8965c28fd75d45a5a4bd82d7f5125bb95c6098e34b195f597738b5faa470a583ab2efee0cc41702059d117fab3db8d2b8a86e58f74e78d78", 0xce}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000340)="53647b3e1131d921a9d8b46efa5c58ab9df47dd3f9c4117d65dac568b6ac676fc7e4199599d00e607315e4cf15b2a1f22cb34148313ca898e247fd09c55ae989a0960f", 0x43}], 0x7, 0x8) (async, rerun: 64) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) (rerun: 64) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@can={{0x4, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "d59d3c66e1298240"}, 0x10}, 0x1, 0x0, 0x0, 0x8490}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async, rerun: 64) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB='=\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r4, @ANYBLOB=',k']) recvmmsg(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000380)=""/215, 0xd7}], 0x6}, 0xa}], 0x1, 0x40012100, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20082}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) syz_open_dev$evdev(&(0x7f00000001c0), 0x401, 0x101000) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x21) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, 0x0) (async) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 2.272852918s ago: executing program 1 (id=1059): syz_usb_connect(0x3, 0x7d, &(0x7f0000001140)={{0x12, 0x1, 0x110, 0x87, 0x80, 0x5b, 0x8, 0x557, 0x2008, 0xa708, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8e, 0x4, 0x2, 0x49, 0xa6, 0xdf, 0x5b, [@uac_control={{0xa, 0x24, 0x1, 0xa, 0x6}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x6, 0x7, "0d0a329ce2"}]}], [{{0x9, 0x5, 0x86, 0x10, 0x400, 0xf4, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2f, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x81, 0x3, 0xff}}]}}, {{0x9, 0x4, 0x70, 0x1, 0x3, 0xa7, 0x8c, 0x67, 0x3, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0xf7, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4, [@generic={0x7, 0x5, "a6c6415a9f"}]}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x82, 0xb}}]}}]}}]}}, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x2}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002100010002000000000000020a20000000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000400)='\r', 0x1}], 0x1, 0x0) read$msr(r1, &(0x7f0000000180)=""/4096, 0x1000) 313.050025ms ago: executing program 0 (id=1083): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x38a}) mmap$binder(&(0x7f000036c000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x2) r1 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa1\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x88m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x5, 0x13, r1, 0x5401000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, r2, &(0x7f0000000280)={0x6, 0x4, 0x9, 0x401, 0x58, 0x8, 0x0, 0x3, 0xffffff8c}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) r3 = socket$inet(0x2, 0x1, 0x72b7) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000000580)=""/242, &(0x7f0000000180)=0xf2) 277.798987ms ago: executing program 0 (id=1084): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$incfs(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0x1}, 0xe) listen(r0, 0x9) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000180)=@nl=@kern={0x10, 0x0, 0x0, 0x1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)="84d4a8c8", 0x4}], 0x1, &(0x7f0000000340)=[{0x40, 0x109, 0x7fffffff, "491d4edf47c1dc96e90afa187ec04afc08ae0ca8684a747fb2d040348287fc91f681b34afac502547890b8"}, {0xd0, 0x119, 0x3, "7914264d24a2e9b67bbaad07987dbadc9fe4bf810676102dc970d74e370a175c8d1ee8cc175415310e5339b1b4926b49372cdb9f7888d45d886d224d542c4f9b7fc1c00643cadcb7a9574eb9e80322feb71cf717577aab467757c8820700b037f5cb44177f4b94e3aa08f1b07e93ff6861fc79fdcb8828e47e7a435c5ba8bdb9cfc3a39b09348ea4e2fa865e703bca55ed992c9688a18d5db3692cc5a9581793fd5fcbf723ac94f3f3fcfb3dbac32f255168af88f19bb41c035e2c661f41c2ea"}, {0x10, 0x0, 0x8001}], 0x120}, 0x20000001) close_range(r1, 0xffffffffffffffff, 0x0) 276.356758ms ago: executing program 0 (id=1085): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2c0000, 0x0) readahead(r0, 0x5, 0x9) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40800, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000780)={'syztnl1\x00', &(0x7f00000006c0)={'gretap0\x00', 0x0, 0x8, 0x7800, 0x8, 0x4, {{0x14, 0x4, 0x2, 0x2, 0x50, 0x67, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0xa5, 0x0, 0x5, [0xfffff000, 0xaa7b, 0x8000, 0x9]}, @timestamp={0x44, 0x20, 0x23, 0x0, 0x7, [0x3, 0x8, 0xf9cb, 0x7, 0x6, 0x23c7a2fb, 0x1]}]}}}}}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r7}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001540)={'syztnl0\x00', &(0x7f00000014c0)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x1, 0x2, 0x8, @private2, @mcast1, 0x20, 0x7800, 0x4, 0x7}}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000004e40)={@initdev, 0x0}, &(0x7f0000004e80)=0x14) sendmmsg$inet6(r3, &(0x7f0000008d40)=[{{&(0x7f0000000380)={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000003c0)="7279d49d21911bae6b4770aba1b420630534d96cbc115d6d6c8301a0e51c5ce4ffe571aa9090735b1f6bd823fe44176504821dc90af54728d6de5007c7f52a713ce8f467e8355f7091c4ebefa4b305140bc8433206311f3aec16c089b248cffeca6328ceca257a902d266c4d79feee5d4632d42be8518c899ef7bec0aeffd26ea76a5a1c399f64fb56ad373011eb8d9825c6632ad5cc411c735300a1fa7884e557143576cf7e20d95bb1eb1a0e0e00f5e8929e94d85520734fbfec1eef9e86c8b6f603d415bc3da04cf0d040e82dcac9dfb817d5752ac0b719c17376dd2ef4", 0xdf}, {&(0x7f00000004c0)="b0bddbf94b4d0adb54ff2402574c1b7f023595add84b4bf4cafde47a70de9da0c64fb11094a5351d62fc22ab2728c3bcf4341e60a813e09976bc2deeafda5b2afd7642b6c90fb5ba38deb3cd4fed767e9a668f0ac981ac0e", 0x58}, {&(0x7f0000000540)="192f276adf7a31c14439ad84f2c6e08ea0f1de497c122be31fee0eea816e54a2b808bf3cfebf8f4d376ad46098958446f19be8bb96a6a62a516ba4ff30dc3ad29a111345354c333b373b72f509f9bb40cfa46676a98dae0b0e2a465e5fb33a5a57a686808768abc2f27b614415c5", 0x6e}, {&(0x7f00000005c0)="b9f207cf928086f3db8c53aa8ea50d0ee1d5662f942d2bb906966e21f4a5eaf05205f3dbd8f4ad643e66", 0x2a}], 0x4, &(0x7f0000005040)=[@dstopts={{0x68, 0x29, 0x37, {0x16, 0x9, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @generic={0x7f, 0x41, "1f4c5de3e16e7e03c273e8d5ae53d0ee08368616b670ca71bbb49b90a8bd40fa1fd178fd56edfbd73f303496c449b3cca678ef9a6127e60c7147105543c1ce0753"}, @enc_lim={0x4, 0x1, 0x9}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, r4}}}], 0x90}}, {{&(0x7f0000000840)={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x82f9}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000880)="a5bd5ef9704df81194115f9414ed0e0a92ce6e3e37d007ef7dfb53a0078e7690af5367670a02c278386d47384ddb71bf1d8ed1186924177a45b6fc4b5575bed36ed806ce6f4c8118d4b2ab2f769a88af9607bc529238adf9f9a18d7545f9d8c7734f39dbd9db211682de861df5fab428325b76701a8b435a70f770ac567fbd62d766995c7d3b19cf6f863aad3fd79b1f3cafa443204c5338946511adf2cc175bfeb9", 0xa2}, {&(0x7f0000000940)="f28cad3269ba5a919040ec48f0904b196893cf40ff1e5999e639c2f4ae126af61095c09b6230e30517279f61a2488a5e6196f494d27a693d", 0x38}, {&(0x7f0000000980)="0ff61fa8b00e5307a646b78d000d89e5694ce1e41afcd6c7af11a5823a8ffbcaa2b50eb25e546e96b3bb2a38ad86e721724a24d5a3fdfb041fbf57bef4c72869613954efc5a07bcae2f85d97b5cdf7a0ba69466f369d82496b14fa9be2db807eceff643848fd5242334c4c6b6c4a1ba9c3c1defaaa48412e7c1319610e6f40c985b078282face9672f25551c4adb30a8498345052781956e845e7a7774a50941046232fcf2bd7bd8e36d8df84c394f0fa1efe0e20980538eda520c03f50640d812b089c51ba41b340ef0e8970fdc1271d54a39c8da737a1fe64584600f95c044169d8b1959dd2cb2f4a161d31917422f7d", 0xf1}, {&(0x7f0000000a80)="34147087551384a68201a8af1ae206a1a8789553f2622cd1c46a89a8b42b0514be1b8af4b24b1d0eef39882a883fe7af115b320d655c9cb55a8e6b7ab5a2cba5155daa961913cd7b7fbf47988bb22b7341b573e0709e7a6207431e15c9cdeca3b37f1058ad0f60d59c5545a899e3ed9d9fd4fb284aef1dad5cdae2247a3a276c74a37ad1fa76f0", 0x87}, {&(0x7f0000002580)="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", 0x1000}, {&(0x7f0000000b40)="26509a13f0976ff0b51f2a978565512d35b024ac9e8b4372aa0ac2a4aa986dd49038691251882abcc49619306a2646958d5c2d3c73c38ce1a476c2647ba2e9fa966c9e8aace576bb26cf20a0c8bed8a791086d083afc7585fa107a13099e073a780cb90dc50f5a6d6ae58f1dbd3fadb361c09e398b5b0a0e47b4c712d7761e241d6d20dfe8274c4659e687907f5943d244857a306f34937b4d666b867262897c064a95c7da0ea5c8dfba39d95543b60da50a92510bbad612a5ad899067773e4ac77899be9756", 0xc6}, {&(0x7f0000000c40)="32223d3a2e908312a2505a47bc7d3bf96d20cd523a7c1c2303bca23ccc9bed3a5828709a228c0767ce1519539844", 0x2e}], 0x7, &(0x7f0000000d00)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @remote}, r7}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2c, 0x0, '\x00', [@ra={0x5, 0x2, 0x5}]}}}, @rthdr={{0x88, 0x29, 0x39, {0x2f, 0xe, 0x2, 0x7f, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private0, @loopback, @mcast1, @mcast2, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x3c, 0x0, '\x00', [@ra={0x5, 0x2, 0xbb}, @enc_lim]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x73, 0x12, 0x0, 0x2, 0x0, [@empty, @private2, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @dev={0xfe, 0x80, '\x00', 0xd}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, @remote]}}}, @hopopts={{0x48, 0x29, 0x36, {0xff, 0x5, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x25, 0x1, [0x6, 0x81, 0x7fff, 0x8]}}, @ra={0x5, 0x2, 0x447}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x3b, 0x14, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x43}, @rand_addr=' \x01\x00', @local, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast2, @local, @loopback, @mcast2]}}}], 0x2b0}}, {{&(0x7f0000000fc0)={0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000001440)=[{&(0x7f0000001000)="1a84bae08a6b2addef25912365bc7dd3655334d02e86421d3c7d622b6655230db2fd978a095a7defddfda41ad98752457307f527c9d6b19672cfd7f92052fbb58d8fbc5b81837fa5dbe519102906369bf72afc9e69bc61c09c3cdcaa39303ac4034b01b10fc4481dd12333e13519b4236789cc35c6fd9f91fa8d3cb4671736d71092ff7694d1c813e1795fa1c88ebf0593643e04bd454beb8933a673b6d8f73f02b2b4cda965c6e544286688a3323fa3342f4808407e2848278e4ec194a9c11a29d6638744fbea04c9ecfcbf850f1b592d8f313472222128", 0xd8}, {&(0x7f0000001100)="766e767d62ee0d0bfee9e8c58828c2ed67550e756520d4aaebbcaef075a3ab601545241f2f775a9183c0ad9e473fc1e7ed6dacf25d765190b229158b844d9a464615", 0x42}, {&(0x7f0000001180)="56304706fc5731a885f4751fab1a60c571ecae7f9b42c1924737dec5f1faa27750e1c61f8277ab8a286a186a977a77ada1e355b32cf5c45a67109a8bd0558ade709a4f8d8b3c0ced3f79c34572830c6ac94b01ad93a87df79e5c92534f316eee03c85b27f619c98f2ef84a37ae1f2cfe15685e355227d63119f1c28a4c3218c7d6e2b22236d63649cd83cd5a75d05c98b3c48dfdda9028d9", 0x98}, {&(0x7f0000001240)="22d68fae1f898f7203154c24e3f0155ffe6d213461f8abf2ad845a1e57683d092042d2a47b29f92113fc9aa40cb2527b2f70ac6a8b448ca1f6f128c8d4eea9ee8ae8acfa902194256c2bf665b2d5ec5b072f886a6a12c768bb9fe5ad959e2919a76421f68d055e6b7d7de941f26eb4fbbcff8bb75a5435d80850bb394622a05046f9a69ce182fc24740f7d87ddfc6a91185278ef28ef64bfb8e5c6cbabf6b4bda04dd05392325bc3df1e56d2b37ff833ff474e28ef32a56b7e13ce59486ba2a52a9b9691bf6761d50b0810985af543766cdba276e1f6f8f025fda7b03b5f05f26b8aaad4ba8ed1c4e0b8d1cdb1163302eb9183cd0ff1d381", 0xf8}, {&(0x7f0000001340)="96d386a92d078ab09460e3b4769dc222aef9fc817f2d3b8bb315a856c43900b4dd1f712cc9c715a4f844f4f822877e4c6d00d0c7ded1ae02d837df67fede5947862d4058c6320768ec6c3df9594a5bb70e0dfc543192bd274f2ebf6a9c65ea543e8c4123aef0b0f0a39441754eadb78ae977829ae99eb67f7a241c3692dea09e11a193b12a69337ceda5686034c1f1164362080f08a5556f", 0x98}, {&(0x7f0000001400)}], 0x6, &(0x7f0000004580)=[@rthdrdstopts={{0x100, 0x29, 0x37, {0x0, 0x1c, '\x00', [@jumbo={0xc2, 0x4, 0xfffffffa}, @generic={0xb, 0xdd, "a22a4d402ec9e4c20eecf5aadb204ec63f4933e9e77e2079ac67d54576de3de0c25044fb5b02ab15e1704dcaa3df92d30968677d19c6c2bd17729ca931d9a6787089e60257769de385f0d57c2c34c2b1bed2411c613da941610c58eb86d64d4aef9f8a971a5eace46209453f194c568fd4ce5faa79b7de047dba52ca440c18bc6477e742a30ead522d74ae557e86f293512a03c6c9af19928935b48f9153b00eb33b0264009f31caf634da83915babf57707226c47d8bd316eb1b10e382fa1a1221c12e4529b3f3423d207d5e152b48bbb2c705afba31e3e4a8e7845ab"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r8}}}], 0x140}}, {{&(0x7f00000046c0)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000004bc0)=[{&(0x7f0000004700)="60c3a447a830ac2df5b10621690c93e315bf74dbb134f178f2748a361c5681bf82ef6b1add9a0e8fcdfcb070d58c70b0ce297b620306a3110a27ef22bbfc32e07133e6467c0695b9f47fe2aed1d6bb829aaf68ce4a6318fdde153deb96c5e454a767b856897d8ddc2a23b292d681f02f826b6e668f2ea95b6b6837c00b29469462bba21f75d6b219935d692e4991db0b1c1ca3d6ff72eb1dba41e804030a452b8b54b2ddf8c7e8863c8a5818a07dbf97ed4085671714f3ebc5d4149f023c1d307c99f3124e8b9b471d243b86c667ea6ab92d", 0xd2}, {&(0x7f0000004800)="d831fbffb3b6bac290ac9ce9b97313657194a987337c2b029d930ce7b2adf0e00030fcc9fb29cd89bd288a1401dc804773c105318e65fe8803794ce04db84f22c87f736c3ee4ef08e82c0d8f7c94ba529071d23a42b985911f0297a0f23d36bdbd2de29836632d8a9c4f2ec841c62494dcac1b82930ef1793299156662096273b1c94678c6c0ff0f0f7ffce3a707545420b063ec7ea0d405f471c9b7b1acf870d5d41db1f8825d0c8d60f4ac3dbe38ab9c4666c0e34f7a6419d799c1d76af79dfbc8456bbe6030f7f8ab6e9451d033685223f9d0f5434d05a33b0f22bf2f366e5472ddfd43acc45f", 0xe8}, {&(0x7f0000004900)="059ff294a046b6940de2e6f9f19e7c52534ea0c9f4a0402702499595826a8528b448a626d5accc40dc9bca53c2f5c2b6f20fa32cff977c8c437884cb2a2fee6ea6fb8b35a2a8171461775bd1aa43eb14c79c66ef99f3a7478a37daa9cbbc2bc88d6b23efec6c9dc9f6ab13cf33449d248e8c9fa345eb0ffff9f6399a62701ed32290e013dd5d0652cef417bad394c8d1a4c57a2e79bc6b103440ee47860304fad90aa9b2931fdebef77ee82a0ba3f295bb5883b9884699a2d876b4bc2b87b3f3b823cb8a937f65a11a616958e97c3d2f1d279fc13e4fae508eaf050b7696fa48cca71de6fe32b5bcc44e6c3206b27a461d", 0xf1}, {&(0x7f0000004a00)="968050010f0ee0da13e9f8e377db16b8b3fc319c01b0d6824650a8", 0x1b}, {&(0x7f0000004a40)="0682c249a222fd45a2f2233732df0df66e15a0a6b9d3846c77de275d75a244581ea599c0c98682c49fce5e07204d0ba5ec9cf3e71eb9169c902549eac7dcaf2c63a24a9593dde976175d0ec87467adbaafb47b353bc56cc6bea111b626e4f56e950cc71d689c7cac66d65fe0e086de02a00514d9", 0x74}, {&(0x7f0000004ac0)="75213b38f67d0685d080c1130e5acf4ef8c2a077fc1edcd38045c2a13bc29c9e9a3e774bff50e4489159cc7b12924bfddb6e", 0x32}, {&(0x7f0000004b00)="b081115012d649f919d3e591fc46db2d1f54e6f6598947c161fdd77d8ff4f538aa0570e34c349eeb6b30e49ca17f3d10ac60abd60a9197", 0x37}, {&(0x7f0000004b40)="83854d7c4186ae5dee2451753b46e33c80afe3e6ce84b2af9424d4868e881ae395840de210a64455fb1aadb11e08", 0x2e}, {&(0x7f0000004b80)="8c08008fa2", 0x5}], 0x9, &(0x7f0000004c80)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x33, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xff}]}}}], 0x28}}, {{&(0x7f0000004cc0)={0xa, 0x4e22, 0x2, @loopback, 0x6}, 0x1c, &(0x7f0000004e00)=[{&(0x7f0000004d00)="1bfcc260f09f85dbcc7ba1c003e8012aa0bfd07008fc8b1ac7b64e84a355bb5c3d0e015c400c97dfda2d9c956ab8935e4437470029cc2196d395822e9f9d9065d80fb7414c6b26642402100623692b22bb47a9ca6ce36210e5793970dfb549834dd479440a3376c8dd506c81463918db89f711aba234b05b3f0eb1f457c159f912c91e2b5eb7fa0042e5c70a37e64e1330f2ee376388be0a4ecbeb12c6f00afb9f70d2e42882420b856b54889db0768670ac6bb0581f331b6ab572ddd9bcd5e9bcb2346c0e", 0xc5}], 0x1, &(0x7f00000090c0)=[@rthdrdstopts={{0x30, 0x29, 0x37, {0x33, 0x2, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x64}, @jumbo={0xc2, 0x4, 0xf447}, @ra={0x5, 0x2, 0xfffa}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x16}, r9}}}, @tclass={{0x14, 0x29, 0x43, 0x44}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @hopopts_2292={{0xf8, 0x29, 0x36, {0x16, 0x1b, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @generic={0x87, 0x4a, "0f8fe1a986df839d823a24334c422e2b811ae009d7155e31ed6fa178821e2286bb4a7c74a0dd8a363203135065b250b8fc090b315e07d83557cabda029eeeb15f00eef13921b55c0595b"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x58, {0x1, 0x14, 0x81, 0x8, [0x80, 0x10001, 0x3, 0x8000, 0xfffffffffffffff7, 0x5, 0x3, 0x6, 0x5, 0x2]}}, @ra={0x5, 0x2, 0xc81}, @ra={0x5, 0x2, 0x6d73}, @hao={0xc9, 0x10, @loopback}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x62, 0x2, 0x0, 0x90, 0x0, [@mcast2]}}}, @flowinfo={{0x14}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x29, 0x6, '\x00', [@ra={0x5, 0x2, 0x7f}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x10}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x3c, 0x4, 0x1, 0x1, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @tclass={{0x14, 0x29, 0x43, 0x10001}}], 0x260}}, {{&(0x7f0000005140)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4f}, 0x1c, &(0x7f00000061c0)=[{&(0x7f0000005180)="7cdc53de0f884bd7463ed4907c1011ff7eb510699b52e39dc9dba16704644f1f800b25cc43a7722e1cf06fd228ed9f34", 0x30}, {&(0x7f00000051c0)="5030dcc1e5ec9f3686b42c18e8ccbc704d5399972f00e2c937c58ab95803961889f14968fc650bf32172116f8c14173ff163fc85007a147eb97da5f0b076bf980b5a1c8bccb895f7bc9074eb0fc3deb0200980cce872ec790d32433cd0bc266c63cf443c98e3efe9377c903b591f325790bf85d20b6d10bddb0dd851cfd243fb43166b3928a215e6199a8c453b647aec33464152a73773e599b2f222adec72625bb07640a74a9728d115a323e71ad82fda330ee43a0035cddc07d4d2aebff4fd97703cb4e7a720dde91706715295436ae1db83a9afc3f248410bf176d84fa0d0e236318b12a31a837bd1c4534a4000d993b626750b842b9d35a733ce77dda66f4a16523653d8a3d0f370aa27c467d59c0f7bb2f6a2eec4b594b7a19cb9614fda93d40fe313a3a0c0546df78dcda868496942ee52732dc313cc56cadb2d2d3d052a06540a74140d2fd47ad700aefc5c37e16efcd1e302167e023fa6ab26517295b9516071f8705d46dd626743c2e322ae8aa810629ec1987d9896242b182830e00b92722c6d451c5aed03e0ffa5e79764fff3592dbd73bc71aaa86a4173f72cc213071bea20f5e6ef2ed440c9810f185b5984186740591e8bfb021ff76a2ce4a7aab29f0b2114b3c06423513ac121655af24a28325d1e689a3613e8b57960efcdd64ac608e8284d36b7eb4c0a898b434a53f9a936235d7dd0d9c95661919d2e331b1eb3149f802a956bc4b856ef1788d7e5d84d8658191e98864bda3856fd26a8d7fa61cd8c490a403c8d00d21996b52de91c1fe62a5278313c647ff60c83b9d2e5bb258c1c4fcf2a1730a6ea5c38520a48d27883276584e057c11a0b8909deac68bd30e2be83389d322f578f78e2c1c0e953e98f72db3a940b681cbf4759fcaca0d3100cc7aab4b9f0aa05b14030672143081772a781c4d5d792f491766480a2bf1b7f26e6536b79021e94790551a74ccc94d4035c0d6ff42271101186a77c7c2b9dc1b04b304355078c3d78169c8474663085aa7831d28fce3c74210c051da9705e8450d472048135c2592419f44d2313179c6e3f5c0ee7e8a90ef9f7fbee9efbc9395180ba864fe57cec3d7c6acc09672a02ee14d44d069c3f976615e3142048218c342e78f708b08dbc2dcd996708835aa410907f914b4c2d04d822b96797631ba7328945d6f30301b8c9370d5c4c880c31311047ed05d24afe1ec702a89d219b08cc5bca35785102e9de735ea5ee281ab4d2d18239cc55d4cb11f0c7bd5494f837fd32129b8f0203f5ea68afa265ee8f26843a8bbd800fbb8533de7d35922798138c87b4b19850ae93a28dd29c6111bced6328fcd16db9a8c9baca78e7619e2d06cc74ba534c5789b5d3f5a85606253c006072e3aedbec2cb856a0467c9007d95cf2f0948bbf93ae3c1a08a4691d9cca8b41c491e3ae2a9f04cc1c46b7602b2f02bd64264b3dbb29738f091057482313317aaa9e4582510474566a601277bb06352403c895b229ed7a59887b3e076a7054ea5296132d1c9942368ebd673e524a628c39deb5493798388d646504ba910d51cb8f0715afbc596249666640786b3c20d0b13adc59ca8aa1ed3550da8d766e2261e57a63bbc32b3a3fdb9a077ce98ae8411cdbc3755a56a6e4a7a5f5a771b3de624fab44d7f481f9026d21818821141b42d40ab6d5b1b5a5e26b31887e64a01b3af10b94095a6aba1cab6c7f041f429eabe6609a039c1037429d8c38d0b488bc78a7af4e5fb47348fc2cf255f7da3649c70a279d9e85f2ddf8860868c0981f4c0373b46a6352873fb27e884729391cf071942f0be5cdbe190a1ec49383f5ff335ecad31b6daecc3bf937858c83e5e4c47caaedf44d0e8f7d8af3efd579a841b1ae55d65863ee9e0e875ea624ae66efc1285d571748f075bd5c2bdbe17b55eeb8a2e948c59ef345922f8953040084ca5ed2851656fa2ba997deb4336fa8a36d2b35a5ff40799961f1b7d14a7022af03a350d9dd8214487f5808d943a28ad68d9b79c0ae270fa35f2ec99e0f3d59c218e668a7259f48d8ac4b310fc96d0a9452452c8ac20f8820afd36de514ceaa196d6c77052783e60b43482e7b515aa81fd314702d1f2defd8682127095ae1ccc9eb85ef8b423f5162aa5db0accf57438601bb8353c8a8ac590b25bb76bb9b9059ababd3b8254dba12e62acd851bea58e6267f196e659dc48e9679e482052532b0fbcca8181e1f72f6639f31a28d8bb1bfe644366058c9e079c7e51ed1707fdc520433a243e196ec112bb8172bc8c4c179f23085ba410641e8f542d9a3e23b0daa58ac1cc8348581c866d59c3fe09b2713b5450971cb98a8ffa000023fc6ab2bafd9912efe3ab16a6614bb7a320f51db9203edf6e7ec0b9fad8bb6e6c64181f5d4381ad45876f75fa8dbec932ea3c9ce6614e4756fbcd45ca23bf6b2975042d947b523f666671bd913c19d09bdbfa145183bce52f168e24611468324c982ce43320715314cf09588457f4dc9cdfe015280a74dd59ad01a33d35cadcbd12e577957a1448f8e0a9e5962ffee90edff3aff3075e59ddf4d2ea824cc03d63a041f099a85d1667a08693ad5c5d81771bbd6d9bb6d737358677dd4e63f60cb23f78466e809ae4f5dfdf74ed256bf6c273a3017fb9e08a757ad44e87451dd379f72f2fddd6964c5b5c527d30001ff609d3665310ddeb676efe4a2334e03600c21cc64810cd832f0f66518a7387c2af3f11440536c6087e705579da008759b192056beb8ca532c4a4dfe34fb156ae7e1c1a8bcd7e48dda031d1e14eaa43a0b75e732a44e99c5e6698cc6b700053919abe607f8e54672ebc9f5a7e0b53b04786e532ee25148bc8ca72f747d2bc6694e5d676c0da4d1cd80d6df740039e77448ecd80b57c46b6610f5fb3918f2e01e8dbd953f38eccc9ccdce519d93be08366cd3a5bca9536d9decebc462333aec6dfa7e2794ac3eddaff5ff85a7f841a2f6ede27152889fc5415cffb697b8e07f44ef0c9b7b3a0a67a38d011805aa515af7123628c2ca8ac2a772c0cca46756ce9e1f625289cbd8245c83d22b528ab56a7ae68266c269162cd986cf950f569997ed340299ad7e2467510e9249c046926e1e9bfc6371f09258a003cac89b43afcbc08cc7e1e51737aafbd9e78c53401df158448ac3fdb5672f90a9a338a29fdc5179d64b56835ab703dece5734246fb6a0053c59729132a7bfd8a1ea03a71147c9f67eab7ea509755536b273943b132ab67c50159ee961e2ddeca1d84cd6d3a815d308768fa2d9bed84fdc7fb1d095ba2ed7d1240dd71880a2ef9334366d77a67fa63f2a934701c18f3cf0dd54a7a944806f91c401f5d8de46f2e041f01b2f3ec0efc0bae173a409471216f7cfd0cb8b3c2c0fc13af2f492acab321b0cb65e0c504888ff3562c2fbffa845510dfb4c8c23d27559677193665df6c2fddb948c5f7a4291573d3d9c2483a04ddf3613e43dd8f7b957f91d13662d16a16b8f400f18e92d8ac2369488ec3160475a770d84b701a9f82c3ad4e2f4a10ec08eacb327401ef0b8e2c1292ec246e6079987dad6ede0b185f817bb04668f36cfc5bd4dcba733cbf92e6db2e59f0846c0a741a14719bc65109f013c5dd4c88180ff72c93629959d5d12bd5bc0456fb8f0bef661c178e32049efa934f17283beb8684669d09bf44883b72b05bd5ff38db888db1622b3abf81493587598497e1ce32051d1d26faecfcdf9300e9aaaacc6c8c0b5f05417b308db99c53937106f57071131e7c3acaac9e9a40173dfc02e7a7a84b99f756743bc1b2dbcdeb62f99eb9409b4403538fa1e509cee14b0701652f548a4d4d62f56682502a9c5dd6165e09f0376eff36381c80455d234287b09ba17b9713a916910fb64b284011e4b94a32014ffdf645356210c4ab606ac075124e1ece1376891ba04731fa52b405b9ccdb59ca9de746ddb15b31fa595df6cb89ec8188503df39c6cfc85c9f5e453d3f0b108942845113da492df284197407cfa2680d53b2e62881d928200f73c2efd6195c2861963d12f1ba6ba07204ebf5515215ed8db52071a130a1f5495ead7c389577bc30ec5deca929a3933862eaed7f308f785b65fb88ecffe46be291f078964e9f159689996aebbb7f6b3c9ff80f5f4cd7b9e1c7a1f2847beef77c1af381b0c1aeb0f23045f40d83e6ae75bda0466b89c9e8b05d85b5a88be25292c7f3f663f694e564d412971e172307764ecf25747cd86ed4427b2f9091893e48c7c6d5273cd62370d047e1b199fb991546fc1df4d9f52e0f4b6c8725cc7b73bc496c09fd1321bc806e96e3d34c5cb05c414fc4fbe9acecb08d1b4c65956cad3db9fc0c82590a5859941cc8675091fff0274a769e87658896c63c53bcd27567c6670e1516903115c07af305183abcea4a3e3608d5deb2e40337841ec377b2835b776a7b2b2118d33b585d543d9a5e0ea72ffeb5c3f83cb95e77051a51b9c8a5d09636b36f002f0141928f91264911a2c6a2d76030860c967657017c8a35ab299f2d127ccd18b51d22b262953a07331afc3a79e70f694a8ac714e3f0ed22163e230d071e624fa91bb983cd3384758512602d729fbd2bb64ad6b9ecc6a0fab0e940ad5e3f7d7b8d095698ee25f97a358bb12788f54fa1c18fc2e5378a9ecdc7b778cb76950988e3a96e448466a5766969886cb9825cf25cc690579ded4bf94e05763aa2b5a49bed23dba3f19d1569ea3fe2653406c79a127b92eafe2dc4cb0316000f73df1abf9b6468fb1a9374c81c2b6e726e5f3af77c124d290bae0a8c5961158a99d2d68b7b5bc277a46033769758183ae4231af4399dd61b92232306f6fd6ced6d3ec0d3817e3eb08be0637eac4dbe449d0655d80d83b428ba106b4f6a20168992ae798daf6e2cb469f336f6d51e2d8b2264cee30642d3432403c6dbfc7d79aab6b17c87267a7625008d1a90b64fa10efb874ff1c80481b50bb93269e167a451a508ed5c404dd36f23d7822066ed8838bdbd8b54356fd0f78a73a1e771b1a5a5a939b7fe52b3c008da450e847c3c751811e21ed2709306f3fa2df288c8fb317b631c79f0d8c09ba3efbc046f00c454455f16317c0ac26556d3822e9fa83207a83a5c429ebe834bdaccb0c6c065185dfc2d68b80fedabb0d4833f5ff03cd875db7c6b735cb3fd81e30cdffa663cb6a2644e95bc82772be9dec40af5a024d4111547677c244c9332f2e4f974b505e725b7630bc5265c18457a0347b2d9e672b4cc5ab49686eecefda82dd34a2739b45e4c92688c2b71b3a5b1d22d6ae979319598074e85e6b6419a3097629d24eaa4ad775f7aaab84084f27c3f5247e33686e5d7c16a887ef3099610463203430ca80a7cb1d58ffaf3b7a5d4ecad0c2e49061a9bb58bd641725822328dc57ad5026eeb1f8cb8a2028819c7a4f8c76825c3a0497d377332c8ee2a17d4277fa2779a2928a31b2048303aaf79886a90b7b5584172b284dc92bf85605b547cccfc632a595a8f9e8afe032d816983646a7d8d78dde3d39236f09bb85cf0353b29b5c95ac4452f5ed85ecf2344551ed058d8496cb3f0451af231a9a552ceda7bd973e0df0639461b0f018fa0df7e3020a9c477cb05f699967dca618ac4145f0e780fce0554e5222b94ab12993bf70956375fa4884e3ef81f68f30787342a4a1105a40142926b7abb2142bf848d5d2d53ba68942256911ab51f4d2c377e347e5ca3d0f330f4ca83de16429602a8315120b1816e6423319d2a2a623f681f6b0ec723a3e24c76923dff836edc83459b473653a176527b19a2d009", 0x1000}], 0x2, &(0x7f0000006200)=[@dontfrag={{0x14, 0x29, 0x3e, 0xffff}}, @hopopts_2292={{0x110, 0x29, 0x36, {0x1d, 0x1e, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xd}, @enc_lim={0x4, 0x1, 0xf}, @pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0x5, 0xc8, "2e5658e5c71db46e15cfff03c8568850b7ee8943c873effac9eef6f5b6b109612fbf4fea622db17dc48b40a94bd7c8378fbfe844dbd5c7d90ec0f94f5c4b6f3b6b0aa9a25caa781b13e7af74a25dadc012ebb94ae0e669298f280223014f8cb80d3b99979e6e684ba77a30618e9ef05e101a1e04e8509d9c5a2bb38d8ddbea6a327012ef5407a5c8d653a7b3e137458e52b6804126c76f6d7c480ef5267b46aa457cf938c50e7cb766e5c12437749d3064ff505f246bd8ba22c26fc405b656d4f20ed13d3c320d1d"}, @ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x8}]}}}, @dstopts={{0x90, 0x29, 0x37, {0x2b, 0xe, '\x00', [@generic={0xd, 0x70, "7b7e1a79f68ea45a3c6faf8d055904637f2655919ef52ceabb2ca33c03704023e10b496c1af925bd7b2fba4751a3205189e5ab41f2b7dd01ee8cbb6b58116a7f92820b3098b29a136b2d69e879f78b4693776905a54ca6ed2f5cca940802e6084752d4928a201a80737e2cee0af59cc6"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @flowinfo={{0x14}}, @dstopts={{0x68, 0x29, 0x37, {0x2a, 0x9, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0x10, 0x8001, [0x5, 0x4, 0x8, 0x100, 0xfffffffffffff000, 0x9, 0xa]}}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x2, 0x8, "b0d5dd810c4b07ec"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x200}}], 0x268}}, {{&(0x7f0000006480)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x270}, 0x1c, &(0x7f00000068c0)=[{&(0x7f00000064c0)="1aa8986aa7f8ff82eed721eb6c26836ede1a86f123080136b4a0d7d7ff02185d87e557067b6c90ab32a92eed4f6670b7fa7bb32923d5e9bc98bf394cb84532f6a4bf95fb34d510a847c395634f0d16495770b4cee346676b6a21d15388858b21bbdb65481e861005a4a73e84b02c0094b0e48f5db6394bf4ac264324c82373757140a487f119c9cbbf3891a4583dcffd69b34664531a0464e8d20271d1fc4e5096f5660224fdd38ba914c525", 0xac}, {&(0x7f0000006580)="499bcd18effaf19a66a3a83842e4fb6c7e843d2070a3d9d1281bc8865315cf647696e2f4ffa8eb0c08f07b76192185fc3cad968baa4297528a60f1f7331f6a8dbcee486a1863f14e1b0caee9e8a80aa357333e01015c96a633bc71915d7fe4e2f0a14024de15ec75f8bbb3e69da2d30b4493168e242287075295d90bb09122c588228d9caddb6d7b62e96edc3b0b63497f5286ff1e4f41f35fef4293b1d7d345256fc13a577c81468b26623c8bf2f36852b806fdba28e7aae691bfb26f48b470474d5f1769b95ea9f210", 0xca}, {&(0x7f0000006680)="7ed6e97cc46a2be101d78ad5da586835dba62562012cabfc985b985b4eca692a57f3503b2bd29bbf5bdf6198db52d7a8be78ea7dad61896e050a051ade7ea74f45b5283dc8c7bc23e596b7f98b130246e55a69e4cc83de824b", 0x59}, {&(0x7f0000006700)="46d026fa351c43600bf1d5df45bde87cddb0cfaedc3973a5cae683f9bee5fc8b7abeb2913d70b6fe8976d16e771a3d1af621c8e7cb668d", 0x37}, {&(0x7f0000006740)}, {&(0x7f0000006780)="57c395143102af844551006c88c41faf1e13314cf9165b8ee310f92b5d1b129b8380174f865b8be38ad4442c4e108bbbe2a5490d54430d02bd3f29dc54fc4bb98060ce072ce24f7b043463484ea9b27562466c3ff820c2291d5f876896b2726112f72da56692d64a0adb9b3fdc63c0ef8ee4f877944eb6eb93239413a4207b0e9dca219728dfd2a904e01fe42db8376d3ca8abe0a17e06c34acbb9ada5602e499aa65812a9a7f5150faac11d03577b4649d8215725725c318a6420cf37ca6a58cfda24700bcf9b15b11479d8757f370519ac13515528f94921d14fe022a1aa2a820a9b31e9a7f79171a6a03fe34d3907b951cb", 0xf3}, {&(0x7f0000006880)="e0", 0x1}], 0x7, &(0x7f0000006940)=[@rthdrdstopts={{0x168, 0x29, 0x37, {0xff, 0x29, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0xc}, @calipso={0x7, 0x28, {0x1, 0x8, 0x9, 0x5, [0xc00000000000, 0xf52e, 0x6, 0x5]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @calipso={0x7, 0x40, {0x6, 0xe, 0x9, 0x1, [0x35b2, 0x4, 0xffff, 0x5, 0x2, 0x9, 0x8]}}, @enc_lim={0x4, 0x1, 0xa7}, @generic={0x4, 0xc5, "7cf4c1330c8b5ceea46118342b425b6f20ab9fc0f5afa89ac965b0a9dc8b6c1dee159e91e706707b62069e082099d676822e65c30e434d392749e70665bc880412718fbad107cf6da42a3370ffdee202cc728840457faf10b1085be1fd232789e01a94a72f6b259feeb2fdac4f25478e28026245821987c54397983d13a94428fdb535bfc22358bdb2abf6fa39527c55308ee35d74df7b685997d6386ae69c2561dbbdc1b6b22db6b521aa399302b4829dec3c9de1e0cf72100a3e73a86df9ff836f356b2c"}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x3b, 0x3, '\x00', [@pad1, @pad1, @hao={0xc9, 0x10, @local}]}}}], 0x198}}, {{0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000006b00)="f595c51417742b700e06a09ad2ea425611c0a98cdb75de95ae2bc357b702840b25de258a26f020988806a3a9afb8eebe3ca2e54de9745fb925103674220214b83f3e20664c9773910522950ee62d35a7c95df3830f3145211e8f502896be8c6d0252ac117aa36075393671bc49bb85d89bef12dd0b9b7961a980200f5adc692faf3f4d2e148fe30c9a393aaf30eb25202d167452279baac888b72ab43a004214cd9404c1a76e6c289f0a6f4c3b67da3ffa227422fd5de2e00f9356850fe3332e2858c85c0b7312c7fb8c35a89071c535a462", 0xd2}, {&(0x7f0000006c00)="874a093ecf8b5dc85de79bd5ae479251dad2e501bca5a68d69843ed0535391d5b58a8554cb5e65d4e66772cbb6b06fc296641c802dd1312798c84bace350524ae4ecb11a59228c667ca73992bf6ec2d0dd653e1234cb1bca8085ecf471b72421a81e358fa334b5be9304fd6f16561bc79b30998e073fe096c2f5faf90e04942534e1598281e14f04432999c371286f3548c35e4af2c63a5d1b88dfaf02a35805c41bdc5d0040e0", 0xa7}, {&(0x7f0000006cc0)="1abb2c9a5d5f70c33edd9d42541be53958d41058825a57eb532c46d9faa5df94c0e993c71e2eb207c7b69d55bb9c4170be77d3330ce24044e3aacd70325a7fb4136644097a87bae6e7f38023115617b3a0d3538c385ce95514936e1575ee0f20d6e6acbd85b5cbaed3ea5864338d3382878a87abf3e27621610e041eeb29a7f1498268ec90a57ff9b3830a011d27f73f242576adaaa91513b94c0f112fa6071431a543ba88bc31811112f617e44219aa5eefb3", 0xb3}, {&(0x7f0000006d80)="d292e8dbff7069fdaa50f7fcffb02bcd8fa21db8fed8a0e1ca9919f5eb579724e8a9bd6d5640311fcd95eb8fbf221b0951a5f05f231cb339479a3a596cfd03e414de728a0d4a7e3de226adbdd58dc948255da4e300a9", 0x56}, {&(0x7f0000006e00)="72efbda17983d2be2ae94f131164562f9e7896f476a519cde8f076c154c028da875d1edc17d64f74d4255706c6eb7a29ae731023e4adb043b67e1a1b89b9eddf57500379211415001b8f67148f7dedc04662e02181a1c83ff5ef4ecd1e4561132f4eed5affe5216093368a140d9f33cf484f1b8e4952614e9ec06c7d50595203e6eb6cf68ae9ed876008", 0x8a}, {&(0x7f0000006ec0)="10015b26677dedd3b81ebbdc0f4682b8a1a06c3cb99349fb6210063bc0e19e54df4129b47f0c3646bb8229b894a481a6fed281e9214b509186e05715f6e81764ad86483c64cfa55a1a2e88042aea3f8768cae81941cedf116d00f502c04982af822fe1802dfac72fcee14a52f0a7552914ffc2cf1b1f75f9af72675aec4717b668839e88e20613bd411f0258b8f08e", 0x8f}, {&(0x7f0000004f00)="4c29978668a6de109650e9375710580451734acf464c4c1f13e15091d896e64ccfbb51d21e187cde9aa873746499dca5b1a53dd681f261d688f455057a2aecf0e55ebc7a1eb93f33e141791afd03f95add2efec882b97518df1b373e91f5170991a69130e0b6012a81c66f95469656129a69ed8595a362a92ff781c0d032a98ce266d36c847825c45638238e0300000000000000e998632fa3bd9b43f90b41d90e3d42acf00514cb32710171735e8144d81a457eb1250bfac9911d510a7c31c57ebe6bbaace218714907143972bbf4d984fa7362e07e76944192c0ff9ca841eb5208601aa0ae1bbcbc", 0xe9}, {&(0x7f0000006fc0)="147e5afc266da1fa127c9dd68085d93ef92caa68ab6327181b7339a3dbf8b4", 0x1f}, {&(0x7f0000007000)="28c8c325f5d419e2b4782e9c28274ad4e0d0a9e0a38dbf234f9a2c93a632498ddcafaad907174c30767112a4d46f538969ebe628b4", 0x35}, {&(0x7f0000007040)="0a252fa173cf707e5bf8a6b1c143236551cfb12dbeda251945d1e113c3b03e06b7292831a38ac698c26ccfa5c4cb6b8937e03605da0a9801e9358ca4c66d61db7c50032f4142513afc6e2e70df1abf848968cd9f810615b66066f29cda3f70e1646f85a073322ef017be26bf4fbacb1ad0a1c63e148413eb1fb897331cb77dcd5daae129c8bfc60f31bf1476bc37b956a9b692ed7fec878e8e0a4a9f9f8bcdb7cd493161fd855c2c629d7e062db1c632037dc40fcf700215274a", 0xba}], 0xa, &(0x7f00000071c0)=[@hopopts_2292={{0x1120, 0x29, 0x36, {0x6c, 0x220, '\x00', [@generic={0xe, 0x1000, "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"}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x4}, @generic={0x9, 0xd8, "08b869923c1c661d58b416eda9d8ee4ed120eb16926db70010bada9ae2c2120efd79531f500c7e6eb7478c448818947b09e6dcf9bf01ac15f126e490d06bb7bf98fbd9bbb43d2083709eadb25f464114aa373955b49ef5d4a11e72842df84c868c31dcbd14a4f4f314ef962999fc8f2b5415ddc31215a4888890d352a3e62ef0d0785c6835f42963779cd3fb6a5d5a71251815fd4d07e4bd6fccb6732fc51929ba34825aa62237003101b8bdb175e4aaf8e063712c0c52ad7a2c30bd66e06607447a77fbc852b8d26adadd28e88f76217bbbb8e9cd144419"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private0}]}}}], 0x1120}}, {{&(0x7f0000008300)={0xa, 0x4e21, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x400}, 0x1c, &(0x7f0000008940)=[{&(0x7f0000008340)="cae9868b362f7787ba6979b6f0fba02c3714870bf58961e8dbf751d6c478b8a4a96351d3ff023ff0ad895305", 0x2c}, {&(0x7f0000008380)="a3f8cc839424d2ed13186c0be0b98cb58ea1f4b286cef612ee0d866d39d406d58c9db8da2ead278db6d735c1988f74cf9c123b7b5bad3a658f39274522f82c5da380d887dbe03d54d894d68b4553528a941023792c06f4ec6c6f7b6c298880ea2c403d5f8feaab0dcbd8936c43fc271eb6c902c670fec0bade13b3bf3314f9705bb0777b8de4645d523472d6fd9397d32445529d17e841395cec869540996a79f15d", 0xa2}, {&(0x7f0000008440)="93c2b3f4fb287edf95997146d5b507b4c1995381e73547c04bcd9bbc4ffc9908548b28aa83eb66c061b189af2bce6edd3c9526a9d7dd1372889814327af9a3f3feeb5e0b653e23aa4d09742c9d654825a89c4b97545c067cc7fdfe5129abd565dac47007e838f88bfecbafc9d3148a6e6655ed18cf46256bb6fd1d3d20110086c8a6fecb579fc3899ff25e8aa28a61b31dfcf8ada1eec72f5090858a77ac1e3e6ebc38dee2597851a067e4a42fc561a0705b463ab48e958cf16943b178a1f3e5e3c68ce7452b2faa4a0bf189d9f29da6d1ff5644052d480a39d0c93c284e30bfbc", 0xe1}, {&(0x7f0000008540)="bad1c86327070d60f2da11771c0fb97330f885eba11b1f63f897f68446d912b1b855bb896afce115c55974663b05e8cc0af97586c452083efd49e5ccceeb53870442dc6af74cfe9d740cae0fedff83090ef51772120f2bb6dfe9344f4344d9a020d3a6652b5b03ef0fa3e2336a206619c34e0c37ef660ce2ff36bc321242c1e81364500605c5de2c4738f20f674b2a814b66e52c470f079e7ce879c2cd4b88bc741a70be06ba29e727a79c37b5402db934d156b385401e969e2a96573c7ee4d4a4f3c58ba708342eedc87f1e41aeace568365e1ea0430add71b35986735d6e5ea7c06e4f18a6f8e5a52b27", 0xeb}, {&(0x7f0000008640)="b4996eb36404b01f988e41b4214bce5eb52d7ac6c5d87f086ddb78a4aaddf921148713fff3c09085ab8d397ab5f1b471e74e49bb3dd83d2caf308672c4fc783246822c257f430a5429215325e95e1249d0c060763c71ade208d241c3b9e38d88c9663bc375f06368a7af14ef9992734b51b87ce4f2ab09e53470087d011d907da0c626b6143fcfa54c61f8188476f61e146242422ea1d060ace19706eb7dcb66c3a81e5b259cd4a0812e29e141479a90f6ae6db12646ddd1be326cebc6b657f3f4609a878df8571beca4e1ca9a9a22134c93f8587ca3bdf96dbcfce74f3ff387153931ab708d89a6595edac32d5ae3b1b5941d60c15c", 0xf6}, {&(0x7f0000008740)="def2fb22c0db60763ea5cc2b", 0xc}, {&(0x7f0000005000)="e418f6a5b2f068dbc10c39323c03f70faa3b19a3673f47c70c571b42f515680493e48897e218993100f7e08b5194287529db539a1a25", 0x36}, {&(0x7f00000087c0)="9bdcdf472f4281dd28d17a57a8c3041a8cad5cd0c94efbdd0314f1cbba5d688ed5eda9807642771f312071827668da74843703279df870c89a892567b6a12dbe82b001d094c729492c08fe0147f7a32f591be2407e3cb0bb12ba6c7ec07bdeea1f5cb7c8f2f3d99faa2b7dd2ba681eedc8eafac51ce9d33df63ad7f02e461d9a04a38424395608879e1ca13a09fb3194153440ecb8545a0afc47c4fd05bb892d0fe2048f6b0ac9db6cf3b819", 0xac}, {&(0x7f0000008880)="70299d82b2755368d3a096ccd395a50d3301fa028d086bf1ee89c76bbeef0b641dea58158b31e0761e0cbf92dd67319594f5de8fe5c24416a64965affaa4bd2b9cb14be0ce9d1d9c3281ac07b523c64617682d3eaaf2d733529b8eac218e83bb5a535b4b2f60d63a668253f83c339e789e893f116181e9e78a1fb7363c9a181396089cb381007faf5298d5cb4f7c977d6288842bc3b822a4fe02143f171c28897c083deeda0dc17759d09eccfb7a7a3d255c7f9a25", 0xb5}], 0x9, &(0x7f0000004ec0)=[@hopopts={{0x30, 0x29, 0x36, {0x89, 0x2, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4eee}, @pad1, @pad1]}}}], 0x30}}, {{&(0x7f0000008a40)={0xa, 0x4e22, 0x2, @local}, 0x1c, &(0x7f0000008c00)=[{&(0x7f0000008a80)="918252e6d469647a98d516e895302e1f8a798f1c1dbfcb879bf7bbcc4880bb5ea1bb0314cc3af323d0ec6f5110a660ccb7ab7373df36e5c8455d8e85c31f8615d596fc82d8136d269bbba0b221496ad92a245b748d2216e3ffc4b871e50ee24dcc1bffd75a2dff7b7d298c4e5a33a2bbb1d2a231b5efee2cd365cd5cbb6e574377fa0d44", 0x84}, {&(0x7f0000008b40)="d57bdb35c9ee9b9342e4114597b06dfceff9f9ff2087707c96bb535d2805e9a40f5f85d7bb7c1558919322a3c31f758361256bb14a92c8ea041293da2fb8e3e9ae98754213d5c0ec2e4c7f519c2f656317d52559e7851e1c8f9e9f2a4af674be7e94c9d2b94f637447b169e700035e29f997228cf4160f6beef42ecd52f05ac93bb7b6bd2bb4fde49a4d2b0c784e8b0b91391a8617b82af757", 0x99}], 0x2, &(0x7f0000008c40)=[@rthdr={{0x38, 0x29, 0x39, {0x30, 0x4, 0x0, 0x7, 0x0, [@private1, @dev={0xfe, 0x80, '\x00', 0x2b}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdr={{0x88, 0x29, 0x39, {0x3b, 0xe, 0x2, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7f3}}], 0xf0}}], 0xa, 0x0) r10 = socket$inet(0x2, 0x1, 0x2) setsockopt$inet_mreqn(r10, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r10, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, {0xa, 0x4e23, 0x4, @local, 0xfffffffa}, 0x0, {[0x7, 0xa51d, 0x8, 0x522fc034, 0x5, 0x7, 0x5, 0x7b8a]}}, 0x5c) recvmmsg(r3, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000180)=""/190, 0xbe}, {&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000003580)=""/4080, 0xff0}], 0x5}, 0x3}], 0x1, 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x28, r12, 0x301, 0x70bd28, 0x25dfdc06, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 274.642398ms ago: executing program 0 (id=1086): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 242.69759ms ago: executing program 0 (id=1087): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) unshare(0x6060600) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x981b00, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet(0xa, 0x801, 0x6) listen(r4, 0x48) accept4(r4, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000770000/0x3000)=nil, 0x3000, 0x9) unshare(0x50200) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d412000000000000002900000003000000", 0xeb0e7a7d4c6f0553) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='net/ip6_tables_matches\x00') pread64(r5, &(0x7f0000001180)=""/102368, 0x18fe0, 0xc2a) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f00000000c0)=0x1d, 0x4) 240.84914ms ago: executing program 0 (id=1088): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000580)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f00005ae000/0x4000)=nil, 0x4000}, 0x3, 0x2}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)={0x30, 0x13, 0x1, 0x2, 0x25dfdbfa, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0x10, 0x1a, 0x0, 0x1, [@nested={0x4, 0x118}, @typed={0x8, 0xf6, 0x0, 0x0, @str='#\xec!\x00'}]}]}, 0x30}], 0x1}, 0x0) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000040)={0x3}) r5 = syz_open_procfs(0x0, &(0x7f0000001300)='net/llc/socket\x00') read$hidraw(r5, &(0x7f0000002900)=""/24, 0x18) recvmmsg(r3, &(0x7f0000002b40)=[{{&(0x7f0000000140)=@generic, 0x80, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/98, 0x62}, {&(0x7f00000002c0)=""/129, 0x81}, {&(0x7f00000000c0)=""/13, 0xd}, {&(0x7f0000000380)=""/201, 0xc9}, {&(0x7f0000000240)=""/16, 0x10}, {&(0x7f0000000480)=""/187, 0xbb}], 0x6, &(0x7f00000005c0)=""/74, 0x4a}, 0x2}, {{&(0x7f0000000640)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000006c0)=""/72, 0x48}, {&(0x7f0000000740)=""/231, 0xe7}, {&(0x7f0000000840)=""/21, 0x15}, {&(0x7f0000000880)=""/78, 0x4e}, {&(0x7f0000000900)=""/9, 0x9}, {&(0x7f0000000940)=""/109, 0x6d}], 0x6, &(0x7f0000000a40)=""/230, 0xe6}, 0x8f}, {{&(0x7f0000000b40)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000bc0)=""/241, 0xf1}, {&(0x7f0000000cc0)=""/65, 0x41}, {&(0x7f0000000d40)=""/15, 0xf}, {&(0x7f0000001280)=""/94, 0x5e}, {&(0x7f0000000e00)=""/38, 0x26}, {&(0x7f0000000e40)=""/206, 0xce}, {&(0x7f0000000f40)=""/26, 0x1a}, {&(0x7f0000000f80)=""/29, 0x1d}], 0x8, &(0x7f0000001040)=""/99, 0x63}, 0xa}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f00000010c0)=""/197, 0xc5}, {&(0x7f00000011c0)=""/63, 0x3f}, {&(0x7f0000001240)=""/43, 0x2b}, {&(0x7f0000002cc0)=""/148, 0x94}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x5}, 0x8001}, {{&(0x7f00000023c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002440)=""/167, 0xa7}, {&(0x7f0000002500)=""/10, 0xa}, {&(0x7f0000002540)=""/30, 0x1e}, {&(0x7f0000002580)=""/97, 0x61}, {&(0x7f0000002600)=""/149, 0x95}, {&(0x7f00000026c0)=""/172, 0xac}, {&(0x7f0000002780)=""/245, 0xf5}, {&(0x7f0000002d80)=""/242, 0xf2}, {&(0x7f0000002980)=""/100, 0x64}], 0x9, &(0x7f0000002ac0)=""/98, 0x62}, 0x5}], 0x5, 0x40010002, &(0x7f0000002c80)) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000d80)={0x1d, r6}, 0x10, &(0x7f0000000dc0)={&(0x7f0000002880)=@canfd={{0x2, 0x1, 0x1, 0x1}, 0x13, 0x3, 0x0, 0x0, "3090bbf7c87506b5a446eea21427aa8b7f4d25c35e9d8b8f01ef68129becc4bcd0a72499e662cafa6a56b3d84c7a23849c614bac9e9f97d01a2b42a52f33cf41"}, 0x48}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x40) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs2\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r3, @ANYRESHEX=r2]) 182.728675ms ago: executing program 4 (id=1090): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='k@', 0x2, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x57789000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x206f01a, 0x0, 0x0, 0x0, 0x1}}, 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap$IORING_OFF_SQ_RING(&(0x7f00004c2000/0x2000)=nil, 0x2000, 0x200000d, 0x4010, 0xffffffffffffffff, 0x0) 170.795786ms ago: executing program 4 (id=1091): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) (async) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) (async) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) (async) r2 = getpgid(0xffffffffffffffff) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000000)={r2, 0x1, 0x401}) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid}]}, 0x24}}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 152.787348ms ago: executing program 4 (id=1092): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000040), 0x4) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 90.795833ms ago: executing program 3 (id=1093): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0xfffffffffffffffe) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0x2) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 66.527854ms ago: executing program 3 (id=1094): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xa0002004}) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000000080)) 6.271499ms ago: executing program 4 (id=1095): r0 = syz_open_dev$usbfs(0x0, 0x204, 0x2) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) accept4(r1, &(0x7f0000000040)=@can, &(0x7f0000000140)=0x80, 0x80000) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) setitimer(0x3, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async, rerun: 32) r3 = memfd_secret(0x0) (async, rerun: 32) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async, rerun: 32) r5 = userfaultfd(0x80001) (rerun: 32) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) setreuid(0x0, 0xee00) (async, rerun: 64) write$UHID_CREATE(r6, &(0x7f00000001c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x6, 0xe57, 0x8, 0x1ff, 0x9}}, 0x120) (async, rerun: 64) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) (async) close_range(r4, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x3a, 0x0, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0x8ee4a000) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r7, 0x4, 0x42000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r8, 0x4, 0x2400) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.918159ms ago: executing program 3 (id=1096): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x4000040) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x1, 0xc3}, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) 3.628989ms ago: executing program 4 (id=1097): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) 3.321679ms ago: executing program 4 (id=1098): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r2 = eventfd2(0x0, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) write$eventfd(r2, &(0x7f0000000280), 0x8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000380)=0x4) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000240)=0x9) ioctl$KVM_GET_MP_STATE(r8, 0x8004ae98, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r9 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x6, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=1099): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r1, &(0x7f00000014c0)=ANY=[], 0x46b) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='befs\x00', 0x40, &(0x7f0000000280)='./binderfs/binder1\x00') sendmmsg$inet(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f00000003c0)='U', 0x1}, {&(0x7f0000000180)="f3", 0xfffffec5}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\x00', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000140)}}], 0x4, 0x4048841) socket$inet_tcp(0x2, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 3264][ T478] usb 2-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=dd.c8 [ 35.234653][ T767] rust_binder: Write failure EFAULT in pid:77 [ 35.242607][ T478] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.257501][ T478] usb 2-1: Product: syz [ 35.263824][ T478] usb 2-1: Manufacturer: syz [ 35.268511][ T478] usb 2-1: SerialNumber: syz [ 35.274739][ T478] usb 2-1: config 0 descriptor?? [ 35.281090][ T478] pl2303 2-1:0.148: required interrupt-in endpoint missing [ 35.494353][ T337] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 35.535780][ T775] kvm: user requested TSC rate below hardware speed [ 35.565496][ T774] FAULT_INJECTION: forcing a failure. [ 35.565496][ T774] name failslab, interval 1, probability 0, space 0, times 0 [ 35.578450][ T774] CPU: 0 UID: 0 PID: 774 Comm: syz.0.144 Not tainted 6.12.38-syzkaller-g830a2dadaa8f #0 657fa2f806e8f8d9bd68ab4c628d532abd8be266 [ 35.578482][ T774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 35.578492][ T774] Call Trace: [ 35.578498][ T774] [ 35.578505][ T774] __dump_stack+0x21/0x30 [ 35.578528][ T774] dump_stack_lvl+0x10c/0x190 [ 35.578544][ T774] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.578557][ T774] dump_stack+0x19/0x20 [ 35.578568][ T774] should_fail_ex+0x3d9/0x530 [ 35.578582][ T774] should_failslab+0xac/0x100 [ 35.578593][ T774] __kmalloc_cache_node_noprof+0x46/0x3d0 [ 35.578607][ T774] ? __get_vm_area_node+0x154/0x3a0 [ 35.578619][ T774] ? kasan_save_track+0x3e/0x80 [ 35.578629][ T774] __get_vm_area_node+0x154/0x3a0 [ 35.578640][ T774] __vmalloc_node_range_noprof+0x33c/0x1420 [ 35.578652][ T774] ? copy_process+0x538/0x3220 [ 35.578667][ T774] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 35.578680][ T774] ? kasan_save_alloc_info+0x40/0x50 [ 35.578692][ T774] ? arch_dup_task_struct+0x5b/0xe0 [ 35.578705][ T774] ? __asan_memcpy+0x5a/0x80 [ 35.578718][ T774] dup_task_struct+0x5bd/0xc50 [ 35.578728][ T774] ? copy_process+0x538/0x3220 [ 35.578738][ T774] ? _raw_spin_lock_irq+0x8d/0x120 [ 35.578750][ T774] ? copy_process+0x3220/0x3220 [ 35.578760][ T774] ? __kasan_check_write+0x18/0x20 [ 35.578773][ T774] copy_process+0x538/0x3220 [ 35.578785][ T774] ? __cfi_copy_process+0x10/0x10 [ 35.578801][ T774] ? __kasan_check_write+0x18/0x20 [ 35.578822][ T774] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 35.578839][ T774] vhost_task_create+0x1d6/0x350 [ 35.578856][ T774] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 35.578867][ T774] ? __cfi_vhost_task_create+0x10/0x10 [ 35.578877][ T774] ? __cfi_vhost_task_fn+0x10/0x10 [ 35.578886][ T774] ? __kasan_check_write+0x18/0x20 [ 35.578898][ T774] ? mutex_lock+0x92/0x1c0 [ 35.578910][ T774] ? __cfi_mutex_lock+0x10/0x10 [ 35.578923][ T774] ? kernel_text_address+0xa9/0xe0 [ 35.578935][ T774] kvm_mmu_post_init_vm+0x1a6/0x310 [ 35.578948][ T774] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 35.578960][ T774] ? _parse_integer_limit+0x195/0x1e0 [ 35.578974][ T774] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 35.578985][ T774] ? kstrtoull+0x13b/0x1e0 [ 35.578997][ T774] ? kstrtouint+0x78/0xf0 [ 35.579009][ T774] ? ioctl_has_perm+0x1aa/0x4d0 [ 35.579020][ T774] ? __asan_memcpy+0x5a/0x80 [ 35.579033][ T774] ? ioctl_has_perm+0x3e0/0x4d0 [ 35.579043][ T774] ? has_cap_mac_admin+0xd0/0xd0 [ 35.579053][ T774] ? __kasan_check_write+0x18/0x20 [ 35.579065][ T774] ? mutex_lock_killable+0x92/0x1c0 [ 35.579078][ T774] ? __cfi_mutex_lock_killable+0x10/0x10 [ 35.579091][ T774] ? proc_fail_nth_write+0x17e/0x210 [ 35.579103][ T774] kvm_vcpu_ioctl+0x96f/0xee0 [ 35.579117][ T774] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 35.579130][ T774] ? __cfi_vfs_write+0x10/0x10 [ 35.579139][ T774] ? __kasan_check_write+0x18/0x20 [ 35.579151][ T774] ? mutex_unlock+0x8b/0x240 [ 35.579163][ T774] ? __cfi_mutex_unlock+0x10/0x10 [ 35.579175][ T774] ? __fget_files+0x2c5/0x340 [ 35.579185][ T774] ? __fget_files+0x2c5/0x340 [ 35.579195][ T774] ? bpf_lsm_file_ioctl+0xd/0x20 [ 35.579207][ T774] ? security_file_ioctl+0x34/0xd0 [ 35.579218][ T774] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 35.579230][ T774] __se_sys_ioctl+0x135/0x1b0 [ 35.579285][ T774] __x64_sys_ioctl+0x7f/0xa0 [ 35.579294][ T774] x64_sys_call+0x1878/0x2ee0 [ 35.579307][ T774] do_syscall_64+0x58/0xf0 [ 35.579318][ T774] ? clear_bhb_loop+0x50/0xa0 [ 35.579328][ T774] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.579342][ T774] RIP: 0033:0x7fe290d8ebe9 [ 35.579352][ T774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.579360][ T774] RSP: 002b:00007fe291b39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 35.579372][ T774] RAX: ffffffffffffffda RBX: 00007fe290fb5fa0 RCX: 00007fe290d8ebe9 [ 35.579380][ T774] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 35.579386][ T774] RBP: 00007fe291b39090 R08: 0000000000000000 R09: 0000000000000000 [ 35.579393][ T774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.579399][ T774] R13: 00007fe290fb6038 R14: 00007fe290fb5fa0 R15: 00007ffd41ba1bf8 [ 35.579407][ T774] [ 35.744475][ T337] usb 4-1: Using ep0 maxpacket: 32 [ 35.747282][ T774] syz.0.144: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 35.761816][ T337] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 35.764904][ T774] ,cpuset=syz0,mems_allowed=0 [ 35.770449][ T337] usb 4-1: config 0 has no interface number 0 [ 35.774475][ T774] CPU: 0 UID: 0 PID: 774 Comm: syz.0.144 Not tainted 6.12.38-syzkaller-g830a2dadaa8f #0 657fa2f806e8f8d9bd68ab4c628d532abd8be266 [ 35.774502][ T774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 35.774513][ T774] Call Trace: [ 35.774521][ T774] [ 35.774529][ T774] __dump_stack+0x21/0x30 [ 35.774557][ T774] dump_stack_lvl+0x10c/0x190 [ 35.774579][ T774] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.774601][ T774] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 35.774623][ T774] dump_stack+0x19/0x20 [ 35.774642][ T774] warn_alloc+0x1bc/0x2a0 [ 35.774664][ T774] ? __cfi_warn_alloc+0x10/0x10 [ 35.774684][ T774] ? kasan_save_track+0x3e/0x80 [ 35.774701][ T774] ? __get_vm_area_node+0x392/0x3a0 [ 35.774722][ T774] __vmalloc_node_range_noprof+0x361/0x1420 [ 35.774747][ T774] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 35.774769][ T774] ? kasan_save_alloc_info+0x40/0x50 [ 35.774790][ T774] ? arch_dup_task_struct+0x5b/0xe0 [ 35.774813][ T774] ? __asan_memcpy+0x5a/0x80 [ 35.774836][ T774] dup_task_struct+0x5bd/0xc50 [ 35.774855][ T774] ? copy_process+0x538/0x3220 [ 35.774873][ T774] ? _raw_spin_lock_irq+0x8d/0x120 [ 35.774892][ T774] ? copy_process+0x3220/0x3220 [ 35.774910][ T774] ? __kasan_check_write+0x18/0x20 [ 35.774932][ T774] copy_process+0x538/0x3220 [ 35.774954][ T774] ? __cfi_copy_process+0x10/0x10 [ 35.774973][ T774] ? __kasan_check_write+0x18/0x20 [ 35.774994][ T774] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 35.775013][ T774] vhost_task_create+0x1d6/0x350 [ 35.775029][ T774] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 35.775048][ T774] ? __cfi_vhost_task_create+0x10/0x10 [ 35.775065][ T774] ? __cfi_vhost_task_fn+0x10/0x10 [ 35.775081][ T774] ? __kasan_check_write+0x18/0x20 [ 35.775103][ T774] ? mutex_lock+0x92/0x1c0 [ 35.775125][ T774] ? __cfi_mutex_lock+0x10/0x10 [ 35.775147][ T774] ? kernel_text_address+0xa9/0xe0 [ 35.775168][ T774] kvm_mmu_post_init_vm+0x1a6/0x310 [ 35.775191][ T774] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 35.775212][ T774] ? _parse_integer_limit+0x195/0x1e0 [ 35.775234][ T774] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 35.775255][ T774] ? kstrtoull+0x13b/0x1e0 [ 35.775276][ T774] ? kstrtouint+0x78/0xf0 [ 35.775297][ T774] ? ioctl_has_perm+0x1aa/0x4d0 [ 35.775316][ T774] ? __asan_memcpy+0x5a/0x80 [ 35.775337][ T774] ? ioctl_has_perm+0x3e0/0x4d0 [ 35.775355][ T774] ? has_cap_mac_admin+0xd0/0xd0 [ 35.775374][ T774] ? __kasan_check_write+0x18/0x20 [ 35.775396][ T774] ? mutex_lock_killable+0x92/0x1c0 [ 35.775419][ T774] ? __cfi_mutex_lock_killable+0x10/0x10 [ 35.775448][ T774] ? proc_fail_nth_write+0x17e/0x210 [ 35.775471][ T774] kvm_vcpu_ioctl+0x96f/0xee0 [ 35.775495][ T774] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 35.775518][ T774] ? __cfi_vfs_write+0x10/0x10 [ 35.775533][ T774] ? __kasan_check_write+0x18/0x20 [ 35.775555][ T774] ? mutex_unlock+0x8b/0x240 [ 35.775577][ T774] ? __cfi_mutex_unlock+0x10/0x10 [ 35.775599][ T774] ? __fget_files+0x2c5/0x340 [ 35.775618][ T774] ? __fget_files+0x2c5/0x340 [ 35.775635][ T774] ? bpf_lsm_file_ioctl+0xd/0x20 [ 35.775657][ T774] ? security_file_ioctl+0x34/0xd0 [ 35.775675][ T774] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 35.775698][ T774] __se_sys_ioctl+0x135/0x1b0 [ 35.775716][ T774] __x64_sys_ioctl+0x7f/0xa0 [ 35.775733][ T774] x64_sys_call+0x1878/0x2ee0 [ 35.775756][ T774] do_syscall_64+0x58/0xf0 [ 35.775776][ T774] ? clear_bhb_loop+0x50/0xa0 [ 35.775791][ T774] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.775815][ T774] RIP: 0033:0x7fe290d8ebe9 [ 35.775830][ T774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.775844][ T774] RSP: 002b:00007fe291b39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 35.775863][ T774] RAX: ffffffffffffffda RBX: 00007fe290fb5fa0 RCX: 00007fe290d8ebe9 [ 35.775877][ T774] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 35.775888][ T774] RBP: 00007fe291b39090 R08: 0000000000000000 R09: 0000000000000000 [ 35.775899][ T774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.775910][ T774] R13: 00007fe290fb6038 R14: 00007fe290fb5fa0 R15: 00007ffd41ba1bf8 [ 35.775924][ T774] [ 35.775941][ T774] Mem-Info: [ 35.782578][ T337] usb 4-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 35.784538][ T774] active_anon:5762 inactive_anon:1 isolated_anon:0 [ 35.784538][ T774] active_file:19619 inactive_file:9906 isolated_file:0 [ 35.784538][ T774] unevictable:0 dirty:1897 writeback:0 [ 35.784538][ T774] slab_reclaimable:4948 slab_unreclaimable:70398 [ 35.784538][ T774] mapped:24887 shmem:171 pagetables:887 [ 35.784538][ T774] sec_pagetables:0 bounce:0 [ 35.784538][ T774] kernel_misc_reclaimable:0 [ 35.784538][ T774] free:1520961 free_pcp:2207 free_cma:0 [ 35.790214][ T337] usb 4-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 35.795353][ T774] Node 0 active_anon:23048kB inactive_anon:4kB active_file:78476kB inactive_file:39624kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99548kB dirty:7588kB writeback:0kB shmem:684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5220kB pagetables:3548kB sec_pagetables:0kB all_unreclaimable? no [ 35.802865][ T337] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 35.807335][ T774] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965968kB mlocked:0kB bounce:0kB free_pcp:5756kB local_pcp:68kB free_cma:0kB [ 35.812469][ T337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.816462][ T774] lowmem_reserve[]: 0 3921 [ 35.821604][ T337] usb 4-1: Product: syz [ 35.826025][ T774] 3921 [ 35.826047][ T774] Normal free:3123632kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23048kB inactive_anon:4kB active_file:78476kB inactive_file:39624kB unevictable:0kB writepending:7588kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3052kB local_pcp:2564kB free_cma:0kB [ 35.831486][ T337] usb 4-1: Manufacturer: syz [ 35.836129][ T774] lowmem_reserve[]: 0 0 0 [ 35.836159][ T774] DMA32: [ 35.841792][ T337] usb 4-1: SerialNumber: syz [ 35.846666][ T774] 3*4kB [ 35.853762][ T337] usb 4-1: config 0 descriptor?? [ 35.858122][ T774] (M) 3*8kB (M) [ 35.866663][ T768] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 35.870165][ T774] 3*16kB [ 35.875931][ T768] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 35.881548][ T774] (M) [ 35.889838][ T337] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 22:97:a4:fa:7c:45 [ 35.892061][ T774] 4*32kB [ 35.951447][ T374] usb 2-1: USB disconnect, device number 4 [ 35.987598][ T36] kauditd_printk_skb: 54 callbacks suppressed [ 35.987613][ T36] audit: type=1400 audit(1755304352.119:250): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 36.034645][ T774] (M) [ 36.050074][ T36] audit: type=1400 audit(1755304352.129:251): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.083734][ T774] 4*64kB [ 36.094581][ T36] audit: type=1400 audit(1755304352.129:252): avc: denied { read } for pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=1201 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.110412][ T338] usb 4-1: USB disconnect, device number 6 [ 36.129404][ T36] audit: type=1400 audit(1755304352.129:253): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1201 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.143149][ T774] (M) [ 36.148064][ T36] audit: type=1400 audit(1755304352.129:254): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1201 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.153908][ T774] 3*128kB [ 36.164342][ T36] audit: type=1400 audit(1755304352.209:255): avc: denied { map } for pid=781 comm="syz.1.145" path="socket:[5891]" dev="sockfs" ino=5891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.178192][ T338] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 36.204336][ T36] audit: type=1400 audit(1755304352.209:256): avc: denied { read } for pid=781 comm="syz.1.145" path="socket:[5891]" dev="sockfs" ino=5891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.214448][ T45] usb 1-1: USB disconnect, device number 7 [ 36.243536][ T36] audit: type=1400 audit(1755304352.209:257): avc: denied { bind } for pid=781 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.249037][ T774] (M) [ 36.264344][ T36] audit: type=1400 audit(1755304352.209:258): avc: denied { name_bind } for pid=781 comm="syz.1.145" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 36.270638][ T774] 4*256kB [ 36.294360][ T36] audit: type=1400 audit(1755304352.209:259): avc: denied { node_bind } for pid=781 comm="syz.1.145" saddr=ff01::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 36.298107][ T774] (M) [ 36.695487][ T802] rust_binder: 81: no such ref 3 [ 36.775695][ T774] 4*512kB [ 36.856525][ T801] rust_binder: 81: no such ref 0 [ 36.877534][ T774] (M) [ 36.890436][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 36.907003][ T774] 5*1024kB [ 36.943459][ T10] asix 3-1:0.0: probe with driver asix failed with error -71 [ 36.969419][ T774] (UM) [ 36.993504][ T10] usb 3-1: USB disconnect, device number 4 [ 37.048790][ T774] 5*2048kB [ 37.050694][ T801] rust_binder: Write failure EFAULT in pid:81 [ 37.062451][ T774] (M) 718*4096kB (M) = 2960212kB [ 37.113930][ T774] Normal: 228*4kB (UME) 723*8kB (UME) 617*16kB (UME) 403*32kB (UME) 484*64kB (UME) 81*128kB (UME) 39*256kB (UME) 36*512kB (UME) 19*1024kB (UME) 10*2048kB (UM) 728*4096kB (M) = 3121048kB [ 37.159011][ T823] 9pnet_fd: Insufficient options for proto=fd [ 37.178404][ T774] 30062 total pagecache pages [ 37.183366][ T774] 1 pages in swap cache [ 37.195903][ T774] Free swap = 124984kB [ 37.200190][ T774] Total swap = 124996kB [ 37.204587][ T774] 2097051 pages RAM [ 37.208406][ T774] 0 pages HighMem/MovableOnly [ 37.213146][ T774] 351529 pages reserved [ 37.217589][ T774] 0 pages cma reserved [ 37.223618][ T774] Memory allocations: [ 37.227826][ T774] 0 B 0 init/main.c:1370 func:do_initcalls [ 37.235245][ T774] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 37.243406][ T774] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 37.251124][ T774] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 37.259225][ T774] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 37.267207][ T774] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 37.279695][ T774] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 37.293262][ T774] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 37.301510][ T774] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 37.310812][ T774] 0 B 0 init/initramfs.c:101 func:find_link [ 37.403764][ T838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.406243][ T838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.414494][ T838] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:179 [ 37.421383][ T838] rust_binder: Error while translating object. [ 37.431029][ T838] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.437644][ T838] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:179 [ 37.472174][ T842] rust_binder: Failed copying remainder into alloc: EFAULT [ 37.485386][ T842] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 37.493549][ T842] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 37.503299][ T842] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:60 [ 37.530446][ T846] 9pnet_fd: Insufficient options for proto=fd [ 37.564429][ T850] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.585435][ T850] rust_binder: Error in use_page_slow: ESRCH [ 37.597213][ T850] rust_binder: use_range failure ESRCH [ 37.603506][ T850] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true [ 37.614615][ T850] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 37.619514][ T338] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.624892][ T850] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:185 [ 37.649642][ T850] rust_binder: Read failure Err(EFAULT) in pid:185 [ 37.659620][ T338] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 37.719468][ T862] hid-generic 0000:0000:0000.0004: pid 862 passed too short report [ 37.721265][ T861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 37.761311][ T864] fuse: Unknown parameter '0x0000000000000003' [ 37.801579][ T871] binder: Bad value for 'stats' [ 37.820060][ T878] 9pnet_fd: Insufficient options for proto=fd [ 37.861230][ T873] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1152, size: 4096) [ 37.861257][ T873] rust_binder: Error while translating object. [ 37.874046][ T873] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.876035][ T884] fuse: Bad value for 'fd' [ 37.880743][ T873] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 37.897257][ T873] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:154 [ 37.920207][ T10] rust_binder: 872: removing orphan mapping 0:24 [ 38.049604][ T905] 9pnet_fd: Insufficient options for proto=fd [ 38.078497][ T900] kvm: kvm [897]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 38.088533][ T911] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.089059][ T900] kvm: kvm [897]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 38.143508][ T923] can0: slcan on ptm0. [ 38.169967][ T926] fuse: Unknown parameter 'c' [ 38.189808][ T929] rust_binder: Write failure EINVAL in pid:86 [ 38.260622][ T943] 9pnet_fd: Insufficient options for proto=fd [ 38.387048][ T958] binder: Unknown parameter 'defcontext01777777777777777777777' [ 38.424343][ T45] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 38.482644][ T969] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 38.547761][ T992] binder: Unknown parameter 'contextsycte"_uGй :' [ 38.579884][ T998] cgroup: fork rejected by pids controller in /syz0 [ 38.596698][ T1009] 9pnet_fd: Insufficient options for proto=fd [ 38.615352][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.626746][ T45] usb 2-1: config 0 has no interfaces? [ 38.636066][ T45] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 38.650673][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.669043][ T45] usb 2-1: config 0 descriptor?? [ 38.886907][ T45] usb 2-1: USB disconnect, device number 5 [ 38.940403][ T923] can0 (unregistered): slcan off ptm0. [ 39.117492][ T1089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.206'. [ 39.129974][ T1089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:114 [ 39.468508][ T1100] 9pnet_fd: Insufficient options for proto=fd [ 39.501310][ T1102] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.546218][ T1102] netlink: 32 bytes leftover after parsing attributes in process `syz.1.211'. [ 39.574339][ T478] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 39.647044][ T1106] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.648481][ T1106] rust_binder: Error in use_page_slow: ESRCH [ 39.656087][ T1106] rust_binder: use_range failure ESRCH [ 39.663331][ T1106] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true [ 39.669719][ T1106] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 39.678779][ T1106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:211 [ 39.690027][ T1106] rust_binder: Read failure Err(EFAULT) in pid:211 [ 39.721108][ T1115] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.735597][ T478] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 39.754097][ T478] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 39.765794][ T478] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 39.777488][ T478] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 39.794337][ T478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.807396][ T1098] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 39.832979][ T1121] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 39.976282][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.008665][ T1130] overlay: Unknown parameter 'audit' [ 40.067632][ T1139] 9pnet_fd: Insufficient options for proto=fd [ 40.097497][ T478] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 40.105885][ T478] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input5 [ 40.118984][ T478] usb 1-1: USB disconnect, device number 8 [ 40.125396][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 40.284338][ T338] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 40.435268][ T338] usb 2-1: Using ep0 maxpacket: 16 [ 40.446191][ T338] usb 2-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 40.457123][ T338] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 40.469240][ T338] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 40.485285][ T338] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.495292][ T338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 40.503523][ T338] usb 2-1: SerialNumber: syz [ 40.549934][ T1152] __vm_enough_memory: pid: 1152, comm: syz.3.228, bytes: 18014402804453376 not enough memory for the allocation [ 40.719054][ T1168] overlayfs: failed to resolve '/?': -2 [ 40.728065][ T338] usb 2-1: USB disconnect, device number 6 [ 40.783602][ T1175] 9pnet_fd: Insufficient options for proto=fd [ 40.792923][ T1177] tipc: Enabling not permitted [ 40.799834][ T1177] tipc: Enabling of bearer rejected, failed to enable media [ 40.808714][ T1172] vlan0: entered promiscuous mode [ 40.814713][ T1172] vlan0: entered allmulticast mode [ 40.821276][ T1172] veth0_vlan: entered allmulticast mode [ 40.828765][ T1176] tipc: Enabling not permitted [ 40.834543][ T1176] tipc: Enabling of bearer rejected, failed to enable media [ 40.883767][ T1180] SELinux: security_context_str_to_sid () failed with errno=-22 [ 41.083448][ T1194] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 41.102143][ T1194] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 41.154603][ T1192] rust_binder: Error in use_page_slow: ESRCH [ 41.154627][ T1192] rust_binder: use_range failure ESRCH [ 41.161175][ T1192] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 41.167386][ T1192] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 41.177021][ T1192] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:201 [ 41.196696][ T1202] 9pnet_fd: Insufficient options for proto=fd [ 41.213948][ T1203] 9pnet_fd: Insufficient options for proto=fd [ 41.269109][ T1208] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 41.269660][ T1208] rust_binder: Read failure Err(EFAULT) in pid:212 [ 41.281776][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 41.281794][ T36] audit: type=1400 audit(1755304357.489:305): avc: denied { mount } for pid=1209 comm="syz.1.246" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 41.362604][ T36] audit: type=1400 audit(1755304357.529:306): avc: denied { mounton } for pid=1209 comm="syz.1.246" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 41.403841][ T36] audit: type=1400 audit(1755304357.529:307): avc: denied { setopt } for pid=1209 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.445964][ T36] audit: type=1400 audit(1755304357.549:308): avc: denied { remount } for pid=1211 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.506792][ T36] audit: type=1400 audit(1755304357.549:309): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 41.635028][ T1228] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 41.635147][ T1228] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 41.643212][ T1228] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 41.657222][ T1228] rust_binder: Read failure Err(EFAULT) in pid:208 [ 41.690588][ T1243] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:211 [ 41.698693][ T1243] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.710294][ T1245] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 41.725282][ T1245] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 41.743213][ T478] rust_binder: 1236: removing orphan mapping 0:24 [ 41.763721][ T1252] batadv_slave_0: mtu less than device minimum [ 41.772772][ T1252] bpf: Bad value for 'mode' [ 41.779267][ T36] audit: type=1400 audit(1755304357.989:310): avc: denied { read } for pid=1250 comm="syz.0.261" path="socket:[9433]" dev="sockfs" ino=9433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.805723][ T36] audit: type=1400 audit(1755304357.989:311): avc: denied { getopt } for pid=1250 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.826439][ T36] audit: type=1400 audit(1755304357.989:312): avc: denied { map } for pid=1250 comm="syz.0.261" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.855411][ T1261] netlink: 393 bytes leftover after parsing attributes in process `syz.1.264'. [ 41.888894][ T1261] kvm: kvm [1260]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 41.897688][ T1261] kvm: kvm [1260]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 42.044561][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 42.108331][ T36] audit: type=1400 audit(1755304358.319:313): avc: denied { accept } for pid=1269 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 42.132347][ T36] audit: type=1400 audit(1755304358.339:314): avc: denied { setopt } for pid=1269 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 42.204348][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 42.214930][ T45] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 42.219023][ T1284] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.223315][ T45] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 42.242029][ T45] usb 3-1: config 0 has no interface number 0 [ 42.250335][ T45] usb 3-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 42.267837][ T45] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 42.282905][ T45] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 42.296701][ T45] usb 3-1: config 0 interface 126 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 42.309982][ T1286] rust_binder: 243: no such ref 3 [ 42.315907][ T1286] rust_binder: 243: no such ref 4294967295 [ 42.322924][ T45] usb 3-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 42.337463][ T1286] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:243 [ 42.343955][ T45] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 42.363291][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.375906][ T45] usb 3-1: config 0 descriptor?? [ 42.381497][ T1258] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 42.407274][ T1288] overlayfs: conflicting options: metacopy=off,verity=require [ 42.417605][ T1258] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 42.437191][ T45] snd-usb-audio 3-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 42.443336][ T1049] udevd[1049]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.126/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.546110][ T1303] overlayfs: workdir and upperdir must reside under the same mount [ 42.620181][ T1284] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:257 [ 42.637389][ T1311] overlayfs: failed to resolve 'dont_hash': -2 [ 42.645606][ T45] usb 3-1: USB disconnect, device number 5 [ 42.762968][ T1318] netlink: 'syz.0.281': attribute type 40 has an invalid length. [ 42.771325][ T1319] netlink: 'syz.0.281': attribute type 40 has an invalid length. [ 42.780116][ T1320] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:160 [ 42.833939][ T1328] rust_binder: Fixups oob 156 120 160 164 [ 42.843583][ T1328] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 42.850098][ T1328] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.858562][ T1328] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:269 [ 42.903977][ T1330] kvm: kvm [1329]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 42.925704][ T1330] kvm: kvm [1329]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 43.344430][ T478] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 43.453426][ T368] rust_binder: 1308: removing orphan mapping 0:24 [ 43.499472][ T478] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 43.513450][ T478] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.545167][ T478] usb 1-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 43.555702][ T478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.576599][ T478] usb 1-1: config 0 descriptor?? [ 43.583276][ T1359] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 44.010634][ T478] wacom 0003:056A:0020.0005: Unknown device_type for 'HID 056a:0020'. Assuming pen. [ 44.041263][ T478] wacom 0003:056A:0020.0005: hidraw0: USB HID v1.01 Device [HID 056a:0020] on usb-dummy_hcd.0-1/input0 [ 44.058725][ T478] input: Wacom Intuos 4x5 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0020.0005/input/input6 [ 44.203169][ T374] usb 1-1: USB disconnect, device number 9 [ 44.424386][ T338] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 44.574421][ T338] usb 4-1: Using ep0 maxpacket: 16 [ 44.583365][ T338] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 44.595277][ T338] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 44.606845][ T338] usb 4-1: config 0 has no interface number 0 [ 44.613384][ T338] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 44.626667][ T338] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 44.640293][ T338] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 44.651806][ T338] usb 4-1: config 0 interface 126 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 44.663086][ T338] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 44.676888][ T338] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 44.686402][ T338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.695784][ T338] usb 4-1: config 0 descriptor?? [ 44.702359][ T1388] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 44.712756][ T1388] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 44.716497][ T1392] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.725844][ T338] snd-usb-audio 4-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 44.737060][ T1049] udevd[1049]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.126/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.746249][ T1392] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.771707][ T1392] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 44.786565][ T1392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:285 [ 44.800268][ T1399] 9pnet: Could not find request transport: fd0x0000000000000004 [ 44.887292][ T1412] veth1_macvtap: left promiscuous mode [ 44.892801][ T1412] macsec0: entered promiscuous mode [ 44.898291][ T1412] macsec0: entered allmulticast mode [ 44.911041][ T1412] veth1_macvtap: entered promiscuous mode [ 44.917241][ T1412] veth1_macvtap: entered allmulticast mode [ 44.923430][ T1412] macsec0: left promiscuous mode [ 44.927867][ T338] usb 4-1: USB disconnect, device number 7 [ 44.930959][ T1412] macsec0: left allmulticast mode [ 44.943575][ T1412] veth1_macvtap: left allmulticast mode [ 44.951289][ T1415] overlay: Unknown parameter 'uid' [ 44.951289][ T1414] overlay: Unknown parameter 'uid' [ 45.011179][ T1429] /dev/rnullb0: Can't open blockdev [ 45.045983][ T1435] binder: Bad value for 'stats' [ 45.047928][ T1436] 9pnet: Could not find request transport: fd0x0000000000000004 [ 45.205955][ T478] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 45.375361][ T478] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 45.394347][ T478] usb 2-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 45.404867][ T478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.427539][ T478] usb 2-1: config 0 descriptor?? [ 45.442200][ T1419] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 45.457800][ T1456] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 45.485316][ T1462] rust_binder: Failed to allocate buffer. len:1152, is_oneway:true [ 45.488314][ T1456] rust_binder: Write failure EINVAL in pid:272 [ 45.595588][ T1464] 9pnet: Could not find request transport: fd0x0000000000000004 [ 45.844808][ T1468] can0: slcan on ptm0. [ 45.862197][ T478] wacom 0003:056A:0307.0006: hidraw0: USB HID v1.01 Device [HID 056a:0307] on usb-dummy_hcd.1-1/input0 [ 46.062600][ T1412] netlink: 'syz.1.313': attribute type 16 has an invalid length. [ 46.083901][ T1412] netlink: 'syz.1.313': attribute type 3 has an invalid length. [ 46.098257][ T1412] netlink: 64054 bytes leftover after parsing attributes in process `syz.1.313'. [ 46.120007][ T1412] fuse: Unknown parameter '0x0000000000000009' [ 46.126410][ T10] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 46.146053][ T45] usb 2-1: USB disconnect, device number 7 [ 46.295379][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 46.301665][ T1487] tipc: Can't bind to reserved service type 1 [ 46.324347][ T10] usb 1-1: config 0 has no interfaces? [ 46.330811][ T10] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 46.335719][ T1488] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.332'. [ 46.349530][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.368650][ T10] usb 1-1: config 0 descriptor?? [ 46.579125][ T45] usb 1-1: USB disconnect, device number 10 [ 46.672508][ T1468] can0 (unregistered): slcan off ptm0. [ 46.680352][ T1498] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.680812][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 46.680828][ T36] audit: type=1400 audit(1755304362.889:330): avc: denied { read } for pid=1496 comm="syz.1.333" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 46.776456][ T36] audit: type=1400 audit(1755304362.889:331): avc: denied { open } for pid=1496 comm="syz.1.333" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 46.830915][ T36] audit: type=1400 audit(1755304362.939:332): avc: denied { ioctl } for pid=1496 comm="syz.1.333" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 47.647524][ T36] audit: type=1326 audit(1755304363.859:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1508 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e558ebe9 code=0x7fc00000 [ 47.688130][ T1530] rust_binder: Failed copying remainder into alloc: EFAULT [ 47.688161][ T1530] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 47.702198][ T36] audit: type=1326 audit(1755304363.859:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1508 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f77e558ebe9 code=0x7fc00000 [ 47.714427][ T1530] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 47.764423][ T1530] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:304 [ 47.767678][ T36] audit: type=1326 audit(1755304363.859:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1508 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e558ebe9 code=0x7fc00000 [ 47.824626][ T1532] 9pnet_fd: Insufficient options for proto=fd [ 47.853008][ T36] audit: type=1326 audit(1755304363.859:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1508 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e558ebe9 code=0x7fc00000 [ 47.871777][ T1534] netlink: 188 bytes leftover after parsing attributes in process `syz.1.339'. [ 47.908768][ T36] audit: type=1326 audit(1755304363.859:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1508 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e558ebe9 code=0x7fc00000 [ 47.968699][ T36] audit: type=1326 audit(1755304363.859:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1508 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e558ebe9 code=0x7fc00000 [ 48.026863][ T36] audit: type=1326 audit(1755304363.859:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1508 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e558ebe9 code=0x7fc00000 [ 48.044728][ T1545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 48.200423][ T1549] netlink: 84 bytes leftover after parsing attributes in process `syz.3.343'. [ 48.409433][ T1554] kvm: kvm [1553]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 48.418991][ T1554] kvm: kvm [1553]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 48.503236][ T1559] binder: Unknown parameter 'dont_appraise' [ 48.548810][ T1561] 9pnet_fd: Insufficient options for proto=fd [ 48.792798][ T1565] /dev/rnullb0: Can't open blockdev [ 48.834393][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 48.984343][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 48.995971][ T10] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 49.005750][ T1575] rust_binder: Failed to allocate buffer. len:4304, is_oneway:false [ 49.005778][ T1575] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 49.014565][ T10] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 49.049577][ T1575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:322 [ 49.056393][ T10] usb 1-1: config 0 has no interface number 0 [ 49.078492][ T10] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 49.092201][ T10] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 49.107745][ T1577] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 49.107779][ T1577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:200 [ 49.118372][ T10] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 49.149371][ T10] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 26159, setting to 1024 [ 49.172287][ T10] usb 1-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 49.181640][ T1579] can0: slcan on ptm0. [ 49.188966][ T10] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 49.222545][ T10] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 49.239778][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.268209][ T10] usb 1-1: config 0 descriptor?? [ 49.274909][ T1563] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 49.282652][ T1563] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 49.327889][ T1583] can0 (unregistered): slcan off ptm0. [ 49.498695][ T10] usb 1-1: USB disconnect, device number 11 [ 49.632858][ T1613] 9pnet_fd: Insufficient options for proto=fd [ 49.756177][ T1626] rust_binder: Failed copying into alloc: EFAULT [ 49.756204][ T1626] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 49.762702][ T1626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 49.771742][ T1626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:326 [ 50.032374][ T1644] 9pnet_fd: Insufficient options for proto=fd [ 50.081471][ T1646] rust_binder: 336: no such ref 4 [ 50.087321][ T1646] rust_binder: Write failure EINVAL in pid:336 [ 50.354337][ T338] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 50.525690][ T338] usb 1-1: config 0 has an invalid interface number: 95 but max is 0 [ 50.535933][ T338] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.549655][ T338] usb 1-1: config 0 has no interface number 0 [ 50.558820][ T338] usb 1-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 2 [ 50.570778][ T338] usb 1-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 50.584771][ T338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.593601][ T338] usb 1-1: Product: syz [ 50.598596][ T338] usb 1-1: Manufacturer: syz [ 50.603479][ T338] usb 1-1: SerialNumber: syz [ 50.612783][ T338] usb 1-1: config 0 descriptor?? [ 50.619413][ T1647] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 50.889114][ T1668] 9pnet_fd: Insufficient options for proto=fd [ 50.959348][ T1677] overlayfs: failed to clone upperpath [ 52.677176][ T1696] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 53.041339][ T338] usb 1-1: MIDIStreaming interface descriptor not found [ 53.080659][ T338] usb 1-1: USB disconnect, device number 12 [ 53.113171][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 53.113189][ T36] audit: type=1326 audit(1755304369.319:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1698 comm="syz.0.384" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe290d8ebe9 code=0x0 [ 53.148599][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.95/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.202532][ T1700] netlink: 328 bytes leftover after parsing attributes in process `syz.0.384'. [ 53.213078][ T1700] binder: Unknown parameter '0' [ 53.290560][ T1702] 9pnet_fd: Insufficient options for proto=fd [ 53.424738][ T36] audit: type=1400 audit(1755304369.639:363): avc: denied { create } for pid=1710 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 53.670045][ T1727] overlayfs: failed to clone upperpath [ 53.816390][ T1733] fuse: Bad value for 'fd' [ 53.831348][ T36] audit: type=1400 audit(1755304370.039:364): avc: denied { listen } for pid=1730 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.936525][ T1737] netlink: 32 bytes leftover after parsing attributes in process `syz.1.396'. [ 53.993954][ T730] Bluetooth: hci0: Frame reassembly failed (-84) [ 54.635144][ T1747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:249 [ 54.707315][ T1751] rust_binder: 1750 RLIMIT_NICE not set [ 54.719986][ T1751] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 54.734363][ T1751] rust_binder: 252: no such ref 1 [ 54.745897][ T45] rust_binder: 1749: removing orphan mapping 0:1024 [ 54.940428][ T36] audit: type=1400 audit(1755304371.149:365): avc: denied { map } for pid=1764 comm="syz.1.405" path="socket:[11895]" dev="sockfs" ino=11895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 55.032223][ T1767] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1152, size: 4096) [ 55.032253][ T1767] rust_binder: Error while translating object. [ 55.054356][ T1767] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.060893][ T1767] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 55.082354][ T1767] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:262 [ 55.109706][ T338] rust_binder: 1766: removing orphan mapping 0:24 [ 55.154168][ T36] audit: type=1400 audit(1755304371.359:366): avc: denied { sqpoll } for pid=1775 comm="syz.3.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 55.372466][ T1786] netlink: 393 bytes leftover after parsing attributes in process `syz.1.413'. [ 55.382651][ T36] audit: type=1400 audit(1755304371.589:367): avc: denied { watch } for pid=1785 comm="syz.1.413" path="/147/file0" dev="tmpfs" ino=872 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 55.454409][ T368] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 55.614363][ T368] usb 4-1: Using ep0 maxpacket: 16 [ 55.627542][ T368] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.639204][ T368] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 55.651642][ T368] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 55.661202][ T368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.669952][ T368] usb 4-1: Product: syz [ 55.674486][ T368] usb 4-1: Manufacturer: syz [ 55.679197][ T368] usb 4-1: SerialNumber: syz [ 55.928816][ T36] audit: type=1400 audit(1755304372.139:368): avc: denied { getopt } for pid=1787 comm="syz.1.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.074344][ T649] Bluetooth: hci0: command 0x1003 tx timeout [ 56.080481][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.092829][ T368] usb 4-1: 0:2 : does not exist [ 56.101501][ T368] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 56.115377][ T368] usb 4-1: USB disconnect, device number 8 [ 56.404379][ T338] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 56.564368][ T338] usb 1-1: Using ep0 maxpacket: 16 [ 56.570968][ T338] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 56.580457][ T338] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.591123][ T338] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.613950][ T338] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.624519][ T338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.633254][ T338] usb 1-1: Product: syz [ 56.637955][ T338] usb 1-1: Manufacturer: syz [ 56.642755][ T338] usb 1-1: SerialNumber: syz [ 56.821082][ T368] rust_binder: 1806: removing orphan mapping 0:24 [ 57.076511][ T338] usb 1-1: 0:2 : does not exist [ 57.090743][ T338] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 57.117651][ T338] usb 1-1: USB disconnect, device number 13 [ 57.178470][ T36] audit: type=1400 audit(1755304373.389:369): avc: denied { create } for pid=1833 comm="syz.1.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 57.220813][ T1832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.234559][ T1832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.310503][ T1846] overlayfs: failed to clone upperpath [ 57.554347][ T338] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 57.721102][ T338] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 57.742754][ T338] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 57.756507][ T338] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 57.765861][ T338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.776965][ T1853] batadv_slave_1: entered promiscuous mode [ 57.804019][ T338] usb 1-1: config 0 descriptor?? [ 57.876785][ T1860] overlayfs: failed to clone upperpath [ 57.935896][ T1852] batadv_slave_1: left promiscuous mode [ 58.012990][ T338] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 58.021253][ T338] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 58.030322][ T338] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 58.038157][ T338] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 58.046511][ T338] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 58.054803][ T338] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 58.063819][ T338] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 58.074500][ T338] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 58.407299][ T36] audit: type=1400 audit(1755304374.619:370): avc: denied { create } for pid=1863 comm="syz.1.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 58.447416][ T36] audit: type=1400 audit(1755304374.639:371): avc: denied { create } for pid=1863 comm="syz.1.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 58.483242][ T36] audit: type=1400 audit(1755304374.639:372): avc: denied { sys_admin } for pid=1863 comm="syz.1.439" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 58.533086][ T36] audit: type=1400 audit(1755304374.659:373): avc: denied { associate } for pid=1865 comm="syz.1.439" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 58.617432][ T36] audit: type=1400 audit(1755304374.829:374): avc: denied { getopt } for pid=1873 comm="syz.3.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.669564][ T36] audit: type=1400 audit(1755304374.859:375): avc: denied { accept } for pid=1873 comm="syz.3.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.701189][ T338] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 58.720468][ T338] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz1] on syz0 [ 58.789595][ T1880] fido_id[1880]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 59.044332][ T338] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 59.194409][ T338] usb 4-1: Using ep0 maxpacket: 16 [ 59.205171][ T338] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 59.224247][ T338] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 59.244326][ T338] usb 4-1: config 0 has no interface number 0 [ 59.260689][ T338] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 59.293175][ T338] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 59.314353][ T338] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 59.334358][ T338] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 26159, setting to 1024 [ 59.354317][ T338] usb 4-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 59.374342][ T338] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 59.398200][ T338] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 59.414381][ T338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.434653][ T338] usb 4-1: config 0 descriptor?? [ 59.440036][ T1882] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 59.454351][ T1882] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 59.675348][ T36] audit: type=1400 audit(1755304375.889:376): avc: denied { listen } for pid=1881 comm="syz.3.445" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.697065][ T338] usb 4-1: USB disconnect, device number 9 [ 60.408600][ T36] audit: type=1400 audit(1755304376.619:377): avc: denied { ioctl } for pid=1890 comm="syz.3.448" path="socket:[13566]" dev="sockfs" ino=13566 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 60.835044][ T328] bridge_slave_1: left allmulticast mode [ 60.840829][ T328] bridge_slave_1: left promiscuous mode [ 60.865387][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.896132][ T328] bridge_slave_0: left allmulticast mode [ 60.902032][ T328] bridge_slave_0: left promiscuous mode [ 60.916633][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.924374][ T36] audit: type=1400 audit(1755304377.129:378): avc: denied { mounton } for pid=1900 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 61.092704][ T1900] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.100070][ T1900] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.107511][ T1900] bridge_slave_0: entered allmulticast mode [ 61.114104][ T1900] bridge_slave_0: entered promiscuous mode [ 61.121927][ T1900] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.129575][ T1900] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.136950][ T1900] bridge_slave_1: entered allmulticast mode [ 61.143878][ T1900] bridge_slave_1: entered promiscuous mode [ 61.154603][ T328] tipc: Left network mode [ 61.160558][ T328] veth1_macvtap: left promiscuous mode [ 61.166154][ T328] veth0_vlan: left promiscuous mode [ 61.242489][ T1900] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.250155][ T1900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.257476][ T1900] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.264544][ T1900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.291500][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.299868][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.312168][ T730] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.320452][ T730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.330959][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.339651][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.373870][ T1900] veth0_vlan: entered promiscuous mode [ 61.386706][ T1900] veth1_macvtap: entered promiscuous mode [ 61.407369][ T36] audit: type=1400 audit(1755304377.619:379): avc: denied { mount } for pid=1900 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.697620][ T1934] kvm: kvm [1933]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 61.706714][ T1934] kvm: kvm [1933]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 61.800122][ T1937] /dev/rnullb0: Can't open blockdev [ 61.943084][ T1956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=1956 comm=syz.4.465 [ 61.957925][ T1956] rust_binder: Write failure EFAULT in pid:31 [ 62.056240][ T1958] kvm: kvm [1957]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 62.070979][ T1958] kvm: kvm [1957]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 62.298506][ T1969] netlink: 165 bytes leftover after parsing attributes in process `syz.4.470'. [ 62.483290][ T1988] ./cgroup: Can't lookup blockdev [ 62.639376][ T1994] veth1_macvtap: left promiscuous mode [ 62.648133][ T1994] Invalid ELF header magic: != ELF [ 62.653867][ T1994] veth1_macvtap: entered promiscuous mode [ 62.694390][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.711361][ T1996] GUP no longer grows the stack in syz.3.481 (1996): 200000005000-200000008000 (200000004000) [ 62.722427][ T1996] CPU: 1 UID: 0 PID: 1996 Comm: syz.3.481 Not tainted 6.12.38-syzkaller-g830a2dadaa8f #0 657fa2f806e8f8d9bd68ab4c628d532abd8be266 [ 62.722465][ T1996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 62.722480][ T1996] Call Trace: [ 62.722486][ T1996] [ 62.722495][ T1996] __dump_stack+0x21/0x30 [ 62.722524][ T1996] dump_stack_lvl+0x10c/0x190 [ 62.722545][ T1996] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.722567][ T1996] ? futex_lock_pi_atomic+0xdd/0xc70 [ 62.722589][ T1996] dump_stack+0x19/0x20 [ 62.722611][ T1996] fixup_user_fault+0x63d/0x6d0 [ 62.722632][ T1996] fault_in_user_writeable+0x76/0xe0 [ 62.722648][ T1996] futex_lock_pi+0x258/0xa10 [ 62.722667][ T1996] ? __cfi_futex_lock_pi+0x10/0x10 [ 62.722685][ T1996] ? __kasan_check_write+0x18/0x20 [ 62.722710][ T1996] ? wake_up_q+0x10f/0x1c0 [ 62.722735][ T1996] ? __cfi_futex_wake_mark+0x10/0x10 [ 62.722757][ T1996] ? mas_find+0x358/0x5f0 [ 62.722774][ T1996] ? __kasan_check_write+0x18/0x20 [ 62.722797][ T1996] do_futex+0x25c/0x500 [ 62.722813][ T1996] ? __cfi_do_futex+0x10/0x10 [ 62.722827][ T1996] ? __vm_munmap+0x2c7/0x370 [ 62.722845][ T1996] __se_sys_futex+0x28f/0x300 [ 62.722862][ T1996] ? __x64_sys_futex+0x110/0x110 [ 62.722880][ T1996] ? __kasan_check_write+0x18/0x20 [ 62.722906][ T1996] __x64_sys_futex+0xe9/0x110 [ 62.722924][ T1996] x64_sys_call+0x227f/0x2ee0 [ 62.722950][ T1996] do_syscall_64+0x58/0xf0 [ 62.722971][ T1996] ? clear_bhb_loop+0x50/0xa0 [ 62.722990][ T1996] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.723015][ T1996] RIP: 0033:0x7f4c3018ebe9 [ 62.723033][ T1996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.723050][ T1996] RSP: 002b:00007f4c30fd2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 62.723071][ T1996] RAX: ffffffffffffffda RBX: 00007f4c303b5fa0 RCX: 00007f4c3018ebe9 [ 62.723086][ T1996] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 62.723100][ T1996] RBP: 00007f4c30211e19 R08: 0000000000000000 R09: 0000000000000000 [ 62.723112][ T1996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.723124][ T1996] R13: 00007f4c303b6038 R14: 00007f4c303b5fa0 R15: 00007fff0b0617b8 [ 62.723140][ T1996] [ 63.054442][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 63.062123][ T45] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 63.071654][ T45] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 63.082953][ T45] usb 5-1: config 0 has no interface number 0 [ 63.090257][ T45] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 63.104237][ T45] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 63.117106][ T45] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 63.129131][ T45] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 26159, setting to 1024 [ 63.142691][ T45] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 63.153804][ T45] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 63.170866][ T45] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 63.180657][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.180941][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.196725][ T45] usb 5-1: config 0 descriptor?? [ 63.200819][ T2023] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 63.209542][ T1983] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 63.217342][ T1983] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 63.427872][ T45] usb 5-1: USB disconnect, device number 2 [ 63.671666][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 63.671684][ T36] audit: type=1400 audit(1755304379.879:384): avc: denied { bind } for pid=2035 comm="syz.1.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 63.687240][ T2036] netlink: 'syz.1.493': attribute type 13 has an invalid length. [ 63.698057][ T36] audit: type=1400 audit(1755304379.899:385): avc: denied { write } for pid=2035 comm="syz.1.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.107663][ T2056] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 64.107701][ T2056] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:47 [ 64.219419][ T2069] netlink: 72 bytes leftover after parsing attributes in process `syz.4.504'. [ 64.906617][ T2079] mmap: syz.1.507 (2079): VmData 29081600 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 65.163735][ T2084] netlink: 32 bytes leftover after parsing attributes in process `syz.4.509'. [ 65.194391][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.194500][ T649] Bluetooth: hci0: command 0x1003 tx timeout [ 65.250510][ T2089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.259527][ T2089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.271503][ T2089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.280941][ T2089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.494396][ T45] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 65.634389][ T45] usb 4-1: device descriptor read/64, error -71 [ 65.874357][ T45] usb 4-1: device descriptor read/64, error -71 [ 66.114385][ T45] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 66.244431][ T45] usb 4-1: device descriptor read/64, error -71 [ 66.314373][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 66.464443][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 66.471373][ T10] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 66.480206][ T10] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 66.491103][ T10] usb 5-1: config 0 has no interface number 0 [ 66.494358][ T45] usb 4-1: device descriptor read/64, error -71 [ 66.497774][ T10] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 66.516933][ T10] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 66.529227][ T10] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 66.540334][ T10] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 26159, setting to 1024 [ 66.551670][ T10] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 66.562110][ T10] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 66.575757][ T10] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 66.585015][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.594411][ T10] usb 5-1: config 0 descriptor?? [ 66.599833][ T2104] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 66.607235][ T2104] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 66.614834][ T45] usb usb4-port1: attempt power cycle [ 66.820381][ T374] usb 5-1: USB disconnect, device number 3 [ 66.954349][ T45] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 66.975584][ T45] usb 4-1: device descriptor read/8, error -71 [ 67.105693][ T45] usb 4-1: device descriptor read/8, error -71 [ 67.344746][ T45] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 67.365701][ T45] usb 4-1: device descriptor read/8, error -71 [ 67.398835][ T2114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.519'. [ 67.496233][ T45] usb 4-1: device descriptor read/8, error -71 [ 67.512556][ T36] audit: type=1400 audit(1755304383.719:386): avc: denied { write } for pid=2129 comm="syz.4.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 67.598380][ T36] audit: type=1400 audit(1755304383.809:387): avc: denied { map } for pid=2139 comm="syz.1.529" path="socket:[15550]" dev="sockfs" ino=15550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.604524][ T45] usb usb4-port1: unable to enumerate USB device [ 67.648040][ T2142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=2142 comm=syz.1.530 [ 67.662986][ T2142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=2142 comm=syz.1.530 [ 67.677976][ T2142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=2142 comm=syz.1.530 [ 67.804356][ T374] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 67.954376][ T374] usb 5-1: Using ep0 maxpacket: 16 [ 67.963444][ T374] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 67.973157][ T374] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 67.984502][ T374] usb 5-1: config 0 has no interface number 0 [ 67.991279][ T374] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 68.004937][ T374] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 68.017880][ T374] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 68.029581][ T374] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 26159, setting to 1024 [ 68.041910][ T374] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 68.052179][ T374] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 68.065717][ T374] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 68.075409][ T374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.085806][ T374] usb 5-1: config 0 descriptor?? [ 68.091289][ T2138] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 68.098593][ T2138] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 68.309194][ T2138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.318146][ T2138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.345446][ T328] syzkaller0: tun_net_xmit 76 [ 68.350676][ T328] syzkaller0: tun_net_xmit 48 [ 68.350764][ T2138] syzkaller0: create flow: hash 1838799361 index 1 [ 68.365594][ T2138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.374511][ T478] syzkaller0: tun_net_xmit 76 [ 68.376124][ T2138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.391228][ T2138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.400936][ T2138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.422481][ T2137] syzkaller0: delete flow: hash 1838799361 index 1 [ 68.466370][ T478] usb 5-1: USB disconnect, device number 4 [ 68.714470][ T1832] plantronics 0003:047F:FFFF.0007: timeout initializing reports [ 68.729183][ T478] usb 1-1: USB disconnect, device number 14 [ 68.797033][ T2164] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 68.856069][ T2151] rust_binder: 347: no such ref 2 [ 68.865164][ T45] rust_binder: 2150: removing orphan mapping 0:112 [ 68.874340][ T45] rust_binder: 0: removing orphan mapping 112:8 [ 68.954875][ T2175] overlayfs: missing 'lowerdir' [ 68.964480][ T2175] Zero length message leads to an empty skb [ 69.005520][ T2179] 9pnet_fd: Insufficient options for proto=fd [ 69.384476][ T478] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 69.534393][ T478] usb 5-1: Using ep0 maxpacket: 32 [ 69.540975][ T478] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 69.549234][ T478] usb 5-1: config 0 has no interface number 0 [ 69.554434][ T374] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 69.555601][ T478] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 69.574357][ T478] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 69.585825][ T478] usb 5-1: config 0 interface 85 has no altsetting 0 [ 69.594031][ T478] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 69.603209][ T478] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.611373][ T478] usb 5-1: Product: syz [ 69.615581][ T478] usb 5-1: Manufacturer: syz [ 69.620178][ T478] usb 5-1: SerialNumber: syz [ 69.625463][ T478] usb 5-1: config 0 descriptor?? [ 69.678580][ T2212] /dev/rnullb0: Can't open blockdev [ 69.697318][ T2214] binder: Bad value for 'max' [ 69.713264][ T36] audit: type=1400 audit(1755304385.919:388): avc: denied { write } for pid=2216 comm="syz.0.556" name="snmp6" dev="proc" ino=4026532471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 69.714328][ T374] usb 4-1: Using ep0 maxpacket: 16 [ 69.742360][ T374] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 69.752668][ T374] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.763939][ T374] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.773838][ T374] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 69.786751][ T374] usb 4-1: config 7 interface 0 has no altsetting 0 [ 69.793772][ T374] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 69.794558][ T36] audit: type=1400 audit(1755304385.999:389): avc: denied { mounton } for pid=2216 comm="syz.0.556" path="/99/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 69.802847][ T374] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.825996][ T2217] overlay: ./file0 is not a directory [ 69.846938][ T478] usb 5-1: USB disconnect, device number 5 [ 69.874996][ T2222] FAULT_INJECTION: forcing a failure. [ 69.874996][ T2222] name failslab, interval 1, probability 0, space 0, times 0 [ 69.887740][ T2222] CPU: 1 UID: 0 PID: 2222 Comm: syz.0.558 Not tainted 6.12.38-syzkaller-g830a2dadaa8f #0 657fa2f806e8f8d9bd68ab4c628d532abd8be266 [ 69.887775][ T2222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.887786][ T2222] Call Trace: [ 69.887792][ T2222] [ 69.887799][ T2222] __dump_stack+0x21/0x30 [ 69.887825][ T2222] dump_stack_lvl+0x10c/0x190 [ 69.887858][ T2222] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.887870][ T2222] dump_stack+0x19/0x20 [ 69.887882][ T2222] should_fail_ex+0x3d9/0x530 [ 69.887896][ T2222] should_failslab+0xac/0x100 [ 69.887907][ T2222] kmem_cache_alloc_noprof+0x42/0x3a0 [ 69.887922][ T2222] ? getname_flags+0xc6/0x710 [ 69.887931][ T2222] getname_flags+0xc6/0x710 [ 69.887941][ T2222] user_path_at+0x2b/0x60 [ 69.887951][ T2222] do_utimes+0x135/0x2a0 [ 69.887964][ T2222] ? __cfi_do_utimes+0x10/0x10 [ 69.887976][ T2222] ? __kasan_check_write+0x18/0x20 [ 69.887989][ T2222] __x64_sys_utime+0x12e/0x1e0 [ 69.888001][ T2222] ? __cfi_ksys_write+0x10/0x10 [ 69.888010][ T2222] ? __cfi___x64_sys_utime+0x10/0x10 [ 69.888022][ T2222] ? __kasan_check_read+0x15/0x20 [ 69.888035][ T2222] x64_sys_call+0x18a8/0x2ee0 [ 69.888048][ T2222] do_syscall_64+0x58/0xf0 [ 69.888060][ T2222] ? clear_bhb_loop+0x50/0xa0 [ 69.888069][ T2222] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.888083][ T2222] RIP: 0033:0x7fe290d8ebe9 [ 69.888093][ T2222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.888102][ T2222] RSP: 002b:00007fe291b39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 69.888115][ T2222] RAX: ffffffffffffffda RBX: 00007fe290fb5fa0 RCX: 00007fe290d8ebe9 [ 69.888122][ T2222] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000440 [ 69.888129][ T2222] RBP: 00007fe291b39090 R08: 0000000000000000 R09: 0000000000000000 [ 69.888136][ T2222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.888143][ T2222] R13: 00007fe290fb6038 R14: 00007fe290fb5fa0 R15: 00007ffd41ba1bf8 [ 69.888152][ T2222] [ 70.377318][ T2239] overlayfs: failed to clone upperpath [ 70.402844][ T2244] rust_binder: Write failure EFAULT in pid:388 [ 70.418273][ T2246] FAULT_INJECTION: forcing a failure. [ 70.418273][ T2246] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 70.438286][ T2246] CPU: 0 UID: 0 PID: 2246 Comm: syz.0.567 Not tainted 6.12.38-syzkaller-g830a2dadaa8f #0 657fa2f806e8f8d9bd68ab4c628d532abd8be266 [ 70.438321][ T2246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 70.438332][ T2246] Call Trace: [ 70.438338][ T2246] [ 70.438346][ T2246] __dump_stack+0x21/0x30 [ 70.438372][ T2246] dump_stack_lvl+0x10c/0x190 [ 70.438385][ T2246] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.438398][ T2246] dump_stack+0x19/0x20 [ 70.438409][ T2246] should_fail_ex+0x3d9/0x530 [ 70.438424][ T2246] should_fail+0xf/0x20 [ 70.438442][ T2246] should_fail_usercopy+0x1e/0x30 [ 70.438460][ T2246] strncpy_from_user+0x28/0x270 [ 70.438483][ T2246] ? getname_flags+0xc6/0x710 [ 70.438501][ T2246] getname_flags+0x102/0x710 [ 70.438514][ T2246] user_path_at+0x2b/0x60 [ 70.438529][ T2246] do_utimes+0x135/0x2a0 [ 70.438547][ T2246] ? __cfi_do_utimes+0x10/0x10 [ 70.438565][ T2246] ? __kasan_check_write+0x18/0x20 [ 70.438588][ T2246] __x64_sys_utime+0x12e/0x1e0 [ 70.438611][ T2246] ? __cfi_ksys_write+0x10/0x10 [ 70.438627][ T2246] ? __cfi___x64_sys_utime+0x10/0x10 [ 70.438768][ T2246] ? __kasan_check_read+0x15/0x20 [ 70.438792][ T2246] x64_sys_call+0x18a8/0x2ee0 [ 70.438817][ T2246] do_syscall_64+0x58/0xf0 [ 70.438837][ T2246] ? clear_bhb_loop+0x50/0xa0 [ 70.438855][ T2246] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.438879][ T2246] RIP: 0033:0x7fe290d8ebe9 [ 70.438890][ T2246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.438899][ T2246] RSP: 002b:00007fe291b39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 70.438912][ T2246] RAX: ffffffffffffffda RBX: 00007fe290fb5fa0 RCX: 00007fe290d8ebe9 [ 70.438920][ T2246] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000440 [ 70.438927][ T2246] RBP: 00007fe291b39090 R08: 0000000000000000 R09: 0000000000000000 [ 70.438937][ T2246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.438948][ T2246] R13: 00007fe290fb6038 R14: 00007fe290fb5fa0 R15: 00007ffd41ba1bf8 [ 70.438964][ T2246] [ 70.658463][ T2207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.667347][ T2207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.679785][ T36] audit: type=1400 audit(1755304386.869:390): avc: denied { validate_trans } for pid=2206 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 70.687909][ T374] usbhid 4-1:7.0: can't add hid device: -71 [ 70.711876][ T374] usbhid 4-1:7.0: probe with driver usbhid failed with error -71 [ 70.735264][ T374] usb 4-1: USB disconnect, device number 15 [ 70.764013][ T2254] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 70.831982][ T36] audit: type=1400 audit(1755304387.039:391): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 70.860295][ T2263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.574'. [ 70.869820][ T36] audit: type=1400 audit(1755304387.079:392): avc: denied { mount } for pid=2262 comm="syz.4.574" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 70.914872][ T2265] overlayfs: failed to clone upperpath [ 70.947899][ T36] audit: type=1400 audit(1755304387.159:393): avc: denied { unmount } for pid=1900 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 71.030890][ T36] audit: type=1326 audit(1755304387.239:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2283 comm="syz.1.582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77e558ebe9 code=0x0 [ 71.094367][ T10] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 71.201085][ T2301] SELinux: security_context_str_to_sid () failed with errno=-22 [ 71.219585][ T2303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.219614][ T2303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.263489][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 71.281978][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 71.304740][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.313880][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.322309][ T10] usb 1-1: Product: syz [ 71.332669][ T10] usb 1-1: Manufacturer: syz [ 71.341095][ T10] usb 1-1: SerialNumber: syz [ 71.355129][ T2261] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 71.389412][ T36] audit: type=1400 audit(1755304387.599:395): avc: denied { create } for pid=2311 comm="syz.3.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 71.611790][ T2324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.594'. [ 71.814440][ T374] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 71.874342][ T36] audit: type=1400 audit(1755304388.079:396): avc: denied { mounton } for pid=2331 comm="syz.1.597" path="/220/file0" dev="tmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 71.944517][ T374] usb 4-1: device descriptor read/64, error -71 [ 71.969946][ T2337] overlayfs: failed to clone upperpath [ 72.084457][ T45] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 72.133825][ T2350] fuse: Bad value for 'group_id' [ 72.139581][ T2350] fuse: Bad value for 'group_id' [ 72.184421][ T374] usb 4-1: device descriptor read/64, error -71 [ 72.244373][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 72.250718][ T45] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 72.259038][ T45] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 72.269628][ T45] usb 5-1: config 0 has no interface number 0 [ 72.276029][ T45] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 72.287704][ T45] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 72.299284][ T45] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 72.310751][ T45] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 26159, setting to 1024 [ 72.322298][ T45] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 72.333207][ T45] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 72.346814][ T45] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 72.356241][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.365096][ T45] usb 5-1: config 0 descriptor?? [ 72.370933][ T2330] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 72.378630][ T2330] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 72.378876][ T10] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 72.392843][ T10] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 72.434401][ T374] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 72.564426][ T374] usb 4-1: device descriptor read/64, error -71 [ 72.589254][ T478] usb 5-1: USB disconnect, device number 6 [ 72.789769][ T2261] 9pnet_fd: Insufficient options for proto=fd [ 72.798878][ T10] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 72.804399][ T374] usb 4-1: device descriptor read/64, error -71 [ 72.813136][ T10] usb 1-1: USB disconnect, device number 16 [ 72.824824][ T10] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 72.924509][ T374] usb usb4-port1: attempt power cycle [ 73.032538][ T36] audit: type=1326 audit(1755304389.239:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2389 comm="syz.1.609" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77e558ebe9 code=0x0 [ 73.062763][ T2396] syz.1.610 uses obsolete (PF_INET,SOCK_PACKET) [ 73.121242][ T2404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.613'. [ 73.135201][ T2404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 73.135230][ T2404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:152 [ 73.213440][ T2415] overlayfs: overlapping lowerdir path [ 73.264418][ T374] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 73.285651][ T374] usb 4-1: device descriptor read/8, error -71 [ 73.315081][ T2429] /dev/rnullb0: Can't open blockdev [ 73.333527][ T2431] rust_binder: 403: no such ref 3 [ 73.415586][ T374] usb 4-1: device descriptor read/8, error -71 [ 73.654432][ T374] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 73.685821][ T374] usb 4-1: device descriptor read/8, error -71 [ 73.838063][ T374] usb 4-1: device descriptor read/8, error -71 [ 73.975026][ T374] usb usb4-port1: unable to enumerate USB device [ 74.246296][ T2467] syz.0.635: attempt to access beyond end of device [ 74.246296][ T2467] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 74.269530][ T2467] exFAT-fs (loop0): unable to read boot sector [ 74.277932][ T2467] exFAT-fs (loop0): failed to read boot sector [ 74.284938][ T2467] exFAT-fs (loop0): failed to recognize exfat type [ 74.317081][ T2469] netlink: 'syz.0.636': attribute type 4 has an invalid length. [ 74.331542][ T2469] netlink: 3581 bytes leftover after parsing attributes in process `syz.0.636'. [ 74.929523][ T478] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 75.086385][ T478] usb 4-1: config 1 interface 0 has no altsetting 0 [ 75.097511][ T478] usb 4-1: string descriptor 0 read error: -22 [ 75.102055][ T2538] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551611) [ 75.105041][ T2538] rust_binder: Error while translating object. [ 75.105088][ T478] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.40 [ 75.120848][ T2538] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.127361][ T478] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.140723][ T2538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:425 [ 75.358733][ T2476] netlink: 72 bytes leftover after parsing attributes in process `syz.3.638'. [ 75.455073][ T2548] fuse: Unknown parameter '0x0000000000000008' [ 75.468246][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 75.468263][ T36] audit: type=1400 audit(1755304391.679:399): avc: denied { map } for pid=2547 comm="syz.4.663" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 75.735366][ T2555] 9pnet_fd: Insufficient options for proto=fd [ 75.971655][ T2564] 9pnet_fd: Insufficient options for proto=fd [ 76.146005][ T2569] 9pnet_fd: Insufficient options for proto=fd [ 76.575343][ T2571] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.671'. [ 76.764685][ T2575] overlay: Unknown parameter 'dont_measure' [ 77.112951][ T2605] overlayfs: failed to clone upperpath [ 77.398774][ T36] audit: type=1400 audit(1755304393.609:400): avc: denied { create } for pid=2630 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 77.551853][ T478] usbhid 4-1:1.0: can't add hid device: -71 [ 77.559328][ T478] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 77.569760][ T478] usb 4-1: USB disconnect, device number 20 [ 77.605775][ T2647] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 77.656880][ T2645] netlink: 148 bytes leftover after parsing attributes in process `syz.3.696'. [ 77.666519][ T2646] rust_binder: Error while translating object. [ 77.666542][ T2646] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 77.672709][ T2646] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 77.682307][ T2646] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:379 [ 77.697262][ T374] rust_binder: 2644: removing orphan mapping 0:112 [ 77.705832][ T2649] can: request_module (can-proto-0) failed. [ 77.780907][ T2657] overlayfs: failed to clone upperpath [ 77.819308][ T2666] overlayfs: failed to clone upperpath [ 77.827537][ T2667] overlayfs: failed to clone upperpath [ 77.840401][ T730] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.847434][ T36] audit: type=1400 audit(1755304394.059:401): avc: denied { setopt } for pid=2668 comm="syz.4.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.854895][ T2660] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.868673][ T2670] rust_binder: Read failure Err(EAGAIN) in pid:391 [ 78.049620][ T2719] overlayfs: failed to clone upperpath [ 78.107935][ T2738] 9pnet_fd: Insufficient options for proto=fd [ 78.144343][ T478] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 78.198493][ T2765] netlink: 2 bytes leftover after parsing attributes in process `syz.0.739'. [ 78.207917][ T36] audit: type=1400 audit(1755304394.419:402): avc: denied { read } for pid=2764 comm="syz.0.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.229686][ T36] audit: type=1400 audit(1755304394.439:403): avc: denied { shutdown } for pid=2764 comm="syz.0.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.297025][ T478] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 78.309968][ T478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.319161][ T478] usb 4-1: config 0 descriptor?? [ 78.331063][ T2771] overlayfs: failed to clone upperpath [ 78.495833][ T36] audit: type=1400 audit(1755304394.709:404): avc: denied { setopt } for pid=2800 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.528096][ T2685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.542013][ T2685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.552399][ T2685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.555131][ T2813] veth1_vlan: mtu greater than device maximum [ 78.562070][ T2685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.578863][ T2685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.588868][ T2685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.590400][ T2815] overlayfs: failed to clone upperpath [ 78.599854][ T478] usb 4-1: string descriptor 0 read error: -71 [ 78.615013][ T478] usbhid 4-1:0.0: can't add hid device: -71 [ 78.621524][ T478] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 78.633517][ T478] usb 4-1: USB disconnect, device number 21 [ 78.660591][ T2827] overlayfs: failed to clone upperpath [ 78.718330][ T36] audit: type=1400 audit(1755304394.929:405): avc: denied { mounton } for pid=2834 comm="syz.1.762" path="/317/file0" dev="tmpfs" ino=1830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 78.718360][ T2835] fuse: Unknown parameter 'grou*?00000000000000000000' [ 78.804168][ T2835] fuse: Unknown parameter 'f` )# )KK󪕾cl?7g&BmDd#w:BɰHvz ~SFŜ+f'' [ 79.052116][ T36] audit: type=1400 audit(1755304395.259:406): avc: denied { accept } for pid=2842 comm="syz.0.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.072518][ T36] audit: type=1400 audit(1755304395.269:407): avc: denied { read } for pid=2842 comm="syz.0.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.305526][ T36] audit: type=1400 audit(1755304395.519:408): avc: denied { execute } for pid=2851 comm="syz.3.767" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.329659][ T478] rust_binder: 2851: removing orphan mapping 0:8 [ 79.356807][ T2864] mmap: syz.3.773 (2864) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.385517][ T2866] bridge0: entered allmulticast mode [ 79.391082][ T2866] bridge0: left allmulticast mode [ 79.398153][ T2866] can0: slcan on ptm1. [ 79.415507][ T2866] can0 (unregistered): slcan off ptm1. [ 79.430299][ T2868] netlink: 'syz.3.775': attribute type 4 has an invalid length. [ 79.439622][ T2868] rust_binder: Write failure EFAULT in pid:413 [ 79.914381][ T649] Bluetooth: hci0: command 0x1003 tx timeout [ 79.914411][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.942660][ T2872] binder: Unknown parameter 'dir' [ 79.961448][ T2874] rust_binder: Write failure EFAULT in pid:415 [ 79.965832][ T2876] netlink: 32 bytes leftover after parsing attributes in process `syz.4.779'. [ 80.424400][ T478] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 80.458313][ T2901] incfs: Options parsing error. -22 [ 80.464242][ T2901] incfs: mount failed -22 [ 80.558701][ T2903] overlayfs: statfs failed on './file0' [ 80.585362][ T478] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.604335][ T478] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.614752][ T478] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 80.628248][ T478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 80.637483][ T478] usb 4-1: SerialNumber: syz [ 80.779722][ T2910] overlayfs: invalid redirect ((null)) [ 80.796676][ T2910] overlayfs: invalid redirect ((null)) [ 80.844262][ T2891] incfs: Error accessing: ./file0. [ 80.849599][ T2891] incfs: mount failed -20 [ 80.913505][ T478] usb 4-1: 0:2 : does not exist [ 80.924350][ T478] usb 4-1: unit 5: unexpected type 0x0a [ 80.933975][ T478] usb 4-1: USB disconnect, device number 22 [ 80.945944][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 81.234338][ T478] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 81.394406][ T478] usb 4-1: Using ep0 maxpacket: 16 [ 81.400734][ T478] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 81.409031][ T478] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 81.419308][ T478] usb 4-1: config 0 has no interface number 0 [ 81.425422][ T478] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 81.437150][ T478] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 81.448686][ T478] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 81.459812][ T478] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 26159, setting to 1024 [ 81.471030][ T478] usb 4-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 81.481279][ T478] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 81.494431][ T478] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 81.503457][ T478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.511999][ T478] usb 4-1: config 0 descriptor?? [ 81.517249][ T2917] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 81.524537][ T2917] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 81.735661][ T31] usb 4-1: USB disconnect, device number 23 [ 81.768349][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 81.768366][ T36] audit: type=1400 audit(1755304397.979:416): avc: denied { watch_reads } for pid=2930 comm="syz.0.799" path="/161" dev="tmpfs" ino=913 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.836233][ T36] audit: type=1400 audit(1755304398.049:417): avc: denied { map } for pid=2933 comm="syz.4.800" path="socket:[19369]" dev="sockfs" ino=19369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.837060][ T2934] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 81.871566][ T36] audit: type=1400 audit(1755304398.049:418): avc: denied { accept } for pid=2933 comm="syz.4.800" path="socket:[19369]" dev="sockfs" ino=19369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.907888][ T2938] fuse: blksize only supported for fuseblk [ 82.415444][ T36] audit: type=1326 audit(1755304398.629:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2968 comm="syz.4.812" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa88478ebe9 code=0x0 [ 82.494346][ T31] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 82.598637][ T2972] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551611) [ 82.598664][ T2972] rust_binder: Error while translating object. [ 82.614359][ T2972] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.620756][ T2972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:256 [ 82.644410][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 82.659980][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.671030][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.680835][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 82.693849][ T31] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 82.702911][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.711884][ T31] usb 4-1: config 0 descriptor?? [ 83.127161][ T31] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0009/input/input12 [ 83.139967][ T31] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0009/input/input13 [ 83.153242][ T31] kye 0003:0458:5011.0009: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 83.504616][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 83.541875][ T478] usb 4-1: USB disconnect, device number 24 [ 83.654359][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 83.660578][ T31] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 83.668780][ T31] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 83.680532][ T31] usb 5-1: config 0 has no interface number 0 [ 83.686652][ T31] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 83.698324][ T31] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 83.709645][ T31] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 83.720661][ T31] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 26159, setting to 1024 [ 83.731901][ T31] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 83.743426][ T31] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 83.756512][ T31] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 83.765564][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.774211][ T31] usb 5-1: config 0 descriptor?? [ 83.779652][ T2986] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 83.786878][ T2986] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 83.996647][ T31] usb 5-1: USB disconnect, device number 7 [ 84.374371][ T478] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 84.525390][ T478] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.536056][ T478] usb 4-1: config 0 has no interfaces? [ 84.541615][ T478] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 84.550733][ T478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.564441][ T478] usb 4-1: config 0 descriptor?? [ 84.667546][ T3021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.667684][ T3021] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 84.674249][ T3021] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:267 [ 84.684516][ T36] audit: type=1400 audit(1755304400.899:420): avc: denied { ioctl } for pid=3020 comm="syz.4.830" path="socket:[19880]" dev="sockfs" ino=19880 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.771198][ T10] usb 4-1: USB disconnect, device number 25 [ 84.924355][ T478] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 85.233500][ T36] audit: type=1326 audit(1755304401.439:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3031 comm="syz.0.833" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe290d8ebe9 code=0x0 [ 85.257610][ T478] usb 5-1: unable to get BOS descriptor or descriptor too short [ 85.265365][ T478] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 85.274083][ T478] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 85.281848][ T478] usb 5-1: can't read configurations, error -61 [ 85.376206][ T3035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 85.385300][ T3036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 85.414513][ T478] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 85.565805][ T478] usb 5-1: unable to get BOS descriptor or descriptor too short [ 85.573524][ T478] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 85.582487][ T478] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 85.590105][ T478] usb 5-1: can't read configurations, error -61 [ 85.596525][ T478] usb usb5-port1: attempt power cycle [ 85.756376][ T3042] overlayfs: unescaped trailing colons in lowerdir mount option. [ 85.934357][ T478] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 85.956045][ T478] usb 5-1: unable to get BOS descriptor or descriptor too short [ 85.963782][ T478] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 85.972625][ T478] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 85.981016][ T478] usb 5-1: can't read configurations, error -61 [ 86.007702][ T3046] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 86.032198][ T36] audit: type=1400 audit(1755304402.239:422): avc: denied { mounton } for pid=3047 comm="syz.3.839" path="/syzcgroup/unified/syz3" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 86.060844][ T3050] rust_binder: Write failure EFAULT in pid:444 [ 86.114362][ T478] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 86.146273][ T478] usb 5-1: unable to get BOS descriptor or descriptor too short [ 86.156037][ T478] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 86.165594][ T478] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 86.173181][ T478] usb 5-1: can't read configurations, error -61 [ 86.180221][ T478] usb usb5-port1: unable to enumerate USB device [ 86.324349][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 86.358725][ T36] audit: type=1400 audit(1755304402.569:423): avc: denied { shutdown } for pid=3079 comm="syz.1.850" laddr=ff01::1 lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.485509][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 86.492287][ T10] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 86.501566][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.510205][ T10] usb 4-1: config 0 descriptor?? [ 86.918132][ T10] zeroplus 0003:0C12:0005.000A: item fetching failed at offset 0/3 [ 86.926218][ T10] zeroplus 0003:0C12:0005.000A: parse failed [ 86.932206][ T10] zeroplus 0003:0C12:0005.000A: probe with driver zeroplus failed with error -22 [ 86.992177][ T36] audit: type=1400 audit(1755304403.199:424): avc: denied { create } for pid=3106 comm="syz.1.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 87.047761][ T36] audit: type=1400 audit(1755304403.259:425): avc: denied { mounton } for pid=3115 comm="syz.1.866" path="/355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.121012][ T3057] /dev/rnullb0: Can't open blockdev [ 87.126862][ T31] usb 4-1: USB disconnect, device number 26 [ 87.638088][ T3123] overlayfs: failed to clone upperpath [ 87.847797][ T730] Bluetooth: hci0: Frame reassembly failed (-84) [ 88.069167][ T3145] netlink: 104 bytes leftover after parsing attributes in process `syz.4.877'. [ 88.334373][ T478] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 88.464331][ T478] usb 5-1: device descriptor read/64, error -71 [ 88.704352][ T478] usb 5-1: device descriptor read/64, error -71 [ 88.944382][ T478] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 89.013662][ T3158] __vm_enough_memory: pid: 3158, comm: syz.1.882, bytes: 21200474832896 not enough memory for the allocation [ 89.074342][ T478] usb 5-1: device descriptor read/64, error -71 [ 89.314341][ T478] usb 5-1: device descriptor read/64, error -71 [ 89.424485][ T478] usb usb5-port1: attempt power cycle [ 89.564755][ T3169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58130 sclass=netlink_route_socket pid=3169 comm=syz.1.886 [ 89.627327][ T3177] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 89.764335][ T478] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 89.795310][ T478] usb 5-1: device descriptor read/8, error -71 [ 89.886772][ T3181] 9pnet_fd: Insufficient options for proto=fd [ 89.914333][ T649] Bluetooth: hci0: command 0x1003 tx timeout [ 89.914329][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.925490][ T478] usb 5-1: device descriptor read/8, error -71 [ 89.933767][ T36] audit: type=1400 audit(1755304406.139:426): avc: denied { execute } for pid=3185 comm="syz.1.893" path="/dev/rnullb0" dev="tmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.194327][ T478] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 90.225391][ T478] usb 5-1: device descriptor read/8, error -71 [ 90.355384][ T478] usb 5-1: device descriptor read/8, error -71 [ 90.466432][ T478] usb usb5-port1: unable to enumerate USB device [ 90.475381][ T3197] 9pnet_fd: Insufficient options for proto=fd [ 90.487535][ T3199] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 90.665738][ T3213] rust_binder: 3212 RLIMIT_NICE not set [ 90.725322][ T10] rust_binder: 3211: removing orphan mapping 0:1024 [ 90.743483][ T36] audit: type=1400 audit(1755304406.949:427): avc: denied { create } for pid=3214 comm="syz.3.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.004373][ T31] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 91.134364][ T31] usb 4-1: device descriptor read/64, error -71 [ 91.236379][ T3235] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.384334][ T31] usb 4-1: device descriptor read/64, error -71 [ 91.634359][ T31] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 91.764356][ T31] usb 4-1: device descriptor read/64, error -71 [ 92.004368][ T31] usb 4-1: device descriptor read/64, error -71 [ 92.111209][ T3249] batadv_slave_1: entered promiscuous mode [ 92.117253][ T31] usb usb4-port1: attempt power cycle [ 92.118093][ T3248] batadv_slave_1: left promiscuous mode [ 92.226363][ T3255] overlayfs: failed to resolve './file1': -2 [ 92.341819][ T3259] overlay: Unknown parameter 'fowner<18446744073709551615' [ 92.454348][ T31] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 92.456895][ T3276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'. [ 92.476604][ T31] usb 4-1: device descriptor read/8, error -71 [ 92.555140][ T3283] 9pnet_fd: Insufficient options for proto=fd [ 92.597828][ T36] audit: type=1326 audit(1755304408.809:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3291 comm="syz.1.928" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77e558ebe9 code=0x0 [ 92.605378][ T31] usb 4-1: device descriptor read/8, error -71 [ 92.864395][ T31] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 92.885552][ T31] usb 4-1: device descriptor read/8, error -71 [ 93.015390][ T31] usb 4-1: device descriptor read/8, error -71 [ 93.082610][ T3325] rust_binder: 311: no such ref 2 [ 93.124484][ T31] usb usb4-port1: unable to enumerate USB device [ 93.287090][ T3340] x_tables: duplicate underflow at hook 1 [ 93.414336][ T31] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 93.437634][ T36] audit: type=1400 audit(1755304409.649:429): avc: denied { create } for pid=3349 comm="syz.1.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 93.443522][ T3350] netlink: 88 bytes leftover after parsing attributes in process `syz.1.949'. [ 93.465883][ T3350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.949'. [ 93.499400][ T36] audit: type=1400 audit(1755304409.709:430): avc: denied { write } for pid=3355 comm="syz.1.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.528350][ T3358] overlayfs: failed to clone upperpath [ 93.565344][ T31] usb 5-1: config 1 has an invalid interface number: 146 but max is 0 [ 93.573548][ T31] usb 5-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config [ 93.583859][ T31] usb 5-1: config 1 has no interface number 0 [ 93.589971][ T31] usb 5-1: config 1 interface 146 altsetting 0 endpoint 0x8D has invalid maxpacket 52159, setting to 64 [ 93.601128][ T31] usb 5-1: config 1 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.615733][ T31] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb [ 93.625085][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.633090][ T31] usb 5-1: Product: syz [ 93.637529][ T31] usb 5-1: Manufacturer: syz [ 93.641625][ T3368] netlink: 60 bytes leftover after parsing attributes in process `syz.1.956'. [ 93.642131][ T31] usb 5-1: SerialNumber: syz [ 93.652327][ T31] usbserial_generic 5-1:1.146: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 93.664344][ T3368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.956'. [ 93.667798][ T31] usbserial_generic 5-1:1.146: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 93.687412][ T31] usbserial_generic 5-1:1.146: device has no bulk endpoints [ 93.935465][ T31] usb 5-1: USB disconnect, device number 16 [ 94.001472][ T3405] 9pnet_fd: Insufficient options for proto=fd [ 94.042013][ T36] audit: type=1400 audit(1755304410.249:431): avc: denied { shutdown } for pid=3409 comm="syz.0.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.069035][ T36] audit: type=1400 audit(1755304410.249:432): avc: denied { ioctl } for pid=3411 comm="syz.0.971" path="socket:[22615]" dev="sockfs" ino=22615 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.472405][ T3414] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.473480][ T3414] rust_binder: Error while translating object. [ 94.480114][ T3414] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 94.486419][ T3414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:320 [ 94.510517][ T36] audit: type=1326 audit(1755304410.719:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3415 comm="syz.4.973" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa88478ebe9 code=0x0 [ 94.704251][ T36] audit: type=1326 audit(1755304410.909:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3422 comm="syz.0.975" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe290d8ebe9 code=0x0 [ 94.759796][ T36] audit: type=1400 audit(1755304410.969:435): avc: denied { write } for pid=3434 comm="syz.3.980" name="/" dev="9p" ino=1694025360095192279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.760231][ T3435] futex_wake_op: syz.3.980 tries to shift op by 144; fix this program [ 94.782688][ T36] audit: type=1400 audit(1755304410.969:436): avc: denied { add_name } for pid=3434 comm="syz.3.980" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.817786][ T36] audit: type=1400 audit(1755304410.969:437): avc: denied { create } for pid=3434 comm="syz.3.980" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 95.314340][ T778] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 95.443771][ T3454] overlayfs: failed to resolve './file1': -2 [ 95.463413][ T3456] overlayfs: failed to clone upperpath [ 95.468990][ T778] usb 4-1: Using ep0 maxpacket: 16 [ 95.475354][ T778] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.485503][ T778] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.495953][ T778] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.505039][ T778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.513103][ T778] usb 4-1: Product: syz [ 95.517441][ T778] usb 4-1: Manufacturer: syz [ 95.522041][ T778] usb 4-1: SerialNumber: syz [ 95.638743][ T3479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=3479 comm=syz.1.996 [ 95.731686][ T778] usb 4-1: 0:2 : does not exist [ 95.738362][ T778] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 95.749012][ T778] usb 4-1: USB disconnect, device number 31 [ 96.239090][ T3515] overlayfs: missing 'lowerdir' [ 96.249962][ T3519] overlayfs: missing 'lowerdir' [ 96.256558][ T3518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1008'. [ 96.345173][ T3536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.349635][ T3536] rust_binder: 335: no such ref 3 [ 96.372878][ T3536] rust_binder: 335: no such ref 3 [ 96.406858][ T3540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1011'. [ 96.951423][ T3833] can0: slcan on ptm0. [ 97.079145][ T3838] can0 (unregistered): slcan off ptm0. [ 97.207455][ T3893] syz.1.1045 (3893): attempted to duplicate a private mapping with mremap. This is not supported. [ 97.249956][ T3900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1047'. [ 97.266845][ T3902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.274075][ T3902] IPv6: NLM_F_CREATE should be set when creating new route [ 97.281313][ T3902] IPv6: NLM_F_CREATE should be set when creating new route [ 97.289466][ T3902] overlayfs: failed to clone lowerpath [ 97.296006][ T3902] overlayfs: failed to clone lowerpath [ 97.301724][ T3902] overlayfs: failed to clone lowerpath [ 97.307545][ T3902] overlayfs: failed to clone lowerpath [ 97.313281][ T3902] overlayfs: failed to clone lowerpath [ 97.319059][ T3902] overlayfs: failed to clone lowerpath [ 97.324811][ T3902] overlayfs: failed to clone lowerpath [ 97.330498][ T3902] overlayfs: failed to clone lowerpath [ 97.336504][ T3902] overlayfs: failed to clone lowerpath [ 97.342122][ T3902] overlayfs: failed to clone lowerpath [ 97.347850][ T3902] overlayfs: failed to clone lowerpath [ 97.353495][ T3902] overlayfs: failed to clone lowerpath [ 97.359220][ T3902] overlayfs: failed to clone lowerpath [ 97.365000][ T3902] overlayfs: failed to clone lowerpath [ 97.371212][ T3902] overlayfs: failed to clone lowerpath [ 97.376956][ T3902] overlayfs: failed to clone lowerpath [ 97.382614][ T3902] overlayfs: failed to clone lowerpath [ 97.388725][ T3902] overlayfs: failed to clone lowerpath [ 97.394426][ T3902] overlayfs: failed to clone lowerpath [ 97.400105][ T3902] overlayfs: failed to clone lowerpath [ 97.405958][ T3902] overlayfs: failed to clone lowerpath [ 97.411614][ T3902] overlayfs: failed to clone lowerpath [ 97.417343][ T3902] overlayfs: failed to clone lowerpath [ 97.423003][ T3902] overlayfs: failed to clone lowerpath [ 97.428752][ T3902] overlayfs: failed to clone lowerpath [ 97.434543][ T3902] overlayfs: failed to clone lowerpath [ 97.440560][ T3902] overlayfs: failed to clone lowerpath [ 97.446794][ T3902] overlayfs: failed to clone lowerpath [ 97.452469][ T3902] overlayfs: failed to clone lowerpath [ 97.458228][ T3902] overlayfs: failed to clone lowerpath [ 97.463938][ T3902] overlayfs: failed to clone lowerpath [ 97.469449][ T10] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 97.477381][ T3902] overlayfs: failed to clone lowerpath [ 97.483145][ T3902] overlayfs: failed to clone lowerpath [ 97.614393][ T10] usb 4-1: device descriptor read/64, error -71 [ 97.854424][ T10] usb 4-1: device descriptor read/64, error -71 [ 98.034719][ T3937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1059'. [ 98.067008][ T3940] 9pnet_fd: Insufficient options for proto=fd [ 98.091817][ T3945] /dev/nullb0: Can't lookup blockdev [ 98.104335][ T10] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 98.244384][ T10] usb 4-1: device descriptor read/64, error -71 [ 98.494333][ T10] usb 4-1: device descriptor read/64, error -71 [ 98.604464][ T10] usb usb4-port1: attempt power cycle [ 98.858790][ T3967] overlayfs: failed to clone upperpath [ 98.890405][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 98.890420][ T36] audit: type=1400 audit(1755304415.101:452): avc: denied { accept } for pid=3974 comm="syz.0.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 98.923470][ T3979] overlayfs: failed to clone upperpath [ 98.937316][ T3981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30294 sclass=netlink_route_socket pid=3981 comm=syz.0.1073 [ 98.950192][ T10] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 98.957324][ T3981] netlink: 'syz.0.1073': attribute type 28 has an invalid length. [ 98.966826][ T36] audit: type=1400 audit(1755304415.181:453): avc: denied { accept } for pid=3980 comm="syz.0.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.967984][ T3981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30294 sclass=netlink_route_socket pid=3981 comm=syz.0.1073 [ 99.000298][ T10] usb 4-1: device descriptor read/8, error -71 [ 99.137887][ T10] usb 4-1: device descriptor read/8, error -71 [ 99.148442][ T3991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1077'. [ 99.240209][ T3994] kvm: pic: non byte read [ 99.244861][ T3994] kvm: pic: level sensitive irq not supported [ 99.244908][ T3994] kvm: pic: non byte read [ 99.255939][ T3994] kvm: pic: level sensitive irq not supported [ 99.255975][ T3994] kvm: pic: non byte read [ 99.266653][ T3994] kvm: pic: level sensitive irq not supported [ 99.266690][ T3994] kvm: pic: non byte read [ 99.277347][ T3994] kvm: pic: level sensitive irq not supported [ 99.277384][ T3994] kvm: pic: non byte read [ 99.288058][ T3994] kvm: pic: level sensitive irq not supported [ 99.288095][ T3994] kvm: pic: non byte read [ 99.298761][ T3994] kvm: pic: single mode not supported [ 99.298771][ T3994] kvm: pic: level sensitive irq not supported [ 99.304170][ T3994] kvm: pic: non byte read [ 99.346368][ T3994] 9pnet_fd: Insufficient options for proto=fd [ 99.384348][ T10] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 99.405309][ T10] usb 4-1: device descriptor read/8, error -71 [ 99.535397][ T10] usb 4-1: device descriptor read/8, error -71 [ 99.644409][ T10] usb usb4-port1: unable to enumerate USB device [ 99.973632][ T4004] netlink: 'syz.0.1080': attribute type 13 has an invalid length. [ 99.990636][ T36] audit: type=1400 audit(1772081861.194:454): avc: denied { setattr } for pid=4006 comm="syz.0.1081" name="PACKET" dev="sockfs" ino=23485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.041696][ T4016] overlayfs: failed to clone upperpath [ 100.195586][ T4038] input: syz1 as /devices/virtual/input/input14 [ 100.212582][ T4040] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 100.257940][ T36] audit: type=1400 audit(1772081861.464:455): avc: denied { read write } for pid=4048 comm="syz.3.1096" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.289437][ T36] audit: type=1400 audit(1772081861.464:456): avc: denied { open } for pid=4048 comm="syz.3.1096" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.340260][ T4053] rust_binder: Write failure EFAULT in pid:406 [ 100.343934][ T4055] TCP: out of memory -- consider tuning tcp_mem [ 100.359314][ T4055] ------------[ cut here ]------------ [ 100.364815][ T4055] WARNING: CPU: 0 PID: 4055 at net/ipv4/af_inet.c:157 inet_sock_destruct+0x681/0x790 [ 100.374325][ T4055] Modules linked in: [ 100.378229][ T4055] CPU: 0 UID: 0 PID: 4055 Comm: syz.3.1099 Not tainted 6.12.38-syzkaller-g830a2dadaa8f #0 657fa2f806e8f8d9bd68ab4c628d532abd8be266 [ 100.391803][ T4055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.402207][ T4055] RIP: 0010:inet_sock_destruct+0x681/0x790 [ 100.408055][ T4055] Code: a3 e8 a3 26 c3 fc 0f 0b e9 53 fe ff ff e8 97 26 c3 fc 0f 0b e9 92 fe ff ff e8 8b 26 c3 fc 0f 0b e9 c4 fe ff ff e8 7f 26 c3 fc <0f> 0b e9 f6 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 65 fc ff [ 100.427713][ T4055] RSP: 0018:ffffc900013c7be8 EFLAGS: 00010283 [ 100.433800][ T4055] RAX: ffffffff84c2b7b1 RBX: 0000000080004000 RCX: 0000000000080000 [ 100.441789][ T4055] RDX: ffffc90001e53000 RSI: 0000000000004d53 RDI: 0000000000004d54 [ 100.449849][ T4055] RBP: ffffc900013c7c30 R08: ffff888110e9957f R09: 1ffff110221d32af [ 100.457856][ T4055] R10: dffffc0000000000 R11: ffffed10221d32b0 R12: ffff888110e99400 [ 100.465884][ T4055] R13: ffff888110e99400 R14: ffff888110e99564 R15: 1ffff110221d3282 [ 100.473860][ T4055] FS: 00007f4c30fd26c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 100.482808][ T4055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.489434][ T4055] CR2: 0000000000000000 CR3: 0000000115cdc000 CR4: 00000000003526b0 [ 100.497436][ T4055] Call Trace: [ 100.500796][ T4055] [ 100.503717][ T4055] ? __cfi_inet_sock_destruct+0x10/0x10 [ 100.509285][ T4055] __sk_destruct+0x6b/0x6a0 [ 100.513802][ T4055] ? __sk_free+0x304/0x410 [ 100.518232][ T4055] __sk_free+0x313/0x410 [ 100.522477][ T4055] sk_free+0x58/0xb0 [ 100.526390][ T4055] tcp_close+0xc4/0x120 [ 100.530561][ T4055] inet_release+0x1b4/0x2c0 [ 100.535088][ T4055] sock_close+0xdd/0x280 [ 100.539334][ T4055] ? __cfi_sock_close+0x10/0x10 [ 100.544170][ T4055] __fput+0x1fb/0xa00 [ 100.548176][ T4055] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 100.553725][ T4055] ____fput+0x20/0x30 [ 100.557731][ T4055] task_work_run+0x1e0/0x250 [ 100.562325][ T4055] ? __cfi_task_work_run+0x10/0x10 [ 100.567456][ T4055] ? __kasan_check_write+0x18/0x20 [ 100.572579][ T4055] resume_user_mode_work+0x36/0x50 [ 100.577722][ T4055] syscall_exit_to_user_mode+0x64/0xb0 [ 100.583186][ T4055] do_syscall_64+0x64/0xf0 [ 100.587633][ T4055] ? clear_bhb_loop+0x50/0xa0 [ 100.592318][ T4055] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.598237][ T4055] RIP: 0033:0x7f4c3018ebe9 [ 100.602661][ T4055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.622308][ T4055] RSP: 002b:00007f4c30fd2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 100.630752][ T4055] RAX: 0000000000000000 RBX: 00007f4c303b5fa0 RCX: 00007f4c3018ebe9 [ 100.638763][ T4055] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 100.646763][ T4055] RBP: 00007f4c30211e19 R08: 0000000000000000 R09: 0000000000000000 [ 100.654760][ T4055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.662732][ T4055] R13: 00007f4c303b6038 R14: 00007f4c303b5fa0 R15: 00007fff0b0617b8 [ 100.670732][ T4055] [ 100.673749][ T4055] ---[ end trace 0000000000000000 ]---