last executing test programs: 3m47.833300096s ago: executing program 3 (id=48): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}, 0x3000000}, [@migrate={0x50, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0xff, 0x0, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}}, 0x0) 3m47.768255637s ago: executing program 3 (id=50): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r1, 0x1, 0x10, 0x0, &(0x7f0000000680)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xfffffffffffffd6e, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/23, 0x17, 0x1, 0x26}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}, 0x10}], 0x0, 0x0, 0x0}) 3m47.767753837s ago: executing program 3 (id=51): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) read$FUSE(r2, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000003b40)="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", 0x2000, &(0x7f0000005b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x18, 0xfffffffffffffffe, 0x6, {0x8000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x8, {0x2, 0x2, 0x2, 0x6a08, 0x401, 0x80, {0x2, 0x4, 0x1, 0x1, 0x3bc4, 0xfffffffffffff8de, 0x2, 0xfffffff7, 0x8, 0x1000, 0x8, r4, r5, 0x3, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 3m47.270014114s ago: executing program 3 (id=52): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x50) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid={'afid', 0x3d, 0x9}}], [{@obj_role={'obj_role', 0x3d, '{,'}}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0xc000, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)='./bus/file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1b9b80, 0x96) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r7 = eventfd(0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x68400, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r7, 0x1}) socket$inet6(0xa, 0x3, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x8031, 0xffffffffffffffff, 0xffffe000) prctl$PR_SET_VMA(0x2a, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x2002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) syz_clone(0x48910080, 0x0, 0x0, 0x0, 0x0, 0x0) 3m47.076157207s ago: executing program 3 (id=54): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, &(0x7f0000000500)}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) close(r0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TCSETSW2(r2, 0x5453, 0x0) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) write$cgroup_subtree(r3, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m46.88923558s ago: executing program 3 (id=55): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x204, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x300, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) 3m46.84178839s ago: executing program 32 (id=55): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x204, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x300, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) 2m49.311609155s ago: executing program 2 (id=674): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000002240)={&(0x7f0000001d00)={0xa, 0x4e24, 0x21f, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="1400000000000000290000003e00"/24], 0x18}, 0x4080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) rt_sigaction(0x9, &(0x7f00000000c0)={0x0, 0x2, 0x0, {[0xfffffffffffffffc]}}, 0x0, 0x8, &(0x7f00000004c0)) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100000140000021000054"], 0x14}}, 0x4004800) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r4, 0x107, 0x5, 0x0, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x1b, 0x0, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0xff06, &(0x7f0000000000)={@fd, @fd, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 2m49.179954526s ago: executing program 2 (id=675): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_mreq(r1, 0x29, 0x12, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x12, r0, 0xeca66000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000040)) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000100)={'binder0\x00'}) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000000c0)=0x1, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) read(r3, &(0x7f0000000280)=""/4096, 0x1000) r4 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa, 0x11}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) ioctl$RNDADDENTROPY(r5, 0x40085203, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000eb00"]) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000080)={0x40, 0x9, 0x1, 0x5, 0x8, 0x60, 0x8}, 0xc) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r7, 0x29, 0x39, 0x0, &(0x7f0000000000)) setsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f0000000240)=0x4, 0x1) socket$packet(0x11, 0x2, 0x300) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) kcmp(r8, 0x0, 0x5, r7, r9) 2m49.126922358s ago: executing program 2 (id=676): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) write$cgroup_int(r1, &(0x7f0000000040)=0x700, 0xfdef) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000740)={0x30}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x208000000000002}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)={0x2}) 2m48.96419543s ago: executing program 2 (id=678): unshare(0x2040600) r0 = socket$packet(0x11, 0x3, 0x300) tee(r0, r0, 0x8, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x7a5840, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r2 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x0) 2m48.94062934s ago: executing program 2 (id=679): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x4a) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, &(0x7f00000000c0)) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x4b, 0x48, "4372070000001000476fb2940acfbe4c0e24fa98ddf306e50000b646376f385355617a34d3b53d6b401aa41ee158"}}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) ioctl$BLKRRPART(r0, 0x125f, 0x0) 2m48.889135201s ago: executing program 2 (id=680): r0 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x3ff, 0x5, 0xb68, 0x6, 0xffff, 0x3, 0xa43c}, 0xf) r1 = socket(0x9, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req={0x2, 0x9717, 0x4, 0xffffffff}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x9200000000000000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 2m32.833863209s ago: executing program 33 (id=680): r0 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x3ff, 0x5, 0xb68, 0x6, 0xffff, 0x3, 0xa43c}, 0xf) r1 = socket(0x9, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req={0x2, 0x9717, 0x4, 0xffffffff}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x9200000000000000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 1m5.3075764s ago: executing program 5 (id=1613): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xb3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB='nr_inodes=1']) syz_clone3(0x0, 0x0) chdir(&(0x7f0000000340)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg$unix(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xd2fc64283d314d70, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) futex(0x0, 0x84, 0x2, 0x0, &(0x7f00000001c0), 0x22) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000000280)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000ac0)='\x00\x00\x00\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\xc8\x99@\xfb\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x00\x00\x00\x00\x00\x00\a\x83\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00') r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f0000000040)=0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) sendmsg$can_bcm(r1, &(0x7f0000000740)={&(0x7f0000000180)={0x1d, r8}, 0x10, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="07000000fdfff9ff010000036f0000005c0be06538839f9617868d015048c6b75e1289ef622aad0261f0ba985da24ffdc4852c949bfb74a6899f", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0300008001000000030000a00f010000f575c266cbffb40ddda014ad739ae294045af29e51b5ab98e7875305aa0e058cbb1516d407836c75cdb8e347c622842c2feaebd55afce10a551c2487c8c17083"], 0x80}, 0x1, 0x0, 0x0, 0x4040841}, 0x40000) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@mcast2, @in6=@mcast1, 0x4e23, 0x6, 0x4e22, 0xc, 0xa, 0x40, 0x0, 0x2, r7, r9}, {0x8, 0x7, 0x4, 0x93a, 0x0, 0x80000001, 0xb, 0xfffffffffffffffb}, {0x9, 0x8, 0x4, 0x1}, 0x3, 0x1ff, 0x0, 0x0, 0x0, 0x2}, {{@in6=@mcast1, 0x4d5, 0xff}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x2, 0x1, 0x10, 0xb3, 0x8000, 0xffffff37}}, 0xe8) 1m5.229173031s ago: executing program 5 (id=1614): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x8100}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) 1m5.136096372s ago: executing program 5 (id=1615): syz_usb_connect$cdc_ecm(0x0, 0x55, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1}, [@mdlm_detail={0x8, 0x24, 0x13, 0x6, "2d107747"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x8, 0x1, 0x3, 0x800, 0x9, 0x5, 0x3, 0x75, 0x8, 0x5, 0x86, 0x9, 0x6, 0x43, 0xf, 0x1, [0xa, 0x10001]}}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$inet(0x2, 0x2, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @empty}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r4 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r4], 0x20}}, 0x40816) syz_open_dev$evdev(&(0x7f0000000000), 0x51bf3295, 0x101040) 1m3.731875193s ago: executing program 5 (id=1626): r0 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write(r0, &(0x7f0000000180)="6a26217daec1495864f85d16da6e23f9bcce70ea", 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x20) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0x2000000000006b, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000000010"]) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r4, &(0x7f0000000740), 0x10) 1m2.812330057s ago: executing program 5 (id=1629): r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@loopback, @local}, &(0x7f0000000240)=0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000", 0x14, 0x0, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) 1m2.56818681s ago: executing program 5 (id=1630): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4188aea7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x45809000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000700)="1f7179c1433cf2ad4a409d12d7a2e9f63007d767fe4bd14f60b59904d64d1c1d94478f8a6dc9c074f609771df2", 0x2d, 0x800, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/218, 0xda, 0x0, 0x0}, &(0x7f0000000080)=0x40) 1m2.56792955s ago: executing program 34 (id=1630): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4188aea7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x45809000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000700)="1f7179c1433cf2ad4a409d12d7a2e9f63007d767fe4bd14f60b59904d64d1c1d94478f8a6dc9c074f609771df2", 0x2d, 0x800, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/218, 0xda, 0x0, 0x0}, &(0x7f0000000080)=0x40) 6.294011816s ago: executing program 6 (id=2110): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="83038bb6742b16cb50b5f7e6b599d89bc6829425e4af60bf0b6d26d37f884cc45aaf3ef04a6a8c552832ab3a56a6af5e4aa498383333cff07bb10710c92f4378579508e54c8a2150c00e0ec05c839a9137fe1f61f95f3d5259256a948b5b6e06fa5ca4a53dbe30a2eeaa61d170cd3245922242e6558ff71360fb4b47e2a03dc9667af9"]}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, &(0x7f00000002c0)=ANY=[], 0x0}, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) fchmod(r3, 0x11) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x7) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xbc, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@flat=@weak_binder={0x77622a85, 0x100a, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x20000000029}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x3}}, &(0x7f00000000c0)={0x0, 0x18, 0x40}}, 0x1000}, @increfs={0x40046304, 0x2}, @exit_looper, @acquire={0x40046305, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x90a, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}}, @enter_looper, @acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3bad, &(0x7f0000000400)={0x0, 0x3fb0, 0x10, 0x0, 0x14f}, 0xfffffffffffffffc, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r4) 4.129711889s ago: executing program 6 (id=2131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'team_slave_1\x00', 0x400}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @fda={0x66646185, 0x5, 0x0, 0x34}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 4.02243542s ago: executing program 6 (id=2133): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004300), 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20, 0x0, 0x800000000, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) lseek(r3, 0x4, 0x0) r4 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, 0x0) 3.888786412s ago: executing program 6 (id=2134): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000092}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x3265a) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x200}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x18054}, 0x8000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010ac05418200f8ff0000010902240001000000000904000001030000000921000000010105000905810300000000"], 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x20002, 0x0) 2.568288531s ago: executing program 1 (id=2148): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020500030c0000000020000000000000030005000000000002004e22e00000020000000000000000020001000000000000001d0b0000000005002d"], 0x60}}, 0x0) 2.512073062s ago: executing program 1 (id=2149): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = gettid() openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1e5003, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb2020000) setuid(r2) r5 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r5, &(0x7f0000000740), 0xff67) fcntl$addseals(r5, 0x409, 0x8) fchown(r1, r2, r3) r6 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r6) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000000000000f0000000e0001006e657464657673696d0000000f0002006e657464657673696d300075d42eae0008"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r9) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x1}, @register_looper], 0x50, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) syz_clone3(&(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, &(0x7f0000002980)=[0x0], 0x1}, 0x58) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) 2.281778466s ago: executing program 1 (id=2154): r0 = epoll_create(0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000080)=0x1ff, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x1fd, 0x7, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84, 0x21}, {0x6}]}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x2, 0x0, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x200000000002, 0x0, 0x10000, 0x8, 0x4002004c4, 0x1000, 0x80000000000000, 0x0, 0x7ff, 0x0, 0x3, 0x8000, 0x0, 0x8c], 0xeeee8000, 0xd0550}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r8, 0x0, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_SET_TIME(r10, 0x4008700c, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r9, &(0x7f00000000c0)={0x1000000d}) r11 = getpgid(0x0) syz_open_procfs(r11, &(0x7f0000000100)='net/igmp6\x00') syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x3000) 2.108433758s ago: executing program 0 (id=2157): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="a0010000100001000000000000100000fe8000000000000000000000000000bbff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x1a0}}, 0x0) 2.051950619s ago: executing program 4 (id=2158): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x1, 0x0) write$uinput_user_dev(r1, &(0x7f00000002c0)={'syz0\x00', {0x7ff, 0x6, 0x4, 0x9}, 0x48, [0xf03b, 0x4, 0x6b54ba5b, 0x8, 0x7ff, 0x19, 0x401, 0x6, 0x8, 0x5, 0x7, 0x7, 0x3, 0x8, 0x0, 0x43a, 0x400, 0x1, 0x6, 0x9, 0x9, 0x730, 0xfffff000, 0x61, 0x4, 0x80000000, 0x1, 0x1, 0x9, 0x1, 0x1c0, 0xfff, 0x8, 0x864c, 0x2, 0x5, 0x400, 0x17cbc6a7, 0xfc3, 0x7, 0x1, 0x6, 0x400, 0x80, 0x81, 0xf3, 0x8d, 0x8000, 0x1, 0x9, 0x5, 0x4, 0x100, 0x7f, 0x200, 0x0, 0x6, 0xfffffb81, 0x2, 0xaeb80000, 0x507440df, 0x8, 0x147, 0x1], [0x401, 0x800, 0x5, 0x3ff, 0x2, 0x0, 0x1ff, 0x8, 0x7, 0x80000001, 0x4, 0x200, 0x7ffc, 0x9, 0xfffffffe, 0x0, 0x3, 0x8, 0x1, 0x40, 0x1, 0x5, 0x9, 0x8, 0x4, 0x80000000, 0x1ff, 0x60, 0x1, 0x5, 0x9, 0x10000, 0x1, 0xc, 0x8000, 0x92, 0x10000, 0x101, 0x0, 0x7ff, 0x2cf, 0x8d9, 0x9, 0x3, 0x2, 0x7, 0x1, 0x37, 0xffffffff, 0x6, 0x8cbb2a9, 0xfffffff5, 0x1, 0x40000004, 0x9, 0x2, 0xfffffff7, 0xfff, 0x3, 0x4, 0x7, 0x10, 0x6, 0x7f], [0xff, 0xcd98, 0x2, 0xb2, 0x6, 0x12, 0x45a, 0x6, 0x9, 0xffffffff, 0x50b, 0x8001, 0x9257, 0x80000000, 0x7fff, 0x2, 0xffff0001, 0x1000, 0x5, 0x2, 0x7, 0x1, 0x6, 0x2, 0x8, 0x9, 0x4, 0x7, 0xff, 0x2, 0x284, 0x8, 0x7, 0x1, 0x9, 0x7f, 0xf17, 0x8, 0x6, 0x8000, 0x9, 0x30000, 0x8, 0x8, 0x6, 0x1, 0xdde9, 0x6, 0x401, 0x7fff, 0x0, 0x7, 0x4, 0x0, 0x3, 0x1, 0xc8, 0x0, 0x4, 0x80, 0x8, 0x2, 0x24d4, 0x2], [0xffff4d44, 0x0, 0x8, 0x3, 0x2, 0x9, 0x5, 0xffff, 0x1, 0x1, 0x7, 0x4, 0x6, 0xff, 0x5, 0x40, 0xc0, 0x4, 0x1, 0x0, 0x6, 0x3, 0xfffffffc, 0xb3, 0xfffffff7, 0x101, 0x3, 0x1, 0x4000081, 0x1, 0x400, 0x4, 0xfeb, 0xf3e, 0x4, 0xa, 0x8, 0x400, 0x87e9, 0x6, 0x9a2b, 0x2, 0x6000, 0xddc4, 0x0, 0x40, 0x1, 0x3, 0x4, 0x3, 0x9, 0x0, 0x1000, 0x6, 0x4, 0x9, 0x9, 0x0, 0x6, 0x8, 0x7ff, 0x8d, 0x7, 0x10]}, 0x45c) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x7fffffff, 0xc284, 0x1dda, 0x10000, 0x11, "8cdb19d445d9e1b163836078ab8c8d5e638348"}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000780)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0xb5, {0xb5, 0x31, "39192de13ee866b8fd6173a9c9bc0481a440dd7aa9583613bac932f8069584d5bc3e1b3d0f32e2599b34c7647303eb2ed568e1bbc8107067bd24828cef56671df09354468182ed6f86ddd6cf685e1ab63c7e42ee374f8624378f773f77dbf6a6bf808a0bb7519aff30561f1c50eff0f30a75b9f50068838ccfefdcd9a6da4d2c8c992748764e415d9a15ccf4bcf3fc44211589a7473f677dd42a4853d8fa5c0f6073e5e650017c357d0f74ec195b8129cc8e6e"}}, &(0x7f0000000040)={0x0, 0x3, 0x7, @string={0x7, 0x3, "1d006241a4"}}, &(0x7f0000000240)={0x0, 0xf, 0x51, {0x5, 0xf, 0x51, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x1}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x2, 0x7, 0x4, 0x4}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "e989101fccddee231c4bdf5cc0b10719"}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x80, 0xf000, 0x4, [0x1fe000f, 0xc000, 0x3f, 0xdbae4b648673fad1, 0xff0000]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x4, 0x3, "16df7088", "5fb2ecc4"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x4, 0x4, 0xe7, 0x80, 0xa, 0xa}}}, &(0x7f0000000b80)={0x84, &(0x7f00000007c0)={0x0, 0x16, 0x39, "96ada0ca3bc6670461b7e2fecf962c5331d6b81c1d367b1980a27dcb0bcaa965d8992c6abcd3f9eb435e87194cc1615ee8eade10c432d4de3a"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x12}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x4a}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000008c0)={0x20, 0x0, 0x8, {0x100, 0x40, [0xf0f]}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000980)={0x40, 0xb, 0x2, "f3ee"}, &(0x7f00000009c0)={0x40, 0xf, 0x2}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "b532"}, 0xfffffffffffffffd, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0xe}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x2}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x3}], 0x0, 0x1000000, 0x0}) 2.01363782s ago: executing program 0 (id=2159): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x35}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x8, 0x37329eb4e3cada4, 0x81, 0x4, {{0x36, 0x4, 0x2, 0xc, 0xd8, 0x68, 0x0, 0xf7, 0x29, 0x0, @broadcast, @rand_addr=0x64010102, {[@cipso={0x86, 0x37, 0x3, [{0x6, 0x4, "9fa3"}, {0x0, 0xc, "f8e36ff31d0b8f0ab8cd"}, {0x0, 0x4, "fbe6"}, {0x2, 0x8, "18e05bfcb843"}, {0x0, 0xd, "e12e81ff5e5c7d2fa33cfb"}, {0x0, 0x3, 'R'}, {0x5, 0x3, 'I'}, {0x6, 0x2}]}, @timestamp_prespec={0x44, 0x4c, 0x46, 0x3, 0x8, [{@local, 0x13}, {@remote}, {@loopback, 0x100}, {@loopback, 0x10}, {@private=0xa010101, 0x80}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x1}, {@rand_addr=0x64010102, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @end, @generic={0x86, 0x9, "c6dee2c1024bd3"}, @timestamp_addr={0x44, 0x1c, 0xf4, 0x1, 0x7, [{@local, 0x9}, {@local, 0xff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x21, 0x1, 0x0, [{@rand_addr=0x64010100, 0x3}]}, @cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}]}}}}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x4c, r1, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000080}, 0x4000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xaece, 0x2) preadv(r5, &(0x7f0000000280)=[{&(0x7f00000031c0)=""/154, 0x9a}], 0x1, 0x3a, 0xfffffffc) 1.874751532s ago: executing program 0 (id=2160): r0 = socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socket$packet(0x11, 0x2, 0x300) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000140)={0x80000000, {{0xa, 0x4e22, 0x7, @local, 0xa3}}, {{0xa, 0x4e22, 0x617a, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}}, 0x108) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) 1.396135029s ago: executing program 4 (id=2161): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="002204", 0x7f8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, 0x0) listen(r1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {0x0}], 0x2}}], 0x1, 0x2, 0x0) 1.139156633s ago: executing program 1 (id=2162): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a4"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1.017319935s ago: executing program 4 (id=2163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 908.315336ms ago: executing program 4 (id=2164): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c010000150001002cbd7000fbdbdf256401010100000000000000030000000000000000000000000000ffff7f0000014e240a874e210009", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000020000000c"], 0x15c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 907.865426ms ago: executing program 0 (id=2165): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff77, 0x0, &(0x7f0000000140)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000000400010002081008418e00000004fcff", 0x58}], 0x1) 901.798246ms ago: executing program 4 (id=2166): r0 = socket$can_bcm(0x1d, 0x2, 0x2) fsync(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @private, 0x0}, &(0x7f0000000200)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x1, 0x20, 0x0, 0x70, {{0x25, 0x4, 0x1, 0x1f, 0x94, 0x65, 0x0, 0x5, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x14, 0x11, 0x1, 0xd, [{@remote, 0x8001}, {@private=0xa010101, 0x2}]}, @timestamp={0x44, 0x1c, 0x91, 0x0, 0x7, [0x7, 0x2, 0x0, 0x0, 0x5, 0x6]}, @end, @generic={0x86, 0x8, "d8842ddb8eed"}, @noop, @noop, @timestamp_prespec={0x44, 0x44, 0x91, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x66ba473}, {@loopback, 0x1}, {@remote, 0x8}, {@multicast2, 0x4}, {@rand_addr=0x64010102, 0x18000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@multicast1, 0xcb4d}, {@empty, 0x2}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0x0, 0xf8, 0x356, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, 0x8, 0x20, 0x40, 0x57}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x7800, 0x20, 0x1ff, 0x5, {{0x1d, 0x4, 0x1, 0x0, 0x74, 0x67, 0x0, 0xc, 0x29, 0x0, @local, @multicast2, {[@generic={0x7, 0x10, "4ac402c26bdc7a1d407e05d626ae"}, @end, @lsrr={0x83, 0x13, 0xa6, [@local, @remote, @local, @dev={0xac, 0x14, 0x14, 0x1e}]}, @timestamp_prespec={0x44, 0xc, 0x4c, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x20}, 0x4}]}, @timestamp_prespec={0x44, 0x2c, 0x97, 0x3, 0x1, [{@multicast2, 0xf3}, {@broadcast, 0xb}, {@multicast1, 0x8000}, {@loopback, 0x4}, {@remote, 0xa6b}]}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000600)={&(0x7f0000000140), 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa0, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000680), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'sit0\x00', &(0x7f00000006c0)={'gre0\x00', r5, 0x7, 0x40, 0x81, 0x7, {{0x1f, 0x4, 0x2, 0x14, 0x7c, 0x67, 0x0, 0x5, 0x29, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x1c, 0x1c, 0x0, 0x5, [0x401, 0xa, 0x3, 0x1, 0x1, 0x800]}, @timestamp_addr={0x44, 0x4c, 0x17, 0x1, 0x9, [{@empty, 0x983d}, {@rand_addr=0x64010102, 0x7}, {@multicast1, 0x5}, {@multicast2, 0x1}, {@loopback, 0x4}, {@empty, 0x1}, {@loopback, 0xb}, {@private=0xa010100, 0x7f}, {@multicast2, 0x512e}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'ip6_vti0\x00', r3, 0x2b, 0x48, 0x6, 0x7, 0x42, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x40, 0x700, 0x1, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001080)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001040)={&(0x7f0000000900)={0x704, r7, 0x200, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x38b}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r9}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc6e5}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r6}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffed}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r3}, {0x26c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1600}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x704}, 0x1, 0x0, 0x0, 0x20040800}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001100)={'vxcan1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001340)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001300)={&(0x7f0000001140)={0x18c, r7, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r10}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7, 0x57, 0x19, 0x1}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1d3}}}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x24004011}, 0xc0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x3c, r13, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x0, 0x66}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "b93ac5a21998ee8c90a2498f5703eb5f"}]}, 0x3c}}, 0x40000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000002240)={&(0x7f0000001500), 0xc, &(0x7f0000002200)={&(0x7f0000001540)={0xc90, r13, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x2, 0x3}}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x380, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x4}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x95}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x17c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x168, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x200, 0x4, 0x6, 0xe, 0xf800, 0x8, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0x0, 0x9, 0x8f4, 0x8, 0x7ff, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0x1}, {0x4, 0x6}, {0x6, 0x4}, {0x2, 0x9}, {0x4, 0x9}, {0x0, 0x1}, {0x1, 0x6}, {0x7, 0x5}, {0x1, 0x6}, {0x4, 0x9}, {0x0, 0x4}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x9}, {0x3, 0x8}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x6}, {0x3, 0x7}, {0x7, 0x8}, {0x0, 0xa}, {0x0, 0xa}, {0x6, 0x9}, {0x2, 0x8}, {0x2, 0x3}, {0x6}, {0x6, 0x2}, {0x4, 0x5}, {0x2, 0x3}, {0x1, 0x7}, {0x4, 0x3}, {0x7, 0x5}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x2}, {0x0, 0x6}, {0x4, 0xa}, {0x2}, {0x1, 0x1}, {0x0, 0xa}, {0x3, 0x6}, {0x0, 0xa}, {0x4, 0x1}, {0x0, 0x9}, {0x6, 0x4}, {0x4, 0x5}, {0x3, 0x6}, {0x7, 0x7}, {0x7, 0x3}, {0x2, 0x3}, {0x5, 0x8}, {0x4, 0x3}, {0x0, 0x6}, {0x5, 0x9}, {0x0, 0x4}, {0x7, 0x5}, {0x3}, {0x0, 0x7}, {0x0, 0x8}, {0x5, 0x6}, {0x6, 0x9}, {0x2, 0x7}, {0x3, 0x2}, {0x0, 0xa}, {0x6, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x4, 0x2, 0x1, 0xf001, 0xc0, 0x401]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0x3}, {0x3, 0x6}, {0x4, 0x6}, {0x5, 0x5}, {0x0, 0x1}, {0x2, 0x2}, {0x0, 0x1}, {0x6, 0x9}, {0x3, 0x5}, {0x7}, {0x6, 0x1}, {0x4, 0x6}, {0x1, 0x3}, {0x5, 0x5}, {0x2}, {0x1, 0x6}, {0x7}, {0x1, 0x2}, {0x2}, {0x4, 0x4}, {0x4, 0x5}, {0x4, 0x6}, {0x2, 0x6}, {0x7, 0x1}, {0x4, 0x2}, {0x0, 0x5}, {0x2, 0x7}, {0x7, 0x8}, {0x2, 0x4}, {0x6, 0x6}, {0x1}, {0x6, 0x6}, {}, {0x5, 0x7}, {0x6, 0x1}, {0x0, 0x4}, {0x7, 0x8}, {0x7, 0x9}, {0x0, 0x2}, {0x4, 0x2}, {0x1, 0xa}, {0x0, 0x4}, {0x0, 0xa}, {0x3, 0x5}, {0x5, 0x9}, {0x4, 0x9}, {0x2, 0x3}, {0x1, 0x5}, {0x3, 0x6}, {0x2, 0x7}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xf}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x5}, {0x0, 0x1}, {0x7, 0xa}, {0x3}, {0x1, 0x5}, {0x2, 0x5}, {0x2, 0x3}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0xa}, {0x7, 0x5}, {0x1, 0x1}, {0x7, 0xa}, {0x4, 0x8}, {0x3}, {0x6, 0x7}, {0x1, 0xa}, {0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x3, 0x3}, {0x1, 0x1}, {0x7, 0x7}, {0x0, 0xa}, {0x6, 0x8}, {0x5, 0x8}, {0x4, 0x6}, {0x2}, {0x3, 0x9}, {0x3, 0xa}, {0x2, 0x4}, {0x7, 0xa}, {0x0, 0x7}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x2, 0x1}, {0x4, 0x7}, {0x2, 0x3}, {0x3, 0x2}, {0x2, 0x8}, {0x6, 0x4}, {0x4, 0x4}, {0x2, 0x2}, {0x2, 0x3}, {0x4}, {0x6, 0x7}, {0x6, 0x3}, {0x3, 0x9}, {0x1, 0x4}, {0x1, 0x5}, {0x0, 0xa}, {0x2, 0x3}, {0x3, 0x5}, {0x0, 0xa}, {0x1, 0xa}, {0x7, 0xa}, {0x7, 0x1}, {0x4, 0x9}, {0x1, 0x4}, {0x1, 0x9}, {0x3, 0x5}, {0x3, 0x7}, {0x0, 0x5}, {0x6, 0x5}, {0x1, 0x1}, {0x6}, {0x4, 0x5}, {0x1, 0x6}, {0x7, 0x6}, {0x1, 0x2}, {0x1, 0x5}, {0x0, 0x8}, {0x6, 0xa}, {0x0, 0x5}, {0x5, 0x3}, {0x6, 0x1}, {0x6}, {0x1, 0x3}, {0x0, 0x6}]}]}]}]}, {0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x198, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x3, 0x1a, 0x25, 0x6, 0x5, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x7}, {0x1, 0x8}, {0x4, 0x9}, {0x3, 0x9}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x6}, {0x3, 0x4}, {0x0, 0x2}, {0x1}, {0x2, 0x4}, {0x4, 0x1}, {0x7, 0x5}, {0x3, 0x8}, {0x6, 0x7}, {0x0, 0x3}, {0x7, 0x6}, {0x4, 0x5}, {0x6, 0x1}, {0x0, 0x8}, {0x5, 0x1}, {0x7, 0xa}, {0x3, 0x4}, {0x0, 0xa}, {0x5, 0x9}, {0x7, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0xa}, {0x2, 0x4}, {0x6}, {0x5, 0x8}, {0x4, 0x2}]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x5, 0x4}, {0x7, 0x8}, {}, {0x1, 0x8}, {0x7, 0x3}, {0x6, 0x7}, {0x1, 0x4}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x5, 0x1}, {0x2, 0x2}, {0x2}, {0x0, 0x8}, {0x7, 0x5}, {0x7, 0x9}, {0x1, 0x5}, {0x6, 0xa}, {0x7, 0x8}, {0x4}, {0x0, 0x4}, {0x1, 0xa}, {0x4, 0xa}, {0x7, 0x9}, {0x2, 0x7}, {0x1, 0x7}, {0x5, 0xa}, {0x5, 0x8}, {0x5, 0x7}, {0x1}, {0x3, 0x3}, {0x6, 0x9}, {0x1}, {0x1, 0x5}, {0x4, 0x7}, {0x5, 0x1}, {0x0, 0x6}, {0x6, 0x5}, {0x0, 0xa}, {0x1, 0x1}, {0x6, 0xa}, {0x1, 0x4}, {0x0, 0x6}, {0x1, 0x7}, {0x2, 0x1}, {0x2, 0x5}, {0x1, 0x4}, {0x0, 0x8}, {0x5, 0x6}, {0x2, 0x4}, {0x1, 0x9}, {0x7, 0x9}, {0x6, 0x4}, {0x1, 0xa}, {0x4, 0xa}]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xfff0, 0xe, 0xc0, 0xbe41, 0x39, 0xfffb, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xfd22, 0x0, 0x3, 0x1800, 0x8, 0x7, 0x7]}}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x2, 0x1}, {0x2, 0x5}, {0x1, 0xa}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x2}, {0x1, 0x7}, {0x2, 0x6}, {0x6, 0x6}, {0x0, 0x4}, {0x1, 0x2}, {0x7, 0xa}, {0x6, 0x3}, {0x2, 0x5}, {}, {0x1, 0x9}, {0x3, 0x2}, {0x0, 0x2}, {0x6, 0xa}, {0x6}, {0x2, 0x9}, {0x7, 0x2}, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x5}, {0x6, 0x6}, {0x1, 0x8}, {0x7, 0xa}, {0x3, 0x7}, {0x6}, {0x2, 0x7}, {0x7, 0x8}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0xa}, {0x0, 0xa}, {0x0, 0xa}, {0x3, 0x8}, {0x0, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x7, 0x1, 0xa, 0x80, 0xffff, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc5ff, 0x4, 0x6, 0x0, 0x8, 0x2, 0x4, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x0, 0x12, 0x1b, 0x9, 0x65, 0x24, 0x12, 0x60, 0x24, 0x30, 0x1b, 0x3, 0xc, 0x0, 0x36, 0x6d, 0x0, 0x6, 0x30, 0x0, 0x6, 0x30, 0x1b, 0x3, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x24, 0x3, 0x24, 0x1, 0x24, 0x4, 0x3, 0x1, 0x5, 0x36, 0x5, 0x5, 0x3, 0x36, 0x12, 0x4, 0x6d, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x16, 0x1, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5e}]}]}, @NL80211_ATTR_TID_CONFIG={0x58c, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x10}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x92}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x35}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x2d4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2d0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x80, 0xc, 0x8000, 0x2b, 0x9, 0xfe4c, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x2, 0x7fff, 0x4, 0x7ff, 0x9, 0x40]}}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfff, 0x9ae, 0xf54, 0x9, 0x0, 0x800, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x6f, 0x7, 0x0, 0x4, 0x4, 0x5]}}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x7, 0x9}, {0x6, 0x4}, {0x0, 0x1}, {0x3, 0x4}, {0x0, 0xa}, {0x0, 0x2}, {0x6, 0x6}, {0x4, 0xa}, {0x1, 0xa}, {0x6, 0x4}, {0x1, 0x1}, {0x4, 0x7}, {0x4, 0x7}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0xa}, {0x6}, {0x5}, {0x3, 0x8}, {0x0, 0xa}, {0x7, 0x7}, {0x0, 0x9}, {0x2, 0x4}, {0x5, 0x9}, {0x4, 0x9}, {0x5, 0x1}, {0x7, 0x7}, {0x5, 0x6}, {0x6, 0x9}, {0x3, 0x6}, {0x0, 0x6}, {0x7, 0x5}, {0x3}, {0x2, 0x9}, {0x7, 0x4}, {0x4, 0x4}, {0x4, 0x9}, {0x1, 0x3}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x1}, {0x1, 0x9}, {0x7, 0x9}, {0x0, 0x1}, {0x7, 0x6}, {0x0, 0x6}, {0x5, 0x4}, {0x1, 0x7}, {0x5, 0x1}, {0x0, 0x5}, {0x6, 0x1}, {0x6, 0x8}, {0x4, 0x1}, {0x1, 0x7}, {0x4, 0x8}, {0x4, 0x8}, {0x5, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x0, 0x9}, {0x3, 0x5}, {0x1, 0x8}, {0x1, 0x7}, {0x0, 0x5}, {0x6, 0x4}, {0x1}, {0x2, 0x2}, {0x5, 0x4}, {0x5, 0x1}, {0x2, 0x3}, {0x0, 0x7}, {0x3, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x6, 0xa}, {0x1, 0x7}, {0x7, 0x9}, {0x2, 0x7}, {0x3, 0x8}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x2}, {0x0, 0x9}, {0x4, 0xa}, {0x2, 0x1}, {0x0, 0xa}, {0x0, 0x5}, {0x6, 0x3}, {0x0, 0x9}, {0x4}, {0x2, 0x8}, {0x5, 0xa}, {0x4, 0x5}, {0x1, 0x1a}, {0x2, 0x5}, {0x4, 0x2}, {0x6, 0x1}, {0x6, 0x3}, {0x7, 0x2}, {0x1, 0x4}, {0x0, 0x6}, {0x4, 0x5}, {0x2, 0x6}, {0x1, 0x2}, {0x4, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x3, 0x1}, {0x6, 0x5}, {0x2, 0x1}, {0x2, 0x6}, {0x3, 0x5}, {0x3}, {0x4, 0x3}, {0x2, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x5}, {0x6, 0x1}, {0x4, 0x5}, {0x7, 0x3}, {0x5, 0x9}, {0x7, 0xa}, {0x1, 0xa}, {0x5, 0x2}, {0x7, 0x3}, {0x4, 0x4}, {0x4, 0x8}, {0x1, 0xa}, {0x2, 0x8}, {0x0, 0x4}, {0x7, 0x1}, {0x4, 0x8}, {0x2, 0x5}, {0x4, 0x2}, {0x4, 0x4}, {0x1, 0x4}, {0x1, 0x6}, {0x6}, {0x6, 0x6}, {0x1, 0x5}, {0x5, 0x3}, {0x4, 0x2}, {0x5, 0x2}, {0x3, 0x1}, {0x6, 0x9}, {0x7, 0xa}, {0x1}, {0x1, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x4, 0x1}, {0x3, 0xa}, {0x5, 0x3}, {0x2, 0x8}, {0x3, 0x3}, {0x2, 0x6}, {0x6, 0x7}, {0x1}, {0x2, 0x1}, {0x4, 0x8}, {0x4, 0xa}, {0x7, 0x4}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x2}, {0x2, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x7, 0x1}, {0x2, 0x5}, {0x3, 0x6}, {0x3, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x26aa, 0x8, 0x7, 0x401, 0x864, 0xc21, 0x40]}}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x3, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1ff, 0x200, 0x5, 0x3, 0x401, 0xb6, 0x6]}}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x6, 0x1}, {0x4, 0x6}, {0x3, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x5, 0x4}, {0x2, 0x8}, {0x6, 0x3}, {0x3, 0x7}, {0x1, 0x8}, {0x6, 0x1}, {0x0, 0x7}, {0x1, 0x6}, {0x0, 0x5}, {0x3, 0x6}, {0x7, 0x5}, {0x1, 0x6}, {0x7, 0x9}, {0x0, 0x7}, {0x6, 0x6}, {0x0, 0x8}, {0x0, 0x7}, {0x6, 0x1}, {0x5, 0x4}, {0x3, 0x8}, {0x5, 0xa}, {0x7}, {0x0, 0x6}, {0x5}, {0x0, 0x8}, {0x2, 0x6}, {0x5, 0x8}, {0x7, 0x2}, {0x5, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x5, 0x5}, {0x6, 0x9}, {0x1, 0x3}, {0x4, 0x3}, {0x7, 0x5}, {0x0, 0x5}, {0x1}, {0x0, 0xa}, {0x5, 0x2}, {0x6, 0x4}, {0x0, 0x4}, {0x6, 0x1}, {0x5}, {0x4, 0x2}, {0x2, 0x9}, {0x1, 0x2}, {0x2, 0x7}, {0x0, 0x9}, {0x0, 0x4}, {0x3, 0x5}, {0x5, 0x7}, {0x7, 0x5}, {0x6, 0xa}, {0x5, 0x8}, {0x1, 0x8}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5, 0xee80583dd0aaefb1, 0x48, 0x12, 0x1, 0xc, 0x1b, 0x6, 0xc, 0x4, 0x2, 0x36, 0x60, 0x5, 0x12, 0x12, 0x12, 0x5, 0x6, 0xd, 0x30, 0x4, 0x0, 0x12]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0xa000, 0x2, 0x3ff, 0x7f, 0x8, 0x6]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x6, 0xa}, {0x1, 0x8}, {0x1, 0x8}, {0x5, 0x5}, {0x1, 0x4}, {0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x6}, {0x4, 0x8}, {0x4, 0x4}, {0x0, 0x9}, {0x4}, {0x7, 0x8}, {0x5, 0x7}, {0x6, 0x2}, {0x5, 0x9}, {0x2, 0x2}, {0x7, 0x2}, {0x1, 0x3}]}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x36, 0x12, 0x3, 0x12, 0xb, 0xb, 0x5, 0x4, 0x9, 0x48, 0x3, 0x6c, 0xb, 0x6, 0x36, 0xb, 0x2, 0x4, 0x6c]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x3, 0x5, 0x60, 0x0, 0x30, 0xc, 0x30, 0x20, 0x3, 0x48, 0x90, 0x2, 0x1b, 0x60, 0x16, 0x2d, 0x48, 0xc, 0x3, 0xc, 0x68, 0x36, 0x2, 0xb, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6, 0xc, 0x1, 0x6e, 0x18, 0x6, 0xb, 0x18, 0x3, 0x3, 0xc, 0x60, 0x2, 0x4, 0x2, 0x11, 0x1b, 0x5, 0x1, 0x24]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0xa}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x6, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x9}, {0x7, 0x7}, {0x6, 0x8}, {0x4, 0x8}, {0x1, 0x1}, {0x0, 0xa}, {0x3, 0x2}, {0x2, 0x5}, {0x3, 0x8}, {}, {0x1, 0x7}, {0x3, 0x4}, {0x3, 0x5}, {0x7, 0x6}, {0x6, 0x5}, {0x0, 0x2}, {0x1, 0x8}, {0x2, 0x9}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x8}, {0x4, 0x5}, {0x1, 0x3}, {0x6, 0x1}, {0x2}, {0x6, 0x6}, {0x1, 0x5}]}]}]}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0xff, 0x6, 0x8000, 0x2, 0x11a5, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0x48, 0x2, 0xc, 0x12, 0x1d, 0x3c, 0x4, 0x3, 0x24, 0xb, 0x77, 0x12, 0x4, 0x12, 0x5, 0x3, 0x69, 0x36, 0x6, 0xb, 0x4, 0x1, 0x36, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc7}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}, {0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000000}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x63}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfe000}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf8, 0x0, 0x2, 0x7f54, 0x1, 0x3, 0x0, 0xc7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc7, 0x2, 0x9, 0x9, 0xfff7, 0x0, 0x7fff, 0x9]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0xb, 0x3, 0x6, 0x6c, 0xc, 0x24, 0x1, 0x2, 0x5, 0x18, 0x30, 0x6, 0x24, 0x1, 0xc]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x48, 0x48, 0x60, 0x1, 0x6, 0x32, 0xb, 0x3b, 0x18, 0xc, 0x6c]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb8a, 0x7, 0x2, 0x6, 0x3, 0x629d, 0x4, 0x3]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xfffe, 0x8373, 0xe17b, 0x2, 0x1, 0x2, 0x2]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x3, 0x2}, {0x7, 0x4}, {0x1}, {0x5, 0x1}, {0x2, 0x3}, {0x0, 0x8}, {0x3, 0x5}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0xf, 0x1, 0x9, 0xfffc, 0x5, 0x4, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0x36, 0x44, 0x9, 0x2, 0x60, 0x5, 0x16, 0x12, 0x12, 0x4, 0x7e, 0x16, 0x5, 0x60]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x2, 0x6}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0x5}, {0x6, 0x5}, {0x5, 0x7}, {0x0, 0x2}, {0x5, 0x9}, {0x6, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x55e1, 0x5, 0x8000, 0x6, 0x2, 0x5, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x344, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xb3}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdd}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x44}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x244, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x180, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x8000, 0xfffe, 0x10, 0x81, 0xe8b, 0x1000, 0x1ff]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x4}, {0x5}, {0x3, 0x3}, {0x6, 0x5}, {}, {0x2, 0x2}, {0x6, 0x9}, {0x7, 0x6}, {0x2, 0x3}, {0x5, 0x2}, {0x7, 0x4}, {0x6, 0x3}, {0x0, 0x4}, {0x2, 0x9}, {0x0, 0x1}, {0x0, 0x5}, {0x3, 0x9}, {0x7, 0x5}, {0x2, 0x4}, {0x3, 0x3}, {0x1, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x7, 0x2}, {0x1, 0x5}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x4}, {0x5, 0x6}, {0x6, 0x3}, {0x2, 0x9}, {0x1, 0x1}, {0x4, 0x4}, {0x3, 0xa}, {0x5, 0x9}, {0x3, 0x7}, {0x1, 0x3}, {0x5, 0x4}, {0x4, 0x7}, {0x6, 0x5}, {0x6, 0x6}, {0x1, 0xa}, {0x4, 0x7}, {0x1, 0x7}, {0x6, 0xa}, {0x0, 0x4}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x7}, {0x6, 0x7}, {0x7, 0xa}, {0x7}, {0x4, 0x1}, {0x3, 0xa}, {0x1, 0x9}, {0x0, 0x3}, {0x3, 0x3}, {0x5, 0x5}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0x2}, {0x3, 0x5}, {0x3, 0xa}, {0x0, 0x2}, {0x4, 0x7}, {0x1, 0x3}, {0x7}, {0x2, 0x3}, {0x7, 0x5}, {0x2, 0x8}, {0x1, 0x3}, {0x6, 0x5}, {0x4, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x7f0, 0x3, 0x3, 0x5, 0x3, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x9, 0x1, 0x3, 0xd3c, 0x8, 0x7, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x1}, {0x6, 0x1}, {}, {0x5, 0x8}, {0x4, 0x8}, {0x0, 0x4}, {0x0, 0x5}, {0x0, 0x8}, {0x1, 0x5}, {0x0, 0x2}, {0x1, 0x9}, {0x2}, {0x7, 0x8}, {0x6, 0x1}, {0x7, 0x2}, {0x4, 0x8}, {0x7, 0x6}, {0x2, 0x6}, {0x0, 0x3}, {0x7, 0x3}, {0x5}, {0x5}, {0x7}, {0x4, 0x4}, {0x1, 0xa}, {0x3, 0x9}, {0x3, 0x5}, {0x2, 0x4}, {0x6, 0x8}, {0x6, 0x8}, {0x4, 0x4}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x8}, {0x2, 0x1}, {0x7, 0x4}, {0x1, 0x4}, {0x6, 0x1}, {0x4, 0x5}, {0x6, 0x6}, {0x0, 0x6}, {0x3, 0x2}, {0x4, 0x5}, {0x0, 0xa}, {0x1, 0x8}, {0x1, 0x2}, {0x6, 0x7}, {0x1, 0x3}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0x5}, {0x1, 0x4}, {0x5, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x4}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x1, 0x9}, {0x3, 0x9}, {0x5, 0x6}, {0x4, 0x5}, {0x7}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x7}, {0x7, 0x4}, {0x1, 0x9}, {0x5, 0x9}, {0x4, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x6, 0x8}, {0x7, 0x2}, {0x5, 0xa}, {0x7, 0xa}, {0x0, 0x9}, {}, {0x1, 0x3}, {0x3, 0x8}, {0x4, 0xa}, {0x3, 0x8}, {0x2, 0x2}, {0x0, 0x5}, {0x1, 0x2}, {0x3, 0x9}, {0x7, 0x3}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0x1}, {0x2, 0x5}, {0x5, 0xa}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x8}, {0x0, 0x1}, {0x6, 0x5}, {0x2, 0x4}, {0x1, 0x1}, {0x3, 0x9}, {0x3, 0x1}, {0x7, 0x6}, {0x4, 0x8}, {0x3, 0x4}, {}, {0x1, 0x8}, {0x2, 0x6}, {0x7, 0x8}, {0x7, 0x1}, {0x7, 0x2}, {0x3, 0x7}, {0x4, 0x6}, {0x5, 0x1}, {0x6, 0xa}, {0x5, 0x4}, {0x4, 0xa}, {0x1, 0x9}, {0x4, 0x5}, {}, {0x2, 0x4}, {0x4, 0x5}, {0x7, 0x5}, {0x6, 0x4}, {0x2, 0x7}, {0x1, 0x6}, {0x4, 0x7}, {0x3}, {0x7, 0x9}, {0x1, 0x9}, {0x1, 0x3}, {0x3}, {0x2, 0x3}, {0x3}, {0x0, 0x6}, {0x4, 0x2}, {0x1, 0x8}, {0x6, 0x1}, {0x1, 0x4}, {0x0, 0x2}, {0x6, 0x7}, {0x4, 0x5}, {0x2, 0x3}, {0x6}, {0x6, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x6, 0x2, 0x40, 0x2b, 0x2d4c, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x11, 0x2, 0x8, 0x100, 0x6, 0x401, 0xff, 0x7]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x98, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x894, 0x2, 0x7, 0x0, 0x0, 0x38e8, 0x8, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x8, 0x5, 0x5, 0x6, 0x2, 0x195, 0xff]}}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x5, 0x5}, {0x1, 0xa}, {0x3, 0x1}, {0x7, 0x5}, {0x6, 0xa}, {0x0, 0x7}, {0x1, 0x6}, {0x4, 0xa}, {0x4, 0x2}, {0x0, 0x4}, {0x1, 0x2}, {0x1, 0x1}, {0x3, 0xa}, {0x3, 0x4}, {}, {0x3, 0x4}, {0x6, 0x9}, {0x1, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x7}, {0x4, 0x7}, {0x6, 0x8}, {0x6, 0x4}, {0x1, 0x7}, {0x6, 0x7}, {0x3, 0x5}, {0x1, 0x4}, {0x4, 0x4}, {0x2, 0x7}, {0x2}, {0x3, 0x5}, {0x0, 0x3}, {0x1, 0x4}, {0x0, 0x7}, {0x7, 0x6}, {0x2, 0x3}, {0x0, 0x2}, {0x1, 0x1}, {0x2}, {0x0, 0x9}, {0x7, 0x7}, {0x5, 0x6}, {0x3, 0x3}, {0x3, 0x3}, {0x4, 0x2}, {0x4, 0x2}, {0x5}, {0x1, 0x8}, {0x3, 0xa}, {0x7, 0x4}, {0x3, 0x3}, {0x6, 0x1}, {0x6, 0xa}, {0x4, 0x4}, {0x0, 0x8}, {0x4, 0x9}, {0x2, 0x9}, {0x6, 0x1}, {0x6, 0x2}, {0x1, 0x7}, {0x0, 0x1}, {0x0, 0x5}, {0x0, 0x9}, {0x0, 0x7}, {0x2, 0x8}, {0x5}, {0x2, 0x2}, {0x3}, {0x7, 0x3}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6e}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x400}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x43}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x29}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0xc90}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x48, r13, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xc8acad}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x81}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x3}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x400000}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x5}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040804}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000023c0)) r15 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002440), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000003f40)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003f00)={&(0x7f0000002480)={0x1a50, r15, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0xb80, 0x8, 0x0, 0x1, [{0x824, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ALLOWEDIPS={0x268, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x58c, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x40}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8001}}]}, {0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xb0, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}]}, {0x198, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x130, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9cce9dc0bf2a60b3944bae778781a29905622d85e16634d7e95b6565ed02da4d"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7825df36b26843f176adb70969dc93be3af06d2159670153df64d5952f271876"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e59181c3f466ca3c1f469eba90c15a883b817ae5936aff8450befa36526c2e34"}]}, {0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x81}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00', 0x1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x49}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a4c11e6cb866c7daf4c0f932e791f1da03595e4ae9ce34e3b585d2c1c98635ec"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_PEERS={0x70, 0x8, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3080c88856e67c909cd694d4b602ce62e561f44c0f559f16b6ec13eadaf13957"}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PEERS={0xe1c, 0x8, 0x0, 0x1, [{0x578, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x14c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x50, @loopback, 0x97}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7c04bc6c3850823b28d11f236d188dc9f3cd354909e82167c596374a9deb8568"}, @WGPEER_A_ALLOWEDIPS={0x358, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010100}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0b1fcd0bf33d32f82008f37c6343b03d4306401c23b9ab9d0f316ee426772532"}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010101}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @private2, 0x3}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x7a8, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x124, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x31}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7c736c159d0cd37e4ed3366a4f9244d053f65ebcb59b417888ebfcd75c58c290"}, @WGPEER_A_ALLOWEDIPS={0x5fc, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}]}]}, {0xb8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f0f6c507354854d18f325d9983e2c56b8fe7afa914a6e7a6c144b2a8b32535b4"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xb, @mcast2, 0x1000}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @loopback, 0x80}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x1a50}, 0x1, 0x0, 0x0, 0x8800}, 0x20004814) r16 = dup(r0) socket$packet(0x11, 0x3, 0x300) r17 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000003f80), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r16, 0x3, r17, &(0x7f0000003fc0)={0xa0000004}) 828.405527ms ago: executing program 4 (id=2167): r0 = socket$inet(0x2, 0x80003, 0x1ff) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000004c0)={@local, @local, 0x0, 0x4, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1]}, 0x20) r1 = syz_usb_connect(0x0, 0x45, &(0x7f0000000440)=ANY=[@ANYBLOB="12014101bc949c2099040b501905010203010902330001000010000904310702f2cf89000824020106031010072401030901100905060200020d0006090582070002"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'wg0\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) mount$9p_virtio(0x0, 0x0, 0x0, 0x800046, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r6, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000023c0)={{0x1, 0x0, 0x80, {0xeeee0000, 0x5000}}, "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", "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"}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r6, 0x0) getsockopt$netlink(r3, 0x10e, 0x4, 0x0, &(0x7f0000000000)) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000000)={0x20, 0xd, 0x5c, {0x5c, 0xb, "590b8fec798cf5f09506270a4110f4ec9f4817e81c1bb4f23c5fe7a0cd2d85472c95c0ff8f44d98dfe8420d75e304f2969a2c755dff3caf379b6082f947a75602a4b401d61572f3861f61331489774ee58da969e612e37de7846"}}, &(0x7f0000000080)={0x0, 0x3, 0x96, @string={0x96, 0x3, "c7d57e6ae985f29c96a16512754f75feb00f4d87b408aeca3635b7bd1d318463540bd5ef3164fc2aa0cf68272723f3777a0347df475412d70f127f1c39bff5a7dc0195d2d5b2033945443cc26b92cb10ea8e1f1cea43e9ed65c8b6d552018685f91a1984fdf72f30d489a284e1b5e4c1873bf9250d1d18a0431e30bbc4ecfa3ca5b5967ebd29ce4169b2b2454bb141d24b542309"}}, &(0x7f0000000140)={0x0, 0x22, 0xd, {[@local=@item_4={0x3, 0x2, 0x6, "ab73fe6d"}, @local=@item_4={0x3, 0x2, 0x0, "90da13c6"}, @global=@item_012={0x2, 0x1, 0xb, "e985"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffc, 0x7, 0x1, {0x22, 0x6b1}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x0, 0x1d, 0x67, "6ba2c3cfae1037928cc21a1cd4db681357ff4e82121438e6e393bc8e0c5c027e7c056db98cb23587abc560e76be20acbe199f8cf9af7ab92ca4f86e406392de00c624c53c536f1d17ff51faf21fe23cbbf8389e2ae421f6eed0f9356c92fb66938bd822b423c41"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x1, 0xb5, "f5a5e40d3acacf600fd77899e44337e607f8bcb57a153324d6ca106762dbf7e1bc393001d17c09cee98fd41ba5f9862bc94f72c752de8c59d73aea516ba195a34c89a148d8e967b0b20086a6b2c43535080279c38151a77fc8b397c8cce246b8db5873ea7b4434e7bfee7978d06f12bcab1d4107862232e2941a639b4a812a45540525e780694843307b61825b5cea56b8326e8c41755bfd966a7731b0483b05282893e9245de4cf54b3a016369f2ec82b23427a5d"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x9}}) 768.086338ms ago: executing program 0 (id=2168): r0 = socket$packet(0x11, 0x3, 0x300) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000001c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x875, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = timerfd_create(0x9, 0x80800) read(r3, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000000740)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af25, 0xffffffffffffffff) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="c0", 0x1, 0x0, &(0x7f0000000000)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @remote}, 0x14) 670.96448ms ago: executing program 0 (id=2169): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) userfaultfd(0x80801) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0xc0403d08, 0xffffffffffffffff) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r4, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0xffffffffffffff33, 0x0, &(0x7f0000000000)=[@acquire, @register_looper, @request_death={0x400c630e, 0x1}, @increfs_done={0x40106308, 0x1}, @enter_looper, @dead_binder_done], 0x0, 0x0, 0x0}) 580.335811ms ago: executing program 6 (id=2170): r0 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x375, 0x2003) r1 = socket(0x1e, 0x3, 0x2) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x5, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x80, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x218204, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@mcast2, @broadcast, 0x14, 0x17}}) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x2) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000140)="7d80e46d81030fe4f14a086277e1e10b61bf60b3677f206235e895319694a238f2c661bcc89427ccb89b", 0x2a}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20001, 0x21) getsockopt$nfc_llcp(r1, 0x118, 0x2, &(0x7f0000000200)=""/230, 0xe6) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000300)=0x1000000, 0x4) r6 = fsmount(r3, 0x0, 0x75) ioctl$VT_GETMODE(r6, 0x5601, &(0x7f0000000340)) read$FUSE(r4, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r3, &(0x7f00000023c0)={0x18, 0x0, r7, {0x10d}}, 0x18) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000002400), &(0x7f0000002440)={0x0, 0xfb, 0xac, 0x0, 0x8, "b780fb315db01363bf858e8f537e4bac", "011d3337cf6e33a5fa6b123a9d2482f01be3a44f0bf320d99156e090a2f93d3c287e93d7adb6ef75221e8942696d531e7051784a7df53cdaf36d4b050bbd63d8d1a3aaa4c61f1a4391374e607e065d5f58eb13562528a23fb7e4e2744309f639b89c6a8acbf7691d96be8ffd4e97b211f57d96281710282f0ee1f82f2e396f76158c2ddb586abecfd33a4476a5a6a1e19c405ea2920a28"}, 0xac, 0x1) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r8, 0x80286722, &(0x7f0000002600)={&(0x7f0000002500)=""/199, 0xc7, 0x0, 0x7ff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000002640)={0x8, 'wlan0\x00', {'bond_slave_0\x00'}, 0x7}) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000002680), 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r9, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x48, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x58}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6ae}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x800) fcntl$setown(r6, 0x8, r0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002800)={'veth0_to_batadv\x00'}) ioctl$KVM_GET_PIT2(r5, 0x8070ae9f, &(0x7f0000002840)) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000028c0)) r10 = openat$cgroup_ro(r6, &(0x7f0000002900)='cgroup.controllers\x00', 0x0, 0x0) faccessat(r2, &(0x7f0000002940)='./file0\x00', 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r10, 0x40189429, &(0x7f0000002980)={0x0, 0x7fffffffffffffff, 0x8140}) 464.004543ms ago: executing program 6 (id=2171): mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x400408, &(0x7f0000000cc0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x8001, 0x4, 0x0, 0x1c, 0x5, 0x2, 0x2, 0x2, 0xf9, 0x2, 0x80, 0xe, 0x1}, {0x6, 0x80, 0x8, 0xc4, 0x8, 0x7, 0x8, 0x9, 0x7, 0xff, 0x0, 0x4}, {0xf2a5, 0xd, 0x1, 0x9, 0x2, 0x6, 0x9, 0x6, 0x7f, 0x9, 0x56, 0xc, 0x100}], 0x4}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r8, 0x10001, 0x0) 178.453787ms ago: executing program 1 (id=2172): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000140)=ANY=[@ANYBLOB="3000852c2120ae59dd3e91449800ee", @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf250a0000001c000180080003000000000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004000) r8 = socket$vsock_stream(0x28, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x60800, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, 0x0, 0x20000800) r10 = socket$nl_audit(0x10, 0x3, 0x9) r11 = getpgid(0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r13) sendmsg$netlink(r10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000880)=[{0x0, 0x790}], 0x1, &(0x7f0000000b00)=[@cred={{0x1c, 0x1, 0x2, {r11, r13, 0xee01}}}], 0x20, 0x40000}, 0x400c810) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=2173): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x38, 0x0, &(0x7f0000000040)=[@increfs_done={0x40106308, 0x2}, @increfs_done={0x40106308, 0x2}, @decrefs, @increfs={0x40046304, 0xffffffff}], 0xc7, 0x0, &(0x7f00000001c0)="8de722ce01ff78e5858e22ab71a5333e4bfead226eeff19df6c8ccc2dc6bbbb9525d74f8c4f3ea8fb26e3da91b57cce08e46e82e350597614fbf803b2edd069dcffc9e795539474e801ca29b51d29e0522924b9131f64d2225049bfc83116fcbd1b6213967c398390881d4cdedff333438d01295f8324033b81d102d19a11e0a66ccc052237ace177716e259e6266d3c2e70df8e6553b38c1c7db879cea757e767edddc0cfb42d82dd9364e3d8928d82b992004381a1f096fc545dac4e8457359c37047f5f7a94"}) kernel console output (not intermixed with test programs): tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.365964][ T36] audit: type=1400 audit(1750458979.918:26979): avc: denied { ioctl } for pid=4651 comm="syz.1.1669" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.413713][ T36] audit: type=1400 audit(1750458979.918:26980): avc: denied { ioctl } for pid=4651 comm="syz.1.1669" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.472447][ T31] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 201.635638][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 201.646897][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 201.662065][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.671201][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 201.680190][ T31] usb 1-1: SerialNumber: syz [ 202.377765][ T1118] hub 7-1:0.0: set hub depth failed [ 202.399638][ T31] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 202.412485][ T1118] usb 7-1: USB disconnect, device number 2 [ 202.525625][ T4669] 9pnet_fd: Insufficient options for proto=fd [ 203.238482][ T4692] rust_binder: Error while translating object. [ 203.238535][ T4692] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 203.266113][ T4692] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:19 [ 203.327347][ T1118] usb 1-1: USB disconnect, device number 42 [ 203.352041][ T1118] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 203.693708][ T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 203.721295][ T10] asix 2-1:0.0: probe with driver asix failed with error -71 [ 203.746061][ T10] usb 2-1: USB disconnect, device number 31 [ 203.931297][ T3916] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 204.102339][ T3916] usb 5-1: Using ep0 maxpacket: 16 [ 204.135329][ T3916] usb 5-1: config 0 interface 0 altsetting 67 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 204.155017][ T4727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:32 [ 204.158594][ T3916] usb 5-1: config 0 interface 0 has no altsetting 0 [ 204.183929][ T3916] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 204.193831][ T3916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.204926][ T3916] usb 5-1: config 0 descriptor?? [ 204.312530][ T4731] FAULT_INJECTION: forcing a failure. [ 204.312530][ T4731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.335005][ T4731] CPU: 0 UID: 0 PID: 4731 Comm: syz.0.1688 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 204.335043][ T4731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.335058][ T4731] Call Trace: [ 204.335066][ T4731] [ 204.335075][ T4731] __dump_stack+0x21/0x30 [ 204.335104][ T4731] dump_stack_lvl+0x10c/0x190 [ 204.335129][ T4731] ? __cfi_dump_stack_lvl+0x10/0x10 [ 204.335157][ T4731] dump_stack+0x19/0x20 [ 204.335180][ T4731] should_fail_ex+0x3d9/0x530 [ 204.335203][ T4731] should_fail+0xf/0x20 [ 204.335225][ T4731] should_fail_usercopy+0x1e/0x30 [ 204.335250][ T4731] _copy_to_user+0x24/0xa0 [ 204.335279][ T4731] simple_read_from_buffer+0xed/0x160 [ 204.335313][ T4731] proc_fail_nth_read+0x19e/0x210 [ 204.335335][ T4731] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 204.335356][ T4731] ? bpf_lsm_file_permission+0xd/0x20 [ 204.335379][ T4731] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 204.335400][ T4731] vfs_read+0x278/0xb60 [ 204.335423][ T4731] ? do_setitimer+0x6d/0x5e0 [ 204.335445][ T4731] ? __cfi_vfs_read+0x10/0x10 [ 204.335469][ T4731] ? __kasan_check_write+0x18/0x20 [ 204.335493][ T4731] ? mutex_lock+0x92/0x1c0 [ 204.335512][ T4731] ? __cfi_mutex_lock+0x10/0x10 [ 204.335533][ T4731] ? __fget_files+0x2c5/0x340 [ 204.335563][ T4731] ksys_read+0x141/0x250 [ 204.335587][ T4731] ? __cfi_ksys_read+0x10/0x10 [ 204.335613][ T4731] ? __kasan_check_read+0x15/0x20 [ 204.335636][ T4731] __x64_sys_read+0x7f/0x90 [ 204.335660][ T4731] x64_sys_call+0x2638/0x2ee0 [ 204.335688][ T4731] do_syscall_64+0x58/0xf0 [ 204.335715][ T4731] ? clear_bhb_loop+0x35/0x90 [ 204.335749][ T4731] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 204.335780][ T4731] RIP: 0033:0x7fc497f8d33c [ 204.335796][ T4731] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 204.335816][ T4731] RSP: 002b:00007fc498d45030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 204.335840][ T4731] RAX: ffffffffffffffda RBX: 00007fc4981b5fa0 RCX: 00007fc497f8d33c [ 204.335857][ T4731] RDX: 000000000000000f RSI: 00007fc498d450a0 RDI: 0000000000000003 [ 204.335877][ T4731] RBP: 00007fc498d45090 R08: 0000000000000000 R09: 0000000000000000 [ 204.335899][ T4731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.335913][ T4731] R13: 0000000000000000 R14: 00007fc4981b5fa0 R15: 00007ffdd5493fc8 [ 204.335931][ T4731] [ 204.430483][ T3916] usbhid 5-1:0.0: can't add hid device: -71 [ 204.529975][ T1118] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 204.630035][ T3916] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 204.645183][ T4743] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 204.648661][ T3916] usb 5-1: USB disconnect, device number 53 [ 204.695797][ T4743] rust_binder: Write failure EINVAL in pid:1155 [ 204.754478][ T1118] usb 7-1: Using ep0 maxpacket: 16 [ 204.784804][ T1118] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.797534][ T1118] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 204.806648][ T1118] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.816637][ T1118] usb 7-1: config 0 descriptor?? [ 205.255700][ T1118] hid-generic 0003:04D8:00DD.000D: unknown main item tag 0x7 [ 205.263231][ T1118] hid-generic 0003:04D8:00DD.000D: item fetching failed at offset 4/5 [ 205.272386][ T1118] hid-generic 0003:04D8:00DD.000D: probe with driver hid-generic failed with error -22 [ 205.473045][ T4726] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 205.473084][ T4726] rust_binder: Error in use_page_slow: EBUSY [ 205.484301][ T4726] rust_binder: use_range failure EBUSY [ 205.490326][ T4726] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 205.496937][ T4726] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 205.505154][ T4726] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 205.522763][ T4726] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:32 [ 205.541905][ T10] usb 7-1: USB disconnect, device number 3 [ 206.080122][ T4765] rust_binder: Error while translating object. [ 206.080144][ T4765] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 206.086371][ T4765] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:101 [ 206.099193][ T4766] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 206.345040][ T4779] rust_binder: 4778 RLIMIT_NICE not set [ 206.358046][ T36] kauditd_printk_skb: 824 callbacks suppressed [ 206.395975][ T36] audit: type=1400 audit(1750458984.763:27805): avc: denied { read write } for pid=4355 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 206.423262][ T36] audit: type=1400 audit(1750458984.763:27806): avc: denied { read write open } for pid=4355 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 206.454285][ T36] audit: type=1400 audit(1750458984.763:27807): avc: denied { ioctl } for pid=4355 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 206.506210][ T36] audit: type=1400 audit(1750458984.810:27808): avc: denied { read } for pid=4780 comm="syz.4.1706" name="binder0" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 206.550492][ T36] audit: type=1400 audit(1750458984.810:27809): avc: denied { read open } for pid=4780 comm="syz.4.1706" path="/dev/binderfs/binder0" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 206.594484][ T36] audit: type=1400 audit(1750458984.838:27810): avc: denied { ioctl } for pid=4780 comm="syz.4.1706" path="/dev/binderfs/binder0" dev="binder" ino=14 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 206.638947][ T4791] binder: Bad value for 'max' [ 206.645395][ T4791] binder: Bad value for 'max' [ 206.651598][ T4792] FAULT_INJECTION: forcing a failure. [ 206.651598][ T4792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.668070][ T36] audit: type=1400 audit(1750458984.838:27811): avc: denied { set_context_mgr } for pid=4780 comm="syz.4.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 206.690192][ T4792] CPU: 1 UID: 0 PID: 4792 Comm: syz.4.1710 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 206.690233][ T4792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.690247][ T4792] Call Trace: [ 206.690255][ T4792] [ 206.690264][ T4792] __dump_stack+0x21/0x30 [ 206.690293][ T4792] dump_stack_lvl+0x10c/0x190 [ 206.690319][ T4792] ? __cfi_dump_stack_lvl+0x10/0x10 [ 206.690344][ T4792] dump_stack+0x19/0x20 [ 206.690365][ T4792] should_fail_ex+0x3d9/0x530 [ 206.690387][ T4792] should_fail+0xf/0x20 [ 206.690407][ T4792] should_fail_usercopy+0x1e/0x30 [ 206.690432][ T4792] _copy_to_user+0x24/0xa0 [ 206.690460][ T4792] simple_read_from_buffer+0xed/0x160 [ 206.690494][ T4792] proc_fail_nth_read+0x19e/0x210 [ 206.690515][ T4792] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 206.690536][ T4792] ? bpf_lsm_file_permission+0xd/0x20 [ 206.690560][ T4792] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 206.690580][ T4792] vfs_read+0x278/0xb60 [ 206.690604][ T4792] ? __kasan_check_read+0x15/0x20 [ 206.690628][ T4792] ? thread_group_sample_cputime+0xf2/0x1a0 [ 206.690660][ T4792] ? __cfi_vfs_read+0x10/0x10 [ 206.690681][ T4792] ? __kasan_check_write+0x18/0x20 [ 206.690703][ T4792] ? mutex_lock+0x92/0x1c0 [ 206.690730][ T4792] ? __cfi_mutex_lock+0x10/0x10 [ 206.690751][ T4792] ? __fget_files+0x2c5/0x340 [ 206.690780][ T4792] ksys_read+0x141/0x250 [ 206.690805][ T4792] ? __cfi_ksys_read+0x10/0x10 [ 206.690829][ T4792] ? __cfi___x64_sys_getitimer+0x10/0x10 [ 206.690850][ T4792] ? __kasan_check_read+0x15/0x20 [ 206.690873][ T4792] __x64_sys_read+0x7f/0x90 [ 206.690897][ T4792] x64_sys_call+0x2638/0x2ee0 [ 206.690925][ T4792] do_syscall_64+0x58/0xf0 [ 206.690951][ T4792] ? clear_bhb_loop+0x35/0x90 [ 206.690984][ T4792] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 206.691015][ T4792] RIP: 0033:0x7fde0838d33c [ 206.691033][ T4792] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 206.691053][ T4792] RSP: 002b:00007fde0925d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.691076][ T4792] RAX: ffffffffffffffda RBX: 00007fde085b5fa0 RCX: 00007fde0838d33c [ 206.691093][ T4792] RDX: 000000000000000f RSI: 00007fde0925d0a0 RDI: 0000000000000003 [ 206.691105][ T4792] RBP: 00007fde0925d090 R08: 0000000000000000 R09: 0000000000000000 [ 206.691119][ T4792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.691132][ T4792] R13: 0000000000000000 R14: 00007fde085b5fa0 R15: 00007ffd09f9ac28 [ 206.691151][ T4792] [ 206.732986][ T36] audit: type=1400 audit(1750458984.838:27812): avc: denied { read } for pid=4780 comm="syz.4.1706" name="binder0" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 206.967742][ T36] audit: type=1400 audit(1750458984.838:27813): avc: denied { read open } for pid=4780 comm="syz.4.1706" path="/dev/binderfs/binder0" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 207.042262][ T36] audit: type=1400 audit(1750458984.857:27814): avc: denied { read write } for pid=4355 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 207.389647][ T4812] SELinux: policydb version 1440778216 does not match my version range 15-33 [ 207.403959][ T4812] SELinux: failed to load policy [ 207.409061][ T454] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 207.567531][ T454] usb 7-1: device descriptor read/64, error -71 [ 207.601249][ T4818] batadv_slave_1: entered promiscuous mode [ 207.611465][ T4815] batadv_slave_1: left promiscuous mode [ 207.664288][ T4820] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 207.673718][ T4820] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 207.822681][ T454] usb 7-1: device descriptor read/64, error -71 [ 207.833412][ T3916] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 207.998301][ T3916] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 208.008270][ T3916] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 208.024094][ T3916] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.039952][ T3916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 208.058452][ T3916] usb 2-1: SerialNumber: syz [ 208.067332][ T4817] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 208.082773][ T454] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 208.228938][ T454] usb 7-1: device descriptor read/64, error -71 [ 208.313065][ T4817] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 208.325169][ T10] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 208.474812][ T10] usb 1-1: device descriptor read/64, error -71 [ 208.496195][ T454] usb 7-1: device descriptor read/64, error -71 [ 208.614365][ T454] usb usb7-port1: attempt power cycle [ 208.667464][ T64] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 208.731384][ T10] usb 1-1: device descriptor read/64, error -71 [ 208.757402][ T3916] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 208.833582][ T64] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 208.858895][ T64] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 208.871089][ T64] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 208.883321][ T64] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 208.893335][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.912298][ T4838] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 208.977290][ T454] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 208.987972][ T10] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 209.001917][ T454] usb 7-1: device descriptor read/8, error -71 [ 209.137620][ T10] usb 1-1: device descriptor read/64, error -71 [ 209.152368][ T454] usb 7-1: device descriptor read/8, error -71 [ 209.374046][ T64] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 209.388212][ T64] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input26 [ 209.402746][ T10] usb 1-1: device descriptor read/64, error -71 [ 209.415585][ T454] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 209.424664][ T64] usb 5-1: USB disconnect, device number 54 [ 209.424712][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 209.451727][ T454] usb 7-1: device descriptor read/8, error -71 [ 209.522580][ T10] usb usb1-port1: attempt power cycle [ 209.589639][ T454] usb 7-1: device descriptor read/8, error -71 [ 209.704322][ T454] usb usb7-port1: unable to enumerate USB device [ 209.885982][ T10] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 209.909786][ T10] usb 1-1: device descriptor read/8, error -71 [ 210.051442][ T10] usb 1-1: device descriptor read/8, error -71 [ 210.334986][ T10] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 210.358774][ T10] usb 1-1: device descriptor read/8, error -71 [ 210.511696][ T10] usb 1-1: device descriptor read/8, error -71 [ 210.636448][ T10] usb usb1-port1: unable to enumerate USB device [ 210.655005][ T4872] rust_binder: Write failure EFAULT in pid:50 [ 210.790679][ T3916] usb 2-1: USB disconnect, device number 32 [ 210.805913][ T3916] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 210.848897][ T4880] syzkaller0: entered allmulticast mode [ 210.877464][ T4880] tipc: Started in network mode [ 210.901491][ T4880] tipc: Node identity 8aaf6c51bbc2, cluster identity 4711 [ 210.924284][ T4880] tipc: Enabled bearer , priority 0 [ 210.958188][ T4879] tipc: Disabling bearer [ 210.991101][ T4888] input: syz0 as /devices/virtual/input/input27 [ 210.993206][ T4884] syzkaller0: entered allmulticast mode [ 211.328392][ T4905] binder: Unknown parameter 'defcontext01777777777777777777777' [ 211.406557][ T4907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1744'. [ 211.438895][ T4907] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.714145][ T36] kauditd_printk_skb: 1112 callbacks suppressed [ 211.714165][ T36] audit: type=1400 audit(1750458989.777:28927): avc: denied { ioctl } for pid=4920 comm="syz.6.1748" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 211.785078][ T4925] 9pnet_fd: Insufficient options for proto=fd [ 211.799569][ T36] audit: type=1400 audit(1750458989.824:28928): avc: denied { read } for pid=4920 comm="syz.6.1748" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 211.848001][ T36] audit: type=1400 audit(1750458989.824:28929): avc: denied { read open } for pid=4920 comm="syz.6.1748" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 211.932757][ T36] audit: type=1400 audit(1750458989.833:28930): avc: denied { ioctl } for pid=4920 comm="syz.6.1748" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 211.988959][ T36] audit: type=1400 audit(1750458989.833:28931): avc: denied { read write } for pid=4355 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 212.014739][ T36] audit: type=1400 audit(1750458989.842:28932): avc: denied { mounton } for pid=4922 comm="syz.0.1749" path="/395/file0" dev="tmpfs" ino=2201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 212.053289][ T4936] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1752'. [ 212.064055][ T36] audit: type=1400 audit(1750458989.852:28933): avc: denied { search } for pid=4921 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.103360][ T36] audit: type=1400 audit(1750458989.852:28934): avc: denied { search } for pid=4921 comm="rm" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.157444][ T4554] audit: audit_backlog=65 > audit_backlog_limit=64 [ 212.158569][ T4938] audit: audit_backlog=65 > audit_backlog_limit=64 [ 212.569298][ T45] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 212.681403][ T4961] rust_binder: Write failure EFAULT in pid:1022 [ 212.755167][ T45] usb 7-1: unable to get BOS descriptor or descriptor too short [ 212.771836][ T45] usb 7-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.786095][ T45] usb 7-1: config 1 interface 0 has no altsetting 0 [ 212.799358][ T45] usb 7-1: language id specifier not provided by device, defaulting to English [ 212.808618][ T3916] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 212.820342][ T45] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 212.830101][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.838463][ T45] usb 7-1: Product: syz [ 212.843132][ T45] usb 7-1: Manufacturer: syz [ 212.847856][ T45] usb 7-1: SerialNumber: syz [ 212.986229][ T3916] usb 5-1: device descriptor read/64, error -71 [ 213.091762][ T45] usb 7-1: USB disconnect, device number 8 [ 213.198831][ T4971] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 213.209164][ T4971] rust_binder: Error while translating object. [ 213.215768][ T4971] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 213.224562][ T4971] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1193 [ 213.242932][ T3916] usb 5-1: device descriptor read/64, error -71 [ 213.293984][ T4975] FAULT_INJECTION: forcing a failure. [ 213.293984][ T4975] name failslab, interval 1, probability 0, space 0, times 0 [ 213.307166][ T4975] CPU: 0 UID: 0 PID: 4975 Comm: syz.1.1763 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 213.307202][ T4975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.307215][ T4975] Call Trace: [ 213.307223][ T4975] [ 213.307232][ T4975] __dump_stack+0x21/0x30 [ 213.307261][ T4975] dump_stack_lvl+0x10c/0x190 [ 213.307287][ T4975] ? __cfi_dump_stack_lvl+0x10/0x10 [ 213.307314][ T4975] dump_stack+0x19/0x20 [ 213.307337][ T4975] should_fail_ex+0x3d9/0x530 [ 213.307361][ T4975] should_failslab+0xac/0x100 [ 213.307391][ T4975] __kmalloc_noprof+0x69/0x450 [ 213.307416][ T4975] ? sock_kmalloc+0xde/0x1e0 [ 213.307450][ T4975] sock_kmalloc+0xde/0x1e0 [ 213.307483][ T4975] ipv6_renew_options+0x2f8/0xb00 [ 213.307509][ T4975] ? __asan_memcpy+0x5a/0x80 [ 213.307534][ T4975] ipv6_set_opt_hdr+0x1de/0x7c0 [ 213.307562][ T4975] do_ipv6_setsockopt+0x140a/0x2ec0 [ 213.307591][ T4975] ? __cfi_do_ipv6_setsockopt+0x10/0x10 [ 213.307619][ T4975] ? kstrtouint+0x78/0xf0 [ 213.307640][ T4975] ? avc_has_perm_noaudit+0x21c/0x360 [ 213.307664][ T4975] ? avc_has_perm+0x144/0x220 [ 213.307685][ T4975] ? __cfi_avc_has_perm+0x10/0x10 [ 213.307708][ T4975] ? selinux_socket_setsockopt+0x2ea/0x390 [ 213.307733][ T4975] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 213.307759][ T4975] ipv6_setsockopt+0x5d/0x170 [ 213.307792][ T4975] udpv6_setsockopt+0xa3/0xc0 [ 213.307813][ T4975] sock_common_setsockopt+0xb5/0xd0 [ 213.307837][ T4975] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 213.307869][ T4975] do_sock_setsockopt+0x26a/0x400 [ 213.307900][ T4975] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 213.307934][ T4975] __x64_sys_setsockopt+0x1b8/0x250 [ 213.307966][ T4975] x64_sys_call+0x2adc/0x2ee0 [ 213.307993][ T4975] do_syscall_64+0x58/0xf0 [ 213.308020][ T4975] ? clear_bhb_loop+0x35/0x90 [ 213.308052][ T4975] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 213.308083][ T4975] RIP: 0033:0x7fd7b158e929 [ 213.308101][ T4975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.308120][ T4975] RSP: 002b:00007fd7b23b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 213.308144][ T4975] RAX: ffffffffffffffda RBX: 00007fd7b17b5fa0 RCX: 00007fd7b158e929 [ 213.308160][ T4975] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000003 [ 213.308174][ T4975] RBP: 00007fd7b23b4090 R08: 0000000000000000 R09: 0000000000000000 [ 213.308188][ T4975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.308202][ T4975] R13: 0000000000000000 R14: 00007fd7b17b5fa0 R15: 00007ffda0d83218 [ 213.308220][ T4975] [ 213.627681][ T3916] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 213.777345][ T3916] usb 5-1: device descriptor read/64, error -71 [ 213.840080][ T4979] input: syz1 as /devices/virtual/input/input28 [ 213.846460][ T4979] input: failed to attach handler leds to device input28, error: -6 [ 213.965226][ T4982] 9pnet_fd: Insufficient options for proto=fd [ 214.033971][ T3916] usb 5-1: device descriptor read/64, error -71 [ 214.152640][ T3916] usb usb5-port1: attempt power cycle [ 214.525700][ T3916] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 214.553850][ T3916] usb 5-1: device descriptor read/8, error -71 [ 214.611211][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 214.699213][ T3916] usb 5-1: device descriptor read/8, error -71 [ 214.771594][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 214.779206][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.790964][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.800768][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 214.803649][ T31] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 214.809863][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.829236][ T10] usb 1-1: config 0 descriptor?? [ 214.847960][ T10] hub 1-1:0.0: USB hub found [ 214.943106][ T5001] tap0: tun_chr_ioctl cmd 1074025678 [ 214.948532][ T5001] tap0: group set to 0 [ 214.964110][ T3916] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 214.987990][ T31] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.999831][ T3916] usb 5-1: device descriptor read/8, error -71 [ 215.006297][ T31] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 215.017334][ T31] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 215.028672][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 215.037877][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.049731][ T4999] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 215.142946][ T3916] usb 5-1: device descriptor read/8, error -71 [ 215.263441][ T3916] usb usb5-port1: unable to enumerate USB device [ 215.361655][ T10] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 215.372568][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 215.381185][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 215.424244][ T10] usb 1-1: USB disconnect, device number 47 [ 215.978772][ T5021] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 215.978807][ T5021] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:181 [ 216.005257][ T5024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'. [ 216.093063][ T5029] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 216.093084][ T5029] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 216.103017][ T5029] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1047 [ 216.116475][ T5030] 9pnet_fd: Insufficient options for proto=fd [ 216.146510][ T31] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 216.160797][ T31] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input29 [ 216.207502][ T31] usb 2-1: USB disconnect, device number 33 [ 216.207537][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 216.492871][ T45] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 216.653117][ T45] usb 7-1: Using ep0 maxpacket: 32 [ 216.660710][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.671694][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.681496][ T45] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 216.690677][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.700689][ T45] usb 7-1: config 0 descriptor?? [ 216.717845][ T45] hub 7-1:0.0: USB hub found [ 216.763138][ T5040] rtc_cmos 00:00: Alarms can be up to one day in the future [ 216.773023][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 216.780751][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 216.788555][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 216.796256][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 216.804284][ T10] rtc rtc0: __rtc_set_alarm: err=-22 [ 216.925806][ T45] hub 7-1:0.0: 1 port detected [ 216.970786][ T5046] binder: Bad value for 'max' [ 217.103931][ T36] kauditd_printk_skb: 829 callbacks suppressed [ 217.103956][ T36] audit: type=1400 audit(1750458994.828:29697): avc: denied { read } for pid=5049 comm="syz.4.1792" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=50218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 217.141017][ T45] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 217.148151][ T45] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 217.156180][ T36] audit: type=1400 audit(1750458994.856:29698): avc: denied { read write } for pid=4355 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 217.181098][ T36] audit: type=1400 audit(1750458994.856:29699): avc: denied { read write open } for pid=4355 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 217.207786][ T45] usbhid 7-1:0.0: can't add hid device: -71 [ 217.213871][ T45] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 217.217227][ T36] audit: type=1400 audit(1750458994.856:29700): avc: denied { ioctl } for pid=4355 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 217.232791][ T5053] binder: Unknown parameter 's´*' [ 217.249342][ T36] audit: type=1400 audit(1750458994.931:29701): avc: denied { remount } for pid=5052 comm="syz.4.1793" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 217.253357][ T45] usb 7-1: USB disconnect, device number 9 [ 217.280573][ T36] audit: type=1400 audit(1750458994.987:29702): avc: denied { read write } for pid=5052 comm="syz.4.1793" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 217.305639][ T36] audit: type=1400 audit(1750458994.987:29703): avc: denied { read write open } for pid=5052 comm="syz.4.1793" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 217.332344][ T36] audit: type=1400 audit(1750458994.987:29704): avc: denied { read } for pid=5052 comm="syz.4.1793" name="binder0" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 217.356389][ T36] audit: type=1400 audit(1750458994.987:29705): avc: denied { read open } for pid=5052 comm="syz.4.1793" path="/dev/binderfs/binder0" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 217.406590][ T36] audit: type=1400 audit(1750458994.987:29706): avc: denied { ioctl } for pid=5052 comm="syz.4.1793" path="/dev/binderfs/binder0" dev="binder" ino=14 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 217.790128][ T5061] rust_binder: Error while translating object. [ 217.790165][ T5061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 217.796424][ T5061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:89 [ 217.946693][ T31] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 218.096386][ T45] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 218.117801][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 218.125610][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.135814][ T31] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 218.144853][ T306] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 218.153682][ T31] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 218.164174][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.174333][ T31] usb 5-1: config 0 descriptor?? [ 218.259960][ T45] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 218.270848][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.281747][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.291543][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 218.306625][ T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 218.315734][ T45] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 218.323889][ T45] usb 2-1: Manufacturer: syz [ 218.330996][ T45] usb 2-1: config 0 descriptor?? [ 218.339032][ T306] usb 7-1: config 1 interface 0 altsetting 108 endpoint 0x82 is Bulk; changing to Interrupt [ 218.349397][ T306] usb 7-1: config 1 interface 0 altsetting 108 endpoint 0x3 is Bulk; changing to Interrupt [ 218.359467][ T306] usb 7-1: config 1 interface 0 altsetting 108 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.372554][ T306] usb 7-1: config 1 interface 0 has no altsetting 0 [ 218.771020][ T45] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 218.778389][ T45] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 218.789100][ T45] appleir 0003:05AC:8243.000E: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 219.328518][ T10] usb 2-1: USB disconnect, device number 34 [ 219.710654][ T613] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 219.849640][ T613] usb 1-1: device descriptor read/64, error -71 [ 220.106230][ T613] usb 1-1: device descriptor read/64, error -71 [ 220.255860][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 220.362804][ T613] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 220.416211][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 220.424103][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.435776][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 220.447114][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 220.458489][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 220.467648][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.477604][ T10] usb 2-1: config 0 descriptor?? [ 220.484166][ T5073] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 220.492952][ T10] hub 2-1:0.0: USB hub found [ 220.512429][ T613] usb 1-1: device descriptor read/64, error -71 [ 220.710171][ T10] hub 2-1:0.0: 2 ports detected [ 220.769011][ T613] usb 1-1: device descriptor read/64, error -71 [ 220.886770][ T613] usb usb1-port1: attempt power cycle [ 220.896558][ T64] usb 5-1: USB disconnect, device number 59 [ 220.942035][ T10] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 220.948437][ T10] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 220.963585][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 220.969646][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 220.994003][ T10] usb 2-1: USB disconnect, device number 35 [ 221.020180][ T5075] FAULT_INJECTION: forcing a failure. [ 221.020180][ T5075] name failslab, interval 1, probability 0, space 0, times 0 [ 221.033256][ T5075] CPU: 1 UID: 0 PID: 5075 Comm: syz.4.1801 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 221.033295][ T5075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.033309][ T5075] Call Trace: [ 221.033317][ T5075] [ 221.033326][ T5075] __dump_stack+0x21/0x30 [ 221.033362][ T5075] dump_stack_lvl+0x10c/0x190 [ 221.033397][ T5075] ? __cfi_dump_stack_lvl+0x10/0x10 [ 221.033423][ T5075] dump_stack+0x19/0x20 [ 221.033447][ T5075] should_fail_ex+0x3d9/0x530 [ 221.033471][ T5075] should_failslab+0xac/0x100 [ 221.033501][ T5075] __kmalloc_node_noprof+0x6c/0x450 [ 221.033526][ T5075] ? __kvmalloc_node_noprof+0x11d/0x300 [ 221.033549][ T5075] ? __kasan_kmalloc+0x96/0xb0 [ 221.033578][ T5075] __kvmalloc_node_noprof+0x11d/0x300 [ 221.033602][ T5075] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 221.033627][ T5075] ? tokenize_frame_descr+0x30/0xc0 [ 221.033651][ T5075] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 221.033678][ T5075] io_ring_ctx_alloc+0x2e1/0x1e10 [ 221.033703][ T5075] ? __cfi_vfs_write+0x10/0x10 [ 221.033729][ T5075] io_uring_create+0x2e0/0x13d0 [ 221.033757][ T5075] __se_sys_io_uring_setup+0x24b/0x260 [ 221.033787][ T5075] ? __x64_sys_io_uring_setup+0x80/0x80 [ 221.033821][ T5075] ? __kasan_check_read+0x15/0x20 [ 221.033846][ T5075] __x64_sys_io_uring_setup+0x5f/0x80 [ 221.033875][ T5075] x64_sys_call+0x22c0/0x2ee0 [ 221.033903][ T5075] do_syscall_64+0x58/0xf0 [ 221.033931][ T5075] ? clear_bhb_loop+0x35/0x90 [ 221.033963][ T5075] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 221.033993][ T5075] RIP: 0033:0x7fde0838e929 [ 221.034010][ T5075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.034029][ T5075] RSP: 002b:00007fde0925cfc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 221.034052][ T5075] RAX: ffffffffffffffda RBX: 00007fde085b5fa0 RCX: 00007fde0838e929 [ 221.034068][ T5075] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000500 [ 221.034082][ T5075] RBP: 0000200000000080 R08: 0000000000000000 R09: 0000000000000000 [ 221.034096][ T5075] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 221.034109][ T5075] R13: 0000000000000000 R14: 0000000000000500 R15: 0000000000000000 [ 221.034125][ T5075] [ 221.250106][ T613] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 221.312839][ T613] usb 1-1: device descriptor read/8, error -71 [ 221.346903][ T306] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.356047][ T306] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.364253][ T306] usb 7-1: Product: 扦窿ڱ余í»éŽ¼à°£ãŽ¨æ®†ï¢¦â’žî žà£°à¡§á¸–à§¤íœ¡ë§šá¬°é½–ä”…Æ¾î¹Ÿç½£áŒæ§Ø®ì‹®é®›ëƒ‡ä¨•ï­Ï‰â‡…æ‹á±«ë••ä§¼äµî¨±æ¸³äŒ©ï¯·ê¾–⊛麘텚蹰쩀ߖá¹á»ˆëšµä­­ä‚¶î‹»îŠæž¢ê¼Œê¢ƒåƒºã±‚䑲驔迂裠彧ᑑ啜ᢹ﷌놚衢奿ι㌿棖穙á¸ã¾ŒÏ»á¤î•’Óˆê¢è´´è‚¿ì‰©ë›˜æŠºí—£ç¦œæ¼ëŠ²á¦„æ‹’í˜‰è®¶ìš­ì‚„æ’‰â© ëŽ‡ë»€ë¤«ç—•ç¶›ê®ˆ [ 221.396555][ T306] usb 7-1: Manufacturer: ä둊ॲ쌶洀洮洩êã¨ì““ê±‹ì†€ê„¶ï¸§ç¥µï¥æŸ¤æ‚¸å“ƒîƒžëŽ—ë¹–æ˜§âŠªå‚£ê†å ¹á–¼è†’ꦲ䈢îŠë¨´éŽ¬ì¡ª [ 221.413005][ T306] usb 7-1: can't set config #1, error -71 [ 221.419759][ T306] usb 7-1: USB disconnect, device number 10 [ 221.468218][ T613] usb 1-1: device descriptor read/8, error -71 [ 221.563505][ T5083] rust_binder: Error while translating object. [ 221.563547][ T5083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 221.571585][ T5083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:208 [ 221.752536][ T613] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 221.806032][ T5095] rust_binder: 5091 RLIMIT_NICE not set [ 221.829323][ T613] usb 1-1: device descriptor read/8, error -71 [ 221.962593][ T5105] binder: Bad value for 'stats' [ 221.976247][ T5105] binder: Bad value for 'stats' [ 221.984161][ T5105] binder: Bad value for 'stats' [ 222.003684][ T5105] binder: Bad value for 'stats' [ 222.003979][ T613] usb 1-1: device descriptor read/8, error -71 [ 222.016115][ T5105] binder: Bad value for 'stats' [ 222.033672][ T5105] binder: Bad value for 'stats' [ 222.050753][ T5105] binder: Bad value for 'stats' [ 222.062840][ T5105] binder: Bad value for 'stats' [ 222.078909][ T5105] binder: Bad value for 'stats' [ 222.096002][ T5105] binder: Bad value for 'stats' [ 222.109322][ T5105] binder: Bad value for 'stats' [ 222.115430][ T5105] binder: Bad value for 'stats' [ 222.121459][ T5105] binder: Bad value for 'stats' [ 222.126789][ T613] usb usb1-port1: unable to enumerate USB device [ 222.135008][ T5105] binder: Bad value for 'stats' [ 222.144370][ T5105] binder: Bad value for 'stats' [ 222.159811][ T5105] binder: Bad value for 'stats' [ 222.181203][ T5105] binder: Bad value for 'stats' [ 222.189663][ T5105] binder: Bad value for 'stats' [ 222.213039][ T5105] binder: Bad value for 'stats' [ 222.219514][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.219819][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.223251][ T5105] binder: Bad value for 'stats' [ 222.247103][ T5105] binder: Bad value for 'stats' [ 222.253223][ T5105] binder: Bad value for 'stats' [ 222.255977][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.260224][ T5105] binder: Bad value for 'stats' [ 222.270020][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.272644][ T5105] binder: Bad value for 'stats' [ 222.277392][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.281383][ T5105] binder: Bad value for 'stats' [ 222.298367][ T5105] binder: Bad value for 'stats' [ 222.305332][ T5105] binder: Bad value for 'stats' [ 222.307639][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.313385][ T5105] binder: Bad value for 'stats' [ 222.323876][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.332802][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.341793][ T5105] binder: Bad value for 'stats' [ 222.364412][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.364745][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.375187][ T5105] binder: Bad value for 'stats' [ 222.398706][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.399069][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.402491][ T5105] binder: Bad value for 'stats' [ 222.421652][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.421756][ T5105] binder: Bad value for 'stats' [ 222.422010][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.433034][ T5105] binder: Bad value for 'stats' [ 222.436126][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.442100][ T5105] binder: Bad value for 'stats' [ 222.447193][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.452410][ T5105] binder: Bad value for 'stats' [ 222.467117][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.467450][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.467487][ T36] kauditd_printk_skb: 514 callbacks suppressed [ 222.467505][ T36] audit: type=1400 audit(1750458999.832:30221): avc: denied { ioctl } for pid=5110 comm="syz.4.1816" path="/dev/binderfs/binder1" dev="binder" ino=26 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 222.481039][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.486085][ T36] audit: type=1400 audit(1750458999.832:30222): avc: denied { ioctl } for pid=5110 comm="syz.4.1816" path="/dev/binderfs/binder1" dev="binder" ino=26 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 222.527262][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.555514][ T5105] binder: Bad value for 'stats' [ 222.557200][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.563263][ T5105] binder: Bad value for 'stats' [ 222.569933][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.578134][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.584774][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.587805][ T5105] binder: Bad value for 'stats' [ 222.593212][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.602631][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.613282][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.620615][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.627297][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.630642][ T5105] binder: Bad value for 'stats' [ 222.636194][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.645148][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.650554][ T36] audit: type=1400 audit(1750458999.851:30223): avc: denied { ioctl } for pid=5110 comm="syz.4.1816" path="/dev/binderfs/binder1" dev="binder" ino=26 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 222.653202][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.657491][ T36] audit: type=1400 audit(1750458999.879:30224): avc: denied { read write } for pid=4554 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 222.657527][ T36] audit: type=1400 audit(1750458999.879:30225): avc: denied { read write open } for pid=4554 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 222.686198][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.694664][ T5105] binder: Bad value for 'stats' [ 222.715171][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.749611][ T36] audit: type=1400 audit(1750458999.879:30226): avc: denied { ioctl } for pid=4554 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 222.783469][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.783801][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.790782][ T36] audit: type=1400 audit(1750458999.879:30227): avc: denied { ioctl } for pid=5110 comm="syz.4.1816" path="/dev/binderfs/binder1" dev="binder" ino=26 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 222.811946][ T5105] binder: Bad value for 'stats' [ 222.824606][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.827722][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.835143][ T36] audit: type=1400 audit(1750458999.916:30228): avc: denied { create } for pid=5119 comm="syz.6.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 222.836404][ T5105] binder: Bad value for 'stats' [ 222.841995][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.865981][ T45] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 222.891010][ T36] audit: type=1400 audit(1750458999.926:30229): avc: denied { read write } for pid=5119 comm="syz.6.1819" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 222.896842][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.949352][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 222.953391][ T36] audit: type=1400 audit(1750458999.926:30231): avc: denied { read write open } for pid=5119 comm="syz.6.1819" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 222.971014][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 223.012816][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 223.027773][ T5123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 223.033263][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 223.052485][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 223.062676][ T5111] rust_binder: Write failure EINVAL in pid:217 [ 223.078229][ T45] usb 7-1: device descriptor read/64, error -71 [ 223.125858][ T5131] SELinux: policydb magic number 0x72666c65 does not match expected magic number 0xf97cff8c [ 223.136358][ T5131] SELinux: failed to load policy [ 223.345434][ T45] usb 7-1: device descriptor read/64, error -71 [ 223.580681][ T306] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 223.602036][ T45] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 223.741000][ T45] usb 7-1: device descriptor read/64, error -71 [ 223.749822][ T306] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.760037][ T306] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 223.768965][ T306] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.785099][ T306] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.794183][ T306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.802207][ T306] usb 5-1: Product: syz [ 223.806408][ T306] usb 5-1: Manufacturer: syz [ 223.811008][ T306] usb 5-1: SerialNumber: syz [ 223.819611][ T306] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 223.827082][ T306] cdc_ncm 5-1:1.0: bind() failure [ 223.997583][ T45] usb 7-1: device descriptor read/64, error -71 [ 224.039925][ T306] usb 5-1: USB disconnect, device number 60 [ 224.116279][ T45] usb usb7-port1: attempt power cycle [ 224.200682][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 224.361045][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 224.368870][ T10] usb 2-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 224.382514][ T10] usb 2-1: New USB device found, idVendor=9e88, idProduct=9e8f, bcdDevice=9b.e4 [ 224.391651][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.400745][ T10] usb 2-1: Product: syz [ 224.404992][ T10] usb 2-1: Manufacturer: syz [ 224.409607][ T10] usb 2-1: SerialNumber: syz [ 224.478861][ T45] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 224.502624][ T45] usb 7-1: device descriptor read/8, error -71 [ 224.641884][ T45] usb 7-1: device descriptor read/8, error -71 [ 224.780952][ T10] ftdi_sio 2-1:64.0: Ignoring interface reserved for JTAG [ 224.789592][ T10] usb 2-1: USB disconnect, device number 36 [ 224.896374][ T45] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 224.939349][ T45] usb 7-1: device descriptor read/8, error -71 [ 225.101955][ T45] usb 7-1: device descriptor read/8, error -71 [ 225.218898][ T45] usb usb7-port1: unable to enumerate USB device [ 225.314907][ T5181] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 225.516801][ T5188] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1071 [ 225.895192][ T5209] FAULT_INJECTION: forcing a failure. [ 225.895192][ T5209] name failslab, interval 1, probability 0, space 0, times 0 [ 225.942275][ T5209] CPU: 1 UID: 0 PID: 5209 Comm: syz.0.1854 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 225.942315][ T5209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.942330][ T5209] Call Trace: [ 225.942338][ T5209] [ 225.942347][ T5209] __dump_stack+0x21/0x30 [ 225.942377][ T5209] dump_stack_lvl+0x10c/0x190 [ 225.942402][ T5209] ? __cfi_dump_stack_lvl+0x10/0x10 [ 225.942427][ T5209] ? release_sock+0x171/0x1f0 [ 225.942454][ T5209] dump_stack+0x19/0x20 [ 225.942478][ T5209] should_fail_ex+0x3d9/0x530 [ 225.942509][ T5209] should_failslab+0xac/0x100 [ 225.942538][ T5209] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 225.942564][ T5209] ? __alloc_skb+0x10c/0x370 [ 225.942591][ T5209] __alloc_skb+0x10c/0x370 [ 225.942619][ T5209] netlink_alloc_large_skb+0xf7/0x1b0 [ 225.942656][ T5209] netlink_sendmsg+0x586/0xaf0 [ 225.942688][ T5209] ? __cfi_netlink_sendmsg+0x10/0x10 [ 225.942721][ T5209] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 225.942753][ T5209] ? security_socket_sendmsg+0x33/0xd0 [ 225.942778][ T5209] ? __cfi_netlink_sendmsg+0x10/0x10 [ 225.942808][ T5209] ____sys_sendmsg+0xa15/0xa70 [ 225.942842][ T5209] ? __sys_sendmsg_sock+0x50/0x50 [ 225.942882][ T5209] ? import_iovec+0x81/0xb0 [ 225.942913][ T5209] ___sys_sendmsg+0x220/0x2a0 [ 225.942945][ T5209] ? __sys_sendmsg+0x280/0x280 [ 225.942982][ T5209] ? proc_fail_nth_write+0x17e/0x210 [ 225.943003][ T5209] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 225.943031][ T5209] __x64_sys_sendmsg+0x1eb/0x2c0 [ 225.943051][ T5209] ? fput+0x1a5/0x240 [ 225.943081][ T5209] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 225.943101][ T5209] ? ksys_write+0x1ef/0x250 [ 225.943127][ T5209] ? __kasan_check_read+0x15/0x20 [ 225.943153][ T5209] x64_sys_call+0x2a4c/0x2ee0 [ 225.943181][ T5209] do_syscall_64+0x58/0xf0 [ 225.943207][ T5209] ? clear_bhb_loop+0x35/0x90 [ 225.943238][ T5209] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 225.943267][ T5209] RIP: 0033:0x7fc497f8e929 [ 225.943285][ T5209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.943303][ T5209] RSP: 002b:00007fc498d45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.943326][ T5209] RAX: ffffffffffffffda RBX: 00007fc4981b5fa0 RCX: 00007fc497f8e929 [ 225.943340][ T5209] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 225.943354][ T5209] RBP: 00007fc498d45090 R08: 0000000000000000 R09: 0000000000000000 [ 225.943367][ T5209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.943379][ T5209] R13: 0000000000000000 R14: 00007fc4981b5fa0 R15: 00007ffdd5493fc8 [ 225.943396][ T5209] [ 226.371703][ T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 226.563306][ T10] usb 5-1: device descriptor read/64, error -71 [ 226.743193][ T5230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1861'. [ 226.840029][ T5234] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 226.841254][ T10] usb 5-1: device descriptor read/64, error -71 [ 226.855184][ T5234] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 226.881937][ T5234] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 226.979089][ T5242] fuse: Bad value for 'group_id' [ 226.984296][ T5242] fuse: Bad value for 'group_id' [ 227.070009][ T5248] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 227.129915][ T10] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 227.300987][ T10] usb 5-1: device descriptor read/64, error -71 [ 227.322343][ T3916] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 227.482741][ T3916] usb 2-1: Using ep0 maxpacket: 32 [ 227.501793][ T3916] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 227.515584][ T3916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 227.526908][ T3916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 227.538130][ T3916] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 227.547204][ T3916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.556767][ T3916] usb 2-1: config 0 descriptor?? [ 227.563406][ T5248] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 227.568501][ T10] usb 5-1: device descriptor read/64, error -71 [ 227.571992][ T3916] hub 2-1:0.0: USB hub found [ 227.583055][ T5264] 9pnet_fd: Insufficient options for proto=fd [ 227.699062][ T10] usb usb5-port1: attempt power cycle [ 227.797482][ T3916] hub 2-1:0.0: 2 ports detected [ 227.846735][ T36] kauditd_printk_skb: 734 callbacks suppressed [ 227.846752][ T36] audit: type=1400 audit(1750459004.874:30947): avc: denied { ioctl } for pid=5265 comm="syz.6.1877" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 227.921528][ T36] audit: type=1400 audit(1750459004.940:30948): avc: denied { ioctl } for pid=5265 comm="syz.6.1877" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 227.985290][ T45] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 227.993581][ T36] audit: type=1400 audit(1750459005.005:30949): avc: denied { ioctl } for pid=5265 comm="syz.6.1877" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.019107][ T36] audit: type=1400 audit(1750459005.024:30950): avc: denied { ioctl } for pid=5247 comm="syz.1.1869" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.044109][ T36] audit: type=1400 audit(1750459005.024:30951): avc: denied { ioctl } for pid=5247 comm="syz.1.1869" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.069219][ T36] audit: type=1400 audit(1750459005.033:30952): avc: denied { ioctl } for pid=5265 comm="syz.6.1877" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.081447][ T10] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 228.094452][ T36] audit: type=1400 audit(1750459005.033:30953): avc: denied { ioctl } for pid=5201 comm="syz.4.1851" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.116685][ T10] usb 5-1: device descriptor read/8, error -71 [ 228.127653][ T36] audit: type=1400 audit(1750459005.052:30954): avc: denied { ioctl } for pid=5265 comm="syz.6.1877" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.158085][ T36] audit: type=1400 audit(1750459005.127:30955): avc: denied { ioctl } for pid=5201 comm="syz.4.1851" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.183078][ T36] audit: type=1400 audit(1750459005.127:30956): avc: denied { ioctl } for pid=5201 comm="syz.4.1851" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.222839][ T45] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 228.232914][ T45] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 228.248279][ T45] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.257397][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 228.265440][ T45] usb 7-1: SerialNumber: syz [ 228.273680][ T5266] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 228.283776][ T10] usb 5-1: device descriptor read/8, error -71 [ 228.541091][ T10] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 228.576687][ T10] usb 5-1: device descriptor read/8, error -71 [ 228.725402][ T10] usb 5-1: device descriptor read/8, error -71 [ 228.800300][ T5266] Unsupported ieee802154 address type: 0 [ 228.824044][ T45] usb 7-1: USB disconnect, device number 15 [ 228.842673][ T10] usb usb5-port1: unable to enumerate USB device [ 229.032853][ T3916] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 229.235979][ T3916] usb 1-1: Using ep0 maxpacket: 16 [ 229.260245][ T3916] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.278851][ T3916] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 229.290555][ T3916] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 229.308164][ T3916] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 229.317367][ T3916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.325493][ T3916] usb 1-1: Product: syz [ 229.329742][ T3916] usb 1-1: Manufacturer: syz [ 229.335330][ T3916] usb 1-1: SerialNumber: syz [ 229.343462][ T5282] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 229.352480][ T3916] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 229.359351][ T3916] cdc_ncm 1-1:1.0: bind() failure [ 229.374617][ T5290] 9pnet_fd: Insufficient options for proto=fd [ 229.542461][ T5248] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 229.551256][ T5248] rust_binder: Write failure EINVAL in pid:1252 [ 229.551963][ T3916] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 229.551995][ T10] usb 2-1: USB disconnect, device number 37 [ 229.575703][ T64] usb 1-1: USB disconnect, device number 52 [ 229.727735][ T31] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 229.890751][ T31] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.901014][ T31] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.911707][ T31] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 229.920843][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 229.928840][ T31] usb 7-1: SerialNumber: syz [ 230.155691][ T31] usb 7-1: 0:2 : does not exist [ 230.187883][ T31] usb 7-1: USB disconnect, device number 16 [ 230.472198][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 230.501920][ T5306] rust_binder: Write failure EFAULT in pid:275 [ 230.541561][ T5307] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 230.597935][ T5307] SELinux: failed to load policy [ 230.913696][ T5322] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 230.946709][ T31] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 231.120141][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.131188][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.141319][ T31] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 231.150702][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.166315][ T31] usb 5-1: config 0 descriptor?? [ 231.602567][ T5349] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1906'. [ 231.620678][ T31] holtek_kbd 0003:04D9:A055.000F: item fetching failed at offset 1/3 [ 231.633331][ T31] holtek_kbd 0003:04D9:A055.000F: probe with driver holtek_kbd failed with error -22 [ 231.676495][ T5351] FAULT_INJECTION: forcing a failure. [ 231.676495][ T5351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.697045][ T5351] CPU: 1 UID: 0 PID: 5351 Comm: syz.0.1907 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 231.697080][ T5351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 231.697094][ T5351] Call Trace: [ 231.697102][ T5351] [ 231.697111][ T5351] __dump_stack+0x21/0x30 [ 231.697142][ T5351] dump_stack_lvl+0x10c/0x190 [ 231.697166][ T5351] ? __cfi_dump_stack_lvl+0x10/0x10 [ 231.697193][ T5351] dump_stack+0x19/0x20 [ 231.697217][ T5351] should_fail_ex+0x3d9/0x530 [ 231.697241][ T5351] should_fail+0xf/0x20 [ 231.697263][ T5351] should_fail_usercopy+0x1e/0x30 [ 231.697287][ T5351] _copy_to_user+0x24/0xa0 [ 231.697315][ T5351] simple_read_from_buffer+0xed/0x160 [ 231.697356][ T5351] proc_fail_nth_read+0x19e/0x210 [ 231.697377][ T5351] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 231.697399][ T5351] ? bpf_lsm_file_permission+0xd/0x20 [ 231.697422][ T5351] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 231.697443][ T5351] vfs_read+0x278/0xb60 [ 231.697468][ T5351] ? __cfi_vfs_read+0x10/0x10 [ 231.697491][ T5351] ? __kasan_check_write+0x18/0x20 [ 231.697515][ T5351] ? mutex_lock+0x92/0x1c0 [ 231.697535][ T5351] ? __cfi_mutex_lock+0x10/0x10 [ 231.697554][ T5351] ? __fget_files+0x2c5/0x340 [ 231.697584][ T5351] ksys_read+0x141/0x250 [ 231.697610][ T5351] ? __cfi_ksys_read+0x10/0x10 [ 231.697636][ T5351] ? __kasan_check_read+0x15/0x20 [ 231.697660][ T5351] __x64_sys_read+0x7f/0x90 [ 231.697685][ T5351] x64_sys_call+0x2638/0x2ee0 [ 231.697714][ T5351] do_syscall_64+0x58/0xf0 [ 231.697741][ T5351] ? clear_bhb_loop+0x35/0x90 [ 231.697772][ T5351] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 231.697803][ T5351] RIP: 0033:0x7fc497f8d33c [ 231.697820][ T5351] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 231.697838][ T5351] RSP: 002b:00007fc498d45030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 231.697862][ T5351] RAX: ffffffffffffffda RBX: 00007fc4981b5fa0 RCX: 00007fc497f8d33c [ 231.697879][ T5351] RDX: 000000000000000f RSI: 00007fc498d450a0 RDI: 0000000000000003 [ 231.697892][ T5351] RBP: 00007fc498d45090 R08: 0000000000000000 R09: 0000000000000000 [ 231.697906][ T5351] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000001 [ 231.697919][ T5351] R13: 0000000000000000 R14: 00007fc4981b5fa0 R15: 00007ffdd5493fc8 [ 231.697937][ T5351] [ 232.020870][ T31] usb 5-1: USB disconnect, device number 65 [ 232.051579][ T5359] rust_binder: Write failure EINVAL in pid:1135 [ 232.062779][ T5362] rust_binder: Read failure Err(EAGAIN) in pid:1135 [ 232.791013][ T5379] rust_binder: Error while translating object. [ 232.791061][ T5379] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 232.808557][ T5379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:290 [ 233.208728][ T36] kauditd_printk_skb: 574 callbacks suppressed [ 233.208749][ T36] audit: type=1400 audit(1750459009.888:31531): avc: denied { read write } for pid=4554 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 233.257774][ T36] audit: type=1400 audit(1750459009.925:31532): avc: denied { read write open } for pid=4554 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 233.283615][ T36] audit: type=1400 audit(1750459009.925:31533): avc: denied { ioctl } for pid=4554 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 233.309287][ T36] audit: type=1400 audit(1750459009.935:31534): avc: denied { read } for pid=5392 comm="syz.6.1921" dev="nsfs" ino=4026532647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 233.341189][ T64] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 233.348133][ T5395] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 233.354147][ T36] audit: type=1400 audit(1750459009.935:31535): avc: denied { read open } for pid=5392 comm="syz.6.1921" path="net:[4026532647]" dev="nsfs" ino=4026532647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 233.400185][ T36] audit: type=1400 audit(1750459009.935:31536): avc: denied { create } for pid=5392 comm="syz.6.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 233.448047][ T36] audit: type=1400 audit(1750459009.963:31537): avc: denied { ioctl } for pid=5385 comm="syz.0.1918" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 233.483268][ T36] audit: type=1400 audit(1750459009.963:31538): avc: denied { create } for pid=5392 comm="syz.6.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 233.499877][ T5399] cgroup: fork rejected by pids controller in /syz6 [ 233.504294][ T36] audit: type=1400 audit(1750459009.963:31539): avc: denied { create } for pid=5392 comm="syz.6.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 233.513136][ T5399] rust_binder: Error while translating object. [ 233.530202][ T5399] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 233.531450][ T36] audit: type=1400 audit(1750459009.963:31540): avc: denied { write } for pid=5392 comm="syz.6.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 233.536998][ T5399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:163 [ 233.589661][ T64] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.609021][ T64] usb 1-1: config 0 has no interfaces? [ 233.614559][ T64] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 233.629956][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.653274][ T64] usb 1-1: config 0 descriptor?? [ 233.700432][ T46] bridge_slave_1: left allmulticast mode [ 233.706192][ T46] bridge_slave_1: left promiscuous mode [ 233.711856][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.736490][ T46] bridge_slave_0: left allmulticast mode [ 233.742260][ T46] bridge_slave_0: left promiscuous mode [ 233.747944][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.881675][ T46] veth1_macvtap: left promiscuous mode [ 233.887288][ T46] veth0_vlan: left promiscuous mode [ 233.952560][ T5505] rust_binder: Write failure EFAULT in pid:295 [ 233.998759][ T31] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 234.026297][ T31] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 234.129411][ T5503] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.143061][ T5503] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.150192][ T5503] bridge_slave_0: entered allmulticast mode [ 234.165000][ T5512] fido_id[5512]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 234.179129][ T5503] bridge_slave_0: entered promiscuous mode [ 234.188803][ T5503] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.213009][ T5503] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.228494][ T5503] bridge_slave_1: entered allmulticast mode [ 234.240198][ T5503] bridge_slave_1: entered promiscuous mode [ 234.258357][ T5516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.282047][ T5516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.340175][ T64] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz1 [ 234.350587][ T5516] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 234.350616][ T5516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1145 [ 234.535578][ T5503] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.551874][ T5503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.559141][ T5503] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.566207][ T5503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.620065][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.627889][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.642187][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.649304][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.660714][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.667804][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.748078][ T5503] veth0_vlan: entered promiscuous mode [ 234.763394][ T45] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 234.798973][ T5503] veth1_macvtap: entered promiscuous mode [ 234.948025][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 234.967501][ T45] usb 5-1: not running at top speed; connect to a high speed hub [ 234.978838][ T45] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 234.991407][ T45] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 235.008473][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.039990][ T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.042400][ T5529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.056953][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.074950][ T45] usb 5-1: Product: syz [ 235.079828][ T45] usb 5-1: Manufacturer: syz [ 235.085696][ T45] usb 5-1: SerialNumber: syz [ 235.096814][ T5529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.286856][ T31] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 235.325123][ T5522] tmpfs: Unknown parameter '‘ize' [ 235.447234][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 235.455011][ T31] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 235.463213][ T31] usb 7-1: config 0 has no interface number 0 [ 235.472247][ T31] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 235.481533][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.489637][ T31] usb 7-1: Product: syz [ 235.494024][ T31] usb 7-1: Manufacturer: syz [ 235.498679][ T31] usb 7-1: SerialNumber: syz [ 235.505482][ T31] usb 7-1: config 0 descriptor?? [ 235.513585][ T31] smsc95xx v2.0.0 [ 235.532354][ T45] usb 5-1: 0:2 : does not exist [ 235.545691][ T45] usb 5-1: USB disconnect, device number 66 [ 235.559974][ T2893] udevd[2893]: setting mode of /dev/bus/usb/005/066 to 020664 failed: No such file or directory [ 235.571402][ T2893] udevd[2893]: setting owner of /dev/bus/usb/005/066 to uid=0, gid=0 failed: No such file or directory [ 235.726151][ T2893] udevd[2893]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 235.753357][ T31] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 235.770155][ T31] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 235.781990][ T31] usb 7-1: USB disconnect, device number 17 [ 236.272143][ T5566] rust_binder: Write failure EFAULT in pid:1298 [ 236.281490][ T10] usb 1-1: USB disconnect, device number 53 [ 236.379164][ T5570] binder: Bad value for 'max' [ 236.454130][ T5572] incfs: Options parsing error. -22 [ 236.459426][ T5572] incfs: mount failed -22 [ 236.587093][ T5586] fuse: Unknown parameter '' [ 236.603251][ T5588] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 236.608610][ T5588] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 117) [ 236.615899][ T5588] rust_binder: Error while translating object. [ 236.628491][ T5588] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 236.637212][ T5588] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1308 [ 236.740771][ T31] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 236.958851][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.986636][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.043182][ T31] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.065855][ T5603] sock: sock_set_timeout: `syz.0.1960' (pid 5603) tries to set negative timeout [ 237.082773][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.109309][ T31] usb 7-1: config 0 descriptor?? [ 237.200739][ T45] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 237.382196][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 237.405976][ T45] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 237.417628][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 217, changing to 11 [ 237.429981][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 8194, setting to 1024 [ 237.441890][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 237.457791][ T45] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 237.466894][ T45] usb 5-1: New USB device strings: Mfr=29, Product=0, SerialNumber=0 [ 237.476201][ T45] usb 5-1: Manufacturer: syz [ 237.488972][ T45] usb 5-1: config 0 descriptor?? [ 237.575981][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 237.583473][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 237.595289][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 237.604048][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 237.612252][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 237.641438][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 237.648923][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 237.678172][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 237.692235][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 237.702107][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 237.710879][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 237.725538][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 237.731556][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 237.746214][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 237.755909][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 237.765793][ T45] usb 5-1: USB disconnect, device number 67 [ 237.772786][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 237.782235][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 237.798862][ T31] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 237.807349][ T5620] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 237.819758][ T31] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 237.828458][ T5620] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 237.850352][ T31] usb 7-1: USB disconnect, device number 18 [ 237.857198][ T5620] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1323 [ 237.977022][ T5622] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 238.123434][ T5623] fido_id[5623]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 238.137736][ T5624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 238.176917][ T5624] rust_binder: Write failure EINVAL in pid:1325 [ 238.409757][ T5634] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 238.425188][ T5634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:330 [ 238.501909][ T5634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:330 [ 238.558352][ T36] kauditd_printk_skb: 946 callbacks suppressed [ 238.558371][ T36] audit: type=1400 audit(1750459014.892:32487): avc: denied { write } for pid=5631 comm="syz.4.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 238.626901][ T36] audit: type=1400 audit(1750459014.930:32488): avc: denied { write } for pid=5631 comm="syz.4.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 238.698992][ T5632] audit: audit_backlog=65 > audit_backlog_limit=64 [ 238.705563][ T5632] audit: audit_lost=178 audit_rate_limit=0 audit_backlog_limit=64 [ 238.714016][ T5641] audit: audit_backlog=65 > audit_backlog_limit=64 [ 238.722016][ T36] audit: type=1400 audit(1750459014.930:32489): avc: denied { write } for pid=5631 comm="syz.4.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 238.742284][ T5641] audit: audit_lost=179 audit_rate_limit=0 audit_backlog_limit=64 [ 238.750143][ T5641] audit: backlog limit exceeded [ 238.755099][ T5632] audit: backlog limit exceeded [ 238.760982][ T5632] audit: audit_backlog=65 > audit_backlog_limit=64 [ 238.794684][ T5641] netlink: 'syz.0.1971': attribute type 4 has an invalid length. [ 238.826516][ T5641] netlink: 'syz.0.1971': attribute type 4 has an invalid length. [ 238.954407][ T5641] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 239.015562][ T5641] SELinux: failed to load policy [ 239.098058][ T5655] overlayfs: workdir and upperdir must be separate subtrees [ 239.254949][ T5661] fuse: Bad value for 'rootmode' [ 239.323254][ T5661] macsec0: entered promiscuous mode [ 239.478879][ T5668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1984'. [ 239.490108][ T1118] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 239.552769][ T64] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 239.595161][ T10] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 239.671082][ T5659] input: syz1 as /devices/virtual/input/input34 [ 239.677538][ T5659] input: failed to attach handler leds to device input34, error: -6 [ 239.698174][ T1118] usb 7-1: unable to get BOS descriptor or descriptor too short [ 239.726315][ T1118] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 239.737515][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 239.740613][ T5671] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 239.753510][ T5671] rust_binder: ENOSPC from range_alloc.reserve_new - size: 18446744073709551608 [ 239.755601][ T1118] usb 7-1: can't read configurations, error -71 [ 239.760148][ T5671] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false [ 239.775500][ T5671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 239.786709][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 239.787828][ T5671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1337 [ 239.796344][ T64] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 239.823152][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.831318][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 239.841512][ T64] usb 1-1: Product: syz [ 239.845796][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.856168][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.865422][ T64] usb 1-1: Manufacturer: syz [ 239.870097][ T64] usb 1-1: SerialNumber: syz [ 239.878049][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 239.887182][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.896824][ T10] usb 5-1: Product: syz [ 239.901036][ T10] usb 5-1: Manufacturer: syz [ 239.907208][ T10] usb 5-1: SerialNumber: syz [ 239.916030][ T64] usb 1-1: config 0 descriptor?? [ 239.927137][ T64] hub 1-1:0.0: bad descriptor, ignoring hub [ 239.933104][ T64] hub 1-1:0.0: probe with driver hub failed with error -5 [ 239.948353][ T64] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 240.023550][ T2893] udevd[2893]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 240.159317][ T5666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.168097][ T5666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.193957][ T454] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 240.258111][ T9] usb 1-1: USB disconnect, device number 54 [ 240.360863][ T454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.372694][ T454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.383136][ T454] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.396709][ T454] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.406393][ T454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.420137][ T454] usb 2-1: config 0 descriptor?? [ 240.453973][ T10] usb 5-1: 0:2 : does not exist [ 240.462421][ T10] usb 5-1: USB disconnect, device number 68 [ 240.654701][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 240.865962][ T454] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 240.895212][ T454] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 240.909635][ T454] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 240.917889][ T454] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 240.938532][ T454] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 240.946884][ T454] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 240.955233][ T454] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 240.964545][ T454] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 240.972152][ T454] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 240.982641][ T454] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 240.996095][ T454] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 241.021607][ T454] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 241.038394][ T454] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 241.056250][ T454] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 241.091268][ T454] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 241.123165][ T454] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 241.158155][ T454] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 241.195009][ T454] usb 2-1: USB disconnect, device number 38 [ 241.500762][ T5715] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2002'. [ 241.529521][ T5712] fido_id[5712]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 241.551561][ T9] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 241.701261][ T454] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 241.725450][ T5718] rust_binder: Write failure EINVAL in pid:66 [ 241.754035][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 241.792673][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.808476][ T9] usb 5-1: New USB device strings: Mfr=0, Product=236, SerialNumber=3 [ 241.817642][ T9] usb 5-1: Product: syz [ 241.829986][ T9] usb 5-1: SerialNumber: syz [ 241.874852][ T454] usb 1-1: config 0 has an invalid interface number: 176 but max is 0 [ 241.883137][ T454] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 241.891836][ T454] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 241.902018][ T454] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.913065][ T454] usb 1-1: config 0 has no interface number 0 [ 241.919230][ T454] usb 1-1: config 0 interface 176 altsetting 0 endpoint 0x4 has invalid maxpacket 649, setting to 64 [ 241.930162][ T454] usb 1-1: config 0 interface 176 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.947739][ T454] usb 1-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 241.956826][ T454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.964982][ T454] usb 1-1: Product: syz [ 241.969237][ T454] usb 1-1: Manufacturer: syz [ 241.973873][ T454] usb 1-1: SerialNumber: syz [ 241.982731][ T454] usb 1-1: config 0 descriptor?? [ 242.145530][ T5725] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 242.147310][ T5725] rust_binder: Error in use_page_slow: ESRCH [ 242.153881][ T5725] rust_binder: use_range failure ESRCH [ 242.159961][ T5725] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 242.165534][ T5725] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 242.173668][ T5725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1347 [ 242.253516][ T5698] binder: Unknown parameter 'ÿÿÿÿ' [ 242.292132][ T454] snd-usb-audio 1-1:0.176: probe with driver snd-usb-audio failed with error -2 [ 242.312873][ T5703] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1998'. [ 242.342681][ T454] usb 1-1: USB disconnect, device number 55 [ 242.525522][ T2893] udevd[2893]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.176/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 242.556859][ T5736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 242.601173][ T5736] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 242.618176][ T5736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1357 [ 242.820517][ T5743] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 242.832493][ T5743] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 242.839112][ T5743] rust_binder: Error while translating object. [ 242.848011][ T5743] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 242.854273][ T5743] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1361 [ 243.291852][ T5765] binder: Unknown parameter 'maz' [ 243.924870][ T1118] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 243.937311][ T36] kauditd_printk_skb: 1076 callbacks suppressed [ 243.937345][ T36] audit: type=1400 audit(1750459019.925:33562): avc: denied { ioctl } for pid=5776 comm="syz.6.2024" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 243.982644][ T36] audit: type=1400 audit(1750459019.925:33563): avc: denied { create } for pid=5784 comm="syz.0.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 244.002744][ T36] audit: type=1400 audit(1750459019.925:33564): avc: denied { setopt } for pid=5784 comm="syz.0.2027" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 244.039201][ T36] audit: type=1400 audit(1750459019.925:33565): avc: denied { connect } for pid=5784 comm="syz.0.2027" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 244.087716][ T36] audit: type=1400 audit(1750459019.925:33566): avc: denied { write } for pid=5784 comm="syz.0.2027" laddr=fe80::a812:dbff:fe38:ef8b lport=58 faddr=ff02::1 fport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 244.117308][ T36] audit: type=1400 audit(1750459019.962:33567): avc: denied { ioctl } for pid=5776 comm="syz.6.2024" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 244.161853][ T36] audit: type=1400 audit(1750459019.962:33568): avc: denied { ioctl } for pid=5776 comm="syz.6.2024" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 244.181365][ T5793] rust_binder: Error while translating object. [ 244.186851][ T5793] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 244.202014][ T36] audit: type=1400 audit(1750459019.962:33569): avc: denied { read write } for pid=4355 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 244.260571][ T1118] usb 7-1: config 0 has an invalid interface number: 230 but max is 0 [ 244.289499][ T1118] usb 7-1: config 0 has no interface number 0 [ 244.289752][ T5793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:350 [ 244.295669][ T1118] usb 7-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 244.341800][ T1118] usb 7-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 244.363235][ T36] audit: type=1400 audit(1750459019.962:33570): avc: denied { read write open } for pid=4355 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 244.388497][ T9] cdc_ncm 5-1:1.0: bind() failure [ 244.393848][ T1118] usb 7-1: config 0 interface 230 has no altsetting 0 [ 244.407014][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 244.415954][ T5797] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2028'. [ 244.421858][ T5796] syzkaller0: entered promiscuous mode [ 244.439648][ T36] audit: type=1400 audit(1750459019.962:33571): avc: denied { ioctl } for pid=4355 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 244.446581][ T9] cdc_ncm 5-1:1.1: bind() failure [ 244.492735][ T1118] usb 7-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 244.501841][ T1118] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.533969][ T1118] usb 7-1: Product: syz [ 244.555603][ T1118] usb 7-1: Manufacturer: syz [ 244.560269][ T1118] usb 7-1: SerialNumber: syz [ 244.566008][ T9] usb 5-1: USB disconnect, device number 69 [ 244.572059][ T5796] syzkaller0: entered allmulticast mode [ 244.582445][ T1118] usb 7-1: config 0 descriptor?? [ 244.604293][ T5778] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 244.612031][ T5778] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 244.620345][ T1118] ums-usbat 7-1:0.230: USB Mass Storage device detected [ 244.643809][ T5805] FAULT_INJECTION: forcing a failure. [ 244.643809][ T5805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.645370][ T5806] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.657645][ T1118] ums-usbat 7-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 244.671688][ T5805] CPU: 0 UID: 0 PID: 5805 Comm: syz.4.2032 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 244.671723][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.671737][ T5805] Call Trace: [ 244.671745][ T5805] [ 244.671753][ T5805] __dump_stack+0x21/0x30 [ 244.671784][ T5805] dump_stack_lvl+0x10c/0x190 [ 244.671812][ T5805] ? __cfi_dump_stack_lvl+0x10/0x10 [ 244.671839][ T5805] dump_stack+0x19/0x20 [ 244.671862][ T5805] should_fail_ex+0x3d9/0x530 [ 244.671887][ T5805] should_fail+0xf/0x20 [ 244.671907][ T5805] should_fail_usercopy+0x1e/0x30 [ 244.671933][ T5805] _copy_from_iter+0x1a3/0x14b0 [ 244.671961][ T5805] ? __kasan_check_write+0x18/0x20 [ 244.671987][ T5805] ? __build_skb_around+0x2a4/0x5a0 [ 244.672014][ T5805] ? __cfi__copy_from_iter+0x10/0x10 [ 244.672042][ T5805] ? check_stack_object+0x82/0x140 [ 244.672066][ T5805] ? __virt_addr_valid+0x2a6/0x380 [ 244.672097][ T5805] ? __check_object_size+0x455/0x620 [ 244.672123][ T5805] netlink_sendmsg+0x680/0xaf0 [ 244.672156][ T5805] ? __cfi_netlink_sendmsg+0x10/0x10 [ 244.672187][ T5805] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 244.672220][ T5805] ? security_socket_sendmsg+0x33/0xd0 [ 244.672253][ T5805] ? __cfi_netlink_sendmsg+0x10/0x10 [ 244.672284][ T5805] ____sys_sendmsg+0xa15/0xa70 [ 244.672317][ T5805] ? __sys_sendmsg_sock+0x50/0x50 [ 244.672350][ T5805] ? import_iovec+0x81/0xb0 [ 244.672381][ T5805] ___sys_sendmsg+0x220/0x2a0 [ 244.672415][ T5805] ? __sys_sendmsg+0x280/0x280 [ 244.672446][ T5805] ? proc_fail_nth_write+0x17e/0x210 [ 244.672467][ T5805] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 244.672494][ T5805] __x64_sys_sendmsg+0x1eb/0x2c0 [ 244.672514][ T5805] ? fput+0x1a5/0x240 [ 244.672545][ T5805] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 244.672565][ T5805] ? ksys_write+0x1ef/0x250 [ 244.672592][ T5805] ? __kasan_check_read+0x15/0x20 [ 244.672616][ T5805] x64_sys_call+0x2a4c/0x2ee0 [ 244.672643][ T5805] do_syscall_64+0x58/0xf0 [ 244.672671][ T5805] ? clear_bhb_loop+0x35/0x90 [ 244.672704][ T5805] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 244.672734][ T5805] RIP: 0033:0x7fde0838e929 [ 244.672753][ T5805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.672771][ T5805] RSP: 002b:00007fde0925d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.672795][ T5805] RAX: ffffffffffffffda RBX: 00007fde085b5fa0 RCX: 00007fde0838e929 [ 244.672811][ T5805] RDX: 0000000000000090 RSI: 0000200000000300 RDI: 0000000000000003 [ 244.672827][ T5805] RBP: 00007fde0925d090 R08: 0000000000000000 R09: 0000000000000000 [ 244.672841][ T5805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.672855][ T5805] R13: 0000000000000000 R14: 00007fde085b5fa0 R15: 00007ffd09f9ac28 [ 244.672874][ T5805] [ 244.860092][ T5809] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 245.082150][ T5808] rust_binder: Write failure EINVAL in pid:1389 [ 245.177051][ T5812] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:358 [ 245.711712][ T5833] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 245.731632][ T10] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 245.758773][ T5833] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2043'. [ 245.907114][ T10] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 245.926543][ T10] usb 5-1: config 0 has no interface number 0 [ 245.933690][ T10] usb 5-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 245.944798][ T10] usb 5-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 245.955888][ T10] usb 5-1: config 0 interface 230 has no altsetting 0 [ 245.967010][ T10] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 245.976076][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.984167][ T10] usb 5-1: Product: syz [ 245.988377][ T10] usb 5-1: Manufacturer: syz [ 245.992993][ T10] usb 5-1: SerialNumber: syz [ 246.001100][ T10] usb 5-1: config 0 descriptor?? [ 246.010737][ T5820] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 246.019896][ T5820] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 246.027202][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 246.042096][ T10] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 246.063387][ T10] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 246.191313][ T9] usb 2-1: device descriptor read/64, error -71 [ 246.351667][ T45] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 246.447846][ T9] usb 2-1: device descriptor read/64, error -71 [ 246.514517][ T45] usb 1-1: config 160 has an invalid interface number: 52 but max is 0 [ 246.522864][ T45] usb 1-1: config 160 has an invalid descriptor of length 123, skipping remainder of the config [ 246.533382][ T45] usb 1-1: config 160 has no interface number 0 [ 246.539681][ T45] usb 1-1: config 160 interface 52 altsetting 6 endpoint 0x2 has invalid maxpacket 53504, setting to 64 [ 246.550910][ T45] usb 1-1: config 160 interface 52 has no altsetting 0 [ 246.561197][ T45] usb 1-1: New USB device found, idVendor=ad15, idProduct=0725, bcdDevice=47.e1 [ 246.570362][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.578423][ T45] usb 1-1: Product: syz [ 246.582605][ T45] usb 1-1: Manufacturer: syz [ 246.587246][ T45] usb 1-1: SerialNumber: syz [ 246.704437][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 246.821131][ T45] usb 1-1: bad CDC descriptors [ 246.834102][ T45] usb 1-1: USB disconnect, device number 56 [ 246.844989][ T9] usb 2-1: device descriptor read/64, error -71 [ 247.100018][ T9] usb 2-1: device descriptor read/64, error -71 [ 247.106819][ T1118] ums-usbat 7-1:0.230: probe with driver ums-usbat failed with error -5 [ 247.217664][ T9] usb usb2-port1: attempt power cycle [ 247.412380][ T5852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2047'. [ 247.581066][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 247.603168][ T5854] rust_binder: Error while translating object. [ 247.603214][ T5854] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 247.605408][ T9] usb 2-1: device descriptor read/8, error -71 [ 247.609491][ T5854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:365 [ 247.754713][ T9] usb 2-1: device descriptor read/8, error -71 [ 248.019368][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 248.043037][ T9] usb 2-1: device descriptor read/8, error -71 [ 248.182115][ T9] usb 2-1: device descriptor read/8, error -71 [ 248.297414][ T9] usb usb2-port1: unable to enumerate USB device [ 248.365012][ T45] usb 7-1: USB disconnect, device number 21 [ 248.460663][ T10] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 248.512192][ T5859] 9pnet_fd: Insufficient options for proto=fd [ 248.654229][ T10] usb 5-1: USB disconnect, device number 70 [ 248.773241][ T5869] rust_binder: Write failure EFAULT in pid:1236 [ 248.811936][ T5871] overlayfs: missing 'lowerdir' [ 249.046043][ T5875] rust_binder: Write failure EINVAL in pid:1240 [ 249.304157][ T36] kauditd_printk_skb: 516 callbacks suppressed [ 249.304179][ T36] audit: type=1400 audit(1750459024.948:34079): avc: denied { create } for pid=5882 comm="syz.1.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 249.373269][ T36] audit: type=1400 audit(1750459024.957:34080): avc: denied { read } for pid=5885 comm="syz.4.2059" name="binder0" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 249.405976][ T36] audit: type=1400 audit(1750459024.957:34081): avc: denied { read open } for pid=5885 comm="syz.4.2059" path="/dev/binderfs/binder0" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 249.434978][ T36] audit: type=1400 audit(1750459024.957:34082): avc: denied { ioctl } for pid=5885 comm="syz.4.2059" path="/dev/binderfs/binder0" dev="binder" ino=14 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 249.461703][ T36] audit: type=1400 audit(1750459024.957:34083): avc: denied { set_context_mgr } for pid=5885 comm="syz.4.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 249.481971][ T36] audit: type=1400 audit(1750459024.957:34084): avc: denied { ioctl } for pid=5885 comm="syz.4.2059" path="/dev/binderfs/binder0" dev="binder" ino=14 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 249.507698][ T36] audit: type=1400 audit(1750459024.976:34085): avc: denied { read write } for pid=5882 comm="syz.1.2058" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 249.509555][ T5892] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:370 [ 249.531982][ T36] audit: type=1400 audit(1750459024.976:34086): avc: denied { read write open } for pid=5882 comm="syz.1.2058" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 249.565553][ T36] audit: type=1400 audit(1750459024.976:34087): avc: denied { mounton } for pid=5882 comm="syz.1.2058" path="/525/file0" dev="tmpfs" ino=2895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 249.590352][ T36] audit: type=1400 audit(1750459024.985:34088): avc: denied { read write } for pid=5503 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.789493][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.873164][ T5907] binder: Binderfs stats mode cannot be changed during a remount [ 250.079079][ T5916] 9pnet_fd: Insufficient options for proto=fd [ 250.599262][ T5926] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2073'. [ 250.608609][ T5926] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2073'. [ 250.737463][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 250.745056][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 250.753431][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 250.769829][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 250.777535][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 250.786494][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 250.794688][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 250.803766][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 250.811778][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 250.822141][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 251.184654][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 251.215857][ T31] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 251.357737][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.386896][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1328, setting to 1024 [ 251.405563][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 251.424071][ T31] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 251.425427][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.443457][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.460780][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.470451][ T31] usb 2-1: Product: syz [ 251.474752][ T31] usb 2-1: Manufacturer: syz [ 251.479844][ T31] usb 2-1: SerialNumber: syz [ 251.482297][ T9] usb 7-1: config 0 descriptor?? [ 251.509609][ T5936] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 251.616739][ T5964] tmpfs: Bad value for 'nr_inodes' [ 251.706238][ T31] usb 2-1: Found UVC 0.00 device syz (093a:2476) [ 251.722024][ T31] usb 2-1: No valid video chain found. [ 251.761186][ T31] usb 2-1: USB disconnect, device number 43 [ 251.934253][ T5973] overlayfs: failed to resolve './file2': -2 [ 251.965180][ T9] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 251.975136][ T5973] fuse: Unknown parameter '' [ 251.979950][ T9] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 251.997868][ T9] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 252.014770][ T9] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 252.027981][ T9] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 252.036158][ T9] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 252.046815][ T9] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 252.068282][ T9] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 252.210691][ T5982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 252.211010][ T5982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 252.271481][ T10] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 252.456001][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 252.475159][ T10] usb 5-1: config 1 has an invalid interface descriptor of length 4, skipping [ 252.495234][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 252.512581][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 252.530728][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.546964][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.555852][ T10] usb 5-1: Product: syz [ 252.560108][ T10] usb 5-1: Manufacturer: syz [ 252.565788][ T10] usb 5-1: SerialNumber: syz [ 252.803899][ T10] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 252.837430][ T10] usb 5-1: USB disconnect, device number 71 [ 253.029754][ T6006] rust_binder: Write failure EINVAL in pid:1285 [ 253.034454][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 253.198890][ T6009] 9pnet_fd: Insufficient options for proto=fd [ 253.930609][ T6018] @: renamed from vlan0 (while UP) [ 254.107922][ T6024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 254.109754][ T6024] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 254.113044][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 254.118108][ T6024] rust_binder: Error while translating object. [ 254.132653][ T6024] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 254.139077][ T6024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1430 [ 254.290137][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.321368][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 254.337410][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.347942][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.356893][ T9] usb 1-1: Product: syz [ 254.361975][ T9] usb 1-1: Manufacturer: syz [ 254.366594][ T9] usb 1-1: SerialNumber: syz [ 254.447385][ T6034] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 254.456897][ T6034] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 254.476526][ T10] usb 7-1: reset high-speed USB device number 22 using dummy_hcd [ 254.485697][ T10] usb 7-1: device reset changed ep0 maxpacket size! [ 254.508807][ T31] usb 7-1: USB disconnect, device number 22 [ 254.600831][ T6016] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 254.658229][ T31] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 254.667723][ T36] kauditd_printk_skb: 797 callbacks suppressed [ 254.667742][ T36] audit: type=1400 audit(1750459029.952:34884): avc: denied { ioctl } for pid=6019 comm="syz.6.2110" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.727018][ T36] audit: type=1400 audit(1750459029.990:34885): avc: denied { ioctl } for pid=6019 comm="syz.6.2110" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.754976][ T36] audit: type=1400 audit(1750459029.990:34886): avc: denied { read write } for pid=4355 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 254.779259][ T36] audit: type=1400 audit(1750459029.990:34887): avc: denied { read write open } for pid=4355 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 254.804692][ T36] audit: type=1400 audit(1750459029.990:34888): avc: denied { ioctl } for pid=4355 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 254.831076][ T36] audit: type=1400 audit(1750459029.999:34889): avc: denied { ioctl } for pid=6019 comm="syz.6.2110" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.890337][ T36] audit: type=1400 audit(1750459030.046:34890): avc: denied { create } for pid=6041 comm="syz.4.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 254.893465][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 254.910437][ T36] audit: type=1400 audit(1750459030.046:34891): avc: denied { ioctl } for pid=6041 comm="syz.4.2119" path="socket:[57104]" dev="sockfs" ino=57104 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 254.941400][ T36] audit: type=1400 audit(1750459030.046:34892): avc: denied { write } for pid=6041 comm="syz.4.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 254.943738][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.961369][ T36] audit: type=1400 audit(1750459030.064:34893): avc: denied { read write } for pid=4355 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 254.997314][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.017916][ T31] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 255.027929][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.041512][ T31] usb 7-1: config 0 descriptor?? [ 255.051763][ T31] hub 7-1:0.0: USB hub found [ 255.264483][ T6016] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 255.495347][ T9] cdc_mbim 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 255.501944][ T9] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 255.516517][ T31] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 255.533091][ T9] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 255.560594][ T31] usbhid 7-1:0.0: can't add hid device: -71 [ 255.570955][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 255.610906][ T31] usb 7-1: USB disconnect, device number 23 [ 255.730110][ T9] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 255.737663][ T9] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 255.749250][ T9] wwan wwan0: port wwan0mbim0 attached [ 255.772031][ T9] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 42:42:42:42:42:42 [ 255.951029][ T64] usb 1-1: USB disconnect, device number 57 [ 255.961682][ T64] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 256.020767][ T64] wwan wwan0: port wwan0mbim0 disconnected [ 256.112172][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 256.181791][ T6071] rust_binder: Error while translating object. [ 256.181847][ T6071] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 256.188161][ T6071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:101 [ 256.283186][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 256.307285][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 256.328270][ T9] usb 2-1: config 179 has no interface number 0 [ 256.334590][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 256.363952][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 256.397162][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 256.410381][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 256.424136][ T9] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 256.432934][ T31] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 256.438760][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 256.458762][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.479532][ T6064] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 256.620839][ T31] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 256.639719][ T31] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 256.650604][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 256.657245][ T31] usb 5-1: New USB device found, idVendor=046e, idProduct=5578, bcdDevice= 0.00 [ 256.667045][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.678978][ T31] usb 5-1: config 0 descriptor?? [ 256.685881][ T6069] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 256.697455][ T6069] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 256.714559][ T6064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.732221][ T475] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 256.736100][ T6064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.896810][ T475] usb 7-1: device descriptor read/64, error -71 [ 256.971727][ T31] usb 5-1: string descriptor 0 read error: -71 [ 256.988632][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 256.995786][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 257.010898][ T31] usb 5-1: USB disconnect, device number 72 [ 257.011160][ T6064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.043906][ T6064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.149447][ T475] usb 7-1: device descriptor read/64, error -71 [ 257.170246][ T45] usb 2-1: USB disconnect, device number 44 [ 257.170280][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 257.184695][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 257.262867][ T6092] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 257.416968][ T475] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 257.446934][ T6097] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 257.576891][ T475] usb 7-1: device descriptor read/64, error -71 [ 257.724865][ T6101] rust_binder: Write failure EINVAL in pid:1312 [ 257.821427][ T6113] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.845402][ T475] usb 7-1: device descriptor read/64, error -71 [ 257.855155][ T6113] futex_wake_op: syz.1.2149 tries to shift op by 32; fix this program [ 257.906399][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2149'. [ 258.005052][ T475] usb usb7-port1: attempt power cycle [ 258.216661][ T6137] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 258.224291][ T6137] rust_binder: Write failure EINVAL in pid:455 [ 258.378564][ T475] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 258.466385][ T475] usb 7-1: device descriptor read/8, error -71 [ 258.604287][ T6144] binder: Bad value for 'defcontext' [ 258.632976][ T475] usb 7-1: device descriptor read/8, error -71 [ 258.892205][ T475] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 258.976743][ T475] usb 7-1: device descriptor read/8, error -71 [ 259.140490][ T475] usb 7-1: device descriptor read/8, error -71 [ 259.179528][ T6149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 259.255274][ T475] usb usb7-port1: unable to enumerate USB device [ 259.325270][ T6154] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2164'. [ 259.393709][ T6158] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 259.393745][ T6158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1334 [ 259.708286][ T6166] rust_binder: Write failure EINVAL in pid:1339 [ 259.725657][ T9] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 259.918010][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 259.926891][ T9] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 259.936315][ T9] usb 5-1: config 0 has no interface number 0 [ 259.943255][ T9] usb 5-1: config 0 interface 49 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 259.955102][ T9] usb 5-1: config 0 interface 49 has no altsetting 0 [ 259.971087][ T9] usb 5-1: New USB device found, idVendor=0499, idProduct=500b, bcdDevice= 5.19 [ 259.981033][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.989927][ T9] usb 5-1: Product: syz [ 259.994960][ T9] usb 5-1: Manufacturer: syz [ 259.999673][ T9] usb 5-1: SerialNumber: syz [ 260.011195][ T9] usb 5-1: config 0 descriptor?? [ 260.018358][ T36] kauditd_printk_skb: 787 callbacks suppressed [ 260.018393][ T36] audit: type=1400 audit(1750459034.966:35681): avc: denied { ioctl } for pid=6159 comm="syz.4.2167" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 260.093673][ T36] audit: type=1400 audit(1750459034.994:35682): avc: denied { ioctl } for pid=6159 comm="syz.4.2167" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 260.174579][ T36] audit: type=1400 audit(1750459034.994:35683): avc: denied { ioctl } for pid=6159 comm="syz.4.2167" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 260.200374][ T36] audit: type=1400 audit(1750459034.994:35684): avc: denied { ioctl } for pid=6159 comm="syz.4.2167" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 260.226033][ T36] audit: type=1400 audit(1750459034.994:35685): avc: denied { ioctl } for pid=6159 comm="syz.4.2167" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 260.264335][ T36] audit: type=1400 audit(1750459035.022:35686): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 260.308143][ T36] audit: type=1400 audit(1750459035.022:35687): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 260.353730][ T6179] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 260.363908][ T6179] rust_kernel: panicked at drivers/android/binder/node.rs:877:13: [ 260.363908][ T6179] attempt to subtract with overflow [ 260.370642][ T36] audit: type=1400 audit(1750459035.022:35688): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 260.423262][ T6179] ------------[ cut here ]------------ [ 260.424084][ T36] audit: type=1400 audit(1750459035.078:35689): avc: denied { read } for pid=6176 comm="syz.1.2172" dev="nsfs" ino=4026532430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 260.428802][ T6179] kernel BUG at rust/helpers/bug.c:7! [ 260.440819][ T6179] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 260.452120][ T36] audit: type=1400 audit(1750459035.078:35690): avc: denied { read open } for pid=6176 comm="syz.1.2172" path="net:[4026532430]" dev="nsfs" ino=4026532430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 260.455511][ T6179] CPU: 0 UID: 0 PID: 6179 Comm: syz.1.2173 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 260.455545][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.455561][ T6179] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 260.515069][ T6179] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 da 59 8d d0 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 90 9d c4 5c 90 90 90 90 90 90 90 90 90 [ 260.534693][ T6179] RSP: 0018:ffffc900044ada90 EFLAGS: 00010246 [ 260.540776][ T6179] RAX: 0000000000000061 RBX: 1ffff92000895b54 RCX: c3fdee4bd7a62a00 [ 260.548763][ T6179] RDX: ffffc90001a22000 RSI: 0000000000004d82 RDI: 0000000000004d83 [ 260.556745][ T6179] RBP: ffffc900044ada90 R08: ffffc900044ad787 R09: 1ffff92000895af0 [ 260.564730][ T6179] R10: dffffc0000000000 R11: fffff52000895af1 R12: 0000000000000000 [ 260.572716][ T6179] R13: dffffc0000000000 R14: ffffc900044adac0 R15: ffffc900044adaf0 [ 260.580702][ T6179] FS: 00007fd7b23b46c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 260.589645][ T6179] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.596243][ T6179] CR2: ffffffffffffff84 CR3: 000000011389c000 CR4: 00000000003526b0 [ 260.604227][ T6179] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000800 [ 260.612207][ T6179] DR3: 0000000100000001 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 260.620188][ T6179] Call Trace: [ 260.623479][ T6179] [ 260.626426][ T6179] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 260.633912][ T6179] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 260.641907][ T6179] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x401/0x810 [ 260.652178][ T6179] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 260.665740][ T6179] ? __cfi__RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 260.676359][ T6179] ? __kasan_check_write+0x18/0x20 [ 260.681483][ T6179] ? _raw_spin_lock+0x8c/0x120 [ 260.686266][ T6179] ? __cfi__raw_spin_lock+0x10/0x10 [ 260.691475][ T6179] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 260.698688][ T6179] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 260.706603][ T6179] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 260.716509][ T6179] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 260.727111][ T6179] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 260.736842][ T6179] ? __kasan_check_write+0x18/0x20 [ 260.741971][ T6179] ? _raw_spin_lock+0x8c/0x120 [ 260.746748][ T6179] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 260.756828][ T6179] ? _raw_spin_unlock+0x45/0x60 [ 260.761696][ T6179] ? rust_helper_spin_unlock+0x19/0x30 [ 260.767163][ T6179] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process12inc_ref_done+0x665/0xc40 [ 260.777069][ T6179] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process12inc_ref_done+0x10/0x10 [ 260.787319][ T6179] ? __kasan_check_write+0x18/0x20 [ 260.792443][ T6179] ? _raw_spin_lock+0x8c/0x120 [ 260.797219][ T6179] ? __cfi__raw_spin_lock+0x10/0x10 [ 260.802435][ T6179] ? __kasan_check_write+0x18/0x20 [ 260.807559][ T6179] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 260.817152][ T6179] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 260.827060][ T6179] ? is_bpf_text_address+0x17b/0x1a0 [ 260.832363][ T6179] ? cgroup_rstat_updated+0x132/0x7f0 [ 260.837747][ T6179] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 260.843923][ T6179] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 260.849678][ T6179] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 260.855256][ T6179] ? update_curr_dl_se+0x10c/0xb20 [ 260.860380][ T6179] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 260.866458][ T6179] ? __cfi_min_vruntime_cb_rotate+0x10/0x10 [ 260.872362][ T6179] ? xfd_validate_state+0x68/0x150 [ 260.877482][ T6179] ? __kasan_check_read+0x15/0x20 [ 260.882519][ T6179] ? __perf_event_task_sched_in+0x116e/0x1340 [ 260.888611][ T6179] ? __kasan_check_write+0x18/0x20 [ 260.893733][ T6179] ? __switch_to+0xc7b/0x1310 [ 260.898430][ T6179] ? __perf_event_task_sched_out+0x1c1/0xb70 [ 260.904444][ T6179] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 260.910894][ T6179] ? __cfi___switch_to+0x10/0x10 [ 260.915862][ T6179] ? pick_next_task_fair+0x870/0x900 [ 260.921168][ T6179] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 260.927513][ T6179] ? _raw_spin_lock+0x8c/0x120 [ 260.932291][ T6179] ? _raw_spin_unlock+0x45/0x60 [ 260.937156][ T6179] ? finish_task_switch+0x13a/0x780 [ 260.942371][ T6179] ? __switch_to_asm+0x3d/0x70 [ 260.947159][ T6179] ? __schedule+0x1463/0x1f10 [ 260.951852][ T6179] ? __sched_text_start+0x10/0x10 [ 260.956894][ T6179] ? __cfi_eth_type_trans+0x10/0x10 [ 260.962105][ T6179] ? __dev_queue_xmit+0x24c/0x3790 [ 260.967229][ T6179] ? preempt_schedule_common+0x2d/0x60 [ 260.972885][ T6179] ? preempt_schedule+0xb0/0xd0 [ 260.977753][ T6179] ? __cfi_preempt_schedule+0x10/0x10 [ 260.983144][ T6179] ? __kasan_check_read+0x15/0x20 [ 260.988180][ T6179] ? dev_hard_start_xmit+0x6f1/0x770 [ 260.993484][ T6179] ? __cfi_do_softirq+0x10/0x10 [ 260.998353][ T6179] ? preempt_schedule_thunk+0x1a/0x40 [ 261.003756][ T6179] ? __local_bh_enable_ip+0x64/0x80 [ 261.008969][ T6179] ? __dev_queue_xmit+0x1adb/0x3790 [ 261.014181][ T6179] ? __dev_queue_xmit+0x24c/0x3790 [ 261.019313][ T6179] ? desc_read+0x202/0x3e0 [ 261.023744][ T6179] ? __cfi___dev_queue_xmit+0x10/0x10 [ 261.029133][ T6179] ? __kasan_check_write+0x18/0x20 [ 261.034283][ T6179] ? __asan_memset+0x39/0x50 [ 261.038975][ T6179] ? ip6t_do_table+0x1305/0x14d0 [ 261.043930][ T6179] ? __kasan_check_read+0x15/0x20 [ 261.048987][ T6179] ? selinux_ip_postroute+0x250/0xf40 [ 261.054377][ T6179] ? __asan_memcpy+0x5a/0x80 [ 261.058981][ T6179] ? ip6_finish_output2+0x11c2/0x1990 [ 261.064367][ T6179] ? is_bpf_text_address+0x17b/0x1a0 [ 261.069683][ T6179] ? is_bpf_text_address+0x17b/0x1a0 [ 261.074981][ T6179] ? kernel_text_address+0xa9/0xe0 [ 261.080098][ T6179] ? __kernel_text_address+0x11/0x40 [ 261.085391][ T6179] ? unwind_get_return_address+0x51/0x90 [ 261.091032][ T6179] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 261.097194][ T6179] ? arch_stack_walk+0x10b/0x170 [ 261.102154][ T6179] ? stack_trace_save+0x9d/0xe0 [ 261.107031][ T6179] ? stack_depot_save_flags+0x38/0x800 [ 261.112518][ T6179] ? kasan_save_track+0x4f/0x80 [ 261.117387][ T6179] ? kasan_save_track+0x3e/0x80 [ 261.122254][ T6179] ? kasan_save_free_info+0x4a/0x60 [ 261.127464][ T6179] ? __kasan_slab_free+0x5f/0x80 [ 261.132412][ T6179] ? kmem_cache_free+0x1c1/0x4c0 [ 261.137360][ T6179] ? audit_log_end+0x1f1/0x240 [ 261.142129][ T6179] ? common_lsm_audit+0x148c/0x1860 [ 261.147333][ T6179] ? slow_avc_audit+0x18d/0x1f0 [ 261.152195][ T6179] ? avc_has_extended_perms+0x895/0xdd0 [ 261.157748][ T6179] ? ioctl_has_perm+0x384/0x4d0 [ 261.162609][ T6179] ? selinux_file_ioctl+0x6e0/0x1360 [ 261.167906][ T6179] ? security_file_ioctl+0x58/0xd0 [ 261.173028][ T6179] ? __se_sys_ioctl+0x53/0x1b0 [ 261.177804][ T6179] ? __x64_sys_ioctl+0x7f/0xa0 [ 261.182579][ T6179] ? x64_sys_call+0x1878/0x2ee0 [ 261.187444][ T6179] ? do_syscall_64+0x58/0xf0 [ 261.192051][ T6179] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 261.198134][ T6179] ? __kasan_check_write+0x18/0x20 [ 261.203254][ T6179] ? _raw_spin_lock+0x8c/0x120 [ 261.208032][ T6179] ? __cfi__raw_spin_lock+0x10/0x10 [ 261.213244][ T6179] ? _raw_spin_unlock+0x45/0x60 [ 261.218105][ T6179] ? rust_helper_spin_unlock+0x19/0x30 [ 261.223575][ T6179] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 261.234086][ T6179] ? kmem_cache_free+0x1c1/0x4c0 [ 261.239039][ T6179] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 261.249808][ T6179] ? audit_log_end+0x1f1/0x240 [ 261.254584][ T6179] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 261.260575][ T6179] ? common_lsm_audit+0x148c/0x1860 [ 261.265781][ T6179] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 261.271771][ T6179] ? slow_avc_audit+0x18d/0x1f0 [ 261.276629][ T6179] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 261.285751][ T6179] ? avc_denied+0x112/0x180 [ 261.290270][ T6179] ? avc_has_extended_perms+0x895/0xdd0 [ 261.295826][ T6179] ? avc_has_extended_perms+0x91a/0xdd0 [ 261.301381][ T6179] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 261.310940][ T6179] ? do_vfs_ioctl+0xeda/0x1e30 [ 261.315722][ T6179] ? __futex_queue+0x19a/0x340 [ 261.320587][ T6179] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 261.326238][ T6179] ? __cfi___futex_queue+0x10/0x10 [ 261.331385][ T6179] ? futex_wait_setup+0x1bc/0x260 [ 261.336422][ T6179] ? __futex_wait+0x218/0x2a0 [ 261.341113][ T6179] ? ioctl_has_perm+0x384/0x4d0 [ 261.346011][ T6179] ? has_cap_mac_admin+0xd0/0xd0 [ 261.350966][ T6179] ? futex_wake+0x63a/0x900 [ 261.355477][ T6179] ? futex_setup_timer+0xb4/0xd0 [ 261.360438][ T6179] ? futex_wait+0x288/0x540 [ 261.364947][ T6179] ? __cfi_futex_wait+0x10/0x10 [ 261.369802][ T6179] ? selinux_file_ioctl+0x6e0/0x1360 [ 261.375105][ T6179] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 261.380665][ T6179] ? do_futex+0x309/0x500 [ 261.385008][ T6179] ? tcp_setsockopt+0xef/0x110 [ 261.389782][ T6179] ? __cfi_do_futex+0x10/0x10 [ 261.394474][ T6179] ? __fget_files+0x2c5/0x340 [ 261.399168][ T6179] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 261.407708][ T6179] ? __se_sys_ioctl+0x114/0x1b0 [ 261.412574][ T6179] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 261.421719][ T6179] __se_sys_ioctl+0x132/0x1b0 [ 261.426411][ T6179] __x64_sys_ioctl+0x7f/0xa0 [ 261.431016][ T6179] x64_sys_call+0x1878/0x2ee0 [ 261.435704][ T6179] do_syscall_64+0x58/0xf0 [ 261.440131][ T6179] ? clear_bhb_loop+0x35/0x90 [ 261.444922][ T6179] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 261.450827][ T6179] RIP: 0033:0x7fd7b158e929 [ 261.455251][ T6179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.474861][ T6179] RSP: 002b:00007fd7b23b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.483283][ T6179] RAX: ffffffffffffffda RBX: 00007fd7b17b5fa0 RCX: 00007fd7b158e929 [ 261.491258][ T6179] RDX: 00002000000002c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 261.499231][ T6179] RBP: 00007fd7b1610b39 R08: 0000000000000000 R09: 0000000000000000 [ 261.507207][ T6179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.515180][ T6179] R13: 0000000000000000 R14: 00007fd7b17b5fa0 R15: 00007ffda0d83218 [ 261.523159][ T6179] [ 261.526182][ T6179] Modules linked in: [ 261.530837][ T6179] ---[ end trace 0000000000000000 ]--- [ 261.564394][ T6179] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 261.573268][ T6179] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 da 59 8d d0 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 90 9d c4 5c 90 90 90 90 90 90 90 90 90 [ 261.639027][ T6179] RSP: 0018:ffffc900044ada90 EFLAGS: 00010246 [ 261.659383][ T6179] RAX: 0000000000000061 RBX: 1ffff92000895b54 RCX: c3fdee4bd7a62a00 [ 261.696893][ T6179] RDX: ffffc90001a22000 RSI: 0000000000004d82 RDI: 0000000000004d83 [ 261.724746][ T6179] RBP: ffffc900044ada90 R08: ffffc900044ad787 R09: 1ffff92000895af0 [ 261.732894][ T6179] R10: dffffc0000000000 R11: fffff52000895af1 R12: 0000000000000000 [ 261.746085][ T6179] R13: dffffc0000000000 R14: ffffc900044adac0 R15: ffffc900044adaf0 [ 261.754131][ T6179] FS: 00007fd7b23b46c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 261.777858][ T6179] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.784687][ T6179] CR2: ffffffffffffff84 CR3: 000000011389c000 CR4: 00000000003526b0 [ 261.796109][ T6179] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000 [ 261.804287][ T6179] DR3: 0000000000000005 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 261.816913][ T6179] Kernel panic - not syncing: Fatal exception [ 261.823524][ T6179] Kernel Offset: disabled [ 261.827862][ T6179] Rebooting in 86400 seconds..