last executing test programs: 2m23.345906648s ago: executing program 3 (id=133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fadvise64(r3, 0x3, 0x3, 0x5) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r3, 0x7dfff000) 2m23.305742249s ago: executing program 3 (id=134): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000200)={0xeeee8000}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000021c0)=[@dead_binder_done, @dead_binder_done, @request_death={0x400c630e, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={@fd, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd}, &(0x7f00000020c0)}}], 0xffffffffffffff95, 0x0, 0x0}) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f00000005c0)={{0x0, 0x0, 0x80}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r6 = fcntl$dupfd(r0, 0x0, r0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r7, &(0x7f0000000080), &(0x7f0000000140)={'U+', 0x2}, 0x16, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x3000, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 2m23.21008158s ago: executing program 3 (id=137): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) dup3(r0, r1, 0x80000) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m23.155002192s ago: executing program 3 (id=138): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, 0x0) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x16, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2m23.110962672s ago: executing program 3 (id=139): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0xfffd, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r1, 0x0, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000540)) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getpid() symlink(0x0, &(0x7f0000000580)='./file0\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x56a, 0xc2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0x50, 0x7b, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0x80, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0xea1}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xb, 0x6, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xb, 0x9, 0x4}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0xc6, 0x6, 0xe, 0x8, 0xfc}, 0xc0, &(0x7f0000000240)={0x5, 0xf, 0xc0, 0x1, [@generic={0xbb, 0x10, 0x3, "d5790a51de7c819c6a0a194e42dcf27fc0f845458214eec230fd3687e82de65745d6390fe44fa1e300b74cdc03da83318361734d2430f2eb63a40f4f67b1af53839a208a58213bfdd5e7372c7b430566581247c437a28e53d4e51e4c6086375c40822a53c02ce2560cd370502c024008582de9cbb3870e1a80a66f69cb2ecacae3175b0a6dc08345d9209c34ae353af04c999c5184cb24162b3891079da6fdd4d18306c500c2140054497bdf49fd61f7fa11e897aa75df7f"}]}, 0x5, [{0xbd, &(0x7f0000000300)=@string={0xbd, 0x3, "a09bb91a6801db303e2a795f727cb78c3a89e570a4eff0ef69d5ac8b434ff42613016cf29476c26ed25bb1346df220bd4bc8047298d1fcd6b7f3a9b95f1eea40d0730f2cf6f2e05286ea528f9e3ea1a1deab57149eadc5d5de78b6a1f0c515036f939817dfd96821c4a5c5fa195c4ddf5114eefdd626c225d88860233f5197805cd772c2bdd9f025a69e3255ae034bf691cc4ff9bd0dd9c6db7e2ed10037ae85b411effa4b6ca97bed821f2456f11d6a7fe614bb36f61ef0dc6d60"}}, {0x2b, &(0x7f0000000140)=@string={0x2b, 0x3, "0164c0af2a197fee1f2eea7c9574769c28f0b5cd2d1f889ea6dd6fd771baafcc19d381de2a751f27a3"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44e}}, {0x58, &(0x7f0000000400)=@string={0x58, 0x3, "f5b062ece50733e77f743d7b0bd1dd6b64dbdd7ee7da51e5a2ba4af3ff06ea156584f3875dbab696591d0eb790e3490f079b4cd418e62d0b8693b20a4a7245981ac2f0ce2639df8b9143a59b08ed9733eb9bf31f4883"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}]}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}], 0x1, 0x3, 0x3) 2m20.096020938s ago: executing program 3 (id=179): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r1 = openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x84081, 0x104, 0x4}, 0x18) read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020) 2m5.046793727s ago: executing program 32 (id=179): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r1 = openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x84081, 0x104, 0x4}, 0x18) read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020) 1m5.95243952s ago: executing program 2 (id=1092): getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x947, &(0x7f0000000040)=0x2) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x49800}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) 1m5.894413571s ago: executing program 2 (id=1093): prctl$PR_SET_VMA(0x42, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2802463, 0x0) 1m5.893868572s ago: executing program 2 (id=1094): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x158, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x19) openat$cgroup_ro(r3, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r4, &(0x7f0000001a00), 0x4000000000001aa, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001d80), 0x802, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @flat=@weak_binder={0x77622a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000040)={0x2}) 1m5.847747682s ago: executing program 2 (id=1095): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f00000001c0)=@filename='./file0\x00', 0x0, 0x0) 1m5.831594962s ago: executing program 2 (id=1096): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000054) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x4052, r0, 0x0) 1m5.552857547s ago: executing program 2 (id=1100): r0 = gettid() r1 = socket(0x1e, 0x5, 0x0) listen(r1, 0x0) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000940)={'bridge0\x00', &(0x7f0000000900)=@ethtool_rxfh_indir={0x1}}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x3b8, 0x8002, 0x3e60, 0x1}]}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x486, 0x0, 0x40000000}]}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat(0xffffffffffffff9c, 0x0, 0x608e03, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) timer_create(0x2, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r10, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000002c0)) 1m5.451229759s ago: executing program 33 (id=1100): r0 = gettid() r1 = socket(0x1e, 0x5, 0x0) listen(r1, 0x0) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000940)={'bridge0\x00', &(0x7f0000000900)=@ethtool_rxfh_indir={0x1}}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x3b8, 0x8002, 0x3e60, 0x1}]}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x486, 0x0, 0x40000000}]}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat(0xffffffffffffff9c, 0x0, 0x608e03, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) timer_create(0x2, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r10, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000002c0)) 1.927811999s ago: executing program 5 (id=2323): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) r2 = socket$inet6(0xa, 0xa, 0xb1) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) ftruncate(r0, 0x5) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000100)={0x0, 0x8, 0x4, 0x7, 0x3, 0x0, [{0x3, 0x100, 0x6, '\x00', 0x128b}, {0x6, 0x5, 0x6, '\x00', 0x9}, {0xf2a, 0xffffffffffffffbd, 0xc0000000, '\x00', 0x80}]}) close(r0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x8, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f00000003c0)={'\x00', 0x4, 0x1, 0x8, 0x0, 0x9, 0x4000, 0x4033002, '\x00', 0xcf3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x3, &(0x7f0000000580)) setxattr$security_capability(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000600), &(0x7f0000000640)=@v2={0x2000000, [{0x71, 0x6}, {0x7, 0x2}]}, 0x14, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x0, &(0x7f0000000680)) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000006c0)={r3, 0x98e, 0x1, r3}) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000700)) r4 = syz_usb_connect$cdc_ecm(0x0, 0x61, &(0x7f0000000740)={{0x12, 0x1, 0x100, 0x2, 0x0, 0x0, 0x97, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0xff, 0xc0, 0x3, [{{0x9, 0x4, 0x0, 0xf, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x9, 0x24, 0x6, 0x0, 0x0, "370ad62e"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xd3, 0x6, 0xfffe, 0x3}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0xa, 0x4, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0xe, 0x9, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0x3, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0x8e, 0x9}}}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x201, 0x0, 0x0, 0x2, 0x10, 0x80}, 0x77, &(0x7f0000000800)={0x5, 0xf, 0x77, 0x3, [@generic={0x61, 0x10, 0x2, "900a1d6592aac069a9f4a807607c9830ceb2248396e888529ffbaf6fae59af93eac11e0c84aae47d8ec4d79ded9ac033cf5fe548dd8f4fc57c43d56a63293547d318427a3c4518f8cf37d35bdfcf52364022aaeb883383eba8ae174986cb"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x4, 0xcae}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x2, 0x5, 0x5a1b}]}, 0x4, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x7edcef2428fe0bdb}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x44d}}]}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000b40)={0x14, &(0x7f0000000a00)={0x40, 0x34, 0xc5, {0xc5, 0x11, "dece772c3038b154b28bd20946144e9903469583a98b63ea875cc752b4f8123466202387e55f36123f8ac3d4f220518565515d2fdc8b29deccb5d58a8f6b38b53f6fc28797d55ff60187c1acaecd43a0ec02c32990bb96275f654ad38c14fd6e7f2dc8580f877e98852b5dc1aea4ab3423c848d8260f0f9003cdd94fdec001691bebc548f6549fa058336c74cf467b89c570e4bd6aedfdbc163128a7ce13e3a22a10221f4e3fda365367889ca4a381ea2655c56878d445bc52a21dc345b2091d33adf0"}}, &(0x7f0000000b00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000cc0)={0x1c, &(0x7f0000000b80)={0x0, 0x0, 0x89, "317989f654834ca4629f7f2f999d165f1c96b83e208a5145411e0c2f42dc322a727493b9db82ca998dd187b55285d4cf99e55f584f1bdfcc057d503f472bfacd2ff771db8e5f634fc2dacb7b7f1a4b2f94e46a0c7e72c3d7a3088f3bd10b54a2927b91b30b5c1c791558abd871b2d3051ef026bed6ee137fa6a5299fe1327c37827b0de738a456684b"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0xe2}}) mknod$loop(&(0x7f0000000d00)='./file1\x00', 0x4, 0x1) syz_open_dev$MSR(&(0x7f0000000d40), 0x2, 0x0) r5 = dup2(r2, r3) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000802, r6, &(0x7f0000000e40)={0x6, 0xd, 0x800, 0xa2, 0x3, 0x6, 0x6, 0x4, 0x80000000}) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000ec0)={'filter\x00', 0xe2, "ddb7d0900b4e97781f68db0f5547af09caa26ae4b9936326d3c59957a9f155126fdc76d2360b96094c931ed3e202dab7b9163e325187479ef9c0b3447dd1562208248fa73821ebaf3527c22eeb35e630213ec8aeef6cc8324cc036a0154c3e4ee644deb0b6d13b533af9a98bd301376f2a688494e619792264104baeafab45998c57e23b54fcdc56cddfb889f1695bdf803f10d1e40440cdbc72ed083b4638c6e2440398ce2e62e0e7702f9e6eabd3b18b50286d36b704412cd6fe56d513a5c652e8d1226e8a2e607793fae41fd0527715e44b8f3b5d3754ac416a1a170a6abdf34a"}, &(0x7f0000001000)=0x106) syz_usb_connect$uac1(0x3, 0xe7, &(0x7f0000001040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x3, 0x1, 0x5, 0x80, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x1}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x6, 0x1, 0x3}, @processing_unit={0xb, 0x24, 0x7, 0x2, 0x0, 0x2, "f727da41"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x13, 0x1, 0x2, 0xe7, "34cf28c0187fd2"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x6, 0x2}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xf, 0x7, 0x9, "1a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x3, 0x9a, 0x81, {0x7, 0x25, 0x1, 0x0, 0x2, 0xb3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xb, 0x3, 0x40, 0x8, "6b02", 'e\n'}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x0, 0xfffe, 0x30, "fbfdb8f3"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x9, 0x3, 0xb4, 0xa, "c0562e47de"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1002}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x44, 0x4, 0xdc, 0xca, "79fbc1", "66d049"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x9, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x81, 0x6, {0x7, 0x25, 0x1, 0x1, 0x7, 0x4}}}}}}}]}}, &(0x7f0000001600)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x110, 0x0, 0x0, 0x6, 0x10, 0x1}, 0x3c, &(0x7f0000001180)={0x5, 0xf, 0x3c, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x42, 0x5, 0xfb, 0x1, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x3ff, 0xf000, 0x5}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x80c, 0xf00, 0xf5, [0x0, 0xc0, 0xff30, 0x3f0f, 0xc00f]}]}, 0x9, [{0x35, &(0x7f00000011c0)=@string={0x35, 0x3, "375128ff54511266ae33c2e0f26273981755e3c4652287207e4b2af195c0d381a42f15167ce3ae878ab76d332e11c1409b16ca"}}, {0xbf, &(0x7f0000001200)=@string={0xbf, 0x3, "377731ee8fa10bd7b9c6820811746184415231f5f77a38756dde38fb24699dd23b2621733e1ddfcd97b103567d855d8efe6223b15a1b23e8857a6f9bef96556e7f27f7d70190686a38bcd177ca57fd45323a511bef50baa9ba987a444561bd128a284ab0718d51c0f035cdb699400434e9de9955b8ad72447c504021e3a2ed638d714eeba3984a840449b61530864c33935f4d53b4bcbbfc5900be6d885d27e7f10cdf1c3d2d55527a7765e700ba77332064c1511a0e95a3baba33b7db"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x40f}}, {0x8c, &(0x7f0000001340)=@string={0x8c, 0x3, "a06810f9d80de06143afcef65cfb6a560bc801143eeeff68fe4b8ffc9804555bed7ac859ba60b9d9ac8fa2ab2b13ce7096e941826f3e1c90db40b010cff3f5848d79ea0abc1a90794e2f9e4187d936585241cf0b6148d9533455048502f0682cdd7e3f3a7130ce2d1e1ec237790312d1c4e09de0db938d34b91818b24f4214eb576e002b8ec7202e9916"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0xb}}, {0x81, &(0x7f0000001480)=@string={0x81, 0x3, "5da9be495d9dbdc7cbdf36b838b4671da1bdcb7636e40ab62e13f0c09568c0187e28707bb779cc57d3b0c9a31ce6a74460aa40a216df370e9aeed8b1dcd2b4befac11f16ec8743ffdc7bcc9a724000d52d0c5d9c9c13271fc222b5944215545b6d172c8dfa792edeafff6719007818f0c51167d27a0cd6eac8779a8145855f"}}, {0xa6, &(0x7f0000001540)=@string={0xa6, 0x3, "882af0c29f63559d4e13ef8c00a737176e991aecc6ada599964025d3f5f7ad06773773295dc362b25e1bf9d83b06db2fead656d28681c640db2a49bf017591eb53aa4cec4baae84a6712ef4d5bca6a2b06f0a2aec24ed84df6e7c0594e970a1409a44f75552ee2f95435a5ab8fe631191d692c0553dd113d8c1bef6afd19787e355d93a35015a09796d582bb3583cb32877b7c8a5e7ce38d35bd11f61b04e17dd15107f3"}}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000016c0)={0x0, 0x2, 0x6000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000001740)={0x0, 0x10, [0x0, 0x7719, 0x8, 0xffff], &(0x7f0000001700)=[0x0, 0x0]}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000001780)={0xffffffffffffffff, 0x8, 0x1, r3}) 1.580840635s ago: executing program 1 (id=2340): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x11d282) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f00000000c0)=ANY=[@ANYBLOB="3473e8984d55eebf968a26e45b6695da8cc77d6be25ee2a1a5cd2a4cc64fdc8190fb0cf7c34b5711bef6c8128bc9ef11671eaf795af1879964dc6bdd6d47550b68e7d81d3bbc77dd0a968948715f605197a1573b446ac86c06d106d4e267e4d9ca4121fc6c81111c88fb895525d2ef1fabbdba0e6e17227132bacc8fead457dabeb1c205eaf90868165c2ff4965eed51d738eb311a5492f50ec14c2e0f0021033c6cd200dcbab3ccbe48686bbc7b6d46f94d3e5f09b7bc1b25830bc8af3e019e30c5f411101de84b414248a900"/223]) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0xa8002, 0x0) preadv2(r1, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000840)=""/56, 0x38}], 0x2, 0xa67, 0x2, 0xf) 1.580499595s ago: executing program 1 (id=2341): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x3750c2, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') setns(r1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) read(r0, 0x0, 0x0) 1.578936655s ago: executing program 1 (id=2342): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={&(0x7f0000000300)="b814f7d71a11c65356e286f5ba6e6102db072cdf68275873d8f0d55159fb3c5fdd7bfeab1fa931a9ca2e0c96fb967788a553715abf4c999919fd88373ed236686e11cddd374d3a5171cc2b9d1f1619503bd9181970a3f948a2ccfb6a95e4f72a6313b193082ac67fd7ecbe12696bbc5d", &(0x7f0000000380)="c75f16175bb69c4013d0479f629c0ba46ff8ac8dc98098b878545ed70bb5bc1bacf36b28b91a23b1365fa8e67059f7c1fc1ade5eb855207f7066f96bdafb14234e8d9afeee1f3fd22e4b4fe5a61f4afde21805ae5206b87bb22d882df14583a3e6616fce86827ba486d004155a4450ce7bc978b14dadd17103787da46b699548021f41884a83569757da03e5194f8d83c3638886d844e7bed2e0440b393bdd4ec45238"}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) pselect6(0x40, &(0x7f0000000000)={0x1, 0x8, 0x401, 0x10001, 0x8, 0x1bf, 0x6e4e, 0x6}, &(0x7f0000000040)={0x200, 0xf97f, 0x9, 0x7a09, 0x80, 0x2, 0x6}, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) 1.346868089s ago: executing program 5 (id=2343): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) prctl$PR_SET_MM(0x23, 0x6, &(0x7f00005a0000/0x1000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) prctl$PR_SET_MM(0x23, 0x3, &(0x7f000059f000/0x3000)=nil) (async) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0xfc, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0xf, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x80a0000}, {0xdddd1000, 0xff}, 0x0, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0x0, 0x1]}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x1040) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {&(0x7f0000000340)="2009f5", 0x3}], 0x2) (async) r5 = mmap$binder(&(0x7f0000348000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x6) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000980)={0xa0, 0x0, &(0x7f00000007c0)=[@exit_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000640)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/89, 0x59, 0x0, 0x1e}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/34, 0x22, 0x0, 0x35}}, &(0x7f00000006c0)={0x0, 0x28, 0x40}}}, @free_buffer={0x40086303, r5}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000700)={@fda={0x66646185, 0x1, 0x0, 0x3d}, @flat=@handle={0x73682a85, 0xb}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000780)={0x0, 0x20, 0x38}}, 0x400}], 0xcd, 0x0, &(0x7f0000000880)="630def19c458e7b74b0e42d9470b511d3a2231c437f2a178ba4f0aa5658437e3bfe3a4720acee3f019ea54b8878af923d2fb21d36989800aa401ad6b1a92e716f8b75cf08ff7b18fcdeabe554e54098264148c77b57c504e932ad299d4fa3a82efc3daa1e63e8ba43eef88b9ff8da2f20e87d01af04195caaf59f4cc9d9ac0b757fd5d93098575b3f63e24eee4f23420cd977ab56fa01df08a2dd4d50b12ad5471fe54b65d749e2479852ff175978db43312fc6b29b837b03be49afbce0a41047f7cb57598f4d2fb1fa37c3af1"}) (async) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x80}) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x8000000000000007) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000edff"]) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) (async) ptrace$getregset(0x4205, r7, 0x1, &(0x7f0000000080)={0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="0402e6ffffffffffc810fe880000000001010401c6000000"], 0x20) (async) syz_usb_connect(0x0, 0x45, &(0x7f0000000400)=ANY=[@ANYBLOB="12010400c9d1c40899040a50b7e70102030109023300020000010009049700010dd5ce000868f9240201000000000905000000000000000756aea957fb040000004106cf0031a94337ef9705b0518e877b37e65c3b130224dc62a5af47385a753e5d588e17a4c228b0299c03043636e8a79a9ad5bb3f5b7fe3cc9ff62190b1cec78ad4c3c4620a9d09f4dd142fc1d7a9fed62056ed000000000088ef7d4d1e606e112cc2199c0407361941bb1dbbac2dfe837327c04a7b3dfe1fec01bba5360000000000000000"], 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r8, 0x0) 1.336298469s ago: executing program 1 (id=2344): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x3], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffeffffe, 0x0, 0x5], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5b2bb47c], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000001440)={'syz1\x00', {0x4, 0x6, 0x7ff, 0x7ff}, 0x21, [0x0, 0x7, 0x9f, 0x3, 0x7fffffff, 0x0, 0xa5e, 0x4, 0x9, 0x3, 0x401, 0x10000, 0x0, 0x7, 0x80000001, 0x821d, 0x8c, 0x9, 0x2, 0x2, 0x2, 0xb8f, 0x0, 0x89, 0x5, 0xffffffff, 0xfff, 0x800, 0x42d2, 0x4, 0x3, 0x7, 0x5, 0x80000000, 0x2, 0x2, 0x8, 0x6, 0xa, 0x400, 0x3, 0x0, 0x2, 0x0, 0x0, 0x8, 0x1, 0x7, 0xdfae, 0x7e6, 0x5, 0xfffffc01, 0x0, 0xa, 0x40, 0x5, 0xc4710000, 0x5, 0x4000000b, 0x6, 0x8, 0x17d4bd08, 0x80000000, 0x2], [0x7, 0x6, 0x1, 0x5, 0x0, 0x4, 0x3, 0x5, 0xb20, 0x4, 0x40, 0x4, 0x3, 0xffff0001, 0x4, 0xb, 0x4, 0x4, 0x1, 0x5, 0x5, 0x4, 0x8007, 0x8000, 0xfff, 0x1000, 0x6, 0x5, 0xf9, 0x10001, 0x8, 0x9b, 0x2, 0x2, 0x4, 0x7245, 0xfffffff1, 0x80000000, 0x9, 0xd21, 0x8, 0x4, 0xffff, 0x3ff, 0x68e4, 0x7, 0x3, 0x7, 0x581, 0x3, 0x3, 0xc, 0xfff, 0x2, 0x200, 0x7, 0x800, 0x7, 0xffffffff, 0x119b, 0x9, 0x10, 0x4, 0x4], [0x0, 0x1ffff, 0x1, 0x80000000, 0x5, 0x7, 0x5, 0x1, 0x6, 0x5, 0x800, 0x8, 0x7a2d, 0x1650c5fd, 0x2ab, 0x3, 0x800, 0x717, 0x1, 0x5, 0x7, 0x7, 0x4f, 0x1, 0x4e1, 0x8, 0x87, 0x5, 0x8, 0x6e, 0x10, 0x3, 0xa02a, 0x6, 0x91d3, 0x7, 0x6, 0x9, 0x9e9, 0x5, 0x6, 0x7fff, 0xb, 0x8003, 0x1, 0x6, 0x8, 0x4f42, 0x6, 0xa2a, 0x4, 0x1, 0x10000, 0x6, 0xfffffff9, 0xffffffa0, 0x3, 0x6, 0x5f, 0xfffffe42, 0x9, 0x3ff, 0x10001, 0x2], [0xfff, 0x117, 0x200, 0x6, 0x800, 0x2, 0x1ed, 0x200, 0x6, 0x3ff, 0xffffffff, 0x8, 0x0, 0xffffea38, 0x2, 0x8, 0xfffff13b, 0x0, 0x43, 0x4068, 0xc51, 0x6, 0x9, 0x4, 0xfffffff7, 0x3, 0x8, 0x10a2a7e, 0x4, 0x3, 0xc0000000, 0x80000000, 0x80000000, 0x400, 0x7, 0x7, 0x1, 0x0, 0x0, 0x1ff, 0x2, 0x6a, 0x10, 0x8, 0x0, 0xb, 0x3, 0xfffffe01, 0x4, 0x4, 0x8, 0x0, 0x10000, 0x3, 0x400, 0x1, 0x7, 0x800, 0x6, 0x675, 0x100, 0xc, 0x6, 0x20005]}, 0x45c) (async) write$uinput_user_dev(r1, &(0x7f0000001440)={'syz1\x00', {0x4, 0x6, 0x7ff, 0x7ff}, 0x21, [0x0, 0x7, 0x9f, 0x3, 0x7fffffff, 0x0, 0xa5e, 0x4, 0x9, 0x3, 0x401, 0x10000, 0x0, 0x7, 0x80000001, 0x821d, 0x8c, 0x9, 0x2, 0x2, 0x2, 0xb8f, 0x0, 0x89, 0x5, 0xffffffff, 0xfff, 0x800, 0x42d2, 0x4, 0x3, 0x7, 0x5, 0x80000000, 0x2, 0x2, 0x8, 0x6, 0xa, 0x400, 0x3, 0x0, 0x2, 0x0, 0x0, 0x8, 0x1, 0x7, 0xdfae, 0x7e6, 0x5, 0xfffffc01, 0x0, 0xa, 0x40, 0x5, 0xc4710000, 0x5, 0x4000000b, 0x6, 0x8, 0x17d4bd08, 0x80000000, 0x2], [0x7, 0x6, 0x1, 0x5, 0x0, 0x4, 0x3, 0x5, 0xb20, 0x4, 0x40, 0x4, 0x3, 0xffff0001, 0x4, 0xb, 0x4, 0x4, 0x1, 0x5, 0x5, 0x4, 0x8007, 0x8000, 0xfff, 0x1000, 0x6, 0x5, 0xf9, 0x10001, 0x8, 0x9b, 0x2, 0x2, 0x4, 0x7245, 0xfffffff1, 0x80000000, 0x9, 0xd21, 0x8, 0x4, 0xffff, 0x3ff, 0x68e4, 0x7, 0x3, 0x7, 0x581, 0x3, 0x3, 0xc, 0xfff, 0x2, 0x200, 0x7, 0x800, 0x7, 0xffffffff, 0x119b, 0x9, 0x10, 0x4, 0x4], [0x0, 0x1ffff, 0x1, 0x80000000, 0x5, 0x7, 0x5, 0x1, 0x6, 0x5, 0x800, 0x8, 0x7a2d, 0x1650c5fd, 0x2ab, 0x3, 0x800, 0x717, 0x1, 0x5, 0x7, 0x7, 0x4f, 0x1, 0x4e1, 0x8, 0x87, 0x5, 0x8, 0x6e, 0x10, 0x3, 0xa02a, 0x6, 0x91d3, 0x7, 0x6, 0x9, 0x9e9, 0x5, 0x6, 0x7fff, 0xb, 0x8003, 0x1, 0x6, 0x8, 0x4f42, 0x6, 0xa2a, 0x4, 0x1, 0x10000, 0x6, 0xfffffff9, 0xffffffa0, 0x3, 0x6, 0x5f, 0xfffffe42, 0x9, 0x3ff, 0x10001, 0x2], [0xfff, 0x117, 0x200, 0x6, 0x800, 0x2, 0x1ed, 0x200, 0x6, 0x3ff, 0xffffffff, 0x8, 0x0, 0xffffea38, 0x2, 0x8, 0xfffff13b, 0x0, 0x43, 0x4068, 0xc51, 0x6, 0x9, 0x4, 0xfffffff7, 0x3, 0x8, 0x10a2a7e, 0x4, 0x3, 0xc0000000, 0x80000000, 0x80000000, 0x400, 0x7, 0x7, 0x1, 0x0, 0x0, 0x1ff, 0x2, 0x6a, 0x10, 0x8, 0x0, 0xb, 0x3, 0xfffffe01, 0x4, 0x4, 0x8, 0x0, 0x10000, 0x3, 0x400, 0x1, 0x7, 0x800, 0x6, 0x675, 0x100, 0xc, 0x6, 0x20005]}, 0x45c) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) socket(0xa, 0x3, 0x3a) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) (async) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000280)={[{@uid={'uid', 0x3d, r4}}]}) rename(0x0, 0x0) unshare(0x62040200) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000100)=0x7, 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000100)=0x7, 0x8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip_tables_names\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) (async) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.24143953s ago: executing program 1 (id=2347): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket(0x80000000000000a, 0x2, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect(0x5, 0x553, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000940)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x5, 0x6, 0x4, 0x8, 0x1b}, 0x49, &(0x7f0000000140)={0x5, 0xf, 0x49, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0xfb, 0x4, 0x2, 0xff00, 0xc7c, [0xff3f0f, 0xc000, 0x80bf00, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0xd, 0xffff}, @ssp_cap={0xc, 0x10, 0xa, 0xb, 0x0, 0x6864, 0x0, 0x178}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0xfc, 0xfff2}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x8e, 0x1, 0x5, 0x5}]}, 0x4, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x42b}}, {0xa4, &(0x7f00000001c0)=@string={0xa4, 0x3, "1d310898f2e8cb8d78a62ccda10809d79b7c01d02817ae397226d42987e55fb32d032cc3288e84b1e9d1417270928b4e1efd3ff07effacc96b99a789301aeef55e56468e4214e6a093633a5a5b04b5331bd5454941be46a434934a609628e216efe6f3fdd85543c3f46a04773048bd95d07369b9eb12c988bab024ef3d706bc0f39fb9a71b886831e6dabda587d5546c1e7d2fd00fbfef1550e72ec5910a067df53d"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1427}}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001e000100b768fce60b16003d59363acf0704e6f025bd7000"], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x8080, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r2, &(0x7f0000000080)="9035d1a1facb75526d", 0x9) close(r2) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 750.512738ms ago: executing program 5 (id=2353): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYRES32, @ANYBLOB="080005000700ff"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x231, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x24000000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x45809000) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 733.251088ms ago: executing program 5 (id=2356): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') prlimit64(0x0, 0xe, 0x0, 0x0) setrlimit(0x5, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ptrace(0x10, r1) ptrace$poke(0x1, r1, &(0x7f00000004c0), 0x7fff) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfaE\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1056) 713.763358ms ago: executing program 5 (id=2357): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x8) (async) r2 = socket(0x80000000000000a, 0x2, 0x0) (async) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 576.994441ms ago: executing program 0 (id=2359): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0xe000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'tunl0\x00'}) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = dup2(r3, r3) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x32, 0xc, 0x9, {0x2, @ah_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x11}, @remote, 0x0, 0x3}, {0x0, @random="1ac9a523985a", 0xf, 0x276, [0x1, 0x2]}, @usr_ip6_spec={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa7, 0x3, 0xfe}, {0x0, @multicast, 0x2, 0x0, [0x9, 0xffffffff]}, 0x0, 0x9}}}) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) 563.866211ms ago: executing program 0 (id=2360): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @fda={0x66646185, 0x5, 0x0, 0x34}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 481.767252ms ago: executing program 1 (id=2361): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x0, 0xfffffffbffffffff}) timer_create(0x2, 0x0, &(0x7f0000000300)=0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f00000001c0)=0x3, 0x4) timer_settime(r0, 0x0, &(0x7f000006b000)={{}, {0x77359400}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200000002) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000120901c000"/24]) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x81, 0x0, 0xb}]}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8080) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)=ANY=[@ANYBLOB="300000002e000305000004004676469d59d3f181", @ANYRES32, @ANYBLOB], 0x30}], 0x1}, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$setlease(r8, 0x400, 0x1) r9 = syz_clone(0x280, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) r11 = eventfd2(0x16e, 0x80001) ioctl$VHOST_SET_VRING_KICK(r10, 0x4008af20, &(0x7f0000000000)={0x1, r11}) ptrace$pokeuser(0x6, r9, 0xd8, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000009700)='/sys/kernel/oops_count', 0x40, 0x2) read$FUSE(r8, &(0x7f0000003e80)={0x2020}, 0x1c05) 476.694292ms ago: executing program 0 (id=2362): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x123900, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x292, 0x0, 0x6}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1000000001, 0x20000000029}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 374.136244ms ago: executing program 0 (id=2363): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x90880, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x5000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000080)=0x4, 0x4) 368.406214ms ago: executing program 0 (id=2364): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x7ef66000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x40187014, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x1}}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 314.329425ms ago: executing program 0 (id=2365): r0 = socket(0x1e, 0x5, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000002700)={0x0, {{0xa, 0x4e23, 0x6, @loopback, 0xf}}, {{0xa, 0x4e20, 0xfff, @private0, 0x80}}}, 0x108) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x14, &(0x7f0000000080)=[{&(0x7f00000006c0)=""/248, 0x102}], 0x1, &(0x7f0000000a00)=""/196, 0xc4}, 0x1}], 0x1, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)="ab", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x8c, 0x2, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x50, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40080}, 0x8041) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0xa00}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x64, 0xd, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x8014) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r3, &(0x7f0000000500)={0x18, 0x0, r5}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x400, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x5c, 0x0, &(0x7f00000002c0)=[@exit_looper, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000001580)=""/4098, 0x1002, 0x2, 0x34}, @fda={0x66646185, 0x8, 0x2, 0x2f}, @flat=@weak_handle={0x77682a85, 0x1014}}, &(0x7f0000000100)={0x0, 0x28, 0x48}}}], 0x69, 0x0, &(0x7f0000000180)="7da36444688b9003c6045e1cc7af25c074e647b4f4564aaa63f27ea91489a03854cefdb82aa7678a81e6c8848304e129eafaad290f30a1fdb345cc9108b412d63b555e427f4860ca62c851483d9fcdadd026296f264d18663831e148180528a1a50b1eb41156e49ac7"}) close_range(r7, r6, 0x0) 114.069898ms ago: executing program 4 (id=2375): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e0000000201000000000c0003800400038004000100080005"], 0x40}}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 113.364418ms ago: executing program 4 (id=2376): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0x9f48, 0x0, [0x10000, 0xa3f7, 0x6, 0x10001, 0x7fffffffffffffff], [0x401, 0x1, 0x0, 0x2, 0x5, 0x6, 0x25, 0x8, 0xaa3f, 0x4, 0x1, 0x101, 0x6, 0x7f90, 0x647f0edb, 0x8548, 0x7, 0x9, 0xc86b, 0xffff, 0x1000, 0xcd, 0x2, 0x9695, 0x2, 0x39, 0x2, 0x3, 0x9000000, 0x3, 0x3, 0x0, 0xfc37, 0x8, 0x0, 0x7, 0x3, 0x401, 0x5, 0x2, 0x0, 0x5, 0xfffffffffffffff7, 0x6, 0x3dd, 0x1000, 0xa0, 0x1, 0x3, 0x0, 0x7, 0x5, 0x6, 0x9, 0x5, 0x6, 0xffffffff80000004, 0xdc4, 0x100000001, 0x7d, 0x4, 0x10001, 0x1, 0xfffffffffffff61e, 0x8000000000000001, 0x1, 0x7, 0x3, 0x10001, 0x9, 0xf8, 0x2, 0x8, 0x7ff, 0x5e, 0x0, 0x5, 0x3, 0x6, 0x9, 0x5, 0x9, 0xffffffff, 0x8, 0x7, 0x6, 0x162, 0x71a, 0x8000000000000001, 0x2ab, 0x4, 0x1ff, 0x4, 0x6, 0x5, 0x3ea, 0xe9fc, 0x5, 0x1, 0xffffffff, 0xfffffffffffffffd, 0x2, 0x8, 0x1, 0x1272, 0x8, 0x5, 0x2, 0xdfe, 0x96, 0x3, 0x2, 0x1, 0x4, 0x7, 0x81, 0x3, 0x1, 0xf, 0x9, 0xffff]}) fstat(0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc028ae92, &(0x7f0000000100)={0x5, 0x23000000}) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x7, 0x0, 0x1000, &(0x7f0000814000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYRESOCT]) ioctl$KVM_GET_EMULATED_CPUID(r8, 0xc008ae09, &(0x7f0000000080)) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x5) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0) 111.553688ms ago: executing program 4 (id=2377): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r1, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4622, 0x47, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x200}, 0x1c) sendto$inet6(r1, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x1d}, {0x6}]}) readahead(r0, 0x1, 0x79844e1c) 54.430769ms ago: executing program 4 (id=2378): openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145480, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0100011c4500"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) 52.592569ms ago: executing program 4 (id=2379): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000500)={0x40, 0x1, 0x2, "3aec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000001480)={0x84, &(0x7f0000001040)={0x40, 0x8, 0x2, "e249"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x2, "e911"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) (async) syz_usb_control_io$uac1(r1, &(0x7f0000000600)={0x14, &(0x7f0000000400)={0x60, 0x7, 0xe4, {0xe4, 0x1, "a0841edf5f79ffce50c7cac491a36c6f6dd1aee04fa1eb47be3ae3c189eb0121091b15fc5048ba4d6847ab6292aef3a4fce718035680d00a98956341afbf65cae5346cc788aa15c6917db08d64799ce1927ecbc25ed35de246a6eab9e9f044170db59afd1ec07abcf9de98de8782faf28f082a687d0c83313ba158f2db7e3574815b1799323657be8d5b133727a1753e28bdd97d7e9754ed3a334b9e4348d6c2da99ef0cef409848ea3e31612946df75a744a4f45a5e414f9f7bf5d13cc8a9c99b948002aa32a8a0dc63e162306f56b014210b5733bcf704ca5cac3736cd289739c7"}}, &(0x7f0000000540)={0x0, 0x3, 0xa4, @string={0xa4, 0x3, "dd86cdf77e1e8d7d1e4f4cbdd645975dd470c3e0d1358837a156a4db48f3a381befae2141486df83a804b354b7c21bfdb96463e054ebea601a884636253d8b7f9bf8445a1fb0576edcd941464f18dab6c68445a12c58e5ddf3a7e55299c0df3fdb755eb7928710cc397655e14678a9acba95e4ce1aea830b31db7912a16f6940b29b950c91b700eed55df1366569155fbf39461f17ddf2d2823e8c191027fab1595d"}}}, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x40, 0xd, 0xf3, "06bde9aa8b59219fc8fb25603c37dca5b15a25c3af9b3b509929b9e1fccedcd78c3ef9acf0e08d7b46c37883ada0992a517159dc0dc228f05bdf48c3db32d9b90d7d5468c5e9738ebdd15035f3f55b4aeacc6d48ff1b8e247223600e3fbc8422fabd05fb23a7b262f98709309725ca72ab91231a4dc728ed027cdd4de37a0870221e472f2b51171ddce9e56df6014346c01bdedc25e6281f770a87ff56dff3e102e2565f365aaa593f05144593d2cbfea2fb9536632ea240a6f1b35c9bbea6bfff9a456676e3c836626cbe943440bf7877fd825fa860bd57f37902895a61425ab0feec7e57967db821f8f172ee86ad2362c806"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000007c0)={0x20, 0x81, 0x2, "c1bf"}, &(0x7f0000000800)={0x20, 0x82, 0x3, "ed2918"}, &(0x7f0000000840)={0x20, 0x83, 0x3, "b5973a"}, &(0x7f0000000880)={0x20, 0x84, 0x3, "bd805b"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "0b3987"}}) (async) pselect6(0x40, &(0x7f0000000080)={0xe, 0x8, 0xf05, 0x0, 0xb, 0x79ea, 0x9}, &(0x7f00000000c0)={0xf8, 0x5, 0x64af61f2, 0x9, 0x0, 0x4, 0x6, 0x401}, &(0x7f0000000100)={0x2, 0x9, 0x8, 0x200, 0x5, 0xcf96, 0x100, 0x6}, &(0x7f0000000140), &(0x7f0000000200)={&(0x7f0000000180)={[0x7]}, 0x8}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000001880)={0x1940, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc0, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x881}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x81}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd8}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xda}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x62}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}]}, {0x180, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x84}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x164, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x0, 0x81, 0x2, 0x83e, 0x1, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x2, 0x9}, {0x5, 0xa}, {0x0, 0x5}, {0x7, 0xa}, {0x0, 0x3}, {0x0, 0x7}, {0x5, 0x1}, {0x7, 0x1}, {0x4, 0x5}, {0x7, 0xa}, {0x3, 0xa}, {0x1, 0x6}, {0x1, 0xa}, {0x2, 0x9}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x6}, {0x0, 0x3}, {0x7, 0x9}, {0x6, 0x4}, {0x1, 0x6}, {0x1, 0xa}, {0x7}, {0x0, 0x7}, {0x2, 0x6}, {0x1, 0x4}, {0x5, 0x3}, {0x4, 0x4}, {0x0, 0x3}, {0x3, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x200, 0x3, 0xffff, 0x8, 0x7ff, 0xdec, 0x4]}}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x40, 0x7, 0x9, 0x6, 0x7, 0x0, 0x2]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x36, 0xc, 0x16, 0x9, 0x6, 0x48, 0x64, 0x16, 0x12, 0x60, 0x60, 0xb, 0x30]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6, 0x24, 0x1, 0x36, 0x6, 0x4, 0x60, 0x9, 0x0, 0x16, 0x6, 0x16, 0x1, 0x12, 0xc, 0xc, 0x1f, 0xc, 0x4, 0x12, 0x16, 0x1b, 0x5, 0x4, 0x4, 0x5, 0x5, 0x30, 0x2]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0x5}, {0x7, 0x8}, {0x4, 0x4}, {0x4, 0x2}, {0x7, 0x4}, {0x1, 0x1}, {}, {0x2, 0x5}, {0x6, 0x1}, {0x1, 0x9}, {0x3, 0x1}, {0x3, 0x3}, {0x4, 0x4}, {0x7, 0x1}, {0x4, 0x6}, {0x7, 0x8}, {0x0, 0x2}, {0x7, 0x6}, {0x7, 0x7}, {0x3, 0x5}, {0x3, 0x3}, {0x4, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0x9}, {0x6}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x3, 0x3, 0x1, 0x30, 0x24, 0x30, 0x1, 0x18, 0xb, 0x62, 0x30, 0x18, 0x0, 0xb, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x1, 0x3, 0xfffd, 0x8, 0x5, 0x8]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x18, 0x12, 0xc, 0x6, 0x6, 0x60, 0x48, 0x2, 0x1b, 0x12, 0x24, 0x12, 0x36, 0x16, 0x3, 0x0, 0x60, 0xa, 0x5, 0x1, 0x16, 0x3, 0x9, 0x1, 0x24, 0x5, 0x1b, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0xaa4, 0x11d, 0x0, 0x1, [{0x174, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe47b}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x11}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x154, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x200, 0xb7c9, 0x4, 0xc, 0x5, 0x2]}}]}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xe, 0x2, 0x8000, 0x800, 0x993b, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x651, 0x0, 0x1ff, 0x1ff, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x5, 0x97ff, 0x0, 0x8, 0x8, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4800, 0x3, 0x5, 0xa8c, 0x2, 0x1, 0xdbf]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0xa}, {0x0, 0x5}, {0x0, 0x9}, {0x1, 0x3}, {0x2, 0x9}, {0x1, 0x3}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0x3}, {0x7, 0x6}, {0x7}, {0x2, 0x7}, {0x0, 0x6}, {0x0, 0x8}, {0x3, 0x4}, {0x6, 0x5}, {0x2, 0x8}, {0x6, 0x3}, {0x6, 0x1}, {0x1}, {0x5, 0x7}, {0x5, 0x7}, {0x0, 0x4}, {0x0, 0x5}, {0x1, 0x6}, {0x2, 0x3}, {0x3, 0x5}, {0x0, 0x5}, {0x7, 0xa}, {0x4}, {0x2}, {0x2, 0x5}, {0x7, 0x9}, {0x5, 0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x1, 0x9}, {0x3, 0x6}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb58, 0x7, 0x8, 0x4, 0x8, 0x7, 0x87, 0xfffe]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x7, 0x8}, {0x4, 0x1}, {0x1, 0x2}, {0x7}, {0x5, 0x6}, {0x5}, {0x6, 0x7}, {0x2, 0x5}, {0x0, 0x5}, {0x3, 0x6}, {0x5, 0x4}, {0x4, 0x3}, {0x2, 0x8}, {0x7, 0x9}, {0x0, 0x4}, {0x1, 0x6}, {0x6, 0x8}, {0x2, 0x7}, {0x3}, {0x6, 0xa}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x6, 0x7}, {0x7, 0x5}, {0x1, 0x3}, {0x1, 0x8}, {}, {0x5, 0x5}, {0x1, 0x9}, {0x0, 0x5}, {0x3}, {0x1, 0x8}, {0x6, 0x1}, {0x3, 0x2}, {0x6, 0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x5, 0x8}, {0x6}, {0x6, 0x5}, {0x0, 0x5}, {0x7, 0x3}, {0x2, 0x4}, {0x5, 0x2}, {0x3, 0x6}, {0x3, 0x6}, {0x5, 0x8}, {0x3, 0xa}, {0x2}, {0x1, 0x1}, {0x7, 0x3}, {0x7, 0xa}, {0x1, 0x9}, {0x2}, {0x6, 0x3}, {0x5, 0x7}, {0x3, 0x3}]}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcbe8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x766}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x408, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x220, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x2, 0x7, 0x3, 0x401, 0x1, 0x4, 0x3]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x4, 0x4, 0x16, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xb}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x1, 0x6996, 0x1, 0xff, 0xaa5, 0x6, 0x1]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x16, 0x6, 0x1b, 0x3, 0x12, 0x9, 0x1c, 0x6c, 0x2, 0x1, 0x30, 0x6, 0x30, 0x4, 0x18, 0x1b, 0xb, 0x60, 0x4, 0x9, 0x30, 0x5, 0x36, 0x36, 0x60, 0x3, 0x5, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x6, 0x8a, 0x2, 0x8, 0x7, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0xb22, 0x9, 0x6, 0x3ff, 0x4, 0x1, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0xa3, 0x31, 0x39, 0x85, 0x3, 0x5, 0x85e1]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x48, 0x30, 0x3, 0x6c, 0xb, 0x36, 0x6c, 0x0, 0x2, 0x54, 0x9, 0xc, 0x1, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0xfffc, 0x2, 0x6, 0x5, 0x7, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xec, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e0, 0x1, 0x1, 0x4, 0x8, 0x5d4f, 0xfffc, 0x5]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x4}, {0x7, 0x9}, {0x2, 0x4}, {0x6, 0x3}, {0x1, 0x5}, {0x3, 0x8}, {0x5, 0x7}, {0x2, 0xa}, {0x1, 0x5}, {0x1, 0x7}, {0x0, 0x6}, {0x3, 0x2}, {0x2, 0xa}, {0x5, 0x1}, {0x3, 0x3}, {0x3, 0x9}, {0x5, 0x4}, {0x4, 0x5}, {0x0, 0x5}, {0x5, 0x8}, {0x5}, {0x6, 0x1}, {0x1, 0x2}, {0x5, 0x2}, {0x0, 0x6}, {0x0, 0x4}, {0x1, 0x6}, {0x2, 0x1}, {0x5, 0x7}, {0x0, 0x5}, {0x1, 0x4}, {0x5}, {0x1, 0x6}, {0x3, 0x6}, {0x1, 0x6}, {0x4, 0x4}, {0x5, 0x9}, {0x3, 0x5}, {0x4, 0x5}, {0x3, 0x2}, {0x0, 0x5}, {0x1, 0xa}, {0x1, 0x5}, {0x7, 0x1}, {0x6, 0x1}, {0x2, 0x9}, {0x3, 0x3}, {0x6, 0x2}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x7, 0x6}, {0x7, 0x4}, {0x1, 0x8}, {0x0, 0x1}, {0x0, 0x3}, {0x4, 0x6}, {0x3, 0x3}, {0x2, 0x5}, {0x5, 0x2}, {0x5, 0x8}, {0x3}, {0x1, 0x5}, {0x0, 0x7}, {0x1, 0x6}, {0x4, 0x9}, {0x6, 0x3}, {0x0, 0x7}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x6}, {0x6, 0x3}, {0x6, 0x8}, {0x0, 0xa}, {0x2, 0x3}, {0x5, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x4, 0x1, 0x9, 0x1, 0xd2, 0x8ee7]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x9}, {0x1, 0x5}, {0x0, 0x8}, {0x0, 0x9}, {0x6, 0x4}, {0x3, 0x1}, {0x7, 0x2}, {0x2}, {0x6, 0x2}, {0x3, 0x9}, {0x1, 0x1}, {0x7, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x6, 0x8}, {0x7, 0x6}, {0x6, 0x5}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x4}, {0x1, 0x8}, {0x0, 0x7}, {0x6, 0x6}, {0x7, 0x8}, {0x5}, {0x1}, {0x5, 0x9}, {0x1, 0x3}, {0x6, 0x2}, {0x6, 0x5}, {0x0, 0xa}, {0x5, 0x1}, {0x1, 0x4}, {0x5, 0x9}, {0x1, 0x4}, {0x1, 0xa}, {0x4, 0x5}, {0x1, 0xa}, {0x4, 0x9}, {0x1}, {0x5, 0x9}, {0x7, 0x4}, {0x4, 0x7}, {0x4, 0x1}, {0x4, 0x8}, {0x2, 0x9}, {0x6, 0x4}, {0x0, 0x1}, {0x2, 0x6}, {0x3, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x3, 0x365, 0x0, 0x5, 0x800, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x37}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0x7}, {0x0, 0x3}, {0x0, 0x5}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x16, 0xb, 0xb, 0x5, 0xb, 0x2, 0x2, 0x3, 0x48, 0x12, 0x20, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4, 0xd3c53c400d91a748, 0x6c]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x2, 0x8}, {0x1, 0xa}, {0x5, 0x6}, {0x6, 0x3}, {0x6, 0x8}, {0x0, 0x8}, {0x1, 0x3}, {0x2, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0xc, 0xd0ff, 0x0, 0x810, 0x5, 0x7, 0x1a]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x170, 0x6, 0x7, 0x42bf, 0x6, 0x3, 0x1]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6, 0x3, 0x36, 0x2, 0x8e, 0x48, 0x9, 0x0, 0x2d, 0x1b, 0x2d]}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0x5}, {0x6, 0xa}, {0x3, 0x9}, {0x5, 0xa}, {0x3, 0x7}, {0x0, 0x2}, {0x1}, {0x0, 0x9}, {0x4, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {0x0, 0x2}, {0x6, 0x7}, {0x1, 0x4}, {0x4, 0x8}, {0x0, 0x1}, {0x3, 0x4}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x6}, {0x5, 0x6}, {0x3, 0x7}, {0x6, 0x2}, {0x7, 0x7}, {0x0, 0xa}, {0x4}, {0x1, 0x6}, {0x1, 0x6}, {0x6, 0x1}, {0x0, 0x3}, {0x1, 0x9}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x2}, {0x0, 0x7}, {0x0, 0xa}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x9}, {0x1, 0x5}, {0x5, 0x6}, {0x7, 0x3}, {0x3, 0xa}, {0x2, 0x9}, {0x4}, {0x2, 0x5}, {0x0, 0xa}, {0x2, 0x6}, {0x2, 0x6}, {0x4, 0x8}, {0x0, 0x3}, {0x1, 0x8}, {0x5}, {0x3, 0xa}, {0x0, 0x7}, {0x3, 0x7}, {0x2, 0x9}, {0x5, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x1}, {0x4, 0x9}, {0x2}, {0x3, 0x3}, {0x2, 0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x7, 0x3}, {0x6, 0x6}, {0x3, 0xa}, {0x5, 0x5}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xb, 0x24, 0x1b, 0xb]}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x6}, {0x0, 0x3}, {0x1, 0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x7}, {0x1, 0x1}, {0x5, 0x4}, {0x0, 0x3}, {0x4, 0x5}, {0x5, 0x1}, {0x7, 0x3}, {0x4, 0x4}, {0x2, 0x4}, {0x1, 0x5}, {0x1, 0x4}, {0x1, 0x8}, {0x2, 0x9}, {0x0, 0x6}, {0x6, 0x4}, {0x3, 0x7}, {0x5, 0x4}, {0x7, 0x3}, {0x4, 0x1}, {0x3, 0x8}, {0x5, 0x3}, {0x6, 0x6}, {0x2, 0x1}, {0x1, 0x9}, {0x2, 0xa}, {0x7, 0x3}, {0x5, 0x6}, {0x2, 0x2}, {0x4, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x18, 0x9, 0x16, 0x30, 0x18, 0x2, 0x16, 0x48, 0x9, 0x48, 0x18, 0x1b, 0x9, 0x30, 0xc, 0x37, 0xc, 0x4, 0x5, 0x12, 0x9, 0x16, 0xb, 0x6, 0x1, 0x12, 0x12, 0x16]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x16, 0x24, 0x18, 0x1b, 0x0, 0xb, 0x16, 0x30, 0x4, 0x24, 0x36, 0xc, 0x9, 0x60, 0x9, 0x36, 0x70a82a2b7db6bf0d, 0x30, 0x2, 0x1, 0x18, 0x12, 0x5, 0x18, 0x2, 0x1, 0x9, 0x5]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x6}, {0x5, 0x6}, {0x2, 0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x4, 0x6}, {0x5, 0xa}, {0x1}, {0x0, 0x6}, {0x0, 0x2}, {0x5, 0x5}, {0x6, 0x3}, {0x1, 0x2}, {0x3, 0x2}, {0x5, 0x9}, {0x6, 0x4}, {0x7, 0x2}, {0x1, 0xa}, {0x2, 0x5}, {0x2}, {0x1}, {0x6, 0x4}, {0x4, 0x3}, {}, {0x1}, {0x3, 0x4}, {0x5, 0x5}, {}, {0x4, 0x5}, {0x6, 0x1}, {0x0, 0xa}, {0x0, 0x1}, {0x5, 0x2}, {0x1, 0x1}, {0x6, 0x5}, {0x7, 0x9}, {0x4, 0xa}, {0x2, 0xa}, {0x7, 0x3}, {0x0, 0x7}, {0x1, 0x3}, {0x4, 0x9}, {0x5, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x3, 0x6}, {0x7, 0x8}, {0x0, 0x4}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {0x7, 0x2}, {0x3, 0x7}, {0x1, 0x3}, {0x6, 0x6}, {0x4, 0x2}, {0x1, 0x9}, {0x4, 0x2}, {0x4, 0x4}, {0x5, 0x7}, {0x5}, {0x3, 0xa}, {0x4, 0x9}, {0x5, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0x168, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x164, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x30, 0x1, 0x3, 0xc]}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1ff, 0x16, 0x2, 0x1, 0xfff, 0x8, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x6}, {0x0, 0x7}, {0x1, 0x3}, {0x6, 0x9}, {0x6, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xde7a, 0x7fff, 0x1, 0x80, 0x80, 0x3, 0x6, 0x5c]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xff, 0xf2e4, 0x14, 0x100, 0xb, 0x968, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0xd, 0x18c, 0x7fff, 0x8, 0x2, 0x8f, 0xa]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x3}, {0x2, 0x3}, {0x1, 0x2}, {0x7, 0xa}, {0x0, 0x8}, {0x0, 0x8}, {0x1, 0x6}, {0x4, 0x8}, {0x6}, {0x0, 0x3}, {0x1, 0x9}, {0x7, 0x6}, {0x5, 0x5}, {0x7, 0x6}, {0x2, 0x1}, {0x1, 0x3}, {0x2, 0x4}, {0x2, 0x4}, {0x2, 0x9}, {}, {0x0, 0x2}, {0x6, 0x7}, {0x0, 0x8}, {0x4, 0x2}, {0x4, 0x4}, {0x6, 0x7}, {0x0, 0x8}, {0x0, 0x6}, {0x3, 0x2}, {0x2, 0x3}, {0x1, 0x1}, {0x0, 0x4}, {0x3, 0x2}, {0x5, 0x3}, {0x7, 0x2}, {0x3, 0x2}, {0x0, 0xa}, {0x4, 0x4}, {0x6}, {0x3, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0xfffe, 0x0, 0xfff, 0x0, 0x8, 0x40]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4f, 0xfff9, 0x80, 0xfffa, 0x635d, 0x400, 0x4]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x7, 0xc, 0x84, 0x7, 0x5, 0x15, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x101, 0x1, 0xe8b, 0x5, 0x2, 0x5, 0x85]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x1000, 0x0, 0x4, 0x4, 0x6, 0xa]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x99, 0x7fff, 0x5, 0x3, 0x200, 0x80, 0x2d]}}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x3}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfff}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3}]}, {0x310, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x228, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x6, 0xa, 0x7, 0x7, 0x0, 0x1, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x32, 0xff, 0x9, 0xffff, 0x7c0, 0x10, 0xe80]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x16, 0x36, 0x3, 0xc, 0x4]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x5, 0x1, 0x60, 0x3b, 0x36, 0x6, 0xc, 0x24, 0x60, 0x5, 0x1b, 0x1b, 0x1b, 0x5, 0x2ec6e44283ee878e, 0xc, 0x60, 0x6, 0x5, 0x18, 0x6c, 0x60, 0x12, 0x9, 0x4, 0x36, 0xb, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5a, 0x5, 0x2, 0x0, 0x101, 0x6f, 0x6]}}]}, @NL80211_BAND_2GHZ={0xf4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x5}, {0x3, 0x7}, {0x2, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x2, 0x1}, {0x3}, {0x1, 0x4}, {0x0, 0xa}, {0x7, 0x5}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x4}, {0x0, 0x9}, {0x1, 0xa}, {0x6, 0x3}, {0x7, 0x9}, {0x4, 0xa}, {0x2, 0x9}, {0x3, 0x2}, {0x5, 0x9}, {0x6}, {0x2, 0x9}, {0x3, 0x9}, {0x7, 0x8}, {0x1, 0x9}, {0x2, 0x1}, {0x0, 0x9}, {0x7, 0x8}, {0x2, 0x2}, {0x6, 0x6}, {0x5, 0x7}, {0x2, 0xa}, {0x1, 0xa}, {0x2, 0x7}, {0x5, 0x1}, {0x5, 0x4}, {0x0, 0x1}, {0x6, 0x6}, {0x4, 0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x4, 0x6}, {0x0, 0x7}, {0x1, 0x5}, {0x0, 0x3}, {0x0, 0x6}, {0x3, 0x3}, {0x0, 0x9}, {0x7, 0x1}, {0x1, 0x4}, {0x7, 0x6}, {0x6, 0x9}, {0x7, 0xa}, {0x0, 0x2}, {0x6, 0x5}, {0x2, 0x6}, {0x0, 0x6}, {0x2}, {0x2}, {0x5, 0x4}, {0x2, 0x5}, {0x4, 0x1}, {}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x3, 0x3}, {0x0, 0xa}, {0x4, 0x2}, {0x1, 0x7}, {0x1, 0x8}, {0x4, 0x7}, {0x7, 0x3}, {0x2, 0x5}, {0x5, 0x2}, {0x7, 0x5}, {0x2, 0x9}, {0x4, 0xa}, {0x7, 0x5}, {0x0, 0x3}, {}, {0x5}, {0x1, 0x3}, {0x1, 0x8}, {0x7, 0x2}, {0x6, 0x8}, {0x7, 0x2}, {0x7, 0x1}, {0x7, 0x5}, {0x2, 0x3}, {0x2, 0x6}, {0x2, 0x8}, {0x4, 0x1}, {0x5, 0x2}, {0x2, 0x2}, {0x3, 0xa}, {0x0, 0x5}, {0x6, 0x1}, {0x3, 0x7}, {0x5, 0x6}, {0x6, 0x3}, {0x7, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x6}, {0x1, 0x2}, {0x5, 0x2}, {0x2, 0x1}, {0x6, 0x1}, {0x3, 0x3}, {0x0, 0x5}, {0x3, 0x6}, {0x1}, {0x1, 0x7}, {0x7, 0x3}, {0x1, 0x4}, {0x6, 0x9}, {0x3, 0x1}, {0x1, 0x7}, {0x6, 0x9}, {0x6, 0x8}, {0x0, 0x8}, {0x4, 0xa}, {0x2, 0x4}, {0x6, 0x4}, {0x0, 0x6}, {0x2, 0x3}, {0x1, 0x8}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x6}, {0x6, 0x1}, {0x2, 0x3}, {0x7}, {0x5, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x7, 0x6}, {0x0, 0xa}, {0x4, 0x1}, {0x4, 0x4}, {0x2}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x1, 0xfff7, 0x10, 0x3, 0x0, 0x1, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf36, 0x9, 0x8, 0xa, 0x8000, 0x8000, 0x3, 0x5]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x6, 0x5}, {0x2, 0x8}, {}, {0x3, 0x8}, {0x0, 0x4}, {0x4}, {0x1, 0x5}, {0x7, 0x7}, {0x0, 0x6}, {0x1, 0xa}, {0x6, 0x7}, {0x7, 0x9}, {0x0, 0x8}, {0x7, 0x3}, {0x4, 0x8}, {0x1, 0x9}, {0x2, 0x6}, {0x2, 0xa}, {0x0, 0x1}, {0x7, 0x7}, {0x3, 0x8}, {}, {0x1, 0x8}, {0x7, 0x2}, {0x7, 0x1}, {0x5, 0x5}, {0x7, 0xa}, {0x4, 0x5}, {0x2, 0x4}, {0x6, 0x8}]}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x934, 0x4, 0x0, 0x2, 0x1, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x7f, 0x9, 0x1, 0x163c, 0x5, 0x6]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x9, 0x18, 0x6c, 0xb, 0x5, 0x18, 0x1, 0x3, 0x12, 0x2, 0x4, 0x6, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x18, 0x3, 0x12, 0x3, 0x5, 0x79, 0x16, 0x24, 0x24, 0xc, 0x6, 0x3, 0xb, 0x30, 0xc, 0xb, 0x18, 0x2, 0x18, 0x12, 0x12, 0xc, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xe0b6, 0x722, 0x4, 0x3ff, 0xe9a3, 0x9, 0x10b]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5f, 0x7, 0x2, 0x4, 0x4, 0x44a3, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x9, 0x3, 0x2, 0x4, 0x3, 0x8, 0xb]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x16, 0x0, 0x9, 0x1b, 0x48, 0xc, 0x6b, 0x16, 0x6c, 0x60, 0x16, 0x12, 0x48, 0x24, 0x2, 0x48, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x5, 0x451d, 0x0, 0x7, 0x7, 0xd5ab]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0x48, 0x12, 0x5, 0x48, 0x9, 0xc, 0x6, 0x48]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x2, 0x1}, {0x0, 0x1}, {0x0, 0x6}, {0x2, 0xa}, {0x1, 0x2}, {0x3, 0x2}, {0x6, 0x4}, {0x6, 0x4}, {0x1, 0x6}, {0x7}, {0x4, 0x5}, {0x2, 0x6}, {0x5, 0x8}, {0x7, 0x4}, {0x0, 0x1}, {0x6, 0x4}, {0x6, 0x7}, {0x3}, {0x4, 0x6}, {0x0, 0x5}, {0x1}, {0x1, 0x5}, {0x5}, {0x6, 0x3}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x3}, {0x6, 0x7}, {0x3, 0x5}, {0x0, 0x8}, {0x5, 0x7}, {0x1, 0x9}, {0x2, 0xa}, {0x2, 0x6}, {0x2, 0x6}, {0x1, 0x1}, {0x0, 0x6}, {0x4, 0x7}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x4}, {0x5, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x2, 0x2}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x2}, {0x5, 0x3}, {0x7, 0x2}, {0x5, 0x9}, {0x3, 0x4}, {0x5, 0xa}, {0x7, 0x9}, {0x0, 0x5}, {0x0, 0x9}, {0x6, 0x6}, {0x1, 0x5}, {0x5, 0x2}, {0x1, 0xa}, {0x2}, {0x1, 0x4}, {0x0, 0x7}, {0x2, 0xa}, {0x3, 0x4}, {0x4, 0x6}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x2}, {0x2, 0x3}, {0x4}, {0x3, 0x9}, {0x3, 0x7}, {0x6, 0x3}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x7}, {0x7, 0x1}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1e4, 0x11d, 0x0, 0x1, [{0x1c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1bc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x208, 0x2, 0x7, 0x8000, 0x7, 0x3, 0x0, 0x6]}}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x7, 0x2}, {0x1}, {0x5, 0xa}, {0x2, 0x9}, {0x0, 0x9}, {0x0, 0x9}, {0x6, 0x5}, {0x7, 0x1}, {0x3, 0x7}, {0x1, 0x4}, {0x4, 0x2}, {0x0, 0x7}, {0x3}, {0x6, 0x3}, {0x4, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x6}, {0x0, 0x8}, {0x1, 0x9}, {0x4, 0x2}, {0x0, 0x5}, {0x3, 0x1}, {0x6, 0x3}, {0x0, 0x3}, {0x3, 0x6}, {0x5, 0x2}, {0x1, 0x9}, {0x0, 0x9}]}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe18, 0x7, 0x2, 0x6, 0x5, 0xff, 0xfff8, 0xf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x200, 0x8, 0x4, 0x1, 0x3000, 0x6, 0xfffd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x1f, 0x9, 0x3, 0x87f, 0x81, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x3, 0x4, 0xffff, 0x0, 0x9, 0x7, 0xc16f]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x7, 0x8}, {0x3, 0x3}, {0x2, 0xa}, {0x5, 0x4}, {0x4, 0x6}, {0x0, 0x2}, {0x7, 0x5}, {0x0, 0x5}, {0x1, 0x6}, {0x3, 0x4}, {0x7}, {0x2, 0x2}, {0x0, 0x6}, {0x2, 0x8}, {0x5, 0x6}, {0x2}, {0x2, 0x8}, {0x2, 0xa}, {0x1, 0x8}, {0x3, 0x8}, {0x7}, {0x5, 0x1}, {0x1, 0x4}, {0x4, 0x9}, {0x3, 0x7}, {0x5, 0x3}, {0x4, 0x9}, {0x6, 0x6}, {0x1, 0x2}, {0x1, 0x4}, {0x3, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x6c, 0x7, 0x3, 0x8248, 0x0, 0x1]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6c, 0x60, 0x9, 0xb, 0x48, 0x18, 0x48, 0x1, 0x30, 0x6, 0x16, 0x48, 0x6, 0x2, 0x28956605c02340a9, 0x4, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x8c6, 0x1, 0x3c7b, 0x3, 0xf, 0xfff3, 0x1000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0xfff, 0x10, 0x1ff, 0x1, 0x2, 0x6]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x24, 0x24, 0x1, 0x18, 0x6c, 0xc, 0x48, 0xc, 0x3, 0xb, 0x2, 0x12, 0x48, 0x6c]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xb50, 0x7fff, 0x4, 0x8001, 0x315b, 0x9, 0xd99]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x800, 0xddb9, 0x200, 0x7, 0x7, 0x7, 0x8000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x401, 0x2, 0x7fff, 0x5, 0x40, 0x3, 0x4]}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x370, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x30}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3c}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4b}]}, {0x25c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8000, 0x0, 0x3, 0xb1b7, 0x80, 0x4, 0x1000]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0xc4bb, 0x7679, 0x4, 0x9, 0x7, 0xc3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2df2, 0x1, 0xa8e, 0x4, 0xff, 0x8001, 0x8000, 0x28]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x48, 0x6c, 0x5, 0x6c, 0x10, 0x6c, 0x1, 0x3, 0x2, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x5, 0x2, 0x4, 0x0, 0x6449, 0x4]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x10, 0x4, 0xf8, 0x1, 0x8000, 0x8, 0xea18]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x400, 0x5, 0x1038, 0xfff3, 0x1]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x4, 0x9, 0x12, 0x1b, 0x24, 0x2, 0x60, 0x6c, 0x6, 0x2, 0xb, 0x48]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x81, 0x800, 0x100, 0x5f, 0x3ff, 0xffff]}}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x3]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x5f, 0x9, 0x5f, 0x12, 0xc, 0x16, 0xc, 0x4, 0x60, 0x5, 0x48, 0x7e, 0x6c, 0x30, 0x6c, 0xb, 0x30, 0xc, 0x18, 0x30, 0x1, 0x36, 0x3, 0x6, 0x16, 0x24]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x4, 0x2, 0x60, 0x6, 0x6170257e0c7a52ca, 0x30, 0x1b, 0xb, 0x3, 0x1b, 0x16, 0x5, 0x30, 0x8, 0x36, 0x24, 0x2, 0x9, 0x60]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xb, 0x1, 0x36, 0x5, 0x14, 0x36, 0x36, 0x36, 0x4, 0xc, 0x4, 0x36, 0x24, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x24, 0x24, 0x36, 0xb, 0x9, 0x9, 0x9, 0x3, 0x18, 0x2, 0x5, 0x6, 0x6c, 0x6c, 0x6, 0x30]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x30, 0x73, 0x24, 0x48, 0x12, 0x3, 0x24, 0x48, 0x12, 0x4]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x3}, {0x1, 0x2}, {}, {0x4, 0x3}, {0x4, 0x2}, {0x1, 0x1}, {0x7, 0x8}, {0x7, 0x9}, {0x4, 0x9}, {0x5, 0xa}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x2}, {0x7, 0x3}, {0x3}, {0x2, 0x4}, {0x4, 0x2}, {0x1, 0x1}, {0x4, 0xa}, {0x3, 0x7}, {0x2, 0x2}, {0x7, 0x8}, {0x1, 0x3}, {0x3, 0x4}, {0x3, 0xa}, {0x7, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x30, 0x5, 0x36, 0x3, 0x12, 0x9, 0xeddd9a29c5e3cc54]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1}, {0x3, 0x9}, {0x1, 0x7}, {0x6, 0x2}, {0x4, 0xa}, {0x4, 0x5}, {0x6, 0x8}, {0x1, 0x9}, {0x2}, {0x3, 0x1}, {0x7, 0x9}, {0x5, 0x9}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0x3}, {0x2, 0x1}, {0x6, 0x7}, {0x7, 0x7}, {0x0, 0x1}, {0x1, 0x9}, {0x0, 0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x3, 0x3}, {0x3, 0x4}, {0x0, 0x8}, {0x1, 0x8}, {0x6, 0x2}, {0x1, 0xa}, {0x0, 0x5}, {0x1, 0x1}, {0x4, 0x2}, {0x1, 0x9}, {0x0, 0x7}, {0x1, 0x6}, {0x2, 0x5}, {0x5, 0x5}, {0x1, 0x9}, {0x6, 0x7}, {0x7, 0x2}, {0x2, 0x9}, {0x3}, {0x1, 0x5}, {0x1, 0x5}, {0x2, 0x8}, {0x4, 0x5}, {0x4, 0x4}, {0x7, 0x9}, {0x4, 0x5}, {0x4, 0x9}, {0x6, 0x6}, {0x5, 0xa}, {0x0, 0x4}, {0x2, 0xa}, {0x0, 0x9}, {0x2}, {0x0, 0x8}, {0x5, 0x1}, {0x7, 0xa}, {}, {0x3, 0x1}, {0x0, 0x4}, {0x4, 0x5}]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x36, 0x24, 0x12, 0x6, 0x1b, 0x30, 0x3, 0x9, 0x3, 0xb, 0x2, 0xc, 0x5, 0x24, 0x6, 0x0, 0x3, 0x1b, 0x6c, 0x16, 0x36, 0x24, 0x60, 0x6]}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x61}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6a}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x56}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x325}]}]}, @NL80211_ATTR_TID_CONFIG={0x6ac, 0x11d, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x5, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x0, 0x3}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x1}, {0x3, 0x9}, {0x5}, {0x6, 0x8}, {0x0, 0x4}, {0x2, 0x2}, {0x2, 0xa}, {0x1, 0x2}, {0x0, 0xa}, {0x7, 0x2}]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x0, 0x9}, {0x7, 0x9}, {0x3, 0x7}, {0x3, 0x4}, {0x5, 0xa}, {0x0, 0x4}, {0x6, 0x1}, {0x1, 0x3}, {0x2, 0x3}, {0x4, 0x1}, {0x4, 0x4}, {0x2, 0x3}, {0x0, 0x7}, {0x6, 0x3}, {0x6}, {0x6, 0x6}, {0x6, 0x2}, {0x1, 0x6}, {0x2, 0x3}, {0x4, 0x2}, {0x0, 0x1}, {0x0, 0x3}, {0x1, 0xa}, {0x5, 0x6}, {0x0, 0x5}, {0x6, 0x1}, {0x0, 0x4}, {0x3, 0x2}, {0x3}, {0x1}, {0x0, 0x1}, {0x3, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x9}, {0x5}, {0x4, 0x1}, {0x4, 0x3}, {0x1, 0xa}, {0x3, 0x6}, {0x7, 0x1}, {0x4, 0x6}, {0x2, 0x7}, {0x6, 0x4}, {0x1, 0x3}, {0x2, 0x3}, {0x1, 0x6}, {0x6, 0x1}, {0x1, 0x1}, {0x0, 0x8}, {0x4, 0x4}, {0x5, 0x8}, {0x6, 0x1}, {0x3, 0x7}, {0x5, 0x7}, {0x0, 0x4}, {0x0, 0x1}, {0x6, 0x3}, {0x6, 0xa}, {0x7, 0x9}, {0x5, 0x5}, {0x4, 0xa}]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x7, 0x5}, {0x0, 0x5}, {0x3, 0x2}, {0x6, 0x7}, {0x4}, {0x3, 0x5}, {0x0, 0x4}, {0x7, 0xa}, {0x2, 0x6}, {0x0, 0xa}, {0x0, 0x9}, {0x7, 0x7}, {0x1, 0x5}, {0x7, 0x2}, {0x0, 0x1}, {0x2, 0x6}, {0x1, 0x9}, {0x5}, {0x1, 0x4}, {0x5, 0x8}, {0x0, 0x8}, {0x2, 0xa}, {0x0, 0x9}, {0x1, 0x3}, {0x5, 0x9}, {0x5, 0x4}, {0x0, 0x9}, {0x0, 0x4}, {0x5, 0x1}, {0x6, 0x2}, {0x6, 0x6}, {0x6, 0x2}, {0x7, 0x3}, {0x1, 0x5}, {0x5, 0x6}, {0x4, 0x3}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x7}, {0x0, 0xa}, {0x2, 0x7}, {0x5, 0x1}, {0x2, 0x4}, {0x2, 0x4}, {0x1, 0x9}, {0x4, 0x5}, {0x3, 0x9}, {0x6, 0x6}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0xa}, {0x3, 0x2}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x36, 0xc, 0x18, 0x60, 0x0, 0x12, 0x6, 0x0]}]}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x50}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfe}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1d}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xfc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x3, 0x6c, 0xb, 0x4, 0xc, 0x1, 0x4, 0x18, 0x36, 0x60, 0x5, 0x3, 0xc, 0x30, 0x36, 0x3, 0x36, 0x24, 0x2, 0x5, 0xb, 0x0, 0x5d, 0xc, 0x30, 0x9, 0x30, 0x36, 0xc, 0x24, 0x12]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x2, 0x5}, {0x0, 0x5}, {0x0, 0x8}, {0x0, 0x8}, {0x1, 0x9}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x9}, {0x5, 0x9}, {0x2, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x6, 0x5}, {0x1, 0xa}, {0x6, 0x4}, {0x2, 0x8}, {0x1, 0xa}, {0x4, 0x2}, {0x0, 0x1}, {0x1, 0x4}, {0x2, 0x7}, {0x1, 0x1}, {0x7, 0x1}, {0x1}, {0x1, 0x8}, {0x7, 0x7}, {0x5, 0x1}, {0x1, 0x3}, {0x6, 0x6}, {0x4}, {0x3, 0x7}, {0x0, 0x2}, {0x7, 0x5}, {0x4}, {0x6, 0x1}, {0x2, 0x7}, {}, {0x3, 0x3}, {0x6, 0x5}, {0x6, 0x8}, {0x5, 0xa}, {0x1, 0x6}, {0x4, 0x9}, {0x7, 0x3}, {0x0, 0x8}, {0x2, 0x2}, {0x4, 0x6}, {0x1, 0x7}, {0x5}, {0x7, 0x8}, {0x4, 0x9}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xd24b, 0x1, 0x800, 0x9, 0x43, 0x16d4, 0x7]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x6, 0x7ff, 0x3, 0x6, 0x9, 0x3]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1, 0x5, 0x1, 0x6c, 0x1b, 0x60, 0x12, 0x1, 0x2, 0x18, 0x2, 0x36, 0x60, 0x12, 0x9]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x16, 0xc6, 0x5, 0x2, 0x60, 0xb, 0x5, 0x6c, 0x4, 0x60, 0x14, 0x3, 0x4, 0x60, 0xb, 0xb, 0x4, 0x2, 0x9, 0xb, 0x12, 0xb, 0x2, 0x12, 0xc, 0x24, 0x6]}]}]}]}, {0x128, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x114, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xa4, 0x7ff, 0x99, 0x9, 0xa, 0x3]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0xc, 0x4, 0x3, 0xb, 0x6c, 0x9, 0x60, 0x24, 0x9, 0x36, 0x1b, 0x18, 0x1, 0x36, 0x36, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x11dd, 0x7f, 0x7, 0x9, 0x1, 0x77, 0x2, 0x6]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x2, 0x8}, {0x6, 0x8}, {0x0, 0x3}, {0x3, 0x7}, {0x7, 0x1}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x8}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x14, 0x8, 0x3, 0x4, 0x6, 0x8, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x7ff, 0x1, 0x200, 0x9250, 0x4, 0x9]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x18, 0x2, 0x6c, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfc, 0x2, 0x4, 0x3, 0xf800, 0xffff, 0x1ac2, 0x4d3c]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x0, 0x7}, {0x7, 0x1}, {0x2, 0x5}, {0x4, 0x3}, {0x0, 0x3}, {0x6, 0x9}, {0x6, 0x8}, {0x0, 0x8}, {0x0, 0x2}, {0x6}, {0x2, 0x2}, {0x1, 0x9}, {0x3}, {0x7, 0x6}, {0x4, 0x7}, {0x7, 0x9}, {0x7, 0x7}, {0x7, 0x9}, {0x0, 0x2}, {0x4, 0x1}, {0x5, 0x7}, {0x7, 0x7}, {0x7, 0x8}, {0x0, 0x1}, {0x1, 0x5}, {0x3, 0x4}, {0x6, 0x9}, {0x2, 0x9}, {0x6, 0x3}, {0x7, 0x9}, {0x7, 0x7}, {0x7, 0x2}, {0x7, 0x8}, {0x4, 0x9}, {0x3, 0x1}, {0x4, 0x4}, {0x6, 0x5}, {0x2, 0x2}, {0x0, 0x3}, {0x1, 0x1}, {0x4, 0x8}, {0x3, 0x6}, {0x2, 0x1}, {0x3, 0x6}, {0x2, 0xa}, {0x6, 0x9}, {0x1, 0x3}, {0x6, 0x1}, {0x4, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x1, 0x2}, {0x4, 0x4}, {0x4, 0x4}, {0x7, 0x4}, {0x2, 0x7}, {0x3, 0xa}, {0x0, 0x1}, {0x1, 0x5}, {0x4, 0x9}, {0x4, 0x2}, {0x5, 0x2}, {0x6, 0x5}, {0x4, 0x9}, {0x4, 0x9}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x6}, {0x2, 0x6}, {0x1, 0x8}, {0x4, 0x4}, {0x0, 0x5}, {0x1, 0x8}, {0x3, 0x3}, {0x5, 0x5}, {0x5, 0x4}, {0x0, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x308, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x36, 0xc, 0x36, 0x24, 0x6c, 0x9]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x18, 0x9, 0x0, 0x4, 0x9, 0x6, 0x1b, 0x61, 0x1, 0x5, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x11, 0x2, 0x40, 0x950, 0xfb, 0x6, 0xbbb2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x3, 0x4, 0xb, 0x7, 0x5, 0x5, 0xb1]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x3, 0x16, 0x60, 0x1, 0x48, 0x24, 0x2, 0x16, 0x2, 0x36, 0x4, 0x48, 0x36, 0x18, 0x6]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdb}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x284, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x0, 0x9bf, 0x200, 0x7df, 0x3ff, 0xfff]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x4}, {0x4, 0x5}, {0x1, 0x7}, {0x6, 0x3}, {0x4, 0x9}, {0x2, 0x4}, {0x4, 0x1}, {0x6, 0x6}, {0x3, 0x9}, {0x0, 0x7}, {0x7, 0x9}, {0x2, 0x7}, {0x6, 0x7}, {0x0, 0x4}, {0x2, 0x6}, {0x1, 0xa}, {0x7, 0xa}, {0x0, 0xa}, {0x7, 0x2}, {0x1, 0xa}, {0x2, 0xa}, {0x1, 0x3}, {0x3, 0x4}, {0x7, 0x1}, {0x1, 0x7}, {0x4, 0x4}, {0x7, 0x1}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0x3}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0x1, 0x24, 0x4, 0x5, 0x18, 0x44, 0x6, 0x4, 0x5, 0x60, 0x60, 0x9, 0x4, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x7fff, 0x101, 0x400, 0xb, 0x7, 0x9, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xf, 0x2e3, 0x5, 0x8, 0xc000, 0x9, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x4, 0x3}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0xa}, {0x2, 0x6}, {0x7, 0x2}, {0x3, 0x7}, {0x3, 0x2}, {0x0, 0xa}, {0x1, 0x3}, {0x5, 0x2}, {0x4, 0x4}, {}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x3, 0x7}, {0x4, 0x3}, {0x3, 0x7}, {0x2, 0x4}, {0x3, 0x7}, {0x5, 0x5}, {0x7, 0x6}, {0x6, 0x5}, {0x3, 0xa}, {0x1, 0x3}, {0x7, 0x5}, {0x7, 0x8}, {0x4, 0x2}, {0x0, 0x1}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa0, 0x7, 0x400, 0x95, 0x2, 0x0, 0x1, 0xfffb]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x3}, {0x5, 0x4}, {0x1, 0x4}, {0x4, 0x6}, {0x4, 0x9}, {0x6, 0xa}, {0x3, 0x8}, {0x7, 0x3}, {0x6, 0x9}, {0x7, 0x8}, {0x7}, {0x7, 0x6}, {0x3, 0x9}, {0x3, 0x5}, {0x0, 0x9}, {0x1, 0x7}, {0x1, 0x3}, {0x6, 0x5}, {0x2, 0x8}, {0x7, 0x7}, {0x0, 0x3}, {0x4, 0x3}, {0x4, 0x7}, {0x2, 0x9}, {0x2, 0x5}, {0x3, 0x8}, {0x1, 0x4}, {0x1, 0x1}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x1}, {0x4, 0x8}, {0x7, 0xa}, {0x0, 0xa}, {0x0, 0x6}, {0x2}, {0x0, 0x4}, {0x0, 0xa}, {0x0, 0x9}, {0x5, 0x4}, {0x2}, {0x1, 0x5}, {0x2, 0x2}, {0x5, 0x6}, {0x6}, {0x5, 0x6}, {0x7, 0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x7, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x6, 0x1}, {0x3}, {0x6}, {0x2, 0x6}, {0x3, 0x5}, {0x6, 0x8}, {0x6, 0x1}, {0x0, 0x8}, {0x6}, {0x5, 0x2}, {0x4, 0x2}, {0x5, 0x4}, {0x5, 0x5}, {0x1, 0x9}, {0x1, 0x5}, {0x7, 0x3}, {0x5, 0x4}, {0x2, 0x2}, {0x6, 0x1}, {0x1, 0x3}, {0x4, 0x5}, {0x5, 0x5}, {0x4, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x2, 0xa}, {0x2, 0x2}, {0x7, 0x9}, {0x3, 0x8}, {0x0, 0x7}, {0x0, 0x8}, {0x6, 0x4}, {0x4, 0x8}, {0x2, 0x8}, {0x1}, {0x2, 0x5}, {0x6, 0xa}, {0x7, 0x3}, {0x5, 0x5}, {0x5, 0x4}, {0x0, 0x5}, {0x5, 0x2}, {0x3}, {0x4, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0xba18, 0xdc, 0x8, 0x4, 0x0, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x0, 0x1}, {0x2, 0x9}, {0x5, 0x4}, {0x0, 0x4}, {0x4}, {0x0, 0x8}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x4}, {0x6}, {0x2, 0x2}, {0x6, 0x1}, {0x1, 0x2}, {0x1, 0x4}, {0x7, 0x2}, {0x5}, {0x7, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x1, 0x4}, {0x4, 0x8}, {0x4}, {0x1, 0xa}, {0x3, 0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x2, 0x0, 0x6c, 0x2, 0x1b, 0x12, 0x30, 0x2, 0x1b, 0x4, 0xc, 0x0, 0x60, 0x5, 0x36, 0x12, 0x24, 0x6c, 0x18, 0x60, 0x12, 0x5, 0x16, 0x6c, 0x3, 0x1b, 0xc, 0x9, 0x18, 0x36, 0x3]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x36, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0xffff, 0x1ff, 0x7eb3, 0x5, 0x40, 0x2]}}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{}, {0x3, 0x1}, {0x5, 0x8}, {0x0, 0x1}, {0x1, 0xa}, {0x3, 0x4}, {0x4, 0x6}, {0x7, 0x2}, {0x0, 0x7}, {0x5, 0x7}, {0x2, 0x9}, {0x2, 0x5}, {0x3, 0x5}, {0x0, 0x8}, {0x4, 0x8}, {0x0, 0x2}, {0x5, 0x1}, {0x2}, {0x0, 0x5}, {0x1, 0x7}, {0x7, 0x9}, {0x1, 0x6}, {0x5, 0x8}, {0x0, 0x3}, {0x2, 0x3}, {0x0, 0x7}, {0x0, 0x2}, {0x5, 0x7}, {0x0, 0x7}, {0x0, 0xa}, {0x2, 0x9}, {0x6, 0x3}, {0x1, 0x8}, {0x1, 0x6}, {0x4, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x5, 0x2}, {0x3, 0x4}, {}, {0x0, 0x5}, {0x4, 0x2}, {0x5, 0x9}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x7, 0x4, 0x9, 0xff00, 0x76, 0xa]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff0}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc5}]}]}]}, 0x1940}, 0x1, 0x0, 0x0, 0x20008090}, 0x10004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) mkdirat(r3, &(0x7f0000000000)='./file0\x00', 0x89) (async) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x84944000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) waitid(0x0, r4, 0x0, 0x8, 0x0) (async) fadvise64(r0, 0x3, 0x3, 0x5) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 50.916068ms ago: executing program 4 (id=2380): r0 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1241, 0x5015, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x90, 0x2, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0xab1, 0x6, 0x1, {0x22, 0xdb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x2, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x7f, 0xa, 0x4}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x0, 0x0, 0x8, 0x8, 0x94}, 0x65, &(0x7f0000000080)={0x5, 0xf, 0x65, 0x4, [@generic={0x43, 0x10, 0x3, "5685b9348a69b883a6e0c1cc29e47c398f4d33c13847286dfb776de86d3bc7375267a70fdcfa046961729506d583e6d22f67b1decdce064a73b9d6b5d530cf47"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x71, 0x6, 0x40, 0x7, 0x1}, @wireless={0xb, 0x10, 0x1, 0x0, 0x40, 0x0, 0x3, 0x4, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0x3, 0x8000}]}, 0x7, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x404}}, {0x31, &(0x7f0000000180)=@string={0x31, 0x3, "a225851f706b0afee530f7beffb11f1a52e83e8c0ee7b8a0c7a5d2b04a67a4a89d8e0b9a40829404fd3add38e7663f"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x440a}}, {0xea, &(0x7f0000000280)=@string={0xea, 0x3, "56d01e7d849e182fee0ee39a2fe3a081f94879d58d45485b67e38c25325608051cfb0d14e7a8b7ac6d64c15075423eee479586eba2e60dce9bbe5d0fb8869ff51fa62814d1f3e5e6e265dd9f4de37240ccdc9b30d68a9181c93b527f84b7f9925a069700e4ab1fc5722ca5134bd8a99b898fa5e9fc53dbd5620d5d0ae5566bfc2a88b949cbbfb50c0f0a6fd829d254b4c670f926c9f906cd785c54a71d36c5ba2fa735384c7913a540b84d9da7af6bd75be171ba47c0a41140d890de6d305d637e7ec0d2db88a267647efa1ce00e36c96557f14e64c71b9b6af78aadfdd2f34571dbf05feaee2c45"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, &(0x7f0000000400)={0x40, 0xc, 0x56, {0x56, 0x2, "7e5b34ee95161ef97cd8c9de68d6d90092b1bd41a87c568146ea22bf88a8b683192e4f00be3532d9884c21196e5c3da97930020fd04221063d301fa9ce9b1293538716130c58787a4f1a22edea1c75d5d9260aa6"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}, &(0x7f00000004c0)={0x0, 0x22, 0x18, {[@main=@item_012={0x2, 0x0, 0xa, "f8c8"}, @global=@item_4={0x3, 0x1, 0x7, "f4d62664"}, @global=@item_4={0x3, 0x1, 0x4, "e1feba54"}, @global=@item_012={0x1, 0x1, 0x4, ';'}, @local=@item_4={0x3, 0x2, 0x3, "ec72d1ae"}, @global=@item_012={0x0, 0x1, 0x8}, @local=@item_012={0x2, 0x2, 0x9, "5ede"}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x3, 0x1, {0x22, 0xff8}}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000580)={0x20, 0x18, 0x31, "44eb2ba309c0dc35980b356b3be6f090c86b2d45c57c87852abf6c683ac91e924951b34b22fea7cab0b7897c8ee45e07a2"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000640)={0x20, 0x1, 0xb9, "df501dce9123e07f1ba0f09e74d2048997a2f48024185f672e9cc7ed50e907f07f66b6353849a1e9fcc241c041ece8be410d88111dd9a09edbdd6288d2351ce4acd4fafa9246d590937ad0e3d9d187c49de0b9dec295e3bec3a0211624e23bdb7e838d2d0c53de56b040428a004bceb7aba89858272d2e6a95c0ca536b7847df4c45c00bc9554cb18c288fb1f9c2493296a90f6bc94d0b4d0b18f9c2407f5f1953f9b77e5e9dbe2375e6252716cbf05ffe43979f26fdfc4b38"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0xfa}}) r1 = syz_usb_connect$cdc_ecm(0x4, 0x68, &(0x7f0000000780)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0x5, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x4b, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x6, 0x1329, 0xb}, [@obex={0x5, 0x24, 0x15, 0x6}, @dmm={0x7, 0x24, 0x14, 0x81}, @network_terminal={0x7, 0x24, 0xa, 0x5a, 0x4, 0xf7, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0xfc, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x6, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x1, 0x5}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x310, 0x7, 0x7e, 0x8, 0xff}, 0x20, &(0x7f0000000840)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0xa, 0xe}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "3fc9deb94feb2eb75e7ccbbcad03b45a"}]}, 0x2, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x41c}}]}) r2 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x40, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x9, 0x10, 0x8}}}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x201, 0x87, 0x4, 0xfd, 0x10, 0xd4}, 0xd7, &(0x7f00000009c0)={0x5, 0xf, 0xd7, 0x3, [@generic={0x3a, 0x10, 0x1, "7bb141d1ff921e9782fb6c6cfbdd3337f53fd4e94a4937d4041df60ed6cb490a7a94d8fb387d673fa2fbd5d84eee24cf2f8ef8f3b6ecda"}, @generic={0x2c, 0x10, 0x2, "517b5bac4a46614b45cc592f7f7c72badd2020c88e565013e17a9a8904f72eb45b777c2abb5e04895f"}, @generic={0x6c, 0x10, 0xa, "04d2cb8b0f9fc419407b68eba45a6ea6c6fe8cba47d26ed39e24950ed2fd3242fb8e536b332c34e3f429f56dcbe90e8772de41f5703c81764bf2434dff63d6efd465d5e93ab710486d0a348dac76b9dd70ed95c2176085b1b720a21c1f681edced59a69c573652ca67"}]}, 0x5, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x426}}, {0xe4, &(0x7f0000000b00)=@string={0xe4, 0x3, "5e99d92677839c52308d42f5715fb5b608f7b214f007a6bb54278a01f11f280482bbdda5fa53fe91ec61a567f11d2fe79ca37fc9d12338f389f4844ffbe32f603cad6ae0400451e6896bf43a93c2aac2aabba9db64d9f416621e00d09cdf9ac7094208ac69e31c8216a39709b4b94ae8bacbe74a0ab944c5637ff3c18a045b91f30b90ee8cae138dc0bd5f7431a81f1180cee496986581a880cc3d504bb4bd6ba8e7e6f6a22192f21c04428e73643527ca09e5435a00e6b38b3b172f0b6116520954f01748e0e1972514bbfa8294ae27a8aa4702c2b44bc5cfef61dc132eb4a28aa3"}}, {0x62, &(0x7f0000000c00)=@string={0x62, 0x3, "4a597a6e37948a57c521b19ef8badaa68c21e44c1605941c52dc8cbc9d5e58e433afa2b3a61186e80654ab8fd13a292b7786a40a38dfb23ea50a5c1824aa4657e7a29c61101c10f6ffc623934eff85cc67673315b02cd2b662c2b53b6626dfb9"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x412}}, {0xb6, &(0x7f0000000cc0)=@string={0xb6, 0x3, "b7689c3475294d216aa60c9eb7c02b951de1ce32b9b9568ddc75c4e9805a69edbc18ac616fbbad811f484b85b8dd06514ee2b677b422f89b753396744ea4c8c70fade59b85ded7cb37f44c2ce09d78c070df6c71b36fcd50fccc493f6baa45d475de6398418cdd6d7f9e3abeaa96720fd53e73da7c596d695c38f79ab86666ebcf8aa04cd7104b808b38243df3b2b008463bf8cf371d900bf433a79f3e5367a3e3ba68b72b5bb8ff406cc34fd22a34f54fc38ec9"}}]}) r3 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000e00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6d, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x9, 0x1, 0x8c}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x32, 0x8}}]}}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x200, 0x4, 0x0, 0x90, 0x10, 0x2}, 0x63, &(0x7f0000000e80)={0x5, 0xf, 0x63, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0x55, 0x3, 0x5, 0x1e0f, 0x5, [0xc0, 0xfe80f0, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xd, 0xfe, 0x2}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0xe, 0x1b, 0x5}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x7a, 0xf0f, 0x80, [0xff3f, 0xff000f, 0x3fc0, 0xf, 0xc7, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x2, 0x8, 0x4, 0xdc}]}, 0x4, [{0x4, &(0x7f0000000f00)=@lang_id={0x4}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x425}}, {0x2a, &(0x7f0000000f80)=@string={0x2a, 0x3, "c7da4ebcc2ba1062adb6b13c1158acda977b4e94c15b8bf8f37381a4bff7be92b164059f42e9c1e0"}}, {0x80, &(0x7f0000000fc0)=@string={0x80, 0x3, "0b4f54e94608e59aa57f530f50bab02cfd1e1d8688b5df99c8737b8fe9ac0957ac843fceeaa23c0f8b84f5e629bd6d0178169e85aeca6e3654d51a48dfa7160ac68a6f7dde0373e4f92cdd15d31a7db0ba4ed3b53a4b897c7af2ab27d84058e6fe5e3b3c672af8adc397ccbca1c7fa57be472b38e9036c770614ffba6276"}}]}) syz_usb_control_io$printer(r3, &(0x7f0000001280)={0x14, &(0x7f00000010c0)={0x20, 0x31, 0x9a, {0x9a, 0x3, "5c8b480ffe0fb892978b08e3712d015d86aee16d979db0a25bdd0d0992bd276b72b51d73909719c2907118e70aa00a39867c0acd185d479179d4bf2e70f9cb84ecdff480fcc03339d9d1703054b7f460d3d8338d581bc35f223c2765e333d1d14201c3eaf11466beab872f1649261bd156f578cddc7d69d0563ad94d39e8d0c72e6cd76b7714287e468986c8fd9f3b8fee7d3876b6fc2c14"}}, &(0x7f0000001180)={0x0, 0x3, 0xce, @string={0xce, 0x3, "4306e94f642420a74bce234bdeb0a1571f98c93a2df037525abf2b1798248fc97547f5aa40022767ac5fb3cc5f37c35022b4048db4f81b1535da3e4c7369475bf17a02aa73db741c3ebee3e9435a9e5a189fc41e33aa741be733039e9c439e8b3144f5b91a647926afd450d1972bf3d614047c9bb60d94580ec65b6c942f52ec959d96eb1e57a88769f7d6a6cef8148303e8a372dd5beaca76b526cc254cc22a094599919e2c1617da253e20be3c1f4a41fd1fda2d3c842b40b2e01966be2656fd4c879c0beb8d1c8b1fd843"}}}, &(0x7f0000001500)={0x34, &(0x7f00000012c0)={0x0, 0x15, 0x49, "0931f90380fa22fdcd53c15f557e5647fe91f07c3ac5f2f46eafeb3bcea186b510e2580d0173c7f62aa60668d01fb8005005b9eece01b0c796a37f1842fc3fbb9cf5e0907ed6d6a414"}, &(0x7f0000001340)={0x0, 0xa, 0x1}, &(0x7f0000001380)={0x0, 0x8, 0x1, 0xc}, &(0x7f00000013c0)={0x20, 0x0, 0x9a, {0x98, "5345ff29482f4d470432206f877e004eb122ab3b80d0f5cfa2b1c80253f464492787e942c517594d4968df2a845cc81a18dabcb8593e891d88d9b9e52246a13b0a7f2998427d9993ce7caeadff0e53c5bfca6f6b47e0e28a404d18bc0792447c9cf5275abfd27f17bb6e728b9adc7d5ba7ea9d1645ed37edbb3acbdfaf39658bfeaf12452b99da0dfafe9cf95ad1303459ab223d3a94e4d2"}}, &(0x7f0000001480)={0x20, 0x1, 0x1, 0x8}, &(0x7f00000014c0)={0x20, 0x0, 0x1, 0x64}}) syz_usb_control_io$printer(r2, &(0x7f0000001700)={0x14, &(0x7f0000001540)={0x20, 0x8, 0xd2, {0xd2, 0x21, "d88d48dc5f4c6ea546226950f9f463ee3a34d81ac3228375431c32df72a41bad1e07d94103ad111b1365dc2bf66793fa6874c11905e631d003b48b17adec20ca30aa1a4d3ac79c1f0528513cee25b2d3948219bf1c6ba15d58cc8e8db8e96c27ba903d2e5b21f27dfc0ac0f0cba8f496fa4e998cab0ae911e57c9927188082a4f4915545cbf30bb3feb53420fd48ae978d97e64a825000efdc4c602db372fe21c2585274c38a817dba20d6b3b76017f90d462610d09b77fd916300ffc810e6b37b427ada9512312c203a8c587d6a6ae0"}}, &(0x7f0000001640)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "8c6bdb6d2ade922990cf6fd6adcf0fb8b696485a403fde9a7336c5f1ee47f18c2600ec23a3d448af65ccaffe3b7e7024d740652f49c1b0c15b0d36e3711ee608766349ca8542278d183ea5eb5a0e0557474ec3282335989e98fa19faa5a3e52c90ca9d3aeba81b454dd7321a7c44c377e8f063ca06348639abba748c90ff99a381c62e108162162fe39462bfd051ba46d17b83b666ce0254ae13132d23605de75b71f836ebd8c2a1923f9816129095cb67"}}}, &(0x7f0000001a00)={0x34, &(0x7f0000001740)={0x40, 0x1c, 0x9a, "00cb0d99e90d6a82e1dce674cb804d36e17f819c3bf0ff6f747bfdaf445a774c5dd29eb60a547b4334cd105396b2d04bdacbdf294d6caece941d3693ef51bb49a914453da0b10c1c88db6eb15509046e3ba68c40289f233495773f7b009678d39a8d579aa2067a418de36e4b4cf98003de1146d44a414a0ba5251c8669c47753eb848c8f709573c2e221312c34103d56c583df21e8ea6fd94405"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001840)={0x0, 0x8, 0x1}, &(0x7f0000001880)={0x20, 0x0, 0xf9, {0xf7, "cddb225eafbb97cbb4a1f964f1626f3eac45313967621358557bcd6866499301d46c5fe512260c507ad25b0b93d1cf9797eb14ddc947bea0e84640a6705c321a0764640af977845d1317ce2a348da70dd82c967cfd37a9937d8da85c1e87c50582988d16a28d948bff3dba334bbda2ed9ba0f8511528d91ac46e376b0962aa8fada3d61ea2c157810d4e9e47aba14fcadcc0781a3da7984ce402e45fabf1604023dae82a9ea34f707ec9118eec373ea403d25dbfb144e651cf695aff3e4a627c870a3ac9fc7d5099aa4d45b7b19c13c0679eb409c2498ae304deda57bafdbd8c857fbb2eb795e5b2df4301f7fa5112ce08fc35bd970f7d"}}, &(0x7f0000001980)={0x20, 0x1, 0x1, 0xfe}, &(0x7f00000019c0)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io(r0, &(0x7f0000001c40)={0x2c, &(0x7f0000001a40)={0x20, 0x1, 0xbe, {0xbe, 0x6, "505e30a160aabc1d6a0979cc925d19053c29759d2d0520bb74d6485bf19193a15f734a38bd29a59d425c2b8c6fe2d581e4d8a08957d8beec91f5d496b16f062e5c1c0167a824519ca47e6c6002afc804c65316931355051c3c0edcd09e15ed166c9dc8ae7c723e56e6cacc99de3fe8c7c3e67e1c90cdf00a8a328f9af84259d0ef318643b7615b718cdfc01c9a0d475400a1f40659ac9371e056b90151503c8c63fb9b56ba2080e9472840ff7bc7d0510695ef3dbad6f785b97e2473"}}, &(0x7f0000001b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f0000001b80)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001bc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc, 0x8, 0xd, 0x5, "df8ec625", "076e9aa9"}}, &(0x7f0000001c00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfb, 0x2, 0x6, 0x1, 0x4, 0xb}}}, &(0x7f0000002140)={0x84, &(0x7f0000001c80)={0x20, 0xd, 0xf5, "f1207de1a695adbee860102651e7a9e686b1b61472c3475db911022ed7e0d4385f22e1722b64b2c4f2fe24b4e04a41b16b626611ff934e7f71a5556983d50be180b8572b966c2d9daa94e8c165014e35e82118e84821ff6f9745145d5233b0118b39c786296d3343b1369732541483aa14f80b5a28fa23bf2d50908df1ed891769b0179af0b01f28ba0cdc45208782e34d8c508df6bfafb83d4355c0783a5c501919403607bc0ff89acd6779cea45b407bf4d8fc0a90aff05af8bb0807922ef254df79669344b31824a9ee2c92e6b14dcee35e58d8b36dd9e7ab716d06365fcfaeed4e2369c0d62071911360cfb2cc3bcfeb581e46"}, &(0x7f0000001d80)={0x0, 0xa, 0x1, 0xca}, &(0x7f0000001dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001e00)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000001e40)={0x20, 0x0, 0x8, {0x20, 0x4, [0xff0]}}, &(0x7f0000001e80)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000001ec0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000001f00)={0x40, 0xb, 0x2, "a133"}, &(0x7f0000001f40)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000001f80)={0x40, 0x13, 0x6}, &(0x7f0000001fc0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000002000)={0x40, 0x19, 0x2, "1b61"}, &(0x7f0000002040)={0x40, 0x1a, 0x2, 0x40}, &(0x7f0000002080)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000020c0)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000002100)={0x40, 0x21, 0x1, 0x1}}) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002400)={0x0, &(0x7f0000002200)=[@cpuid={0x2, 0x18, {0x0, 0x7}}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x68, {"f2410f5f61f4c4e3354a9f0000000000c461455829f3460f191b66baf80cb856e3a88def66bafc0cec0f78bc520c000000440f20c03505000000440f22c0f30f30b90d020000b80a000000ba000000000f30f30f5a79de"}}, @cpuid={0x2, 0x18, {0x7c08, 0xd}}, @uexit={0x0, 0x18, 0xe7}, @code={0x1, 0x8e, {"b9410900000f32b9350a0000b805000000ba000000000f30b9800000c00f3235000100000f3066bad10466edc744240000500000c744240208000000c7442406000000000f011c2448b88000c0fe000000000f23c80f21f8350c0060000f23f866baf80cb8fce4aa8eef66bafc0ced0f01dff23666450f4ffe0f615a07"}}, @cpuid={0x2, 0x18, {0x10000}}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0x35}, @uexit={0x0, 0x18, 0x7}, @cpuid={0x2, 0x18, {0x7, 0xfff}}], 0x1ce}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000024c0)=[@text16={0x10, &(0x7f0000002440)="0f1444263ef26c0fc7b9fdfff30fc7734dbaf80c66b85c64498f66efbafc0c66ed0f20e06635004000000f22e066b8000000000f23c80f21f866350400d0000f23f82e0f019802006766c7442400ffff00006766c74424020a0000806766c744240600000000670f0114240fdfb40e00", 0x70}], 0x1, 0x10, &(0x7f0000002500)=[@dstype3={0x7, 0x7}, @cr0={0x0, 0x6}], 0x2) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r4, 0x4068aea3, &(0x7f0000002540)) syz_genetlink_get_family_id$nl80211(&(0x7f00000025c0), 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000002600)='attr/keycreate\x00') r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000002680)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f00000026c0)) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000002700)={0x3, 0x0, [{0x0, 0x8, 0x2, 0x2, 0x83, 0x1, 0x200}, {0x0, 0x9d1, 0x2, 0x5, 0x7, 0x1}, {0xb, 0x7, 0x6, 0x7, 0x6, 0x2, 0x4}]}) r7 = open_tree(r5, &(0x7f0000002780)='./file0\x00', 0x8101) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002800), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000002940)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002900)={&(0x7f0000002840)={0x88, r8, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xb}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x0, 0x5, 0x4, 0x2]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x80000001, 0x4, 0x2, 0x64]}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xe8d3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fff}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r9 = syz_usb_connect(0x0, 0x214, &(0x7f0000002980)={{0x12, 0x1, 0x250, 0xcd, 0xf2, 0xe6, 0x20, 0x18b4, 0xfffa, 0x6205, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x202, 0x3, 0xf9, 0x6, 0x20, 0x0, [{{0x9, 0x4, 0x18, 0xa, 0x1, 0xa3, 0x55, 0x52, 0xe, [@generic={0x6d, 0x1, "6b0b495f74c73c2c36a6c8a607d3e586c69f4eb1394e02b95b0929fa2973988d0767525a4ce9d1567046a17f5a8698fad8280d379c76f7643d1320e83cc2a2b57bdcfc13cda0171cef8da78c81a25d6271d46c3b1567167d67ca02b18a52374147200e33533967485a72fe"}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x73, 0x2}]}], [{{0x9, 0x5, 0x6, 0x10, 0x400, 0x15, 0x3, 0x90, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x3, 0x5f}]}}]}}, {{0x9, 0x4, 0xf3, 0xf, 0x3, 0xff, 0xff, 0xff, 0x8, [], [{{0x9, 0x5, 0xc, 0x0, 0x10, 0x7, 0x5, 0xf8}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x5, 0x59, 0x1, [@generic={0xf7, 0x22, "d1d1dd30f907f6e2b45b112c73e612d38abeb2fd1c42ae0ea8f109854886f9b6c80dfa23eccbce0fc2f1ea2ce507ffdba1bf32feb16fa6c3e95845b5f76ac7916e8a64f105726cfb69a7c6056a214c401a06dd160f88329386d4dc8eea51674fd31665495d51d905ecae08edc24efd0382f6ad423103cb650c4d5691c39541a61e197bbcca9925e21733d06df779508b68a0360a3b70742a28d15953a193723079f0d47cebe3970d7365610611315175afd887bd0f23fa9ad5f4a16bc2225f465e5b575c9e901440038750009200e89056ffa9807c2691318e34c954f4c38041a05547ce4374bf3d92eca9bdad034d509fad5dad09"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x8}]}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0x7, 0x4, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x79, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x8}]}}]}}, {{0x9, 0x4, 0xe6, 0xcc, 0x1, 0x75, 0xb8, 0xa5, 0x3, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "2025a0cc"}, {0x5, 0x24, 0x0, 0x8f}, {0xd, 0x24, 0xf, 0x1, 0xf7, 0xfff, 0x1}, {0x6, 0x24, 0x1a, 0x5, 0x10}}, @hid_hid={0x9, 0x21, 0x3ff, 0x2, 0x1, {0x22, 0xb94}}], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x6, 0x3, 0x5}}]}}]}}]}}, &(0x7f0000002f40)={0xa, &(0x7f0000002bc0)={0xa, 0x6, 0x310, 0x7f, 0x2, 0x3, 0x10, 0x20}, 0x16, &(0x7f0000002c00)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xf7, 0xec, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x5, 0x2}]}, 0x6, [{0x4, &(0x7f0000002c40)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000002c80)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000002cc0)=@lang_id={0x4, 0x3, 0x1c09}}, {0x59, &(0x7f0000002d00)=@string={0x59, 0x3, "e858e11ebecf0fbe07360632ba76af0533f231e02d6b847019391befef7731479a8e48c25154e0e3b2ded79ee9bf13cf6a739fc6776cb19a43e8e28409986ac760b4c27003558e1e4a43ce7b7f44f62d899aa22782d479"}}, {0x6d, &(0x7f0000002d80)=@string={0x6d, 0x3, "9bca25d8d06dc0398d7f61c416f9c6e12193aa0a0cb01d352275bea2f1dbce0494466424237e7da8832102dc2e2cf53e60da6dafc6972483a93896f9371f4aa3815118cd3303dfe3af1e3743b9996ac092b178494b02f8ab2696b9a5bedccebfe200ee0c55709c374e5ed1"}}, {0x102, &(0x7f0000002e00)=@string={0x102, 0x3, "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"}}]}) syz_usb_control_io$cdc_ncm(r9, &(0x7f0000003040)={0x14, &(0x7f0000002fc0)={0x40, 0xb, 0x33, {0x33, 0xb, "566e6f943199cc460d7b3b1db9231d1f37698dec9816e479012b29a7aaa284a2773aa74806d7383c35c931888f407f6f6a"}}, &(0x7f0000003000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003300)={0x44, &(0x7f0000003080)={0x0, 0xa, 0x8c, "f9a79df362f9cb8cbb143c7f53f0278d7a6f01527a98537da5a18d76ab35d0159bcd85c58314a4138180013437f022ec192b80f46251b8b24bbf921007c82caeb33ed53d34fe8628f913eb763cfe67361a97ee749632474ce758299c82e8815b60c255b0035ab2bf9e3f1357709fa133826cd60233091445dcbdd6a122c5e315ca4728791086f70349ae5ea4"}, &(0x7f0000003140)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000003180)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000031c0)={0x20, 0x80, 0x1c, {0x3ff, 0xb, 0x7, 0x4, 0xff30, 0x0, 0x3, 0x5, 0x0, 0x5, 0x8, 0x8}}, &(0x7f0000003200)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000003240)={0x20, 0x83, 0x2}, &(0x7f0000003280)={0x20, 0x87, 0x2, 0x7fff}, &(0x7f00000032c0)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000034c0)={0x14, &(0x7f0000003380)={0x0, 0x10, 0xc5, {0xc5, 0x11, "681a962c4dfdb148e5715e31634f524b3d5178dba89fc7587b452d73fc22cb02c3d243dd055724bf8dbab115a89f8487d9e7498339481033f3515cbf3be1802135dcf0618fa3babad775867365f5a62b8073b6d66e39a0f0ddada37adc99c4ebf7d9ab412c1ba5d8a5e27880e89623b3c201af1f734a4268d104fefdf2b92ff58e0fc9421cb84c0676fb048cd90e917fd99b7f8e0e49ac10d24f1eda47f096b5a95167dbe3e7ea37adb05e0db391e5ab14648259a7f952771df6eed721c1dccaf0795d"}}, &(0x7f0000003480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003640)={0x1c, &(0x7f0000003500)={0x20, 0x14, 0x87, "21e6d80e5e22a3564e7a8cc534f665e85f747e296262fe2f0576ba6b53208faecc75df5edb7634821edff6943ddb49a83e9a6231b53b0f2d173b2f589fa36e653936e4e3a36b20dd160b2b7870ca8e68f67595fbdf095445135b11edfd4ef5aa6d75c8807c92cb079492ea51de68b60f6827c9f3a46bc8de5ce59e8ba6cc976e79ba365b3641ae"}, &(0x7f00000035c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000003600)={0x0, 0x8, 0x1, 0x7f}}) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003680), 0x100, 0x0) fadvise64(r10, 0xdf, 0x7, 0x5) syz_usb_control_io$hid(r0, &(0x7f0000003840)={0x24, &(0x7f00000036c0)={0x0, 0xf, 0x9d, {0x9d, 0xe, "d802b5a9a63720a704976ac1a01a323892d3c23ca63c9a3b08631dacf3a53c1cb306b6db14d055ab270a33b4de987decb65d728fc40ea8468c9793188afb457464b33100002f720fd78504d74cd6aa244258a5a21cc92f071119babf137a7d216ee91c383a591f3d32443a3592f78fdce742d4959c2c11254de6a0aedb20714ba3038a51e49d5be28b15d8fb9e60f5e8bdf3534c85d60593aaf5bd"}}, &(0x7f0000003780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c11}}, &(0x7f00000037c0)={0x0, 0x22, 0x10, {[@main=@item_4={0x3, 0x0, 0xb, "a36380c5"}, @global=@item_012={0x1, 0x1, 0xb, '8'}, @global=@item_4={0x3, 0x1, 0x0, "0aaf1801"}, @global=@item_012={0x2, 0x1, 0x4, 'p?'}, @main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f0000003800)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xb, 0x1, {0x22, 0x2b3}}}}, &(0x7f0000003a40)={0x2c, &(0x7f0000003880)={0x40, 0x11, 0x39, "d0a6673ecbd379011d7ca159a925fdede3d4278cb6f9792bdccb85a34b1870a2aa0ad4e0f4f3c17aad1001c22db1cdf56e0280fc8b1e3b8d8c"}, &(0x7f00000038c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000003900)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000003940)={0x20, 0x1, 0x7c, "b177152c0a65fc115de8093aadc0bbc4d232b1b51cc23d4fecd693327c11e97487f3a95c17da0df20449555d3c1cb5ae84060b0965611118ef586c2bea1cb19f2537cd54343bfd6f74f3bee1cc575acad64d7aa156ae25c2c6c86ee8e98aab9f2d5d3d2aa77a142e0f2e66ec8c4822ec6c7bc994a9d7fa91e12b5882"}, &(0x7f0000003a00)={0x20, 0x3, 0x1, 0x9}}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r11, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003b00)={0x40, r12, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffd}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x7}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x9}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008010}, 0x40814) 0s ago: executing program 5 (id=2381): syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0xb, 0x10, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x2}, [@selector_unit={0x8, 0x24, 0x5, 0x2, 0x79, "f395bb"}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x5, 0x3, [0x4, 0x2, 0x8], 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x305, 0x6, 0x9, 0x8, 0x80, 0x4}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x4, 0x4, [0x8, 0x7, 0x7, 0x9], 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x4, 0x0, {0x7, 0x25, 0x1, 0x81, 0x4, 0x462}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7f, 0x1, 0x5, {0x7, 0x25, 0x1, 0x82, 0x80, 0x3}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket(0x2c, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x8000, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1, &(0x7f00000015c0)=[{&(0x7f0000001340)=""/189, 0xbd}], 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x65, 0x0, &(0x7f0000000140)="6efa86ba44c4dcef07b59db7e9a27f48a6e930da91c08c993e71a416eb2235d1314cf41411de9aa874429c871656ff38656d42c237a569b22dc9923150d6eb5b381125c2173cdb022eb5d8fc7a7df730ad34e08a536eaca88d851d6505f7b2b6831911631a"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. [ 25.783731][ T36] audit: type=1400 audit(1750686680.980:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.785266][ T282] cgroup: Unknown subsys name 'net' [ 25.806571][ T36] audit: type=1400 audit(1750686680.980:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.834212][ T36] audit: type=1400 audit(1750686681.010:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.834417][ T282] cgroup: Unknown subsys name 'devices' [ 25.993991][ T282] cgroup: Unknown subsys name 'hugetlb' [ 25.999623][ T282] cgroup: Unknown subsys name 'rlimit' [ 26.156354][ T36] audit: type=1400 audit(1750686681.350:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.179838][ T36] audit: type=1400 audit(1750686681.350:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.202265][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.204810][ T36] audit: type=1400 audit(1750686681.350:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.236395][ T36] audit: type=1400 audit(1750686681.410:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.250414][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.261902][ T36] audit: type=1400 audit(1750686681.410:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.296350][ T36] audit: type=1400 audit(1750686681.440:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.322210][ T36] audit: type=1400 audit(1750686681.440:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.076752][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.084011][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.091219][ T289] bridge_slave_0: entered allmulticast mode [ 27.097724][ T289] bridge_slave_0: entered promiscuous mode [ 27.104291][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.111335][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.118449][ T289] bridge_slave_1: entered allmulticast mode [ 27.124797][ T289] bridge_slave_1: entered promiscuous mode [ 27.284127][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.291200][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.298621][ T293] bridge_slave_0: entered allmulticast mode [ 27.305035][ T293] bridge_slave_0: entered promiscuous mode [ 27.311284][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.318438][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.325839][ T295] bridge_slave_0: entered allmulticast mode [ 27.332357][ T295] bridge_slave_0: entered promiscuous mode [ 27.344493][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.351587][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.358708][ T294] bridge_slave_0: entered allmulticast mode [ 27.365058][ T294] bridge_slave_0: entered promiscuous mode [ 27.371268][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.378376][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.385506][ T293] bridge_slave_1: entered allmulticast mode [ 27.391852][ T293] bridge_slave_1: entered promiscuous mode [ 27.397967][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.405070][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.412192][ T295] bridge_slave_1: entered allmulticast mode [ 27.418422][ T295] bridge_slave_1: entered promiscuous mode [ 27.431765][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.438836][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.446148][ T294] bridge_slave_1: entered allmulticast mode [ 27.452488][ T294] bridge_slave_1: entered promiscuous mode [ 27.518973][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.526066][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.533396][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.540440][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.641340][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.648434][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.655835][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.662888][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.673926][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.680987][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.688386][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.695443][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.733900][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.740973][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.748323][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.755394][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.776088][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.783958][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.791413][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.799018][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.866452][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.873575][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.883403][ T289] veth0_vlan: entered promiscuous mode [ 27.892288][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.899374][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.907316][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.914377][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.934352][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.941414][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.950071][ T289] veth1_macvtap: entered promiscuous mode [ 27.969436][ T295] veth0_vlan: entered promiscuous mode [ 28.000788][ T295] veth1_macvtap: entered promiscuous mode [ 28.014970][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.039936][ T294] veth0_vlan: entered promiscuous mode [ 28.060990][ T293] veth0_vlan: entered promiscuous mode [ 28.080410][ T294] veth1_macvtap: entered promiscuous mode [ 28.094355][ T293] veth1_macvtap: entered promiscuous mode [ 28.191790][ T319] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.216919][ T323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8 [ 28.551607][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 28.586222][ T344] rust_binder: Write failure EINVAL in pid:17 [ 28.586275][ T344] rust_binder: Write failure EINVAL in pid:17 [ 28.588806][ T63] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.610288][ T346] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.703528][ T10] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 28.711752][ T10] usb 4-1: config 1 has no interface number 0 [ 28.717881][ T10] usb 4-1: config 1 interface 105 has no altsetting 0 [ 28.732808][ T10] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 28.742521][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.750571][ T10] usb 4-1: Product: syz [ 28.754820][ T63] usb 1-1: Using ep0 maxpacket: 8 [ 28.759921][ T10] usb 4-1: Manufacturer: syz [ 28.764680][ T10] usb 4-1: SerialNumber: syz [ 28.772150][ T63] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.792549][ T63] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 28.802283][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.811270][ T63] usb 1-1: config 0 descriptor?? [ 28.879724][ T361] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.879752][ T361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 28.960946][ T373] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.421785][ T63] usbhid 1-1:0.0: can't add hid device: -71 [ 29.427913][ T63] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 29.440939][ T63] usb 1-1: USB disconnect, device number 2 [ 29.692889][ T10] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 29.713421][ T10] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 29.749308][ T10] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 29.792698][ T10] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 3a:f0:4f:b7:9b:92 [ 29.817640][ T10] usb 4-1: USB disconnect, device number 2 [ 29.824504][ T10] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 29.892569][ T10] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 29.902135][ T10] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 29.911648][ T10] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 29.983252][ T395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 29.983281][ T395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:14 [ 30.081598][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.162755][ T408] rust_binder: Write failure EINVAL in pid:11 [ 30.241712][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 30.255809][ T31] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 30.269745][ T31] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 30.278836][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 30.289851][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 30.299782][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 30.301523][ T63] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.309818][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 30.330450][ T31] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 30.341521][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.348887][ T420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:18 [ 30.351409][ T31] usb 2-1: config 0 descriptor?? [ 30.376619][ T422] ======================================================= [ 30.376619][ T422] WARNING: The mand mount option has been deprecated and [ 30.376619][ T422] and is ignored by this kernel. Remove the mand [ 30.376619][ T422] option from the mount to silence this warning. [ 30.376619][ T422] ======================================================= [ 30.411973][ T422] overlayfs: missing 'lowerdir' [ 30.489347][ T425] rust_binder: Error while translating object. [ 30.489392][ T425] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.495659][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 30.496117][ T425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22 [ 30.507543][ T63] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 42, changing to 9 [ 30.530407][ T63] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 30.541302][ T63] usb 3-1: config 1 interface 0 has no altsetting 0 [ 30.549606][ T63] usb 3-1: New USB device found, idVendor=056a, idProduct=00ef, bcdDevice= 0.40 [ 30.558776][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.566859][ T63] usb 3-1: Product: ᱅ [ 30.567792][ T31] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 30.572380][ T63] usb 3-1: Manufacturer: 倊 [ 30.581851][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.586407][ T63] usb 3-1: SerialNumber: 殾ꛈ䨵〝騫粈㬑餉虃〻㪺⇅᭯瘎샂㨑䔳ჰ࠱滼㠪ጂ具晨驱땂㮜凿劳쬙䇵诒仫朸አ施⋢醪羒쏶璢褛㠅왣褊┫㼒黇氛㏘⻝Ⅵ吷횰坧禵僛亷꾤趡嬬孎賎픒っ鉾漹턜ﶚढ़ܜ㡸齤濏펤띃春秉읲닒肅 [ 30.742758][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.752983][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 30.761946][ T45] usb 4-1: config 1 has no interface number 0 [ 30.768123][ T45] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.779053][ T45] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 30.792130][ T36] kauditd_printk_skb: 104 callbacks suppressed [ 30.792148][ T36] audit: type=1400 audit(1750686685.990:178): avc: denied { read write } for pid=396 comm="syz.1.29" name="lp0" dev="devtmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 30.792783][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.798831][ T36] audit: type=1400 audit(1750686685.990:179): avc: denied { open } for pid=396 comm="syz.1.29" path="/dev/usb/lp0" dev="devtmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 30.821765][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.833862][ T375] usb 2-1: USB disconnect, device number 2 [ 30.858466][ T45] usb 4-1: Product: syz [ 30.865136][ T375] usblp0: removed [ 30.869298][ T45] usb 4-1: Manufacturer: syz [ 30.880673][ T45] usb 4-1: SerialNumber: syz [ 31.069480][ T63] usbhid 3-1:1.0: can't add hid device: -71 [ 31.075523][ T63] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 31.085175][ T63] usb 3-1: USB disconnect, device number 2 [ 31.286032][ T36] audit: type=1400 audit(1750686686.480:180): avc: denied { mount } for pid=428 comm="syz.0.41" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 31.311522][ T36] audit: type=1400 audit(1750686686.500:181): avc: denied { read write } for pid=428 comm="syz.0.41" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.335403][ T36] audit: type=1400 audit(1750686686.500:182): avc: denied { open } for pid=428 comm="syz.0.41" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.359131][ T36] audit: type=1400 audit(1750686686.500:183): avc: denied { ioctl } for pid=428 comm="syz.0.41" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.386752][ T36] audit: type=1400 audit(1750686686.530:184): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 31.406760][ T36] audit: type=1400 audit(1750686686.580:185): avc: denied { read } for pid=434 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.434017][ T36] audit: type=1400 audit(1750686686.630:186): avc: denied { accept } for pid=436 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.453530][ T36] audit: type=1400 audit(1750686686.630:187): avc: denied { unmount } for pid=436 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.494054][ T45] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 31.500189][ T45] cdc_ncm 4-1:1.1: bind() failure [ 31.587458][ T458] incfs: Backing dir is not set, filesystem can't be mounted. [ 31.601866][ T458] incfs: mount failed -2 [ 31.790951][ T493] cgroup: Invalid name [ 31.931539][ T375] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 32.082794][ T375] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.093006][ T375] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.103461][ T375] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 32.112565][ T375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.120600][ T375] usb 3-1: Product: syz [ 32.124806][ T375] usb 3-1: Manufacturer: syz [ 32.129423][ T375] usb 3-1: SerialNumber: syz [ 32.234513][ T503] binfmt_misc: register: failed to install interpreter file ./file0 [ 32.341273][ T375] usb 3-1: 0:2 : does not exist [ 32.348810][ T510] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 32.348850][ T510] rust_binder: Error while translating object. [ 32.357962][ T510] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.360873][ T375] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 32.364499][ T510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 32.388901][ T375] usb 3-1: USB disconnect, device number 3 [ 32.413867][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.436991][ T517] overlay: ./file1 is not a directory [ 32.831539][ T375] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 32.868527][ T525] rust_binder: Error while translating object. [ 32.868554][ T525] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 32.874825][ T525] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:40 [ 32.931193][ T532] bpf: Bad value for 'mode' [ 32.982923][ T375] usb 1-1: unable to get BOS descriptor or descriptor too short [ 32.992669][ T539] tc_dump_action: action bad kind [ 32.997846][ T375] usb 1-1: not running at top speed; connect to a high speed hub [ 33.012262][ T375] usb 1-1: config 14 has an invalid interface number: 18 but max is 0 [ 33.023022][ T375] usb 1-1: config 14 has no interface number 0 [ 33.029443][ T375] usb 1-1: config 14 interface 18 has no altsetting 0 [ 33.036938][ T544] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:45 [ 33.037836][ T375] usb 1-1: New USB device found, idVendor=3980, idProduct=0003, bcdDevice=de.62 [ 33.056346][ T375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.064528][ T375] usb 1-1: Product: syz [ 33.068747][ T375] usb 1-1: Manufacturer: syz [ 33.075757][ T375] usb 1-1: SerialNumber: syz [ 33.135114][ T559] capability: warning: `syz.1.85' uses deprecated v2 capabilities in a way that may be insecure [ 33.157978][ T561] cgroup: Unknown subsys name 'measure' [ 33.275704][ T63] usb 4-1: USB disconnect, device number 3 [ 33.286978][ T521] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.288940][ T375] rtl8150 1-1:14.18: couldn't find required endpoints [ 33.302928][ T375] rtl8150 1-1:14.18: probe with driver rtl8150 failed with error -5 [ 33.316621][ T375] usb 1-1: USB disconnect, device number 3 [ 33.328381][ T570] Zero length message leads to an empty skb [ 33.439430][ T571] netlink: 'syz.3.90': attribute type 4 has an invalid length. [ 34.038314][ T580] tipc: Started in network mode [ 34.043332][ T580] tipc: Node identity ac14142f, cluster identity 4711 [ 34.050294][ T580] tipc: New replicast peer: 0.0.0.0 [ 34.055865][ T580] tipc: Enabled bearer , priority 10 [ 34.062799][ T580] netlink: 'syz.2.94': attribute type 4 has an invalid length. [ 34.070422][ T580] netlink: 17 bytes leftover after parsing attributes in process `syz.2.94'. [ 34.091540][ T375] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.272709][ T375] usb 1-1: config 0 has no interfaces? [ 34.278373][ T375] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 34.291019][ T375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.300259][ T375] usb 1-1: config 0 descriptor?? [ 34.510927][ T45] usb 1-1: USB disconnect, device number 4 [ 34.516876][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 34.671516][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 34.677943][ T31] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 34.686256][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.696572][ T31] usb 3-1: config 0 has no interface number 0 [ 34.704204][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 34.713313][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.721337][ T31] usb 3-1: Product: syz [ 34.725534][ T31] usb 3-1: Manufacturer: syz [ 34.730178][ T31] usb 3-1: SerialNumber: syz [ 34.735593][ T31] usb 3-1: config 0 descriptor?? [ 34.988536][ T31] usb 3-1: USB disconnect, device number 4 [ 35.028438][ T594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32870 sclass=netlink_route_socket pid=594 comm=syz.0.101 [ 35.171565][ T375] tipc: Node number set to 2886997039 [ 35.268699][ T613] rust_binder: Failed copying remainder into alloc: EFAULT [ 35.268724][ T613] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 35.276374][ T613] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 35.284993][ T613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:74 [ 36.091153][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 36.091178][ T36] audit: type=1400 audit(1750686691.280:233): avc: denied { create } for pid=630 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 36.188452][ T643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'. [ 36.191426][ T36] audit: type=1400 audit(1750686691.380:234): avc: denied { map } for pid=648 comm="syz.1.122" path="socket:[5286]" dev="sockfs" ino=5286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.199175][ T643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.119'. [ 36.223331][ T36] audit: type=1400 audit(1750686691.380:235): avc: denied { read } for pid=648 comm="syz.1.122" path="socket:[5286]" dev="sockfs" ino=5286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.338145][ T36] audit: type=1400 audit(1750686691.530:236): avc: denied { ioctl } for pid=667 comm="syz.1.127" path="socket:[5317]" dev="sockfs" ino=5317 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 36.366834][ T36] audit: type=1400 audit(1750686691.530:237): avc: denied { map } for pid=667 comm="syz.1.127" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.413496][ T36] audit: type=1400 audit(1750686691.530:238): avc: denied { read } for pid=667 comm="syz.1.127" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.441571][ T36] audit: type=1400 audit(1750686691.600:239): avc: denied { create } for pid=677 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 36.466623][ T36] audit: type=1400 audit(1750686691.610:240): avc: denied { mounton } for pid=677 comm="syz.0.130" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.489915][ T36] audit: type=1326 audit(1750686691.660:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=679 comm="syz.1.131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb98e929 code=0x0 [ 36.512757][ T36] audit: type=1400 audit(1750686691.660:242): avc: denied { connect } for pid=677 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.714828][ T689] rust_binder: Write failure EFAULT in pid:22 [ 36.715516][ T689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:22 [ 36.766977][ T696] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 36.827887][ T699] rust_binder: Failed copying remainder into alloc: EFAULT [ 36.827906][ T699] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 36.835245][ T699] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 36.845439][ T699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:28 [ 36.971513][ T375] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 37.111516][ T63] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 37.131553][ T375] usb 1-1: Using ep0 maxpacket: 32 [ 37.140005][ T375] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 37.152622][ T375] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 37.161294][ T375] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 37.170610][ T707] /dev/nullb0: Can't lookup blockdev [ 37.176840][ T375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 37.191768][ T375] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 37.201525][ T375] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 37.214727][ T375] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 37.223978][ T375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.239004][ T375] usb 1-1: config 0 descriptor?? [ 37.244041][ T63] usb 4-1: device descriptor read/64, error -71 [ 37.359491][ T717] binder: Bad value for 'stats' [ 37.420645][ T720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.147'. [ 37.430662][ T720] /dev/rnullb0: Can't lookup blockdev [ 37.457678][ T375] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 37.491550][ T63] usb 4-1: device descriptor read/64, error -71 [ 37.501846][ T734] netlink: 'syz.1.151': attribute type 4 has an invalid length. [ 37.655932][ T375] usb 1-1: USB disconnect, device number 5 [ 37.664192][ T375] usblp0: removed [ 37.731550][ T63] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.861509][ T63] usb 4-1: device descriptor read/64, error -71 [ 38.080113][ T753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.157'. [ 38.101513][ T63] usb 4-1: device descriptor read/64, error -71 [ 38.198866][ T767] overlayfs: failed to resolve './file2': -2 [ 38.211806][ T63] usb usb4-port1: attempt power cycle [ 38.378424][ T776] 9pnet_fd: Insufficient options for proto=fd [ 38.461527][ T375] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 38.503736][ T779] process 'syz.2.166' launched './file0' with NULL argv: empty string added [ 38.504377][ T778] rust_binder: Write failure EFAULT in pid:99 [ 38.551519][ T63] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 38.591564][ T375] usb 1-1: device descriptor read/64, error -71 [ 38.602194][ T63] usb 4-1: device descriptor read/8, error -71 [ 38.732586][ T63] usb 4-1: device descriptor read/8, error -71 [ 38.841681][ T375] usb 1-1: device descriptor read/64, error -71 [ 38.971553][ T63] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 39.002687][ T63] usb 4-1: device descriptor read/8, error -71 [ 39.081556][ T375] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 39.132569][ T63] usb 4-1: device descriptor read/8, error -71 [ 39.211795][ T375] usb 1-1: device descriptor read/64, error -71 [ 39.241611][ T63] usb usb4-port1: unable to enumerate USB device [ 39.270881][ T791] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.451522][ T375] usb 1-1: device descriptor read/64, error -71 [ 39.571612][ T375] usb usb1-port1: attempt power cycle [ 39.811545][ T63] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.911538][ T375] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 39.932723][ T375] usb 1-1: device descriptor read/8, error -71 [ 39.961529][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 39.967927][ T63] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 39.978049][ T63] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 39.987110][ T63] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 39.996327][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 40.006242][ T63] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 40.016216][ T63] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 40.029490][ T63] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 40.038790][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.051771][ T63] usb 3-1: config 0 descriptor?? [ 40.062517][ T375] usb 1-1: device descriptor read/8, error -71 [ 40.264883][ T63] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 40.331512][ T375] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 40.352519][ T375] usb 1-1: device descriptor read/8, error -71 [ 40.483034][ T375] usb 1-1: device descriptor read/8, error -71 [ 40.602682][ T375] usb usb1-port1: unable to enumerate USB device [ 41.283695][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 41.283715][ T36] audit: type=1400 audit(1750686696.480:265): avc: denied { create } for pid=852 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 41.339134][ T36] audit: type=1400 audit(1750686696.510:266): avc: denied { setopt } for pid=852 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.548022][ T305] usb 3-1: USB disconnect, device number 5 [ 42.579153][ T305] usblp0: removed [ 42.617912][ T36] audit: type=1400 audit(1750686697.810:267): avc: denied { read } for pid=877 comm="syz.2.204" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.645377][ T878] deleting an unspecified loop device is not supported. [ 42.655354][ T880] kvm: kvm [879]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x7 [ 42.673901][ T36] audit: type=1400 audit(1750686697.840:268): avc: denied { open } for pid=877 comm="syz.2.204" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.721299][ T36] audit: type=1400 audit(1750686697.840:269): avc: denied { listen } for pid=877 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.752853][ T36] audit: type=1400 audit(1750686697.840:270): avc: denied { ioctl } for pid=877 comm="syz.2.204" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.779310][ T36] audit: type=1400 audit(1750686697.860:271): avc: denied { write } for pid=877 comm="syz.2.204" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.804235][ T885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:136 [ 42.825922][ T36] audit: type=1326 audit(1750686697.910:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.2.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999a58e929 code=0x7ffc0000 [ 42.858906][ T36] audit: type=1326 audit(1750686697.910:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.2.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f999a58e929 code=0x7ffc0000 [ 42.899810][ T36] audit: type=1326 audit(1750686698.000:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.2.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999a58e929 code=0x7ffc0000 [ 43.029351][ T914] /dev/rnullb0: Can't open blockdev [ 43.291509][ T63] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 43.381505][ T375] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 43.441513][ T63] usb 3-1: Using ep0 maxpacket: 16 [ 43.462227][ T63] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.481663][ T63] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 43.490591][ T63] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 43.522951][ T63] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 43.541567][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.561495][ T63] usb 3-1: Product: syz [ 43.565720][ T63] usb 3-1: Manufacturer: syz [ 43.570352][ T63] usb 3-1: SerialNumber: syz [ 43.581499][ T375] usb 1-1: Using ep0 maxpacket: 16 [ 43.601831][ T375] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 43.609975][ T375] usb 1-1: config 0 has no interface number 0 [ 43.621500][ T375] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 43.631506][ T375] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 43.641488][ T375] usb 1-1: config 0 interface 41 has no altsetting 0 [ 43.651105][ T375] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 43.671527][ T375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.679646][ T375] usb 1-1: Product: syz [ 43.683917][ T375] usb 1-1: Manufacturer: syz [ 43.688560][ T375] usb 1-1: SerialNumber: syz [ 43.694227][ T375] usb 1-1: config 0 descriptor?? [ 43.701574][ T925] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 43.708787][ T925] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 43.922164][ T925] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 43.929394][ T925] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 44.018690][ T919] rust_binder: Error while translating object. [ 44.018744][ T919] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.027700][ T919] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:147 [ 44.038931][ T45] usb 3-1: USB disconnect, device number 6 [ 44.558595][ T375] dm9601 1-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID [ 44.585591][ T375] sr9700 1-1:0.41: probe with driver sr9700 failed with error -71 [ 44.605357][ T375] usb 1-1: USB disconnect, device number 10 [ 44.877928][ T951] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 45.131534][ T375] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 45.292562][ T375] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 45.311499][ T375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.322886][ T375] usb 3-1: config 0 descriptor?? [ 45.779758][ T980] overlayfs: failed to clone lowerpath [ 46.312685][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 46.312706][ T36] audit: type=1400 audit(1750686701.510:295): avc: denied { read } for pid=1012 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.475734][ T1031] fuse: Unknown parameter 'Mx0000000000000003' [ 46.944641][ T375] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 46.966295][ T375] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 46.976734][ T375] asix 3-1:0.0: probe with driver asix failed with error -71 [ 46.989415][ T375] usb 3-1: USB disconnect, device number 7 [ 47.413761][ T1052] cgroup: Unknown subsys name 'measure' [ 47.579269][ T36] audit: type=1400 audit(1750686702.770:296): avc: denied { map } for pid=1054 comm="syz.2.263" path="socket:[8566]" dev="sockfs" ino=8566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.613413][ T36] audit: type=1400 audit(1750686702.810:297): avc: denied { getopt } for pid=1054 comm="syz.2.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.774235][ T1060] tc_dump_action: action bad kind [ 47.950671][ T1065] fuse: Bad value for 'user_id' [ 47.955735][ T1065] fuse: Bad value for 'user_id' [ 48.501517][ T375] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 48.661501][ T375] usb 1-1: Using ep0 maxpacket: 32 [ 48.670754][ T375] usb 1-1: config index 0 descriptor too short (expected 31, got 27) [ 48.682267][ T375] usb 1-1: config 1 interface 0 altsetting 253 bulk endpoint 0x1 has invalid maxpacket 32 [ 48.702051][ T375] usb 1-1: config 1 interface 0 has no altsetting 0 [ 48.717876][ T375] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 48.731423][ T375] usb 1-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 48.746276][ T375] usb 1-1: Product: syz [ 48.752719][ T375] usb 1-1: Manufacturer: syz [ 48.757448][ T375] usb 1-1: SerialNumber: syz [ 48.773433][ T1071] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 48.846462][ T36] audit: type=1400 audit(1750686704.040:298): avc: denied { append } for pid=1073 comm="syz.2.270" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.911564][ T1076] lo: entered promiscuous mode [ 48.921846][ T1076] lo: left promiscuous mode [ 49.082027][ T36] audit: type=1400 audit(1750686704.280:299): avc: denied { node_bind } for pid=1082 comm="syz.1.274" saddr=ff02::1 src=47502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 49.161960][ T36] audit: type=1400 audit(1750686704.360:300): avc: denied { execmod } for pid=1087 comm="syz.1.275" path="/dev/rnullb0" dev="tmpfs" ino=412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.162033][ T1088] syz.1.275 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.316706][ T36] audit: type=1400 audit(1750686704.510:301): avc: denied { read } for pid=1097 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.395896][ T375] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 49.600473][ C1] usblp0: nonzero write bulk status received: -71 [ 49.608044][ T305] usb 1-1: USB disconnect, device number 11 [ 49.615006][ T305] usblp0: removed [ 49.653328][ T36] audit: type=1400 audit(1750686704.850:302): avc: denied { connect } for pid=1121 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.741503][ T375] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 49.902589][ T375] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 49.921565][ T375] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 49.930568][ T375] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 49.944288][ T375] usb 3-1: config 220 has no interface number 2 [ 49.950610][ T375] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 49.963887][ T375] usb 3-1: config 220 interface 0 has no altsetting 0 [ 49.973979][ T375] usb 3-1: config 220 interface 76 has no altsetting 0 [ 49.980889][ T375] usb 3-1: config 220 interface 1 has no altsetting 0 [ 50.009419][ T375] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 50.023208][ T375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.023781][ T1147] mmap: syz.1.294 (1147): VmData 29220864 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 50.041497][ T375] usb 3-1: Product: syz [ 50.051535][ T375] usb 3-1: Manufacturer: syz [ 50.056190][ T375] usb 3-1: SerialNumber: syz [ 50.092750][ T1153] 9pnet_fd: Insufficient options for proto=fd [ 50.105704][ T1153] fuse: Unknown parameter 'Z' [ 50.225821][ T1157] fuse: Bad value for 'group_id' [ 50.230850][ T1157] fuse: Bad value for 'group_id' [ 50.276862][ T36] audit: type=1400 audit(1750686705.470:303): avc: denied { connect } for pid=1109 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.282885][ T375] uvcvideo 3-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 50.321922][ T375] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 50.328358][ T375] usb 3-1: No valid video chain found. [ 50.341499][ T36] audit: type=1400 audit(1750686705.470:304): avc: denied { write } for pid=1109 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.362270][ T375] usb 3-1: selecting invalid altsetting 0 [ 50.373591][ T375] usb 3-1: USB disconnect, device number 8 [ 50.911558][ T1178] rust_binder: Error in use_page_slow: ESRCH [ 50.911584][ T1178] rust_binder: use_range failure ESRCH [ 50.920062][ T1178] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 50.925935][ T1178] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 50.934022][ T1178] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:193 [ 51.448950][ T1205] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 51.469290][ T1205] bridge0: entered allmulticast mode [ 51.561401][ T1208] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 51.788435][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 51.788455][ T36] audit: type=1400 audit(1750686706.980:308): avc: denied { name_bind } for pid=1220 comm="syz.0.320" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 51.824099][ T36] audit: type=1400 audit(1750686707.020:309): avc: denied { relabelfrom } for pid=1223 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 51.825951][ T1224] binder: Unknown parameter 'context' [ 51.851910][ T36] audit: type=1400 audit(1750686707.020:310): avc: denied { relabelto } for pid=1223 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 51.873010][ T36] audit: type=1400 audit(1750686707.020:311): avc: denied { map } for pid=1223 comm="syz.0.322" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 52.211508][ T305] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 52.361500][ T305] usb 1-1: Using ep0 maxpacket: 16 [ 52.367843][ T305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.379125][ T305] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 52.388411][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.400632][ T305] usb 1-1: config 0 descriptor?? [ 52.817042][ T305] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0001/input/input4 [ 52.841335][ T36] audit: type=1400 audit(1750686708.030:312): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=482 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.857985][ T305] appleir 0003:05AC:8241.0001: input,hiddev96,hidraw0: USB HID v0.05 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 52.884274][ T36] audit: type=1400 audit(1750686708.030:313): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=482 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.921150][ T36] audit: type=1400 audit(1750686708.100:314): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=482 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.017968][ T305] usb 1-1: USB disconnect, device number 12 [ 53.708222][ T36] audit: type=1400 audit(1750686708.900:315): avc: denied { ioctl } for pid=1271 comm="syz.0.338" path="uts:[4026532407]" dev="nsfs" ino=4026532407 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.361499][ T375] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 54.399389][ T36] audit: type=1326 audit(1750686709.590:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1293 comm="syz.1.346" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8bcb98e929 code=0x0 [ 54.542639][ T375] usb 3-1: config 1 has an invalid interface number: 229 but max is 1 [ 54.552494][ T375] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.565011][ T375] usb 3-1: config 1 has no interface number 0 [ 54.578797][ T375] usb 3-1: too many endpoints for config 1 interface 229 altsetting 255: 255, using maximum allowed: 30 [ 54.602461][ T375] usb 3-1: config 1 interface 229 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 54.642379][ T375] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 54.681530][ T375] usb 3-1: config 1 interface 229 has no altsetting 0 [ 54.711507][ T375] usb 3-1: config 1 interface 1 has no altsetting 0 [ 54.729974][ T375] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.739213][ T375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.771498][ T375] usb 3-1: Product: syz [ 54.775745][ T375] usb 3-1: Manufacturer: syz [ 54.780368][ T375] usb 3-1: SerialNumber: syz [ 54.833225][ T36] audit: type=1400 audit(1750686710.030:317): avc: denied { create } for pid=1296 comm="syz.0.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.010110][ T375] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 55.039185][ T375] usb 3-1: USB disconnect, device number 9 [ 55.094366][ T127] bridge_slave_1: left allmulticast mode [ 55.100105][ T127] bridge_slave_1: left promiscuous mode [ 55.108965][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.118174][ T127] bridge_slave_0: left allmulticast mode [ 55.123971][ T127] bridge_slave_0: left promiscuous mode [ 55.129660][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.258021][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.265580][ T1309] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.273052][ T1309] bridge_slave_0: entered allmulticast mode [ 55.279506][ T1309] bridge_slave_0: entered promiscuous mode [ 55.288283][ T127] veth1_macvtap: left promiscuous mode [ 55.295381][ T127] veth0_vlan: left promiscuous mode [ 55.311675][ T305] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 55.350139][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.357339][ T1309] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.364474][ T1309] bridge_slave_1: entered allmulticast mode [ 55.370733][ T1309] bridge_slave_1: entered promiscuous mode [ 55.425280][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.432358][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.439721][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.446789][ T1309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.468274][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.475972][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.481715][ T305] usb 1-1: Using ep0 maxpacket: 32 [ 55.489637][ T305] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 55.499445][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.506525][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.513950][ T305] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 55.523341][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.530526][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.538414][ T305] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 55.548099][ T305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 55.553064][ T1330] overlay: filesystem on ./bus not supported as upperdir [ 55.559266][ T305] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 55.574937][ T305] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 55.585362][ T1309] veth0_vlan: entered promiscuous mode [ 55.591660][ T305] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 55.602577][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.615240][ T1309] veth1_macvtap: entered promiscuous mode [ 55.616659][ T305] usb 1-1: config 0 descriptor?? [ 55.830102][ T305] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 56.152092][ T1357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:229 [ 56.180858][ T1358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.211773][ T1358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.231023][ T1361] netlink: 22 bytes leftover after parsing attributes in process `syz.2.368'. [ 56.481622][ T45] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 56.502811][ T1366] netlink: 32 bytes leftover after parsing attributes in process `syz.1.370'. [ 56.641764][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 56.651960][ T45] usb 3-1: config 4 has an invalid interface number: 15 but max is 0 [ 56.674852][ T45] usb 3-1: config 4 has no interface number 0 [ 56.681062][ T45] usb 3-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 56.711177][ T45] usb 3-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 56.731313][ T45] usb 3-1: config 4 interface 15 has no altsetting 0 [ 56.739605][ T45] usb 3-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 56.751525][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.769790][ T45] usb 3-1: Product: syz [ 56.776924][ T45] usb 3-1: Manufacturer: syz [ 56.781843][ T45] usb 3-1: SerialNumber: syz [ 56.791334][ T1361] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 56.799020][ T1361] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 57.011520][ T1361] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 57.018957][ T1361] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 57.112733][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 57.112752][ T36] audit: type=1400 audit(1750686712.310:326): avc: denied { connect } for pid=1375 comm="syz.1.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.481762][ T36] audit: type=1400 audit(1750686712.680:327): avc: denied { connect } for pid=1377 comm="syz.4.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.658505][ T1384] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 57.658524][ T1384] rust_binder: Read failure Err(EFAULT) in pid:13 [ 57.720973][ T1387] tipc: Started in network mode [ 57.732388][ T1387] tipc: Node identity ac14140f, cluster identity 4711 [ 57.739240][ T1387] tipc: New replicast peer: 255.255.255.255 [ 57.745670][ T1387] tipc: Enabled bearer , priority 10 [ 58.080675][ C1] usblp0: nonzero read bulk status received: -71 [ 58.088581][ T31] usb 1-1: USB disconnect, device number 13 [ 58.106616][ T1359] usblp0: removed [ 58.329799][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 58.871512][ T305] tipc: Node number set to 2886997007 [ 58.901524][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.943411][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 58.954291][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 58.965206][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 58.976299][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 58.987412][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 58.998485][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 59.009638][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 59.021013][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 59.032127][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 59.043438][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 59.054554][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 59.061551][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 59.065661][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 59.073043][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 59.083752][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 59.100599][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 59.109178][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 59.119672][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 59.126079][ T9] usb 5-1: can't read configurations, error -71 [ 59.132088][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 59.148149][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 59.166846][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 59.179402][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 59.191153][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 59.202258][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 59.213305][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 59.224604][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 59.235941][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 59.247024][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 59.258090][ T45] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 59.270984][ T45] ax88179_178a 3-1:4.15 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, Toshiba USB Ethernet Adapter, da:e6:a0:3d:25:1d [ 59.286626][ T45] usb 3-1: USB disconnect, device number 10 [ 59.293293][ T36] audit: type=1400 audit(1750686714.490:328): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.293890][ T45] ax88179_178a 3-1:4.15 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, Toshiba USB Ethernet Adapter [ 59.325867][ T36] audit: type=1400 audit(1750686714.510:329): avc: denied { read } for pid=149 comm="dhcpcd" name="n16" dev="tmpfs" ino=1477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.349922][ T36] audit: type=1400 audit(1750686714.510:330): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=1477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.386940][ T36] audit: type=1400 audit(1750686714.510:331): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=1477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.410303][ T36] audit: type=1400 audit(1750686714.540:332): avc: denied { read } for pid=1430 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.433501][ T36] audit: type=1400 audit(1750686714.540:333): avc: denied { open } for pid=1430 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.458739][ T36] audit: type=1400 audit(1750686714.540:334): avc: denied { getattr } for pid=1430 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.461583][ T375] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 59.484489][ T36] audit: type=1400 audit(1750686714.630:335): avc: denied { write } for pid=1429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.651550][ T375] usb 1-1: Using ep0 maxpacket: 32 [ 59.666764][ T375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.677763][ T375] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 59.684681][ T1462] rust_binder: Got transaction with invalid offset. [ 59.686912][ T1462] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.687186][ T375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.693808][ T1462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 59.704622][ T375] usb 1-1: config 0 descriptor?? [ 59.851562][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 60.001533][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 60.007920][ T45] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 60.016411][ T45] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 60.025166][ T45] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 60.034288][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 60.044084][ T45] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 60.053882][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 60.067029][ T45] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 60.076328][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.085768][ T45] usb 3-1: config 0 descriptor?? [ 60.128223][ T375] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 60.135248][ T375] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 60.142302][ T375] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 60.149192][ T375] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 60.156253][ T375] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 60.167860][ T375] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 60.292658][ T1443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.301250][ T1443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.310751][ T45] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 60.329366][ T375] arvo 0003:1E7D:30D4.0002: couldn't init struct arvo_device [ 60.336849][ T375] arvo 0003:1E7D:30D4.0002: couldn't install keyboard [ 60.344265][ T375] arvo 0003:1E7D:30D4.0002: probe with driver arvo failed with error -71 [ 60.354847][ T375] usb 1-1: USB disconnect, device number 14 [ 60.432774][ T1499] SELinux: security_context_str_to_sid (IPCv2) failed with errno=-22 [ 60.515028][ T9] usb 3-1: USB disconnect, device number 11 [ 60.521905][ T9] usblp0: removed [ 61.005044][ T1522] rust_binder: Error in use_page_slow: ESRCH [ 61.005061][ T1522] rust_binder: use_range failure ESRCH [ 61.011332][ T1522] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 61.016915][ T1522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 61.024824][ T1522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:224 [ 61.214146][ T1535] binder: Bad value for 'stats' [ 61.295032][ T1543] binder: Unknown parameter 'dont_appraise' [ 61.314667][ T1545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:255 [ 62.391517][ T305] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 62.551518][ T305] usb 3-1: Using ep0 maxpacket: 32 [ 62.557921][ T305] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 62.566337][ T305] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 62.574985][ T305] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 62.583984][ T305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 62.593691][ T305] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 62.603370][ T305] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 62.616371][ T305] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 62.625476][ T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.634232][ T305] usb 3-1: config 0 descriptor?? [ 62.840548][ T1549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.849295][ T305] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 62.849399][ T1549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.071599][ T45] usb 3-1: USB disconnect, device number 12 [ 63.078376][ T45] usblp0: removed [ 63.501812][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 63.501831][ T36] audit: type=1400 audit(1750686718.700:355): avc: denied { write } for pid=1557 comm="syz.4.426" path="socket:[10815]" dev="sockfs" ino=10815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.680541][ T1582] rust_binder: Write failure EINVAL in pid:59 [ 63.697539][ T1586] binder: Unknown parameter 'staps' [ 63.728588][ T1590] binder: Binderfs stats mode cannot be changed during a remount [ 63.752639][ T1594] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 63.752672][ T1594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:65 [ 63.754011][ T36] audit: type=1400 audit(1750686718.950:356): avc: denied { ioctl } for pid=1593 comm="syz.4.437" path="socket:[10982]" dev="sockfs" ino=10982 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 63.792496][ T1597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.797193][ T1598] rust_binder: Write failure EFAULT in pid:276 [ 63.806868][ T1597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.875248][ T1604] can: request_module (can-proto-0) failed. [ 63.920952][ T36] audit: type=1400 audit(1750686719.110:357): avc: denied { create } for pid=1609 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 63.940631][ T36] audit: type=1400 audit(1750686719.120:358): avc: denied { sys_admin } for pid=1609 comm="syz.1.444" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 64.031538][ T375] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 64.082351][ T1630] overlay: Unknown parameter 'mounts' [ 64.100360][ T36] audit: type=1326 audit(1750686719.290:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1632 comm="syz.1.453" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8bcb98e929 code=0x0 [ 64.181495][ T375] usb 5-1: Using ep0 maxpacket: 16 [ 64.187881][ T375] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.198232][ T375] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 64.207412][ T375] usb 5-1: config 1 has no interface number 1 [ 64.213641][ T375] usb 5-1: too many endpoints for config 1 interface 2 altsetting 252: 65, using maximum allowed: 30 [ 64.224750][ T375] usb 5-1: config 1 interface 2 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 64.238151][ T375] usb 5-1: config 1 interface 2 has no altsetting 0 [ 64.246324][ T375] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 64.255452][ T375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.263637][ T375] usb 5-1: Product: syz [ 64.267819][ T375] usb 5-1: Manufacturer: syz [ 64.272592][ T375] usb 5-1: SerialNumber: syz [ 64.486393][ T375] usb 5-1: USB disconnect, device number 4 [ 64.498204][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.575619][ T1637] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 64.575640][ T1637] rust_binder: Error while translating object. [ 64.586664][ T1637] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.593042][ T1637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:279 [ 64.602725][ T1637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.632669][ T36] audit: type=1400 audit(1750686719.830:360): avc: denied { read } for pid=1641 comm="syz.2.455" name="usbmon1" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 64.656297][ T36] audit: type=1400 audit(1750686719.830:361): avc: denied { open } for pid=1641 comm="syz.2.455" path="/dev/usbmon1" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 64.921517][ T305] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 64.925621][ T1646] kvm: MWAIT instruction emulated as NOP! [ 64.983074][ T36] audit: type=1400 audit(1750686720.180:362): avc: denied { view } for pid=1648 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 65.014619][ T1652] af_packet: tpacket_rcv: packet too big, clamped from 18 to 4294967272. macoff=96 [ 65.091508][ T305] usb 3-1: Using ep0 maxpacket: 32 [ 65.098027][ T305] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 65.106942][ T305] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 65.115700][ T305] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 65.124868][ T305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 65.134576][ T305] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 65.145414][ T305] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 65.158866][ T305] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 65.168076][ T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.176901][ T305] usb 3-1: config 0 descriptor?? [ 65.216123][ T1657] netlink: 84 bytes leftover after parsing attributes in process `syz.0.461'. [ 65.244067][ T36] audit: type=1326 audit(1750686720.440:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1658 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0938e929 code=0x7ffc0000 [ 65.254788][ T1659] binder: Unknown parameter 'context' [ 65.267996][ T36] audit: type=1326 audit(1750686720.450:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1658 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0938e929 code=0x7ffc0000 [ 65.378145][ T1665] rust_binder: Write failure EINVAL in pid:76 [ 65.394531][ T305] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 65.398055][ T1668] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 65.412053][ T1668] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 65.420730][ T1668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:78 [ 65.547312][ T1675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:82 [ 65.549478][ T1644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.456'. [ 65.575832][ C0] usblp0: nonzero read bulk status received: -71 [ 65.582371][ T10] usb 3-1: USB disconnect, device number 13 [ 65.780699][ T1644] usblp0: removed [ 66.381012][ T1679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 66.479924][ T1686] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1686 comm=syz.4.472 [ 67.280517][ T1764] rust_binder: Write failure EINVAL in pid:93 [ 67.411723][ T1774] rust_binder: Error while translating object. [ 67.422680][ T1774] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.429032][ T1774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:301 [ 67.431772][ T375] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 67.601533][ T375] usb 1-1: device descriptor read/64, error -71 [ 67.641513][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 67.721793][ T63] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 67.791533][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 67.803574][ T10] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 67.812270][ T10] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 67.821127][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 67.831860][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 67.841927][ T375] usb 1-1: device descriptor read/64, error -71 [ 67.848243][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 67.857990][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 67.871124][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 67.880270][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.890227][ T10] usb 5-1: config 0 descriptor?? [ 67.905060][ T63] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 67.913920][ T63] usb 3-1: config 0 has no interface number 0 [ 67.920081][ T63] usb 3-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 67.931480][ T63] usb 3-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 67.942563][ T63] usb 3-1: config 0 interface 230 has no altsetting 0 [ 67.950711][ T63] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 67.960560][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.969083][ T63] usb 3-1: Product: syz [ 67.973309][ T63] usb 3-1: Manufacturer: syz [ 67.977943][ T63] usb 3-1: SerialNumber: syz [ 67.983678][ T63] usb 3-1: config 0 descriptor?? [ 67.989008][ T1777] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 67.996309][ T1777] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 68.004747][ T63] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 68.013316][ T63] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 68.091500][ T375] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 68.100480][ T10] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 68.241580][ T375] usb 1-1: device descriptor read/64, error -71 [ 68.301537][ T305] usb 5-1: USB disconnect, device number 5 [ 68.308258][ T305] usblp0: removed [ 68.481560][ T375] usb 1-1: device descriptor read/64, error -71 [ 68.591614][ T375] usb usb1-port1: attempt power cycle [ 68.931532][ T375] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 68.952637][ T375] usb 1-1: device descriptor read/8, error -71 [ 69.082744][ T375] usb 1-1: device descriptor read/8, error -71 [ 69.121541][ T305] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 69.321575][ T375] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 69.342733][ T375] usb 1-1: device descriptor read/8, error -71 [ 69.472669][ T375] usb 1-1: device descriptor read/8, error -71 [ 69.581607][ T375] usb usb1-port1: unable to enumerate USB device [ 70.257466][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 70.257486][ T36] audit: type=1400 audit(1750686725.450:377): avc: denied { remount } for pid=1816 comm="syz.0.508" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 70.286252][ T36] audit: type=1400 audit(1750686725.480:378): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 70.312918][ T63] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 70.497809][ T1827] rust_binder: Error while translating object. [ 70.497875][ T1827] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.504138][ T1827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:297 [ 70.791522][ T427] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 70.951487][ T427] usb 1-1: Using ep0 maxpacket: 32 [ 70.958196][ T427] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 70.958487][ T1831] syz.1.513: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 70.966920][ T427] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.981520][ T1831] CPU: 0 UID: 0 PID: 1831 Comm: syz.1.513 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8 [ 70.981566][ T1831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.981589][ T1831] Call Trace: [ 70.981599][ T1831] [ 70.981613][ T1831] __dump_stack+0x21/0x30 [ 70.981658][ T1831] dump_stack_lvl+0x10c/0x190 [ 70.981692][ T1831] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.981725][ T1831] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 70.981769][ T1831] dump_stack+0x19/0x20 [ 70.981811][ T1831] warn_alloc+0x1bc/0x2a0 [ 70.981836][ T1831] ? stack_depot_save_flags+0x38/0x800 [ 70.981872][ T1831] ? __cfi_warn_alloc+0x10/0x10 [ 70.981899][ T1831] ? kasan_save_track+0x4f/0x80 [ 70.981936][ T1831] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 70.981970][ T1831] ? xskq_create+0x68/0x2a0 [ 70.981997][ T1831] ? xsk_init_queue+0xb6/0x120 [ 70.982022][ T1831] ? xsk_setsockopt+0x43f/0x6f0 [ 70.982045][ T1831] ? do_sock_setsockopt+0x26a/0x400 [ 70.982072][ T1831] ? __x64_sys_setsockopt+0x1b8/0x250 [ 70.982098][ T1831] ? x64_sys_call+0x2adc/0x2ee0 [ 70.982134][ T1831] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.982162][ T1831] __vmalloc_node_range_noprof+0x135/0x1420 [ 70.982199][ T1831] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 70.982229][ T1831] ? avc_has_perm+0x144/0x220 [ 70.982258][ T1831] ? kasan_save_alloc_info+0x40/0x50 [ 70.982287][ T1831] ? __kasan_kmalloc+0x96/0xb0 [ 70.982325][ T1831] vmalloc_user_noprof+0x77/0x90 [ 70.982356][ T1831] ? xskq_create+0xdb/0x2a0 [ 70.982391][ T1831] xskq_create+0xdb/0x2a0 [ 70.982417][ T1831] xsk_init_queue+0xb6/0x120 [ 70.982443][ T1831] xsk_setsockopt+0x43f/0x6f0 [ 70.982468][ T1831] ? __cfi_xsk_setsockopt+0x10/0x10 [ 70.982492][ T1831] ? do_futex+0x309/0x500 [ 70.982531][ T1831] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 70.982556][ T1831] ? security_socket_setsockopt+0x33/0xd0 [ 70.982590][ T1831] ? __cfi_xsk_setsockopt+0x10/0x10 [ 70.982615][ T1831] do_sock_setsockopt+0x26a/0x400 [ 70.982641][ T1831] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 70.982688][ T1831] __x64_sys_setsockopt+0x1b8/0x250 [ 70.982729][ T1831] x64_sys_call+0x2adc/0x2ee0 [ 70.982763][ T1831] do_syscall_64+0x58/0xf0 [ 70.982807][ T1831] ? clear_bhb_loop+0x50/0xa0 [ 70.982835][ T1831] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.982862][ T1831] RIP: 0033:0x7f8bcb98e929 [ 70.982893][ T1831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.982919][ T1831] RSP: 002b:00007f8bcc7e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 70.982952][ T1831] RAX: ffffffffffffffda RBX: 00007f8bcbbb5fa0 RCX: 00007f8bcb98e929 [ 70.982974][ T1831] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 70.982993][ T1831] RBP: 00007f8bcba10b39 R08: 0000000000000004 R09: 0000000000000000 [ 70.983013][ T1831] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 70.983032][ T1831] R13: 0000000000000000 R14: 00007f8bcbbb5fa0 R15: 00007ffe0c5979a8 [ 70.983054][ T1831] [ 70.983070][ T1831] Mem-Info: [ 70.995472][ T427] usb 1-1: config 0 has no interface number 0 [ 71.005018][ T1831] active_anon:6401 inactive_anon:1 isolated_anon:0 [ 71.005018][ T1831] active_file:19645 inactive_file:2450 isolated_file:0 [ 71.005018][ T1831] unevictable:0 dirty:43 writeback:0 [ 71.005018][ T1831] slab_reclaimable:5975 slab_unreclaimable:68906 [ 71.005018][ T1831] mapped:25354 shmem:224 pagetables:922 [ 71.005018][ T1831] sec_pagetables:0 bounce:0 [ 71.005018][ T1831] kernel_misc_reclaimable:0 [ 71.005018][ T1831] free:1525374 free_pcp:4100 free_cma:0 [ 71.016944][ T427] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 71.021235][ T1831] Node 0 active_anon:25604kB inactive_anon:4kB active_file:78580kB inactive_file:9800kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:101416kB dirty:172kB writeback:0kB shmem:896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4616kB pagetables:3688kB sec_pagetables:0kB all_unreclaimable? no [ 71.021404][ T427] usb 1-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 71.025780][ T1831] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966012kB mlocked:0kB bounce:0kB free_pcp:5800kB local_pcp:5800kB free_cma:0kB [ 71.032380][ T427] usb 1-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 71.035923][ T1831] lowmem_reserve[]: [ 71.041612][ T427] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.045906][ T1831] 0 [ 71.050156][ T427] usb 1-1: Product: syz [ 71.056157][ T1831] 3921 [ 71.060562][ T427] usb 1-1: Manufacturer: syz [ 71.065631][ T1831] 3921 [ 71.071025][ T427] usb 1-1: SerialNumber: syz [ 71.075990][ T1831] [ 71.081817][ T427] usb 1-1: config 0 descriptor?? [ 71.085676][ T1831] Normal free:3141060kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25604kB inactive_anon:4kB active_file:78580kB inactive_file:9800kB unevictable:0kB writepending:172kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:10696kB local_pcp:1904kB free_cma:0kB [ 71.091529][ T1829] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 71.098054][ T1831] lowmem_reserve[]: [ 71.102236][ T427] usb-storage 1-1:0.231: USB Mass Storage device detected [ 71.107295][ T1831] 0 [ 71.485628][ T45] usb 3-1: USB disconnect, device number 14 [ 71.490874][ T1831] 0 0 [ 71.556871][ T1831] DMA32: 5*4kB (M) 2*8kB (M) 5*16kB (M) 5*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 71.572493][ T1831] Normal: 461*4kB (UE) 512*8kB (UME) 632*16kB (UME) 554*32kB (UME) 660*64kB (UME) 81*128kB (UME) 23*256kB (UME) 8*512kB (ME) 17*1024kB (UM) 10*2048kB (UME) 734*4096kB (UM) = 3140724kB [ 71.595964][ T427] usb 1-1: USB disconnect, device number 19 [ 71.603865][ T1831] 22325 total pagecache pages [ 71.608613][ T1831] 2 pages in swap cache [ 71.613197][ T1831] Free swap = 124476kB [ 71.617509][ T1831] Total swap = 124996kB [ 71.622484][ T1831] 2097051 pages RAM [ 71.626376][ T1831] 0 pages HighMem/MovableOnly [ 71.631145][ T1831] 351518 pages reserved [ 71.635548][ T1831] 0 pages cma reserved [ 71.642931][ T1831] Memory allocations: [ 71.647061][ T1831] 0 B 0 init/main.c:1370 func:do_initcalls [ 71.654347][ T1831] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 71.664108][ T1831] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 71.672409][ T1831] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 71.680465][ T1831] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 71.688532][ T1831] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 71.697239][ T1831] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 71.706856][ T1831] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 71.714815][ T1831] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 71.722834][ T1831] 0 B 0 init/initramfs.c:101 func:find_link [ 71.795562][ T1863] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.795656][ T1863] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 71.836836][ T1875] binder: Bad value for 'context' [ 71.904703][ T36] audit: type=1400 audit(1750686727.100:379): avc: denied { accept } for pid=1885 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.030991][ T1905] batadv_slave_1: entered promiscuous mode [ 72.067175][ T1904] batadv_slave_1: left promiscuous mode [ 72.091538][ T45] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 72.218366][ T1924] netlink: 'syz.1.546': attribute type 19 has an invalid length. [ 72.241541][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 72.247806][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.261032][ T45] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 72.270221][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.282060][ T45] usb 3-1: config 0 descriptor?? [ 72.421557][ T427] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 72.571517][ T427] usb 1-1: Using ep0 maxpacket: 16 [ 72.577697][ T427] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.588627][ T427] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.598909][ T427] usb 1-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 72.608003][ T427] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.616728][ T427] usb 1-1: config 0 descriptor?? [ 72.689244][ T45] ortek 0003:1223:3F07.0003: unknown main item tag 0x0 [ 72.696256][ T45] ortek 0003:1223:3F07.0003: unknown main item tag 0x0 [ 72.703307][ T45] ortek 0003:1223:3F07.0003: unknown main item tag 0x0 [ 72.710263][ T45] ortek 0003:1223:3F07.0003: unknown main item tag 0x0 [ 72.717197][ T45] ortek 0003:1223:3F07.0003: unknown main item tag 0x0 [ 72.724857][ T45] ortek 0003:1223:3F07.0003: hidraw0: USB HID v0.07 Device [HID 1223:3f07] on usb-dummy_hcd.2-1/input0 [ 72.759362][ T1931] binder: Unknown parameter 'obj_type' [ 72.765265][ T1931] binder: Unknown parameter 'Nܧ?eƐrFUxp' [ 72.891136][ T375] usb 3-1: USB disconnect, device number 15 [ 73.225319][ T427] usbhid 1-1:0.0: can't add hid device: -71 [ 73.231380][ T427] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 73.240995][ T427] usb 1-1: USB disconnect, device number 20 [ 73.300583][ T1937] overlayfs: failed to clone upperpath [ 73.430496][ T1947] syzkaller0: entered promiscuous mode [ 73.436082][ T1947] syzkaller0: entered allmulticast mode [ 73.589573][ T36] audit: type=1400 audit(1750686728.780:380): avc: denied { getopt } for pid=1957 comm="syz.1.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 73.703956][ T1970] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 73.704440][ T1971] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.778342][ T36] audit: type=1400 audit(1750686728.960:381): avc: denied { setcheckreqprot } for pid=1978 comm="syz.0.566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 73.812886][ T1985] capability: warning: `syz.0.567' uses 32-bit capabilities (legacy support in use) [ 73.901222][ T36] audit: type=1400 audit(1750686729.090:382): avc: denied { read } for pid=1994 comm="syz.2.571" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 73.924626][ T36] audit: type=1400 audit(1750686729.090:383): avc: denied { open } for pid=1994 comm="syz.2.571" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 74.131508][ T375] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 74.282699][ T375] usb 3-1: config 4 has an invalid interface number: 95 but max is 0 [ 74.290823][ T375] usb 3-1: config 4 has no interface number 0 [ 74.297059][ T375] usb 3-1: config 4 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 74.308286][ T375] usb 3-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 74.311519][ T305] usb 5-1: device descriptor read/64, error -32 [ 74.317509][ T375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.331888][ T375] usb 3-1: Product: syz [ 74.336059][ T375] usb 3-1: Manufacturer: syz [ 74.340656][ T375] usb 3-1: SerialNumber: syz [ 74.346364][ T1995] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 74.554465][ T1995] syzkaller0: entered allmulticast mode [ 74.561627][ T1995] syzkaller0 (unregistering): left allmulticast mode [ 74.568593][ T305] usb 5-1: device descriptor read/64, error -32 [ 74.612748][ T1999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.621301][ T1999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.772286][ T375] usb 3-1: MIDIStreaming interface descriptor not found [ 74.785193][ T375] usb 3-1: USB disconnect, device number 16 [ 74.818425][ T305] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 74.858263][ T36] audit: type=1400 audit(1750686730.050:384): avc: denied { setattr } for pid=2002 comm="syz.1.573" name="/" dev="configfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.961776][ T305] usb 5-1: device descriptor read/64, error -32 [ 75.201520][ T305] usb 5-1: device descriptor read/64, error -32 [ 75.311580][ T305] usb usb5-port1: attempt power cycle [ 75.317329][ T305] raw-gadget.1 gadget.4: failed to queue reset event [ 75.363230][ T36] audit: type=1400 audit(1750686730.560:385): avc: denied { bind } for pid=2016 comm="syz.2.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.369182][ T2017] cgroup: Invalid name [ 75.382508][ T36] audit: type=1400 audit(1750686730.560:386): avc: denied { node_bind } for pid=2016 comm="syz.2.580" saddr=ffff:ffff:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 75.389137][ T2017] rust_binder: Write failure EINVAL in pid:350 [ 75.408711][ T305] raw-gadget.1 gadget.4: failed to queue resume event [ 75.422202][ T305] raw-gadget.1 gadget.4: failed to queue reset event [ 75.478554][ T2025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 75.521569][ T2027] netlink: 'syz.1.584': attribute type 4 has an invalid length. [ 75.641504][ T305] raw-gadget.1 gadget.4: failed to queue resume event [ 75.701542][ T305] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 75.721809][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 75.729126][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 75.736485][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 75.743923][ T305] usb 5-1: device descriptor read/8, error -32 [ 75.871592][ T427] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 75.879293][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 75.888764][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 75.896321][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 75.903708][ T305] usb 5-1: device descriptor read/8, error -32 [ 75.931796][ T375] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 76.021513][ T305] raw-gadget.1 gadget.4: failed to queue suspend event [ 76.028540][ T305] raw-gadget.1 gadget.4: failed to queue reset event [ 76.061509][ T427] usb 3-1: Using ep0 maxpacket: 16 [ 76.068066][ T427] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.078696][ T427] usb 3-1: config 0 has no interfaces? [ 76.086050][ T427] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 76.095766][ T427] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.103999][ T375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.104115][ T305] raw-gadget.1 gadget.4: failed to queue resume event [ 76.121637][ T375] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.121803][ T427] usb 3-1: Product: syz [ 76.146992][ T375] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 76.149396][ T427] usb 3-1: Manufacturer: syz [ 76.161531][ T375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.164780][ T427] usb 3-1: SerialNumber: syz [ 76.178324][ T375] usb 1-1: config 0 descriptor?? [ 76.181452][ T427] usb 3-1: config 0 descriptor?? [ 76.201539][ T305] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 76.223486][ T2054] overlayfs: failed to clone upperpath [ 76.231646][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 76.238914][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 76.246208][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 76.250367][ T2056] overlayfs: failed to clone upperpath [ 76.253323][ T305] usb 5-1: device descriptor read/8, error -32 [ 76.391677][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 76.398989][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 76.407101][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 76.414401][ T305] usb 5-1: device descriptor read/8, error -32 [ 76.522042][ T305] raw-gadget.1 gadget.4: failed to queue suspend event [ 76.529266][ T305] usb usb5-port1: unable to enumerate USB device [ 76.544745][ T1810] raw-gadget.1 gadget.4: failed to queue disconnect event [ 76.779711][ T36] audit: type=1326 audit(1750686731.970:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2066 comm="syz.4.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627ed8e929 code=0x7ffc0000 [ 76.824365][ T375] usbhid 1-1:0.0: can't add hid device: -71 [ 76.830635][ T36] audit: type=1326 audit(1750686732.000:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2066 comm="syz.4.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627ed8e929 code=0x7ffc0000 [ 76.855283][ T2067] rust_binder: Write failure EFAULT in pid:113 [ 76.855766][ T375] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 76.893072][ T36] audit: type=1326 audit(1750686732.000:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2066 comm="syz.4.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f627ed8e929 code=0x7ffc0000 [ 76.918075][ T375] usb 1-1: USB disconnect, device number 21 [ 76.934778][ T36] audit: type=1326 audit(1750686732.000:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2066 comm="syz.4.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627ed8e929 code=0x7ffc0000 [ 76.951530][ T2081] rust_binder: Write failure EFAULT in pid:119 [ 76.958686][ T36] audit: type=1326 audit(1750686732.000:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2066 comm="syz.4.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627ed8e929 code=0x7ffc0000 [ 76.988641][ T36] audit: type=1326 audit(1750686732.000:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2068 comm="syz.4.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f627edc11e5 code=0x7ffc0000 [ 77.012165][ T36] audit: type=1326 audit(1750686732.010:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2066 comm="syz.4.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f627ed8e929 code=0x7ffc0000 [ 77.036047][ T36] audit: type=1326 audit(1750686732.010:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2066 comm="syz.4.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627ed8e929 code=0x7ffc0000 [ 77.332158][ T2087] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 77.354734][ T2089] rust_binder: Write failure EFAULT in pid:324 [ 77.382157][ T2089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:324 [ 77.601504][ T305] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 77.772749][ T305] usb 5-1: config 0 interface 0 altsetting 236 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 77.785978][ T305] usb 5-1: config 0 interface 0 has no altsetting 0 [ 77.794670][ T305] usb 5-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=45.a9 [ 77.804108][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.812348][ T305] usb 5-1: Product: syz [ 77.816732][ T305] usb 5-1: Manufacturer: syz [ 77.821684][ T305] usb 5-1: SerialNumber: syz [ 77.829462][ T305] r8152-cfgselector 5-1: Unknown version 0x0000 [ 77.837272][ T305] r8152-cfgselector 5-1: config 0 descriptor?? [ 77.844884][ T305] r8152 5-1:0.0: Expected endpoints are not found [ 78.045904][ T305] r8152-cfgselector 5-1: USB disconnect, device number 10 [ 78.537449][ T340] usb 3-1: USB disconnect, device number 17 [ 78.646765][ T2124] batadv_slave_1: entered promiscuous mode [ 78.660753][ T2127] batadv_slave_1: left promiscuous mode [ 78.754706][ T2141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:142 [ 78.768946][ T2144] rust_binder: Error while translating object. [ 78.778210][ T2144] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.784533][ T2144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145 [ 78.822004][ T2151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.841620][ T2151] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 78.855417][ T2155] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 78.856781][ T2155] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:340 [ 78.857700][ T2151] overlayfs: missing 'lowerdir' [ 78.867061][ T2155] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.877650][ T2150] tmpfs: Unknown parameter 'grpquota_inode_hardlimit' [ 78.880461][ T2155] rust_binder: Read failure Err(EFAULT) in pid:340 [ 78.889258][ T2150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.627'. [ 78.912578][ T2150] IPv6: NLM_F_CREATE should be specified when creating new route [ 78.936888][ T2160] rust_binder: Write failure EFAULT in pid:344 [ 78.953274][ T2162] netlink: 116 bytes leftover after parsing attributes in process `syz.4.632'. [ 79.807790][ T2184] rust_binder: Write failure EINVAL in pid:346 [ 79.874243][ T2204] netlink: 'syz.2.645': attribute type 3 has an invalid length. [ 79.897249][ T2204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.645'. [ 79.917751][ T2216] can: request_module (can-proto-0) failed. [ 79.941426][ T2219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:379 [ 79.960456][ T2227] rust_binder: Failed to allocate buffer. len:8880001381289486360, is_oneway:false [ 79.969723][ T2227] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 79.971657][ T2229] bpf: Bad value for 'mode' [ 79.979507][ T2227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:381 [ 80.088404][ T2241] overlayfs: conflicting lowerdir path [ 80.205850][ T2256] rust_binder: Error while translating object. [ 80.205881][ T2256] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 80.213066][ T2256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:400 [ 80.741497][ T340] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 80.872038][ T2278] overlayfs: failed to clone upperpath [ 80.881782][ T340] usb 3-1: device descriptor read/64, error -71 [ 80.905481][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 80.905500][ T36] audit: type=1400 audit(1750686736.100:454): avc: denied { create } for pid=2283 comm="syz.1.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 80.931361][ T36] audit: type=1400 audit(1750686736.100:455): avc: denied { create } for pid=2283 comm="syz.1.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 81.031530][ T427] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 81.131511][ T340] usb 3-1: device descriptor read/64, error -71 [ 81.181535][ T427] usb 1-1: Using ep0 maxpacket: 32 [ 81.187904][ T427] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 81.196047][ T427] usb 1-1: config 0 has no interface number 0 [ 81.203710][ T427] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 81.212821][ T427] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.220842][ T427] usb 1-1: Product: syz [ 81.225037][ T427] usb 1-1: Manufacturer: syz [ 81.229650][ T427] usb 1-1: SerialNumber: syz [ 81.234963][ T427] usb 1-1: config 0 descriptor?? [ 81.240713][ T427] smsc95xx v2.0.0 [ 81.381561][ T340] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 81.511578][ T340] usb 3-1: device descriptor read/64, error -71 [ 81.636842][ T2293] fuse: Unknown parameter 'gr!p_id' [ 81.642437][ T427] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 81.653417][ T427] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 81.751579][ T340] usb 3-1: device descriptor read/64, error -71 [ 81.861595][ T340] usb usb3-port1: attempt power cycle [ 82.201523][ T340] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 82.222699][ T340] usb 3-1: device descriptor read/8, error -71 [ 82.352634][ T340] usb 3-1: device descriptor read/8, error -71 [ 82.591571][ T340] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 82.612669][ T340] usb 3-1: device descriptor read/8, error -71 [ 82.669525][ T427] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 82.680578][ T427] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 82.689798][ T427] usb 1-1: USB disconnect, device number 22 [ 82.742581][ T340] usb 3-1: device descriptor read/8, error -71 [ 82.851599][ T340] usb usb3-port1: unable to enumerate USB device [ 82.934581][ T36] audit: type=1400 audit(1750686738.130:456): avc: denied { write } for pid=375 comm="kworker/0:4" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15148 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.935319][ T2305] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 82.959354][ T2305] rust_binder: Read failure Err(EFAULT) in pid:166 [ 83.242247][ T2335] bridge0: port 3(veth0_vlan) entered blocking state [ 83.255528][ T2335] bridge0: port 3(veth0_vlan) entered disabled state [ 83.262293][ T2335] veth0_vlan: entered allmulticast mode [ 83.268267][ T2335] bridge0: port 3(veth0_vlan) entered blocking state [ 83.274987][ T2335] bridge0: port 3(veth0_vlan) entered forwarding state [ 83.282761][ T2335] binder: Bad value for 'max' [ 83.341520][ T375] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 83.501501][ T375] usb 5-1: Using ep0 maxpacket: 16 [ 83.509692][ T375] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.531175][ T375] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.551481][ T375] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 83.567486][ T375] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 83.576646][ T375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.588621][ T375] usb 5-1: Product: syz [ 83.592893][ T375] usb 5-1: Manufacturer: syz [ 83.597740][ T375] usb 5-1: SerialNumber: syz [ 83.602451][ T340] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 83.762025][ T340] usb 1-1: too many configurations: 245, using maximum allowed: 8 [ 83.770767][ T340] usb 1-1: config index 0 descriptor too short (expected 1060, got 36) [ 83.779164][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.790136][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.802439][ T340] usb 1-1: config index 1 descriptor too short (expected 1060, got 36) [ 83.810783][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.821801][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.832937][ T340] usb 1-1: config index 2 descriptor too short (expected 1060, got 36) [ 83.841326][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.852367][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.862269][ T375] usb 5-1: 0:2 : does not exist [ 83.868531][ T340] usb 1-1: config index 3 descriptor too short (expected 1060, got 36) [ 83.877510][ T375] usb 5-1: USB disconnect, device number 11 [ 83.883789][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.897329][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.899157][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.925915][ T340] usb 1-1: config index 4 descriptor too short (expected 1060, got 36) [ 83.941109][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.952320][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.974564][ T340] usb 1-1: config index 5 descriptor too short (expected 1060, got 36) [ 83.982955][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.001517][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.012654][ T340] usb 1-1: config index 6 descriptor too short (expected 1060, got 36) [ 84.020975][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.032149][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.042723][ T340] usb 1-1: config index 7 descriptor too short (expected 1060, got 36) [ 84.051029][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.062358][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.073695][ T340] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 84.083711][ T340] usb 1-1: New USB device strings: Mfr=56, Product=78, SerialNumber=145 [ 84.092411][ T340] usb 1-1: Product: syz [ 84.096755][ T340] usb 1-1: Manufacturer: syz [ 84.101521][ T340] usb 1-1: SerialNumber: syz [ 84.109571][ T340] usb 1-1: config 0 descriptor?? [ 84.209770][ T36] audit: type=1400 audit(1750686739.400:457): avc: denied { accept } for pid=2353 comm="syz.2.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.221605][ T2354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:427 [ 84.229384][ T36] audit: type=1400 audit(1750686739.410:458): avc: denied { read } for pid=2353 comm="syz.2.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.257826][ T36] audit: type=1400 audit(1750686739.410:459): avc: denied { watch watch_reads } for pid=2353 comm="syz.2.693" path="/140" dev="tmpfs" ino=794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.293545][ T2356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 84.293571][ T2356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:429 [ 84.303629][ T2357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.321739][ T36] audit: type=1400 audit(1750686739.510:460): avc: denied { execute } for pid=2342 comm="syz.0.690" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.331146][ T2362] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 84.351558][ T2362] rust_binder: Error while translating object. [ 84.362210][ T2362] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 84.368434][ T2362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:434 [ 84.384564][ T2364] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 84.427008][ T2368] 9pnet_fd: Insufficient options for proto=fd [ 84.434052][ T2368] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 84.449104][ T2368] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 84.458310][ T2368] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 84.471935][ T2368] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 84.501272][ T2373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.700'. [ 84.510811][ T340] usbhid 1-1:0.0: can't add hid device: -22 [ 84.518061][ T340] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 84.527532][ T340] usb 1-1: USB disconnect, device number 23 [ 84.541500][ T36] audit: type=1326 audit(1750686739.730:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2375 comm="syz.2.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999a58e929 code=0x7ffc0000 [ 84.542230][ T2376] binder: Unknown parameter 'con;qV?/text' [ 84.578510][ T36] audit: type=1326 audit(1750686739.730:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2375 comm="syz.2.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999a58e929 code=0x7ffc0000 [ 84.602060][ T36] audit: type=1326 audit(1750686739.730:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2375 comm="syz.2.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f999a58e929 code=0x7ffc0000 [ 84.883208][ T2404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:194 [ 84.897484][ T2407] binder: Bad value for 'max' [ 84.912090][ T2408] binder: Bad value for 'max' [ 85.096920][ T2413] exFAT-fs (rnullb0): invalid boot record signature [ 85.103929][ T2413] exFAT-fs (rnullb0): failed to read boot sector [ 85.110353][ T2413] exFAT-fs (rnullb0): failed to recognize exfat type [ 85.117437][ T2414] exFAT-fs (rnullb0): invalid boot record signature [ 85.124152][ T2414] exFAT-fs (rnullb0): failed to read boot sector [ 85.130606][ T2414] exFAT-fs (rnullb0): failed to recognize exfat type [ 85.171746][ T375] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 85.321491][ T375] usb 5-1: Using ep0 maxpacket: 32 [ 85.327890][ T375] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 85.336502][ T375] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 85.345369][ T375] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 85.354660][ T375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 85.365176][ T375] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 85.375081][ T375] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 85.388283][ T375] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 85.396244][ T2440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=2440 comm=syz.2.721 [ 85.405473][ T2440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=2440 comm=syz.2.721 [ 85.430424][ T375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.430558][ T2440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=2440 comm=syz.2.721 [ 85.439996][ T375] usb 5-1: config 0 descriptor?? [ 85.491533][ T340] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 85.506611][ T2447] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2447 comm=syz.2.724 [ 85.574926][ T2459] fuse: Bad value for 'fd' [ 85.652644][ T340] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.664847][ T2410] input: syz1 as /devices/virtual/input/input5 [ 85.671369][ T340] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.682106][ T340] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 85.695216][ T340] usb 1-1: config 0 interface 0 has no altsetting 0 [ 85.701943][ T340] usb 1-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 85.711094][ T340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.722205][ T340] usb 1-1: config 0 descriptor?? [ 85.786761][ T375] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 85.929247][ T2521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:399 [ 85.935605][ T375] usb 1-1: USB disconnect, device number 24 [ 85.995145][ T305] usb 5-1: USB disconnect, device number 12 [ 86.004752][ T305] usblp0: removed [ 86.023665][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 86.023686][ T36] audit: type=1400 audit(1750686741.220:475): avc: denied { link } for pid=2528 comm="syz.0.751" name="file1" dev="tmpfs" ino=797 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 86.177557][ T2552] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 86.177585][ T2552] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 86.186344][ T2552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:422 [ 86.444403][ T36] audit: type=1400 audit(1750686741.640:476): avc: denied { getopt } for pid=2567 comm="syz.2.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.485407][ T2571] /dev/rnullb0: Can't lookup blockdev [ 86.543861][ T2583] /dev/loop0: Can't lookup blockdev [ 86.646093][ T36] audit: type=1400 audit(1750686741.840:477): avc: denied { listen } for pid=2591 comm="syz.2.773" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.702956][ T36] audit: type=1400 audit(1750686741.900:478): avc: denied { map } for pid=2617 comm="syz.0.780" path="socket:[16796]" dev="sockfs" ino=16796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.706419][ T2618] netlink: 128 bytes leftover after parsing attributes in process `syz.0.780'. [ 86.735419][ T2618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.780'. [ 86.762137][ T2622] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 144, limit: 160, size: 54) [ 86.762166][ T2622] rust_binder: Error while translating object. [ 86.773109][ T2622] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 86.779410][ T2622] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:446 [ 86.836587][ T2626] syzkaller0: entered promiscuous mode [ 86.851337][ T2626] syzkaller0: entered allmulticast mode [ 86.860946][ T36] audit: type=1400 audit(1750686742.050:479): avc: denied { create } for pid=2625 comm="syz.0.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 86.872172][ T2626] rust_binder: Error in use_page_slow: ESRCH [ 86.881039][ T2626] rust_binder: use_range failure ESRCH [ 86.887494][ T2626] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 86.893167][ T2626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 86.901192][ T2626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:450 [ 86.907398][ T2631] netlink: 'syz.2.786': attribute type 8 has an invalid length. [ 87.106346][ T340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 87.118369][ T340] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 87.149067][ T2652] fido_id[2652]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 87.225552][ T36] audit: type=1400 audit(1750686742.422:480): avc: denied { create } for pid=2653 comm="syz.0.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 87.480313][ T36] audit: type=1400 audit(1750686742.672:481): avc: denied { associate } for pid=2679 comm="syz.1.803" name="cpuacct.usage_sys" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 87.519762][ T31] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 87.537405][ T2685] batadv_slave_0: entered promiscuous mode [ 87.550689][ T36] audit: type=1400 audit(1750686742.742:482): avc: denied { getopt } for pid=2686 comm="syz.1.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.588489][ T36] audit: type=1400 audit(1750686742.742:483): avc: denied { ioctl } for pid=2686 comm="syz.1.806" path="socket:[16950]" dev="sockfs" ino=16950 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.641895][ T36] audit: type=1400 audit(1750686742.842:484): avc: denied { read } for pid=2690 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.702612][ T31] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 87.716214][ T31] usb 1-1: config 0 has no interface number 0 [ 87.732907][ T31] usb 1-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=fa.63 [ 87.751509][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.759748][ T31] usb 1-1: Product: syz [ 87.781496][ T31] usb 1-1: Manufacturer: syz [ 87.786242][ T31] usb 1-1: SerialNumber: syz [ 87.796731][ T31] usb 1-1: config 0 descriptor?? [ 87.807598][ T31] hub 1-1:0.253: bad descriptor, ignoring hub [ 87.821533][ T31] hub 1-1:0.253: probe with driver hub failed with error -5 [ 87.841101][ T31] ums-datafab 1-1:0.253: USB Mass Storage device detected [ 87.907210][ T31] ums-sddr55 1-1:0.253: USB Mass Storage device detected [ 88.021581][ T2662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 88.021633][ T2662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:475 [ 88.141585][ T31] usb 1-1: USB disconnect, device number 25 [ 88.350531][ T2720] batadv_slave_0: left promiscuous mode [ 88.531487][ T340] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 88.682576][ T340] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.694182][ T340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.705146][ T340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 88.714926][ T340] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.728393][ T340] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.737510][ T340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.746187][ T340] usb 5-1: config 0 descriptor?? [ 88.953518][ T340] plantronics 0003:047F:FFFF.0005: ignoring exceeding usage max [ 88.963811][ T340] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 88.972809][ T340] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 89.458583][ T2760] netlink: 84 bytes leftover after parsing attributes in process `syz.0.828'. [ 89.486516][ T2766] binder: Bad value for 'max' [ 89.491878][ T2768] tipc: Enabled bearer , priority 11 [ 89.519519][ T2770] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 89.712384][ T2795] overlayfs: failed to clone upperpath [ 89.725427][ T2789] mmap: syz.0.837 (2789) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.371078][ T2828] SELinux: security_context_str_to_sid () failed with errno=-22 [ 90.621877][ T2839] can: request_module (can-proto-0) failed. [ 91.032428][ T305] usb 5-1: USB disconnect, device number 13 [ 91.403245][ T2886] netlink: 'syz.1.863': attribute type 4 has an invalid length. [ 91.410926][ T2886] netlink: 'syz.1.863': attribute type 5 has an invalid length. [ 91.418662][ T2886] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.863'. [ 91.441610][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 91.441626][ T36] audit: type=1400 audit(1750686746.632:492): avc: denied { execute } for pid=2888 comm="syz.1.864" path="/dev/rnullb0" dev="tmpfs" ino=412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.516746][ T2893] overlayfs: failed to clone upperpath [ 91.522313][ T375] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 91.596854][ T2901] tmpfs: Unknown parameter '' [ 91.662702][ T2916] overlayfs: failed to clone upperpath [ 91.682863][ T375] usb 5-1: not running at top speed; connect to a high speed hub [ 91.691386][ T375] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 91.712961][ T375] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.722192][ T375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.740350][ T375] usb 5-1: Product: 吳槅눈僧뜖뵧流�솓䛉騣핫ᕵ⤒䶕쿴虞훗㦏ﳥƔ〥䔤뀢⛹੔ﮄ͛宠뛼⮰箵趗瞍詑싰攇ᕠя艖ﻁ᯷ﬧ伄脮墅뉧ᛳ̙䉔̋늯ⵅ㝢ᤱ赃ៅ䖢떅⌯警ꄼ斧Ⲣﮘᨼ뼩蝦뼉㕎疥∯淁땣ϳ࠳体葒鱙㹼♝ꨶ쵳蔹‚泚ᗫ讻㻲颡퍟趔ᙝ疜钥⸫꿳┰굫짍ᦽ喰ᜲ젨罬⿞쳺 [ 91.775334][ T375] usb 5-1: Manufacturer: 釚ꨙ간䤷ᯄ꼈領횪眑ﭸ☓ﶦ䊓헩⟪뷹뛥곯쑖➍더噹琨繨숼炟拡ꮮ잩䐬렧롇㈨ꎒ粊鯳怢찴뒺聥渲샕땑缿䷃ᝪﻍ᳔⓮ꆯ掎룭뭳㡂ₘㅗ谪ਏ㫤䟊铕靌 [ 91.820912][ T375] usb 5-1: SerialNumber: 抸긢⩊㤓蒶䁨ྷ頜憧왇抾鋞㺲Ӂ轎㐉岼⌐䩟㑺⬇올﹦内㱄꿪퍲깣蓄鿈贖ↅ⇂ꊀ㌥㰍鵁㢬⡞岤쓴뿓鞿﯑괋䩕뺴鲮ֱ숷鎙䶐뭱愩痈닜❅廒◢颥텞㜒ᢖ楑誚柢㻒䰐㓓研㹯昦봉鶿勠詓緰돬縙ᣢ綠滪踛ꗷጲ⣻ꩮ鵸⪠黤ꄄ䄩 [ 92.074212][ T2882] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 92.292133][ T36] audit: type=1400 audit(1750686747.492:493): avc: denied { setattr } for pid=2881 comm="syz.4.861" name="UDPLITEv6" dev="sockfs" ino=17316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.175099][ T2938] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:521 [ 93.181690][ T2938] rust_binder: Write failure EFAULT in pid:521 [ 93.205045][ T36] audit: type=1400 audit(1750686748.402:494): avc: denied { append } for pid=2939 comm="syz.0.880" name="pfkey" dev="proc" ino=4026532649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 93.896361][ T2958] can: request_module (can-proto-0) failed. [ 94.272511][ T375] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 94.278931][ T375] cdc_ncm 5-1:1.0: bind() failure [ 94.285693][ T375] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 94.292856][ T375] cdc_ncm 5-1:1.1: bind() failure [ 94.300383][ T375] usb 5-1: USB disconnect, device number 14 [ 94.314594][ T2961] binder: Bad value for 'stats' [ 94.506883][ T2974] exFAT-fs (rnullb0): invalid boot record signature [ 94.513535][ T2974] exFAT-fs (rnullb0): failed to read boot sector [ 94.519878][ T2974] exFAT-fs (rnullb0): failed to recognize exfat type [ 94.544704][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 94.552088][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 94.559056][ T2976] binder: Bad value for 'max' [ 95.417381][ T36] audit: type=1400 audit(1750686750.612:495): avc: denied { relabelfrom } for pid=3010 comm="syz.2.903" name="" dev="pipefs" ino=18557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 95.442599][ T3011] fuse: Bad value for 'fd' [ 96.212926][ T3039] overlayfs: failed to resolve './file2': -2 [ 96.282015][ T3047] overlayfs: failed to clone upperpath [ 96.323056][ T36] audit: type=1400 audit(1750686751.522:496): avc: denied { mount } for pid=3050 comm="syz.1.918" name="/" dev="ramfs" ino=18644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 96.371746][ T36] audit: type=1400 audit(1750686751.572:497): avc: denied { setattr } for pid=3052 comm="syz.1.919" name="PINGv6" dev="sockfs" ino=18368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.571503][ T2977] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 96.602253][ T36] audit: type=1400 audit(1750686751.802:498): avc: denied { accept } for pid=3071 comm="syz.4.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 96.635373][ T36] audit: type=1400 audit(1750686751.802:499): avc: denied { create } for pid=3070 comm="syz.1.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 96.722595][ T3080] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 96.731476][ T3080] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 96.740912][ T3080] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 96.791684][ T3084] can: request_module (can-proto-0) failed. [ 96.896562][ T3095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.934'. [ 96.939337][ T3102] tmpfs: Unknown parameter '(size' [ 109.323914][ T36] audit: type=1400 audit(1750686764.522:500): avc: denied { shutdown } for pid=3138 comm="syz.1.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.326623][ T3145] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 109.346958][ T36] audit: type=1400 audit(1750686764.552:501): avc: denied { map } for pid=3138 comm="syz.1.949" path="socket:[18748]" dev="sockfs" ino=18748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.381120][ T36] audit: type=1400 audit(1750686764.552:502): avc: denied { read } for pid=3138 comm="syz.1.949" path="socket:[18748]" dev="sockfs" ino=18748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.415770][ T3162] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 109.415812][ T3162] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 109.424817][ T3162] rust_binder: Read failure Err(EFAULT) in pid:258 [ 109.501072][ T3182] binder: Bad value for 'max' [ 109.525975][ T3188] rust_binder: Write failure EINVAL in pid:260 [ 109.526072][ T3188] rust_binder: Read failure Err(EAGAIN) in pid:260 [ 109.538100][ T3182] binder: Bad value for 'max' [ 109.540518][ T36] audit: type=1400 audit(1750686764.732:503): avc: denied { map } for pid=3172 comm="syz.4.959" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 109.574332][ T36] audit: type=1400 audit(1750686764.732:504): avc: denied { execute } for pid=3172 comm="syz.4.959" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 109.807173][ T3210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.972'. [ 110.007869][ T36] audit: type=1400 audit(1750686765.202:505): avc: denied { write } for pid=3223 comm="syz.2.978" name="file0" dev="tmpfs" ino=1343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.030426][ T36] audit: type=1400 audit(1750686765.202:506): avc: denied { open } for pid=3223 comm="syz.2.978" path="/241/file0" dev="tmpfs" ino=1343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.053307][ T36] audit: type=1400 audit(1750686765.212:507): avc: denied { ioctl } for pid=3223 comm="syz.2.978" path="/241/file0" dev="tmpfs" ino=1343 ioctlcmd=0x301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.077581][ T36] audit: type=1326 audit(1750686765.222:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3226 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999a58e929 code=0x7ffc0000 [ 110.101641][ T36] audit: type=1326 audit(1750686765.222:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3226 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999a58e929 code=0x7ffc0000 [ 110.322634][ T3268] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 110.372868][ T3277] fuse: Bad value for 'user_id' [ 110.377836][ T3277] fuse: Bad value for 'user_id' [ 110.591515][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 110.741552][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 110.749396][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 110.757419][ T10] usb 5-1: can't read configurations, error -22 [ 110.892193][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 111.041525][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 111.048831][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 111.056841][ T10] usb 5-1: can't read configurations, error -22 [ 111.063297][ T10] usb usb5-port1: attempt power cycle [ 111.327362][ T3356] overlayfs: failed to clone upperpath [ 111.407472][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 111.431860][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 111.439360][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 111.447534][ T10] usb 5-1: can't read configurations, error -22 [ 111.581507][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 111.602251][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 111.609507][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 111.617566][ T10] usb 5-1: can't read configurations, error -22 [ 111.624099][ T10] usb usb5-port1: unable to enumerate USB device [ 111.876392][ T3392] fuse: Unknown parameter '-g p(_jz/ [ 111.876392][ T3392] B~oi]|܄|#Ukw hl];N-L^8\ω *6?tw|{h[ [~?f sR "y  ' [ 111.897479][ T3392] /dev/rnullb0: Can't lookup blockdev [ 112.344619][ T3415] overlayfs: failed to clone upperpath [ 112.556155][ T3443] fuse: Bad value for 'fd' [ 112.607069][ T3465] tmpfs: Unknown parameter 'Noswap' [ 112.624450][ T3467] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@q [ 113.240619][ T3473] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1062'. [ 113.413173][ T3500] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1073'. [ 113.428011][ T3507] fuse: Unknown parameter 'u(ɌeV.#fd' [ 113.441844][ T3509] fuse: Unknown parameter 'u(ɌeV.#fd' [ 113.454951][ T3512] overlayfs: failed to clone upperpath [ 113.636926][ T3552] fuse: Bad value for 'group_id' [ 113.642748][ T3552] fuse: Bad value for 'group_id' [ 114.259196][ T12] bridge_slave_1: left allmulticast mode [ 114.266121][ T12] bridge_slave_1: left promiscuous mode [ 114.275124][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.292059][ T12] bridge_slave_0: left allmulticast mode [ 114.301449][ T12] bridge_slave_0: left promiscuous mode [ 114.307125][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.333612][ T12] tipc: Resetting bearer [ 114.389840][ T12] tipc: Disabling bearer [ 114.453186][ T3588] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:280 [ 114.503247][ T12] tipc: Disabling bearer [ 114.525081][ T12] tipc: Left network mode [ 114.531366][ T3593] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 114.550953][ T12] veth1_macvtap: left promiscuous mode [ 114.556600][ T12] veth0_vlan: left promiscuous mode [ 114.588658][ T36] kauditd_printk_skb: 58 callbacks suppressed [ 114.588677][ T36] audit: type=1400 audit(1750686769.782:568): avc: denied { execute } for pid=3595 comm="syz.1.1106" name=C1FEDC30 dev="rootfs" ino=20118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 114.780741][ T3616] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1111'. [ 114.816844][ T3608] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.824072][ T3608] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.833968][ T3608] bridge_slave_0: entered allmulticast mode [ 114.840446][ T3608] bridge_slave_0: entered promiscuous mode [ 114.847484][ T3608] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.854968][ T3608] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.863309][ T3608] bridge_slave_1: entered allmulticast mode [ 114.869752][ T3608] bridge_slave_1: entered promiscuous mode [ 114.963171][ T3627] SELinux: Context system_u:object_r:etc_mail_t:s0 is not valid (left unmapped). [ 114.988154][ T36] audit: type=1400 audit(1750686770.182:569): avc: denied { relabelto } for pid=3626 comm="syz.4.1115" name="file0" dev="tmpfs" ino=553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:etc_mail_t:s0" [ 115.014750][ T3627] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 115.029648][ T3608] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.036748][ T3608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.044090][ T3608] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.051140][ T3608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.065727][ T36] audit: type=1400 audit(1750686770.182:570): avc: denied { associate } for pid=3626 comm="syz.4.1115" name="file0" dev="tmpfs" ino=553 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:etc_mail_t:s0" [ 115.114092][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.121471][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.134028][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.141746][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.173890][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.174876][ T36] audit: type=1400 audit(1750686770.362:571): avc: denied { rmdir } for pid=1309 comm="syz-executor" name="file0" dev="tmpfs" ino=553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:etc_mail_t:s0" [ 115.180974][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.251237][ T3608] veth0_vlan: entered promiscuous mode [ 115.268704][ T36] audit: type=1400 audit(1750686770.462:572): avc: denied { create } for pid=3636 comm="syz.4.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 115.274118][ T3608] veth1_macvtap: entered promiscuous mode [ 115.388731][ T36] audit: type=1400 audit(1750686770.582:573): avc: denied { lock } for pid=3641 comm="syz.5.1120" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.473127][ T3651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1123'. [ 115.485961][ T36] audit: type=1400 audit(1750686770.692:574): avc: denied { unmount } for pid=3608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 115.507681][ T3651] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=3651 comm=syz.4.1123 [ 115.524237][ T36] audit: type=1400 audit(1750686770.712:575): avc: denied { append } for pid=3650 comm="syz.4.1123" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.902370][ T3669] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 115.916471][ T3669] overlayfs: missing 'lowerdir' [ 116.196128][ T3683] cgroup: Invalid name [ 116.220134][ T3687] rust_binder: Error while translating object. [ 116.220170][ T3687] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 116.229918][ T36] audit: type=1326 audit(1750686771.422:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3689 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb98e929 code=0x7ffc0000 [ 116.250350][ T3687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:318 [ 116.268088][ T36] audit: type=1326 audit(1750686771.422:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3689 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb98e929 code=0x7ffc0000 [ 116.316927][ T3694] exFAT-fs (rnullb0): invalid boot record signature [ 116.330022][ T3694] exFAT-fs (rnullb0): failed to read boot sector [ 116.336626][ T3694] exFAT-fs (rnullb0): failed to recognize exfat type [ 116.706144][ T3736] sock: sock_timestamping_bind_phc: sock not bind to device [ 116.792148][ T3739] overlayfs: failed to clone upperpath [ 116.801501][ T45] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 116.819023][ T3742] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:19 [ 116.820109][ T3744] overlayfs: unescaped trailing colons in lowerdir mount option. [ 116.869797][ T3751] 9pnet_fd: Insufficient options for proto=fd [ 116.923766][ T427] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 116.975045][ T427] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.989944][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 116.999741][ T45] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 117.010055][ T45] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 117.013195][ T3764] fido_id[3764]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 117.026543][ T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 117.055970][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 117.066950][ T45] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 117.193523][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 117.202350][ T3770] /dev/loop0: Can't lookup blockdev [ 117.215710][ T45] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 117.239479][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.259381][ T45] usb 5-1: config 0 descriptor?? [ 117.501822][ T45] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 117.523696][ T3777] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.524101][ T3777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1167'. [ 117.544123][ T3777] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:26 [ 117.551913][ T3784] syz.0.1169 uses obsolete (PF_INET,SOCK_PACKET) [ 117.579049][ T3784] overlayfs: failed to clone lowerpath [ 117.604877][ T3795] fuse: Unknown parameter 'fd!?12c`pb' [ 117.682752][ T3804] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1176'. [ 117.848534][ T63] usb 5-1: USB disconnect, device number 19 [ 117.855500][ T63] usblp0: removed [ 118.066585][ T3826] cgroup: subsys name conflicts with all [ 118.227276][ T3829] overlay: Unknown parameter 'smackfsdef' [ 118.260995][ T3832] __vm_enough_memory: pid: 3832, comm: syz.4.1184, bytes: 2305843013508661248 not enough memory for the allocation [ 118.421027][ T3841] binder: Bad value for 'stats' [ 118.598277][ T3853] fuse: Unknown parameter 'Gd' [ 118.772333][ T3870] fuse: Unknown parameter 'fd00000000000000000000' [ 118.832004][ T3888] 9pnet_fd: Insufficient options for proto=fd [ 118.857484][ T3895] overlayfs: failed to clone upperpath [ 118.863525][ T3895] SELinux: Context system_u:object_r:udev_helper_exec_t:s0 is not valid (left unmapped). [ 118.888797][ T3897] syz.0.1205(3897): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 119.466047][ T3934] binder: Unknown parameter 'context' [ 119.608552][ T3952] rust_binder: Write failure EINVAL in pid:378 [ 119.673341][ T3956] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.759567][ T3967] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 119.788193][ T3973] rust_binder: Write failure EINVAL in pid:397 [ 119.806823][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 119.806843][ T36] audit: type=1400 audit(1750686775.002:623): avc: denied { execute_no_trans } for pid=3974 comm="syz.4.1230" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.974930][ T36] audit: type=1400 audit(1750686775.172:624): avc: denied { mounton } for pid=3995 comm="syz.5.1238" path="/25/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 120.051527][ T31] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 120.069982][ T36] audit: type=1400 audit(1750686775.262:625): avc: denied { unmount } for pid=3608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 120.146051][ T4005] tmpfs: Unknown parameter 'usrquota_inode_hardlimit' [ 120.448282][ T4024] >: renamed from veth0_vlan (while UP) [ 120.471157][ T4027] lo: entered promiscuous mode [ 120.477090][ T4026] lo: left promiscuous mode [ 120.496996][ T4029] netlink: 'syz.0.1250': attribute type 11 has an invalid length. [ 120.589977][ T4042] 9pnet_fd: Insufficient options for proto=fd [ 120.596598][ T4042] fuse: Bad value for 'fd' [ 120.605552][ T4042] fuse: Unknown parameter 'trans' [ 121.001474][ T31] usb 5-1: device descriptor read/64, error -71 [ 121.245942][ T36] audit: type=1326 audit(1750686776.442:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4085 comm="syz.0.1272" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d0938e929 code=0x0 [ 121.272602][ T31] usb 5-1: config 1 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.274661][ T4093] netlink: 'syz.5.1274': attribute type 29 has an invalid length. [ 121.283070][ T31] usb 5-1: config 1 interface 0 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 121.290504][ T4093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1274'. [ 121.304273][ T31] usb 5-1: config 1 interface 0 has no altsetting 0 [ 121.315846][ T4093] fuse: Unknown parameter 'gd000000000000000000004' [ 121.323246][ T31] usb 5-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.40 [ 121.336074][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.344162][ T31] usb 5-1: Product: ࠓ [ 121.348454][ T31] usb 5-1: Manufacturer: Т [ 121.353016][ T31] usb 5-1: SerialNumber: ఌ [ 121.786274][ T4048] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4048 comm=syz.4.1258 [ 121.803698][ T31] usbhid 5-1:1.0: can't add hid device: -71 [ 121.811381][ T31] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 121.820770][ T31] usb 5-1: USB disconnect, device number 20 [ 121.831473][ T45] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 121.971482][ T45] usb 6-1: device descriptor read/64, error -71 [ 122.123845][ T36] audit: type=1400 audit(1750686777.322:627): avc: denied { create } for pid=4124 comm="syz.0.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 122.221483][ T45] usb 6-1: device descriptor read/64, error -71 [ 122.333820][ T4128] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1286'. [ 122.394072][ T4132] tmpfs: Unsupported parameter 'mpol' [ 122.399543][ T36] audit: type=1400 audit(1750686777.592:628): avc: denied { append } for pid=4131 comm="syz.4.1288" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 122.491569][ T45] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 122.621475][ T45] usb 6-1: device descriptor read/64, error -71 [ 122.811498][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 122.861484][ T45] usb 6-1: device descriptor read/64, error -71 [ 122.961461][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 122.967694][ T10] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.980775][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 122.981582][ T45] usb usb6-port1: attempt power cycle [ 122.987428][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=00f6, bcdDevice= 0.00 [ 123.001952][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.010575][ T10] usb 5-1: config 0 descriptor?? [ 123.331516][ T45] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 123.352587][ T45] usb 6-1: device descriptor read/8, error -71 [ 123.418326][ T10] wacom 0003:056A:00F6.0007: unknown main item tag 0x0 [ 123.425307][ T10] wacom 0003:056A:00F6.0007: unknown main item tag 0x0 [ 123.432204][ T10] wacom 0003:056A:00F6.0007: item fetching failed at offset 2/5 [ 123.439968][ T10] wacom 0003:056A:00F6.0007: parse failed [ 123.445797][ T10] wacom 0003:056A:00F6.0007: probe with driver wacom failed with error -22 [ 123.492626][ T45] usb 6-1: device descriptor read/8, error -71 [ 123.619594][ T4140] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1290'. [ 123.629430][ T305] usb 5-1: USB disconnect, device number 21 [ 123.731487][ T45] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 123.752523][ T45] usb 6-1: device descriptor read/8, error -71 [ 123.882522][ T45] usb 6-1: device descriptor read/8, error -71 [ 123.991637][ T45] usb usb6-port1: unable to enumerate USB device [ 124.155674][ T4152] syz.4.1294: attempt to access beyond end of device [ 124.155674][ T4152] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 124.168920][ T4152] EXT4-fs (loop4): unable to read superblock [ 124.169988][ T36] audit: type=1400 audit(1750686779.362:629): avc: denied { create } for pid=4153 comm="syz.0.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 124.339880][ T36] audit: type=1400 audit(1750686779.532:630): avc: denied { create } for pid=4170 comm="syz.0.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 124.675569][ T4181] binder: Bad value for 'max' [ 124.985744][ T4227] netlink: 'syz.0.1321': attribute type 27 has an invalid length. [ 125.005047][ T4227] bridge0: port 3(>) entered disabled state [ 125.011080][ T4227] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.018341][ T4227] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.221369][ T4264] binder: Unknown parameter 'fscontext?}' [ 125.334017][ T4294] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1345'. [ 125.408046][ T4308] fuse: Bad value for 'fd' [ 125.441566][ T4317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1355'. [ 125.542980][ T4345] overlayfs: failed to clone upperpath [ 125.741478][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 125.822550][ T4356] fuse: Unknown parameter 'fd00000000000000000000' [ 125.891477][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 125.897735][ T10] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 125.906008][ T10] usb 6-1: config 0 has no interface number 0 [ 125.912295][ T10] usb 6-1: config 0 interface 184 has no altsetting 0 [ 125.920662][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 125.930025][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.938074][ T10] usb 6-1: Product: syz [ 125.942296][ T10] usb 6-1: Manufacturer: syz [ 125.946904][ T10] usb 6-1: SerialNumber: syz [ 125.952648][ T10] usb 6-1: config 0 descriptor?? [ 125.958373][ T10] smsc75xx v1.0.0 [ 126.560666][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 126.571661][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 126.581206][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 126.592086][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 126.601770][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 126.612102][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 126.621576][ T10] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 126.938882][ T36] audit: type=1400 audit(1750686782.137:631): avc: denied { create } for pid=4380 comm="syz.4.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 126.942716][ T4381] netlink: 5052 bytes leftover after parsing attributes in process `syz.4.1377'. [ 126.982512][ T4381] fuse: Bad value for 'fd' [ 127.123618][ T4399] overlayfs: failed to clone lowerpath [ 127.169401][ T4409] 9pnet_fd: Insufficient options for proto=fd [ 127.225024][ T4417] fuseblk: Bad value for 'source' [ 127.270391][ T36] audit: type=1326 audit(1750686782.467:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.4.1391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f627ed8e929 code=0x0 [ 127.836959][ T4427] bpf: Bad value for 'uid' [ 128.136066][ T4434] batadv_slave_1: entered promiscuous mode [ 128.142695][ T4434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1395'. [ 128.195209][ T4433] batadv_slave_1: left promiscuous mode [ 128.866531][ T305] usb 6-1: USB disconnect, device number 6 [ 129.568361][ T36] audit: type=1326 audit(1750686784.767:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4518 comm="syz.0.1425" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d0938e929 code=0x0 [ 129.652865][ T36] audit: type=1400 audit(1750686784.857:634): avc: denied { name_bind } for pid=4525 comm="syz.4.1427" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 129.777686][ T4545] can0: slcan on ttyS3. [ 129.834286][ T4544] can0 (unregistered): slcan off ttyS3. [ 130.036778][ T4582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'. [ 130.038250][ T4584] tmpfs: Unknown parameter '' [ 130.256628][ T4627] overlayfs: failed to clone upperpath [ 130.311538][ T305] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 130.331350][ T4643] /dev/rnullb0: Can't lookup blockdev [ 130.441501][ T305] usb 6-1: device descriptor read/64, error -71 [ 130.470135][ T4660] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 130.478671][ T4662] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 130.498295][ T36] audit: type=1326 audit(1750686791.695:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4664 comm="syz.0.1465" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d0938e929 code=0x0 [ 130.681486][ T305] usb 6-1: device descriptor read/64, error -71 [ 130.799841][ T4674] tipc: Started in network mode [ 130.805208][ T4674] tipc: Node identity -:, cluster identity 4711 [ 130.811682][ T4674] tipc: Enabling of bearer rejected, failed to enable media [ 130.870839][ T4684] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1472'. [ 130.917843][ T4694] overlayfs: failed to clone upperpath [ 130.921497][ T305] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 130.932903][ T4694] netlink: 'syz.4.1475': attribute type 5 has an invalid length. [ 131.061484][ T305] usb 6-1: device descriptor read/64, error -71 [ 131.161217][ T4706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1479'. [ 131.311480][ T305] usb 6-1: device descriptor read/64, error -71 [ 131.421574][ T305] usb usb6-port1: attempt power cycle [ 131.762158][ T305] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 131.782494][ T305] usb 6-1: device descriptor read/8, error -71 [ 131.828660][ T36] audit: type=1326 audit(1750686793.025:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb98e929 code=0x7ffc0000 [ 131.852274][ T36] audit: type=1326 audit(1750686793.025:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb98e929 code=0x7ffc0000 [ 131.879678][ T36] audit: type=1326 audit(1750686793.025:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8bcb98e929 code=0x7ffc0000 [ 131.908125][ T36] audit: type=1326 audit(1750686793.025:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb98e929 code=0x7ffc0000 [ 131.931919][ T36] audit: type=1326 audit(1750686793.065:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.1.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb98e929 code=0x7ffc0000 [ 131.933582][ T305] usb 6-1: device descriptor read/8, error -71 [ 131.955665][ T36] audit: type=1326 audit(1750686793.065:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.1.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb98e929 code=0x7ffc0000 [ 131.984861][ T36] audit: type=1326 audit(1750686793.065:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.1.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8bcb98e929 code=0x7ffc0000 [ 132.008667][ T36] audit: type=1326 audit(1750686793.065:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.1.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb98e929 code=0x7ffc0000 [ 132.032501][ T36] audit: type=1326 audit(1750686793.065:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.1.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb98e929 code=0x7ffc0000 [ 132.055946][ T36] audit: type=1326 audit(1750686793.065:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.1.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8bcb98e929 code=0x7ffc0000 [ 132.079810][ T36] audit: type=1326 audit(1750686793.065:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.1.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb98e929 code=0x7ffc0000 [ 132.103301][ T36] audit: type=1326 audit(1750686793.065:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.1.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb98e929 code=0x7ffc0000 [ 132.126777][ T36] audit: type=1326 audit(1750686793.065:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.1.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8bcb98e929 code=0x7ffc0000 [ 132.150265][ T36] audit: type=1326 audit(1750686793.065:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.1.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb98e929 code=0x7ffc0000 [ 132.173825][ T36] audit: type=1326 audit(1750686793.065:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.1.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb98e929 code=0x7ffc0000 [ 132.201623][ T305] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 132.222571][ T305] usb 6-1: device descriptor read/8, error -71 [ 132.362477][ T305] usb 6-1: device descriptor read/8, error -71 [ 132.471532][ T305] usb usb6-port1: unable to enumerate USB device [ 133.318018][ T4749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1498'. [ 133.548946][ T4772] SELinux: Context /dev/kvm is not valid (left unmapped). [ 133.588492][ T4777] fuse: Bad value for 'user_id' [ 133.593476][ T4777] fuse: Bad value for 'user_id' [ 134.711460][ T375] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 134.863175][ T375] usb 6-1: config 1 has an invalid interface number: 246 but max is 2 [ 134.871389][ T375] usb 6-1: config 1 has an invalid interface number: 46 but max is 2 [ 134.879666][ T375] usb 6-1: config 1 has an invalid descriptor of length 131, skipping remainder of the config [ 134.890032][ T375] usb 6-1: config 1 has no interface number 0 [ 134.896144][ T375] usb 6-1: config 1 has no interface number 1 [ 134.902265][ T375] usb 6-1: config 1 interface 2 altsetting 60 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 134.913179][ T375] usb 6-1: config 1 interface 2 altsetting 60 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 134.924126][ T375] usb 6-1: config 1 interface 2 altsetting 60 has an invalid descriptor for endpoint zero, skipping [ 134.936597][ T375] usb 6-1: config 1 interface 2 altsetting 60 has an invalid descriptor for endpoint zero, skipping [ 134.948325][ T375] usb 6-1: config 1 interface 2 altsetting 60 has a duplicate endpoint with address 0xF, skipping [ 134.965667][ T375] usb 6-1: config 1 interface 246 altsetting 55 has a duplicate endpoint with address 0x8, skipping [ 134.977829][ T375] usb 6-1: config 1 interface 246 altsetting 55 has a duplicate endpoint with address 0x8, skipping [ 134.990027][ T375] usb 6-1: config 1 interface 246 altsetting 55 endpoint 0xA has invalid maxpacket 1983, setting to 64 [ 134.996902][ T4825] can: request_module (can-proto-0) failed. [ 135.001321][ T375] usb 6-1: config 1 interface 246 altsetting 55 has a duplicate endpoint with address 0xB, skipping [ 135.018119][ T375] usb 6-1: config 1 interface 246 altsetting 55 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 135.029262][ T375] usb 6-1: config 1 interface 246 altsetting 55 has a duplicate endpoint with address 0xE, skipping [ 135.040284][ T375] usb 6-1: config 1 interface 246 altsetting 55 has a duplicate endpoint with address 0xB, skipping [ 135.051224][ T375] usb 6-1: config 1 interface 246 altsetting 55 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 135.062261][ T375] usb 6-1: config 1 interface 246 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 135.073311][ T375] usb 6-1: config 1 interface 46 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 135.086283][ T375] usb 6-1: config 1 interface 2 has no altsetting 0 [ 135.092901][ T375] usb 6-1: config 1 interface 246 has no altsetting 0 [ 135.099704][ T375] usb 6-1: config 1 interface 46 has no altsetting 0 [ 135.107754][ T375] usb 6-1: New USB device found, idVendor=19d2, idProduct=1425, bcdDevice=ab.17 [ 135.116774][ T4811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1512'. [ 135.125892][ T375] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.133901][ T375] usb 6-1: Product: syz [ 135.138161][ T375] usb 6-1: Manufacturer: syz [ 135.142798][ T375] usb 6-1: SerialNumber: syz [ 135.148267][ T375] usb 6-1: Interface #246 referenced by multiple IADs [ 135.356449][ T4807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.365042][ T4807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.943744][ T4861] raw_sendmsg: syz.0.1530 forgot to set AF_INET. Fix it! [ 135.963157][ T4868] overlayfs: failed to clone upperpath [ 136.226143][ T4896] /dev/loop0: Can't lookup blockdev [ 136.251760][ T4906] netlink: 'syz.4.1546': attribute type 4 has an invalid length. [ 137.396035][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 137.396053][ T36] audit: type=1326 audit(1750686798.595:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4985 comm="syz.4.1575" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f627ed8e929 code=0x0 [ 137.439297][ T375] usb 6-1: USB disconnect, device number 11 [ 137.456782][ T36] audit: type=1326 audit(1750686798.655:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4993 comm="syz.0.1579" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d0938e929 code=0x0 [ 137.578290][ T36] audit: type=1400 audit(1750686798.775:673): avc: denied { map } for pid=5003 comm="syz.5.1581" path="socket:[25278]" dev="sockfs" ino=25278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 137.598144][ T5004] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 137.881481][ T305] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 138.031474][ T305] usb 6-1: Using ep0 maxpacket: 32 [ 138.037684][ T305] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 138.045935][ T305] usb 6-1: config 0 has no interface number 0 [ 138.052080][ T305] usb 6-1: config 0 interface 184 has no altsetting 0 [ 138.060179][ T305] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 138.069247][ T305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.077284][ T305] usb 6-1: Product: syz [ 138.081516][ T305] usb 6-1: Manufacturer: syz [ 138.086124][ T305] usb 6-1: SerialNumber: syz [ 138.094000][ T305] usb 6-1: config 0 descriptor?? [ 138.099765][ T305] smsc75xx v1.0.0 [ 138.263203][ T36] audit: type=1400 audit(1750686799.465:674): avc: denied { bind } for pid=5026 comm="syz.4.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.700744][ T305] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 138.711655][ T305] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 138.721173][ T305] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 138.732029][ T305] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 138.741705][ T305] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 138.752032][ T305] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 138.761491][ T305] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 139.270458][ T36] audit: type=1326 audit(1750686800.465:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5064 comm="syz.1.1604" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb98e929 code=0x0 [ 139.294856][ T5069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.303543][ T5069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.663968][ T36] audit: type=1400 audit(1750686800.865:676): avc: denied { create } for pid=5010 comm="syz.5.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 139.999767][ T36] audit: type=1326 audit(1750686801.195:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb98e929 code=0x7ffc0000 [ 140.023210][ T36] audit: type=1326 audit(1750686801.195:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb98e929 code=0x7ffc0000 [ 140.046952][ T36] audit: type=1326 audit(1750686801.195:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f8bcb98e929 code=0x7ffc0000 [ 140.070565][ T36] audit: type=1326 audit(1750686801.195:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb98e929 code=0x7ffc0000 [ 140.677322][ T305] usb 6-1: USB disconnect, device number 12 [ 141.011468][ T305] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 141.162535][ T305] usb 6-1: config 1 interface 0 has no altsetting 0 [ 141.170552][ T305] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 141.179678][ T305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.187792][ T305] usb 6-1: Product: syz [ 141.191996][ T305] usb 6-1: Manufacturer: syz [ 141.196602][ T305] usb 6-1: SerialNumber: syz [ 141.290381][ T5173] fuse: Bad value for 'fd' [ 141.426606][ T5187] fuse: blksize only supported for fuseblk [ 141.711084][ T5209] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.718509][ T5209] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.726168][ T5209] bridge_slave_0: entered allmulticast mode [ 141.732914][ T5209] bridge_slave_0: entered promiscuous mode [ 141.739545][ T5209] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.746989][ T5209] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.754270][ T5209] bridge_slave_1: entered allmulticast mode [ 141.761206][ T5209] bridge_slave_1: entered promiscuous mode [ 141.786001][ T127] bridge_slave_1: left allmulticast mode [ 141.791909][ T127] bridge_slave_1: left promiscuous mode [ 141.799411][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.807092][ T127] bridge_slave_0: left allmulticast mode [ 141.811565][ T305] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 141.812880][ T127] bridge_slave_0: left promiscuous mode [ 141.829952][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.969964][ T5209] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.977055][ T5209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.984449][ T5209] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.991535][ T5209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.001222][ T127] tipc: Disabling bearer [ 142.006688][ T127] tipc: Left network mode [ 142.012519][ T127] veth1_macvtap: left promiscuous mode [ 142.018092][ T127] veth0_vlan: left promiscuous mode [ 142.070388][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.077955][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.087414][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.094494][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.103387][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.110418][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.138158][ T5209] veth0_vlan: entered promiscuous mode [ 142.149311][ T5209] veth1_macvtap: entered promiscuous mode [ 142.236055][ T5235] binder: Bad value for 'max' [ 142.286295][ T5242] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 142.286322][ T5242] rust_binder: Error while translating object. [ 142.297001][ T5242] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 142.303286][ T5242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 142.641489][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 142.727261][ T5268] overlayfs: failed to clone upperpath [ 142.771016][ T5272] tipc: Enabling of bearer rejected, media not registered [ 142.791503][ T10] usb 2-1: device descriptor read/64, error -71 [ 143.031481][ T10] usb 2-1: device descriptor read/64, error -71 [ 143.271483][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 143.401572][ T10] usb 2-1: device descriptor read/64, error -71 [ 143.556897][ T5292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1684'. [ 143.586085][ T5295] overlayfs: failed to clone upperpath [ 143.679742][ T10] usb 2-1: device descriptor read/64, error -71 [ 143.831800][ T10] usb usb2-port1: attempt power cycle [ 143.952270][ T63] usb 6-1: USB disconnect, device number 13 [ 143.962225][ T63] usblp0: removed [ 144.121370][ T5319] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 144.171490][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 144.192526][ T10] usb 2-1: device descriptor read/8, error -71 [ 144.334282][ T10] usb 2-1: device descriptor read/8, error -71 [ 144.363198][ T5335] tap0: tun_chr_ioctl cmd 1074025677 [ 144.368670][ T5335] tap0: linktype set to 774 [ 144.461552][ T305] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 144.581492][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 144.612462][ T10] usb 2-1: device descriptor read/8, error -71 [ 144.723572][ T5355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:258 [ 144.742554][ T10] usb 2-1: device descriptor read/8, error -71 [ 144.861552][ T10] usb usb2-port1: unable to enumerate USB device [ 145.645932][ T5383] @: renamed from bridge0 (while UP) [ 145.674034][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 145.674053][ T36] audit: type=1400 audit(1750686806.875:689): avc: denied { map } for pid=5385 comm="syz.4.1716" path="socket:[28676]" dev="sockfs" ino=28676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 145.705270][ T36] audit: type=1400 audit(1750686806.875:690): avc: denied { accept } for pid=5385 comm="syz.4.1716" path="socket:[28676]" dev="sockfs" ino=28676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 146.131476][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 146.261510][ T10] usb 2-1: device descriptor read/64, error -71 [ 146.511475][ T10] usb 2-1: device descriptor read/64, error -71 [ 146.751471][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 146.901462][ T10] usb 2-1: device descriptor read/64, error -71 [ 146.908736][ T36] audit: type=1400 audit(1750686808.110:691): avc: denied { ioctl } for pid=5457 comm="syz.4.1744" path="socket:[28830]" dev="sockfs" ino=28830 ioctlcmd=0x9360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 146.998863][ T5485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1752'. [ 147.038044][ T36] audit: type=1400 audit(1750686808.240:692): avc: denied { shutdown } for pid=5495 comm="syz.4.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.050797][ T5498] Invalid ELF header type: 2 != 1 [ 147.058271][ T36] audit: type=1400 audit(1750686808.240:693): avc: denied { module_load } for pid=5497 comm="syz.0.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 147.147619][ T5517] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1764'. [ 147.151506][ T10] usb 2-1: device descriptor read/64, error -71 [ 147.459823][ T5535] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1771'. [ 147.697555][ T10] usb usb2-port1: attempt power cycle [ 147.941620][ T36] audit: type=1400 audit(1750686809.150:694): avc: denied { create } for pid=5538 comm="syz.0.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 148.051511][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 148.073954][ T10] usb 2-1: device descriptor read/8, error -71 [ 148.202527][ T10] usb 2-1: device descriptor read/8, error -71 [ 148.441533][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 148.462682][ T10] usb 2-1: device descriptor read/8, error -71 [ 148.592514][ T10] usb 2-1: device descriptor read/8, error -71 [ 148.701540][ T10] usb usb2-port1: unable to enumerate USB device [ 148.934880][ T5586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1789'. [ 148.944266][ T5586] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 148.944293][ T5586] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 148.953119][ T5586] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:43 [ 148.976544][ T5588] fuse: Bad value for 'fd' [ 149.019493][ T5590] /dev/rnullb0: Can't open blockdev [ 149.123369][ T36] audit: type=1400 audit(1750686810.330:695): avc: denied { getopt } for pid=5599 comm="syz.5.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.331484][ T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 149.431563][ T305] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 149.473754][ T5617] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1802'. [ 149.483116][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 149.490066][ T45] usb 2-1: config 5 has an invalid interface number: 143 but max is 2 [ 149.501108][ T45] usb 2-1: config 5 has an invalid interface number: 6 but max is 2 [ 149.509825][ T45] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 149.518710][ T45] usb 2-1: config 5 has an invalid descriptor of length 166, skipping remainder of the config [ 149.529133][ T45] usb 2-1: config 5 has no interface number 1 [ 149.535359][ T45] usb 2-1: config 5 has no interface number 2 [ 149.541837][ T45] usb 2-1: config 5 interface 143 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 149.555269][ T45] usb 2-1: too many endpoints for config 5 interface 6 altsetting 7: 122, using maximum allowed: 30 [ 149.566700][ T45] usb 2-1: config 5 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 122 [ 149.580157][ T45] usb 2-1: too many endpoints for config 5 interface 0 altsetting 5: 36, using maximum allowed: 30 [ 149.590976][ T305] usb 6-1: Using ep0 maxpacket: 8 [ 149.596181][ T45] usb 2-1: config 5 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 149.610092][ T45] usb 2-1: config 5 interface 143 has no altsetting 0 [ 149.616969][ T45] usb 2-1: config 5 interface 6 has no altsetting 0 [ 149.623707][ T45] usb 2-1: config 5 interface 0 has no altsetting 0 [ 149.630603][ T305] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.640822][ T305] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.651942][ T305] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.661976][ T305] usb 6-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.674997][ T305] usb 6-1: config 0 interface 0 has no altsetting 0 [ 149.681909][ T305] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 149.691030][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=fc.f3 [ 149.700102][ T305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.708126][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.716468][ T45] usb 2-1: Product: syz [ 149.720866][ T305] usb 6-1: config 0 descriptor?? [ 149.725924][ T45] usb 2-1: Manufacturer: syz [ 149.730564][ T45] usb 2-1: SerialNumber: syz [ 149.950900][ T45] usb 2-1: MIDIStreaming interface descriptor not found [ 149.960445][ T45] usb 2-1: USB disconnect, device number 11 [ 149.980226][ T4111] udevd[4111]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:5.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 150.138706][ T305] ryos 0003:1E7D:3232.0008: hidraw0: USB HID vff.ff Device [HID 1e7d:3232] on usb-dummy_hcd.5-1/input0 [ 150.237404][ T36] audit: type=1400 audit(1750686811.440:696): avc: denied { getattr } for pid=5645 comm="syz.4.1810" path="socket:[29757]" dev="sockfs" ino=29757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 150.303671][ T36] audit: type=1326 audit(1750686811.510:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5616 comm="syz.0.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0938e929 code=0x7fc00000 [ 150.923381][ T5661] netlink: 'syz.0.1816': attribute type 4 has an invalid length. [ 150.934058][ T5661] netlink: 3581 bytes leftover after parsing attributes in process `syz.0.1816'. [ 152.191461][ T45] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 152.200757][ T375] usb 6-1: USB disconnect, device number 15 [ 152.226869][ T36] audit: type=1400 audit(1750686813.430:698): avc: denied { write } for pid=5683 comm="syz.5.1822" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 152.322297][ T45] usb 2-1: device descriptor read/64, error -71 [ 152.561485][ T45] usb 2-1: device descriptor read/64, error -71 [ 152.591475][ T375] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 152.742726][ T375] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.753878][ T375] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 152.764761][ T375] usb 6-1: config 0 interface 0 has no altsetting 0 [ 152.771458][ T375] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 152.780515][ T375] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.789272][ T375] usb 6-1: config 0 descriptor?? [ 152.794538][ T5688] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 152.801860][ T45] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 152.931481][ T45] usb 2-1: device descriptor read/64, error -71 [ 153.212723][ T375] logitech 0003:046D:C24F.0009: invalid report_size -1677146026 [ 153.229698][ T375] logitech 0003:046D:C24F.0009: item 0 4 1 7 parsing failed [ 153.240467][ T375] logitech 0003:046D:C24F.0009: parse failed [ 153.246690][ T375] logitech 0003:046D:C24F.0009: probe with driver logitech failed with error -22 [ 153.434138][ T375] usb 6-1: USB disconnect, device number 16 [ 153.671555][ T45] usb usb2-port1: attempt power cycle [ 154.011543][ T45] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 154.033737][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.044732][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.054966][ T45] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 154.064528][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.074015][ T45] usb 2-1: config 0 descriptor?? [ 154.098250][ T36] audit: type=1400 audit(1750686815.300:699): avc: denied { setattr } for pid=5752 comm="syz.5.1847" name="HCI" dev="sockfs" ino=30097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.482543][ T45] holtek_kbd 0003:04D9:A055.000A: item fetching failed at offset 0/3 [ 154.491080][ T45] holtek_kbd 0003:04D9:A055.000A: probe with driver holtek_kbd failed with error -22 [ 154.690730][ T45] usb 2-1: USB disconnect, device number 14 [ 156.495686][ T5826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56317 sclass=netlink_route_socket pid=5826 comm=syz.4.1873 [ 156.565029][ T5839] binder: Unknown parameter 'obj_type' [ 156.693988][ T5862] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 156.694015][ T5862] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 156.702715][ T5862] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:354 [ 156.982700][ T5871] fuse: Bad value for 'fd' [ 157.138090][ T5878] /dev/rnullb0: Can't open blockdev [ 157.291487][ T375] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 157.441519][ T375] usb 6-1: Using ep0 maxpacket: 32 [ 157.441519][ T45] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 157.455494][ T375] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 157.463742][ T375] usb 6-1: config 0 has no interface number 0 [ 157.469860][ T375] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 157.479911][ T375] usb 6-1: config 0 interface 196 has no altsetting 0 [ 157.488315][ T375] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 157.497406][ T375] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.505577][ T375] usb 6-1: Product: syz [ 157.509740][ T375] usb 6-1: Manufacturer: syz [ 157.514430][ T375] usb 6-1: SerialNumber: syz [ 157.519637][ T375] usb 6-1: config 0 descriptor?? [ 157.524925][ T5875] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 157.592705][ T45] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 157.602899][ T45] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 7 [ 157.611927][ T45] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 157.620975][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.629774][ T45] usb 2-1: config 0 descriptor?? [ 157.963285][ T375] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 157.981504][ T375] ipheth 6-1:0.196: probe with driver ipheth failed with error -22 [ 158.093052][ T5909] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 158.242860][ T375] usb 6-1: USB disconnect, device number 17 [ 158.316636][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'. [ 158.805947][ T5952] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1915'. [ 158.868299][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1920'. [ 158.909964][ T5972] overlay: ./file0 is not a directory [ 159.002834][ T36] audit: type=1400 audit(1750686820.210:700): avc: denied { write } for pid=5973 comm="syz.4.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 159.061451][ T1405] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 159.211440][ T1405] usb 6-1: Using ep0 maxpacket: 32 [ 159.217626][ T1405] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 159.226277][ T1405] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 159.234957][ T1405] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 159.243973][ T1405] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.253699][ T1405] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 159.263432][ T1405] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 159.276434][ T1405] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 159.285514][ T1405] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.294259][ T1405] usb 6-1: config 0 descriptor?? [ 159.501485][ T1405] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 159.704462][ T375] usb 6-1: USB disconnect, device number 18 [ 159.714377][ T375] usblp0: removed [ 160.090258][ T6056] overlayfs: failed to clone upperpath [ 160.145272][ T6061] tmpfs: Unknown parameter 'indo64' [ 160.206700][ T45] usb 2-1: string descriptor 0 read error: -71 [ 160.216069][ T45] usb 2-1: USB disconnect, device number 15 [ 160.250349][ T6072] usb usb8: usbfs: process 6072 (syz.5.1934) did not claim interface 0 before use [ 160.260396][ T6072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:373 [ 160.383225][ T6106] /dev/md0: Can't lookup blockdev [ 160.428208][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1947'. [ 160.671473][ T375] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 160.791481][ T63] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 160.810221][ T6129] overlayfs: failed to clone upperpath [ 160.833625][ T375] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.843709][ T375] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.856781][ T375] usb 2-1: config 0 interface 0 has no altsetting 0 [ 160.863808][ T375] usb 2-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 160.873213][ T375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.882186][ T375] usb 2-1: config 0 descriptor?? [ 160.944041][ T63] usb 6-1: Using ep0 maxpacket: 32 [ 160.950431][ T6121] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 160.950458][ T6121] rust_binder: Read failure Err(EFAULT) in pid:408 [ 161.017108][ T63] usb 6-1: unable to get BOS descriptor or descriptor too short [ 161.038407][ T63] usb 6-1: no configurations [ 161.044486][ T63] usb 6-1: can't read configurations, error -22 [ 161.142516][ T6166] netlink: 57 bytes leftover after parsing attributes in process `syz.0.1968'. [ 161.270247][ T6176] binder: Unknown parameter 'stobal' [ 161.493822][ T6187] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1977'. [ 161.513644][ T375] usbhid 2-1:0.0: can't add hid device: -71 [ 161.519639][ T375] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 161.544487][ T375] usb 2-1: USB disconnect, device number 16 [ 161.611586][ T6197] incfs: Options parsing error. -22 [ 161.616861][ T6197] incfs: mount failed -22 [ 161.833354][ T6217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6217 comm=syz.4.1985 [ 161.906765][ T6232] /dev/rnullb0: Can't lookup blockdev [ 161.971478][ T375] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 162.122577][ T375] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 162.132581][ T375] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 162.143951][ T375] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.153197][ T375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.161257][ T375] usb 2-1: Product: syz [ 162.165760][ T375] usb 2-1: Manufacturer: syz [ 162.170599][ T375] usb 2-1: SerialNumber: syz [ 162.384711][ T375] cdc_ncm 2-1:1.0: bind() failure [ 162.391008][ T375] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 162.395859][ T6250] rust_binder: Write failure EINVAL in pid:123 [ 162.397969][ T375] cdc_ncm 2-1:1.1: bind() failure [ 162.399087][ T6250] input: syz0 as /devices/virtual/input/input7 [ 162.407790][ T375] usb 2-1: USB disconnect, device number 17 [ 162.448165][ T36] audit: type=1400 audit(1750686823.650:701): avc: denied { append } for pid=6251 comm="syz.5.1998" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 162.508366][ T6256] rust_binder: Error while translating object. [ 162.508466][ T6256] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 162.515690][ T6256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:125 [ 162.614186][ T36] audit: type=1326 audit(1750686823.820:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6265 comm="syz.4.2003" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f627ed8e929 code=0x0 [ 162.616509][ T6268] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.647039][ T6268] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.660890][ T6269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:424 [ 162.667467][ T6268] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:424 [ 162.676909][ T6269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:424 [ 162.692893][ T6272] /dev/rnullb0: Can't open blockdev [ 162.771898][ T6274] binder: Bad value for 'stats' [ 162.800098][ T6282] Dead loop on virtual device ip6_vti0, fix it urgently! [ 162.809423][ T340] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 162.823642][ T6284] netlink: 5052 bytes leftover after parsing attributes in process `syz.5.2009'. [ 162.833141][ T340] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 162.833723][ T6284] /dev/rnullb0: Can't open blockdev [ 162.939766][ T6298] rust_binder: Write failure EFAULT in pid:432 [ 162.992515][ T6314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2017'. [ 163.614933][ T6345] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2028'. [ 163.840902][ T6351] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.906540][ T6354] netlink: 'syz.1.2031': attribute type 4 has an invalid length. [ 163.920995][ T6354] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2031'. [ 163.933045][ T6354] overlayfs: workdir and upperdir must reside under the same mount [ 164.261464][ T1405] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 164.413337][ T1405] usb 6-1: config 1 interface 0 altsetting 246 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 164.424775][ T1405] usb 6-1: config 1 interface 0 altsetting 246 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.438943][ T1405] usb 6-1: config 1 interface 0 has no altsetting 0 [ 164.447608][ T1405] usb 6-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 164.456885][ T1405] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.465209][ T1405] usb 6-1: Product: ₋䒖ྋꋮ뮼ዂ댳ꓳᅜ謲숽ᨄ໷캀῕쑜ے줶뗸硅鍌ở膏鄞⫰䤄䡾걜朎먌䈞鈶౱샪藴ﴼཿ잀ᙯꓗጕ矈쌙絽溵䓘팥쳐ⶐ諴퓭썂궶츴洆쭨彾ና곿⼊穸鞋슬탼쪴ﾚƃ෕鏝᡿鳯୉쉘率蜨澎Ꜥ뭳霻恇轈ॠ띦呈뀿믣뻏ᶡ灥詋㏙ļ页ꧬ㰉ឈ [ 164.501021][ T1405] usb 6-1: Manufacturer: ࡡ [ 164.505725][ T1405] usb 6-1: SerialNumber: చ [ 165.164333][ T6453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.164423][ T6452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:170 [ 165.298202][ T6460] 9pnet: Could not find request transport: v [ 165.368689][ T6463] bpf: Bad value for 'gid' [ 165.373635][ T6463] cgroup2: Unknown parameter 'mmJmory06QNn_hugetlb_ac\ounting' [ 165.450886][ T36] audit: type=1400 audit(1750686826.650:703): avc: denied { load_policy } for pid=6464 comm="syz.1.2050" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 165.450903][ T6465] SELinux: failed to load policy [ 165.471958][ T6465] rust_binder: Error while translating object. [ 165.476087][ T6465] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 165.482369][ T6465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:178 [ 165.607513][ T36] audit: type=1400 audit(1750686826.810:704): avc: denied { lock } for pid=6470 comm="syz.1.2052" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 165.675597][ T6494] rust_binder: Write failure EINVAL in pid:187 [ 165.702898][ T45] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 165.737574][ T45] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 166.109031][ T6525] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2066'. [ 166.926243][ T305] hid (null): unknown global tag 0xd [ 166.935475][ T305] hid-generic 0006:0004:BBAB.000D: collection stack underflow [ 166.944021][ T305] hid-generic 0006:0004:BBAB.000D: item 0 2 0 12 parsing failed [ 166.952052][ T305] hid-generic 0006:0004:BBAB.000D: probe with driver hid-generic failed with error -22 [ 166.983677][ T1405] usbhid 6-1:1.0: can't add hid device: -71 [ 167.000373][ T1405] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 167.018691][ T1405] usb 6-1: USB disconnect, device number 21 [ 167.076985][ T6542] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=118 sclass=netlink_tcpdiag_socket pid=6542 comm=syz.5.2072 [ 167.090392][ T6542] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 167.090420][ T6542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:451 [ 167.154693][ T6559] overlayfs: failed to clone upperpath [ 167.170311][ T36] audit: type=1400 audit(1750686828.370:705): avc: denied { link } for pid=6558 comm="syz.0.2078" name="file1" dev="tmpfs" ino=2947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 167.337733][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 167.352067][ T305] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 167.371606][ T45] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 167.400676][ T6575] /dev/rnullb0: Can't lookup blockdev [ 167.441831][ T6571] fuse: Bad value for 'fd' [ 167.524160][ T6592] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 167.541453][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 167.552835][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 167.568432][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 167.577820][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.589399][ T45] usb 2-1: config 0 descriptor?? [ 167.627920][ T36] audit: type=1400 audit(1750686828.830:706): avc: denied { create } for pid=6589 comm="syz.0.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 168.001522][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 168.007513][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 168.016251][ T45] usb 2-1: USB disconnect, device number 18 [ 168.236388][ T6621] overlayfs: failed to clone upperpath [ 168.242205][ T6620] overlayfs: failed to clone upperpath [ 168.258860][ T36] audit: type=1400 audit(1750686829.460:707): avc: denied { mount } for pid=6624 comm="syz.5.2100" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 168.281231][ T36] audit: type=1400 audit(1750686829.460:708): avc: denied { search } for pid=6624 comm="syz.5.2100" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 168.321434][ T36] audit: type=1400 audit(1750686829.460:709): avc: denied { read } for pid=6624 comm="syz.5.2100" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 168.353512][ T36] audit: type=1400 audit(1750686829.460:710): avc: denied { open } for pid=6624 comm="syz.5.2100" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 168.392047][ T6635] No source specified [ 168.523901][ T6644] overlayfs: overlapping lowerdir path [ 168.683757][ T6655] /dev/rnullb0: Can't open blockdev [ 168.751826][ T36] audit: type=1400 audit(1750686829.960:711): avc: denied { shutdown } for pid=6656 comm="syz.1.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.973905][ T6662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=6662 comm=syz.5.2115 [ 168.987139][ T6662] tmpfs: Unknown parameter 'no' [ 169.143015][ T6672] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2120'. [ 169.188221][ T6683] netlink: 'syz.0.2124': attribute type 7 has an invalid length. [ 169.196171][ T6683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2124'. [ 169.228998][ T6373] tipc: Subscription rejected, illegal request [ 169.547824][ T6696] kvm: kvm [6695]: vcpu0, guest rIP: 0xeeee8000 Unhandled WRMSR(0x4000002a) = 0x0 [ 169.649243][ T36] audit: type=1400 audit(1750686830.850:712): avc: denied { execstack } for pid=6704 comm="syz.5.2133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 169.691171][ T6709] fuse: Bad value for 'fd' [ 169.696602][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2135'. [ 169.791461][ T45] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 169.952484][ T45] usb 2-1: No LPM exit latency info found, disabling LPM. [ 169.965018][ T45] usb 2-1: config 4 has an invalid interface number: 40 but max is 2 [ 169.973232][ T45] usb 2-1: config 4 has an invalid interface number: 190 but max is 2 [ 169.981470][ T45] usb 2-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 169.990191][ T45] usb 2-1: config 4 has an invalid interface number: 17 but max is 2 [ 169.998322][ T45] usb 2-1: config 4 has no interface number 0 [ 170.005683][ T45] usb 2-1: config 4 has no interface number 1 [ 170.011837][ T45] usb 2-1: config 4 has no interface number 2 [ 170.017958][ T45] usb 2-1: config 4 interface 40 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 170.027781][ T45] usb 2-1: config 4 interface 40 altsetting 2 endpoint 0x8 has invalid maxpacket 512, setting to 8 [ 170.038529][ T45] usb 2-1: config 4 interface 40 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 8 [ 170.049469][ T45] usb 2-1: config 4 interface 40 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 170.060548][ T45] usb 2-1: config 4 interface 40 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 170.071447][ T45] usb 2-1: config 4 interface 40 altsetting 2 endpoint 0x3 has an invalid bInterval 66, changing to 4 [ 170.082706][ T45] usb 2-1: config 4 interface 40 altsetting 2 endpoint 0x3 has invalid maxpacket 8, setting to 0 [ 170.093589][ T45] usb 2-1: config 4 interface 40 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 8 [ 170.104784][ T45] usb 2-1: config 4 interface 40 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 170.115473][ T45] usb 2-1: config 4 interface 40 altsetting 2 endpoint 0x7 has invalid maxpacket 1023, setting to 8 [ 170.126292][ T45] usb 2-1: config 4 interface 40 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 170.136957][ T45] usb 2-1: config 4 interface 40 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 170.147689][ T45] usb 2-1: config 4 interface 40 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 170.158690][ T45] usb 2-1: config 4 interface 190 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 170.169839][ T45] usb 2-1: config 4 interface 190 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 170.180738][ T45] usb 2-1: config 4 interface 190 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 170.191450][ T45] usb 2-1: config 4 interface 190 altsetting 5 endpoint 0x1 has invalid maxpacket 32, setting to 8 [ 170.202195][ T45] usb 2-1: config 4 interface 190 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 170.212992][ T45] usb 2-1: config 4 interface 190 altsetting 5 endpoint 0x5 has invalid maxpacket 64, setting to 8 [ 170.223806][ T45] usb 2-1: config 4 interface 17 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 170.234479][ T45] usb 2-1: config 4 interface 17 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 170.245306][ T45] usb 2-1: config 4 interface 17 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 170.261137][ T45] usb 2-1: config 4 interface 40 has no altsetting 0 [ 170.267895][ T45] usb 2-1: config 4 interface 190 has no altsetting 0 [ 170.274712][ T45] usb 2-1: config 4 interface 17 has no altsetting 0 [ 170.283482][ T45] usb 2-1: New USB device found, idVendor=0403, idProduct=d9aa, bcdDevice=4d.9d [ 170.292812][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.301272][ T45] usb 2-1: Product: Ќ [ 170.305500][ T45] usb 2-1: Manufacturer: 둛宸烮㶥뒦츍⸇甓茫䄸넘砥崜ꀆ帤揞ẕ鰻ꜳ⩤炛［䞉膢䗁꧱ヰ雷發䐫胍끅껇승힮떡䧒虵頱쒫鳼橼닶㎔벪턵栝઩楱Ǔ荆㾊잟낖촏铰참頱煰痵Ǽ頞뼝။䤵ꁿ [ 170.325787][ T6733] syz.4.2146: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 170.330092][ T45] usb 2-1: SerialNumber: 鬲礇曦堢읕씩錞蠷쑡╀踻糧ႜ撅趹턃鞌謮袾㼬籦퉦楝瞤ਠ狊徠 [ 170.332506][ T6733] ,cpuset=syz4,mems_allowed=0 [ 170.359772][ T6733] CPU: 0 UID: 0 PID: 6733 Comm: syz.4.2146 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8 [ 170.359807][ T6733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.359819][ T6733] Call Trace: [ 170.359824][ T6733] [ 170.359832][ T6733] __dump_stack+0x21/0x30 [ 170.359865][ T6733] dump_stack_lvl+0x10c/0x190 [ 170.359894][ T6733] ? __cfi_dump_stack_lvl+0x10/0x10 [ 170.359925][ T6733] dump_stack+0x19/0x20 [ 170.359950][ T6733] warn_alloc+0x1bc/0x2a0 [ 170.359967][ T6733] ? stack_depot_save_flags+0x38/0x800 [ 170.359989][ T6733] ? __cfi_warn_alloc+0x10/0x10 [ 170.360011][ T6733] ? kasan_save_track+0x4f/0x80 [ 170.360069][ T6733] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 170.360097][ T6733] ? xskq_create+0x68/0x2a0 [ 170.360114][ T6733] ? xsk_init_queue+0xb6/0x120 [ 170.360130][ T6733] ? xsk_setsockopt+0x43f/0x6f0 [ 170.360145][ T6733] ? do_sock_setsockopt+0x26a/0x400 [ 170.360171][ T6733] ? __x64_sys_setsockopt+0x1b8/0x250 [ 170.360195][ T6733] ? x64_sys_call+0x2adc/0x2ee0 [ 170.360226][ T6733] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 170.360249][ T6733] __vmalloc_node_range_noprof+0x135/0x1420 [ 170.360273][ T6733] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 170.360293][ T6733] ? avc_has_perm+0x144/0x220 [ 170.360322][ T6733] ? kasan_save_alloc_info+0x40/0x50 [ 170.360348][ T6733] ? __kasan_kmalloc+0x96/0xb0 [ 170.360388][ T6733] vmalloc_user_noprof+0x77/0x90 [ 170.360407][ T6733] ? xskq_create+0xdb/0x2a0 [ 170.360424][ T6733] xskq_create+0xdb/0x2a0 [ 170.360442][ T6733] xsk_init_queue+0xb6/0x120 [ 170.360469][ T6733] xsk_setsockopt+0x43f/0x6f0 [ 170.360491][ T6733] ? __cfi_xsk_setsockopt+0x10/0x10 [ 170.360513][ T6733] ? do_futex+0x309/0x500 [ 170.360544][ T6733] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 170.360562][ T6733] ? security_socket_setsockopt+0x33/0xd0 [ 170.360585][ T6733] ? __cfi_xsk_setsockopt+0x10/0x10 [ 170.360609][ T6733] do_sock_setsockopt+0x26a/0x400 [ 170.360634][ T6733] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 170.360660][ T6733] __x64_sys_setsockopt+0x1b8/0x250 [ 170.360683][ T6733] x64_sys_call+0x2adc/0x2ee0 [ 170.360706][ T6733] do_syscall_64+0x58/0xf0 [ 170.360731][ T6733] ? clear_bhb_loop+0x50/0xa0 [ 170.360759][ T6733] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 170.360782][ T6733] RIP: 0033:0x7f627ed8e929 [ 170.360803][ T6733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.360824][ T6733] RSP: 002b:00007f627ebeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 170.360852][ T6733] RAX: ffffffffffffffda RBX: 00007f627efb5fa0 RCX: 00007f627ed8e929 [ 170.360866][ T6733] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 170.360878][ T6733] RBP: 00007f627ee10b39 R08: 0000000000000004 R09: 0000000000000000 [ 170.360896][ T6733] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 170.360914][ T6733] R13: 0000000000000000 R14: 00007f627efb5fa0 R15: 00007ffdf14347a8 [ 170.360935][ T6733] [ 170.360945][ T6733] Mem-Info: [ 170.494559][ T6749] 9pnet_fd: Insufficient options for proto=fd [ 170.497749][ T6733] active_anon:25211 inactive_anon:5 isolated_anon:0 [ 170.497749][ T6733] active_file:10830 inactive_file:16487 isolated_file:0 [ 170.497749][ T6733] unevictable:15370 dirty:101 writeback:0 [ 170.497749][ T6733] slab_reclaimable:7232 slab_unreclaimable:70816 [ 170.497749][ T6733] mapped:24239 shmem:19393 pagetables:1128 [ 170.497749][ T6733] sec_pagetables:3 bounce:0 [ 170.497749][ T6733] kernel_misc_reclaimable:0 [ 170.497749][ T6733] free:1482404 free_pcp:2949 free_cma:0 [ 170.547094][ T45] ftdi_sio 2-1:4.40: FTDI USB Serial Device converter detected [ 170.551927][ T6733] Node 0 active_anon:100924kB inactive_anon:20kB active_file:43320kB inactive_file:65948kB unevictable:61480kB isolated(anon):0kB isolated(file):0kB mapped:96992kB dirty:404kB writeback:0kB shmem:77572kB shmem_thp:6144kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6824kB pagetables:4516kB sec_pagetables:12kB all_unreclaimable? no [ 170.566010][ T45] ftdi_sio ttyUSB0: unknown device type: 0x4d9d [ 170.574815][ T6733] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966012kB mlocked:0kB bounce:0kB free_pcp:5800kB local_pcp:5800kB free_cma:0kB [ 170.581741][ T45] ftdi_sio 2-1:4.190: FTDI USB Serial Device converter detected [ 170.623783][ T6733] lowmem_reserve[]: [ 170.634783][ T45] ftdi_sio ttyUSB1: unknown device type: 0x4d9d [ 170.643482][ T6733] 0 [ 170.656256][ T45] ftdi_sio 2-1:4.17: FTDI USB Serial Device converter detected [ 170.658125][ T6733] 3921 3921 [ 170.658151][ T6733] Normal free:2968116kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:101248kB inactive_anon:20kB active_file:43320kB inactive_file:65948kB unevictable:61480kB writepending:404kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:8184kB local_pcp:7144kB free_cma:0kB [ 170.662050][ T45] ftdi_sio ttyUSB2: unknown device type: 0x4d9d [ 170.668392][ T6733] lowmem_reserve[]: [ 170.725139][ T45] usb 2-1: USB disconnect, device number 19 [ 170.753534][ T6733] 0 [ 170.767522][ T45] ftdi_sio 2-1:4.40: device disconnected [ 170.789790][ T6733] 0 [ 170.800540][ T45] ftdi_sio 2-1:4.190: device disconnected [ 170.802448][ T6733] 0 [ 170.837835][ T45] ftdi_sio 2-1:4.17: device disconnected [ 170.852511][ T6733] [ 170.904674][ T6733] DMA32: 5*4kB (M) 2*8kB (M) 5*16kB (M) 5*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 170.920911][ T6733] Normal: 687*4kB (UME) 564*8kB (UME) 455*16kB (UME) 1481*32kB (UME) 1431*64kB (UME) 167*128kB (UME) 45*256kB (UM) 36*512kB (UME) 11*1024kB (ME) 7*2048kB (UME) 668*4096kB (UM) = 2966572kB [ 170.939947][ T6733] 62082 total pagecache pages [ 170.944848][ T6733] 6 pages in swap cache [ 170.949214][ T6733] Free swap = 124460kB [ 170.954124][ T6733] Total swap = 124996kB [ 170.958347][ T6733] 2097051 pages RAM [ 170.962600][ T6733] 0 pages HighMem/MovableOnly [ 170.967668][ T6733] 351518 pages reserved [ 170.972105][ T6733] 0 pages cma reserved [ 170.979500][ T6733] Memory allocations: [ 170.983834][ T6733] 0 B 0 init/main.c:1370 func:do_initcalls [ 170.991683][ T6733] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 170.999987][ T6733] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 171.007900][ T6733] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 171.015904][ T6733] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 171.023882][ T6733] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 171.032890][ T6733] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 171.041018][ T6733] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 171.049137][ T6733] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 171.057167][ T6733] 0 B 0 init/initramfs.c:101 func:find_link [ 171.189161][ T6773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=6773 comm=syz.5.2163 [ 171.366164][ T36] audit: type=1326 audit(1750686832.570:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.1.2166" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f475d78e929 code=0x0 [ 171.777077][ T6808] bridge0: port 3(vlan0) entered blocking state [ 171.783404][ T6808] bridge0: port 3(vlan0) entered disabled state [ 171.789746][ T6808] vlan0: entered allmulticast mode [ 171.794963][ T6808] veth0_vlan: entered allmulticast mode [ 171.800935][ T6808] vlan0: entered promiscuous mode [ 171.806245][ T6808] bridge0: port 3(vlan0) entered blocking state [ 171.812535][ T6808] bridge0: port 3(vlan0) entered forwarding state [ 172.283165][ T6828] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.338177][ T6836] overlayfs: missing 'lowerdir' [ 172.366756][ T36] audit: type=1326 audit(1750686833.570:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.1.2186" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f475d78e929 code=0x0 [ 172.397784][ T6848] fuse: Bad value for 'fd' [ 172.629518][ T6874] overlayfs: failed to clone upperpath [ 173.321434][ T36] audit: type=1400 audit(1750686834.520:715): avc: denied { create } for pid=6905 comm="syz.5.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 173.368225][ T6906] netlink: 'syz.5.2209': attribute type 12 has an invalid length. [ 173.574749][ T6910] netlink: 'syz.0.2211': attribute type 4 has an invalid length. [ 173.601531][ T6910] netlink: 'syz.0.2211': attribute type 27 has an invalid length. [ 173.609653][ T6910] netlink: 3609 bytes leftover after parsing attributes in process `syz.0.2211'. [ 173.680851][ T36] audit: type=1326 audit(1750686834.880:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.0.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0938e929 code=0x7ffc0000 [ 173.707589][ T36] audit: type=1326 audit(1750686834.910:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.0.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0938e929 code=0x7ffc0000 [ 173.741445][ T36] audit: type=1326 audit(1750686834.910:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.0.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0938e929 code=0x7ffc0000 [ 173.765778][ T36] audit: type=1326 audit(1750686834.910:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.0.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0938e929 code=0x7ffc0000 [ 173.789400][ T36] audit: type=1326 audit(1750686834.910:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.0.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0938e929 code=0x7ffc0000 [ 173.813345][ T36] audit: type=1326 audit(1750686834.910:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.0.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f0d0938e929 code=0x7ffc0000 [ 173.836820][ T36] audit: type=1326 audit(1750686834.910:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.0.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0938e929 code=0x7ffc0000 [ 173.891078][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2219'. [ 173.961019][ T6946] overlayfs: failed to clone lowerpath [ 174.847076][ T6982] overlayfs: failed to clone upperpath [ 175.455367][ T7025] /dev/rnullb0: Can't lookup blockdev [ 175.548635][ T7048] netlink: 'syz.4.2256': attribute type 4 has an invalid length. [ 175.571457][ T7048] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2256'. [ 175.718527][ T7069] tc_dump_action: action bad kind [ 175.868419][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2267'. [ 176.052418][ T7106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2275'. [ 176.085629][ T7106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7106 comm=syz.1.2275 [ 176.143113][ T7110] overlayfs: failed to resolve './file0': -2 [ 176.551492][ T7146] netlink: 2885 bytes leftover after parsing attributes in process `syz.5.2288'. [ 176.637402][ T7166] /dev/rnullb0: Can't lookup blockdev [ 176.947555][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.972158][ T7189] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.991498][ T7189] bridge_slave_0: entered allmulticast mode [ 176.997957][ T7189] bridge_slave_0: entered promiscuous mode [ 177.014132][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.021208][ T7189] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.044070][ T7189] bridge_slave_1: entered allmulticast mode [ 177.050584][ T7189] bridge_slave_1: entered promiscuous mode [ 177.160058][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.167198][ T7189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.174527][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.181593][ T7189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.212038][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.219397][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.229945][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.237032][ T6426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.246296][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.253378][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.283449][ T7189] veth0_vlan: entered promiscuous mode [ 177.296536][ T7189] veth1_macvtap: entered promiscuous mode [ 177.365708][ T7211] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2311'. [ 177.531382][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 177.537783][ T36] audit: type=1400 audit(1750686838.730:729): avc: denied { read } for pid=7231 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 177.558093][ T7234] fuse: Unknown parameter 'rootmodeD' [ 177.746978][ T7238] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2319'. [ 177.873587][ T7243] cgroup: Invalid name [ 178.085586][ T36] audit: type=1400 audit(1750686839.290:730): avc: denied { setopt } for pid=7249 comm="syz.1.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 Stopping sshd: [ 178.301152][ T36] audit: type=1326 audit(1750686839.500:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7294 comm="syz.1.2337" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f475d78e929 code=0x0 stopped /usr/sbin/sshd (pid 201) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) [ 178.439956][ T7313] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } Stopping network: [ 178.439996][ T7313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:5 [ 178.567689][ T36] audit: type=1400 audit(1750686839.770:732): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 178.648588][ T7334] bpf: Bad value for 'uid' [ 178.653214][ T36] audit: type=1400 audit(1750686839.780:733): avc: denied { read write } for pid=7327 comm="ip" path="/dev/console" dev="rootfs" ino=1065 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 178.677127][ T36] audit: type=1400 audit(1750686839.850:734): avc: denied { execheap } for pid=7330 comm="syz.5.2343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 OK Stopping iptables: [ 178.755165][ T36] audit: type=1400 audit(1750686839.960:735): avc: denied { read write } for pid=7346 comm="iptables" path="/dev/console" dev="rootfs" ino=1065 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 178.785210][ T36] audit: type=1400 audit(1750686839.990:736): avc: denied { search } for pid=7346 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.807065][ T36] audit: type=1400 audit(1750686839.990:737): avc: denied { write } for pid=7346 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 OK [ 178.841450][ T36] audit: type=1400 audit(1750686839.990:738): avc: denied { add_name } for pid=7346 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping system message bus: done [ 179.019861][ T7364] overlayfs: missing 'lowerdir' Stopping klogd: OK Stopping acpid: [ 179.272325][ T7388] rust_binder: Error while translating object. [ 179.272369][ T7388] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.278573][ T7388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 179.467235][ T7396] rust_binder: Error while translating object. [ 179.476428][ T7396] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.482782][ T7396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17 [ 179.572410][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2361'. [ 179.751641][ T7421] veth0_to_hsr: mtu less than device minimum [ 179.768966][ T7404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 179.780959][ T7425] overlayfs: failed to clone upperpath OK Stopping syslogd: stopped /sbin/syslogd (pid 91) OK umount: can't remount debugfs read-only Connection to 10.128.1.148 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 180.832180][ T46] bridge_slave_1: left allmulticast mode [ 180.837846][ T46] bridge_slave_1: left promiscuous mode [ 180.843510][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.851034][ T46] bridge_slave_0: left allmulticast mode [ 180.856769][ T46] bridge_slave_0: left promiscuous mode [ 180.862453][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.082627][ T46] veth1_macvtap: left promiscuous mode [ 181.088142][ T46] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 182.052729][ T46] bridge_slave_1: left allmulticast mode [ 182.058424][ T46] bridge_slave_1: left promiscuous mode [ 182.064100][ T46] @: port 2(bridge_slave_1) entered disabled state [ 182.071038][ T46] bridge_slave_0: left allmulticast mode [ 182.076749][ T46] bridge_slave_0: left promiscuous mode [ 182.082525][ T46] @: port 1(bridge_slave_0) entered disabled state [ 182.089728][ T46] vlan0: left allmulticast mode [ 182.094670][ T46] veth0_vlan: left allmulticast mode [ 182.099997][ T46] vlan0: left promiscuous mode [ 182.104889][ T46] bridge0: port 3(vlan0) entered disabled state [ 182.111634][ T46] bridge_slave_1: left allmulticast mode [ 182.117276][ T46] bridge_slave_1: left promiscuous mode [ 182.122923][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.130485][ T46] bridge_slave_0: left allmulticast mode [ 182.136216][ T46] bridge_slave_0: left promiscuous mode [ 182.141838][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.149548][ T46] bridge_slave_1: left allmulticast mode [ 182.155246][ T46] bridge_slave_1: left promiscuous mode [ 182.160926][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.168476][ T46] bridge_slave_0: left allmulticast mode [ 182.174214][ T46] bridge_slave_0: left promiscuous mode [ 182.179811][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.421829][ T46] tipc: Left network mode [ 182.486038][ T7459] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 182.492800][ T7459] ACPI: PM: Preparing to enter system sleep state S5 [ 182.499801][ T7459] kvm: exiting hardware virtualization [ 182.505310][ T7459] reboot: Power down serialport: VM disconnected.