last executing test programs: 3m40.079715747s ago: executing program 1 (id=82): ftruncate(0xffffffffffffffff, 0x398a0bdb) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = epoll_create1(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) close_range(r0, r1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000100)=0x4) keyctl$read(0xb, r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x1, 0x2a7, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x100000b, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x1, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x4007, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x40000006, 0x1, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xf, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0x3, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x4, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0x40, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1006, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8005, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xfffb, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaec, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x4000000b, 0x5, 0x1, 0x6, 0x5, 0x0, 0x1003, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x1, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x0, 0x2, 0xffff, 0x0, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000ffdbdf250100"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 3m39.392197203s ago: executing program 1 (id=93): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$setregs(0xf, r2, 0x80000000, &(0x7f0000000500)) (async) utime(0x0, &(0x7f0000001840)={0x40, 0x2}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000380)=@ethtool_wolinfo={0x6, 0x0, 0x8, "edf958e7e942"}}) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) (async) recvfrom$inet_nvme(r5, &(0x7f0000000000)=""/37, 0x25, 0x40010020, &(0x7f0000000200)=@pptp={0x18, 0x2, {0x2, @empty}}, 0x80) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x4}) (async) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 3m39.365805055s ago: executing program 1 (id=94): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) setresuid(0xee01, 0xee01, 0x0) (async) setresuid(0xee01, 0xee01, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) (async) r8 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) (async) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$PTP_SYS_OFFSET(r8, 0x43403d05, &(0x7f0000000480)={0x13}) ioctl$USBDEVFS_ALLOC_STREAMS(r7, 0x8008551c, 0x0) (async) ioctl$USBDEVFS_ALLOC_STREAMS(r7, 0x8008551c, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) fcntl$setlease(r4, 0x400, 0x1) (async) fcntl$setlease(r4, 0x400, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x14a600, 0x78e22799f4a46f8f) creat(&(0x7f00000002c0)='./file0\x00', 0x40) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x40) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 3m39.260760683s ago: executing program 1 (id=95): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) (async) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000480)={0x0, 0x13, 0x1, "b7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) 3m37.06981842s ago: executing program 1 (id=129): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3m36.923950491s ago: executing program 1 (id=135): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSBRK(r1, 0x5427) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r0, 0xc4}], 0x1, 0x0, 0x0, 0x0) fgetxattr(r0, &(0x7f0000000040)=@random={'trusted.', './binderfs/binder0\x00'}, &(0x7f00000000c0)=""/176, 0xb0) 3m36.843514238s ago: executing program 32 (id=135): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSBRK(r1, 0x5427) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r0, 0xc4}], 0x1, 0x0, 0x0, 0x0) fgetxattr(r0, &(0x7f0000000040)=@random={'trusted.', './binderfs/binder0\x00'}, &(0x7f00000000c0)=""/176, 0xb0) 1m54.592722479s ago: executing program 2 (id=1922): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_clone3(&(0x7f0000000080)={0x305700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = open(0x0, 0x108242, 0x78e22799f4a46f8e) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0xe, 0x0, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x1, 0xeeee8000, 0xe, 0xf0, 0x40, 0xfd, 0xd4, 0xc, 0x0, 0x4, 0x7, 0x7}, {0x80a0000, 0x0, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xf000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0xeeef0000, 0x3000, 0x8, 0x11, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x3, 0xe, 0x1, 0xfd, 0x4, 0x80, 0x3, 0xfc}, {0xeeee8000, 0x4, 0xf, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0x4, 0x5, 0x3, 0x3, 0xa, 0x9, 0x5, 0x6, 0x2, 0x7}, {0xeeef0000, 0x5}, {0xdddd1000, 0x5}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x8001, 0xe6e70c00, [0xffffffffffffff47, 0x3ff, 0x7, 0x10800000000000c5]}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000f08"]) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x800003a, [0x8000, 0xc95a, 0x100f, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0xb, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0xb, 0x5, 0x3e, 0x8f, 0x4006, 0x7, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x20000007, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x10000001, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0xb, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xac45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x0, 0x4, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3b, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0x200bf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0x3, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x10000226, 0x5, 0x1, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x3, 0x1002, {{0xa, 0x4, 0x3, 0x8, 0x28, 0x67, 0x0, 0x1, 0x2d, 0x0, @multicast1, @loopback, {[@generic={0x44, 0x7, "fe26db3952"}, @timestamp_addr={0x44, 0xc, 0xf6, 0x1, 0xf, [{@multicast1, 0x1ff}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000940)={'gre0\x00', &(0x7f0000000880)={'syztnl2\x00', r6, 0x7800, 0x7, 0x6, 0x152, {{0x1b, 0x4, 0x3, 0x37, 0x6c, 0x66, 0x0, 0x9, 0x4, 0x0, @loopback, @multicast1, {[@timestamp_addr={0x44, 0x14, 0x51, 0x1, 0x7, [{@local}, {@remote, 0x6}]}, @lsrr={0x83, 0xf, 0x38, [@local, @private=0xa010102, @private=0xa010101]}, @rr={0x7, 0x1b, 0xe3, [@remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x11}, @rand_addr=0x64010101]}, @rr={0x7, 0x17, 0xa9, [@empty, @initdev={0xac, 0x1e, 0x3, 0x0}, @private=0xa010100, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x24}]}]}}}}}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) r7 = socket$pppl2tp(0x18, 0x1, 0x1) dup(r7) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x80000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x38) ioctl$KVM_CAP_STEAL_TIME(r9, 0x4068aea3, &(0x7f00000009c0)) mkdir(&(0x7f0000000a80)='./file0\x00', 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000a40)={0x58, 0x0, 0x0, 0x2, 0x8, 0x1, 0xffff}, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m54.532761365s ago: executing program 2 (id=1925): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x500a8, &(0x7f0000000080)=ANY=[@ANYBLOB='mode=00000000000000000000014,mode=00000000000000000003000,gid=', @ANYRESHEX=0x0, @ANYRESDEC]) (async) mount$fuseblk(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x10000, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000140)='\x1c\x8ew\x1e(\xb8\x92~\x9e=5-u:k\x99\xf9\xfa\x7fm?\xf5\xc1\x10ag\x9b\xb06\xc1En\xd7\xea\x7fL\xdci\xdb\xfcb>\xa8~w\xc1~P\x8a\xe7\xdd\b\x00\x00!\xb9}\xf75\xfc\xe3[\xa7&\xbf\x95\xb4\x850\xfaQ\x87') (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000080), 0x8) 1m54.515844126s ago: executing program 2 (id=1926): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143342, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000004000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000ff0f00000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffff04ff00000000fcffffff0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000000), 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="05000000010000", 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000ffffe00000220000000000000000000000000000000000000001000000000a00000029000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000b0000000000000000000000000000000100000000000000020000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff07000000000000000200000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x1000000205, 0x581) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$USBDEVFS_FREE_STREAMS(r9, 0x8008551d, &(0x7f0000000380)=ANY=[@ANYBLOB="54f3000000000000"]) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) socketpair$tipc(0x1e, 0xc0, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r10, &(0x7f0000000340)=ANY=[@ANYRESOCT=r10], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$pptp(0x18, 0x1, 0x2) 1m54.456681691s ago: executing program 2 (id=1927): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x2, &(0x7f0000000100)={0x20, 0x7, 0x5}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x401070cd, 0x3) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1m53.557085744s ago: executing program 2 (id=1942): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x110b}, @flat=@weak_handle, @fd}}}], 0xffffffffffffff34, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x3b, 0x40, 0x2, 0x1, @loopback, @local, 0x0, 0x10, 0x8, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000600)={'ip_vti0\x00', 0x0, 0x700, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x1, 0x2, 0x14, 0x65, 0x0, 0xa, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x27}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socket$netlink(0x10, 0x3, 0xd) syz_open_procfs$pagemap(0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1c, 0x1, 0x100, 0x0, {0x17, 0x0, 0x300}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) socket$inet6(0xa, 0x806, 0x9) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x8, 0x4) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0) 1m53.537759825s ago: executing program 2 (id=1943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$TUNSETVNETHDRSZ(r0, 0x800454e0, &(0x7f0000000140)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000180), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r1, 0xd6baf000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000585000/0x3000)=nil) munmap(&(0x7f000077d000/0x1000)=nil, 0x1000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 1m53.487083859s ago: executing program 33 (id=1943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$TUNSETVNETHDRSZ(r0, 0x800454e0, &(0x7f0000000140)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000180), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r1, 0xd6baf000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000585000/0x3000)=nil) munmap(&(0x7f000077d000/0x1000)=nil, 0x1000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 47.97215279s ago: executing program 3 (id=3104): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async, rerun: 32) ptrace$getregset(0x4204, r0, 0x2, 0xfffffffffffffffd) (rerun: 32) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000000280)=""/241, 0xf1}, {&(0x7f0000000380)=""/86, 0x56}, {&(0x7f0000000500)=""/68, 0x44}], 0x4}, 0x103) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000006400)={'ip_vti0\x00', &(0x7f0000006300)={'ip_vti0\x00', 0x0, 0x20, 0x81, 0x101, 0x7, {{0x31, 0x4, 0x3, 0x1, 0xc4, 0x67, 0x0, 0xc, 0x2f, 0x0, @multicast1, @loopback, {[@end, @timestamp_prespec={0x44, 0x34, 0x42, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}, {@empty, 0x7ff}, {@private=0xa010100, 0x2}, {@multicast1, 0xad}, {@multicast1, 0x5}, {@multicast2, 0x6}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x3c, 0xcb, 0x3, 0xa, [{@empty, 0x8}, {@loopback, 0x5000}, {@loopback, 0x9}, {@loopback, 0xc9b3}, {@broadcast, 0x7ff}, {@multicast2, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x27}, 0xe7}]}, @rr={0x7, 0xf, 0xd4, [@remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x13}]}, @lsrr={0x83, 0x2b, 0x3c, [@dev={0xac, 0x14, 0x14, 0x24}, @rand_addr=0x2, @loopback, @empty, @local, @multicast2, @loopback, @remote, @rand_addr=0x64010102, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000006500)={'syztnl0\x00', &(0x7f0000006440)={'ip_vti0\x00', 0x0, 0x7, 0x10, 0xffff, 0x10001, {{0x26, 0x4, 0x3, 0x3, 0x98, 0x67, 0x0, 0x1, 0x2, 0x0, @loopback, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0x9, 0x1, 0x4, [{@multicast2, 0x3}]}, @rr={0x7, 0x27, 0xd0, [@broadcast, @private=0xa010102, @rand_addr=0x64010101, @broadcast, @local, @private=0xa010100, @local, @loopback, @multicast1]}, @lsrr={0x83, 0x7, 0xda, [@private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x25, 0x3, [{0x0, 0xc, "67aebaf50d027924df1d"}, {0x2, 0x2}, {0x6, 0xf, "a1e735b9731504ee4f21328756"}, {0x5, 0x2}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0xf6, [@dev={0xac, 0x14, 0x14, 0x10}, @local, @rand_addr=0x64010100, @local, @remote, @loopback]}]}}}}}) sendmmsg$inet6(r2, &(0x7f0000008400)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x100}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000440)="99318476a92f1facfdc27f15ee3561a909a47b49824d1440a937ff665618056782fab8e721fdbae0a613277574cf0cea25b7acfa5934726f889f37e882f822256dc287f06432d552c28e54e6a2a5f8782d248ac22dc85e70d628f3bfb8ece02efd8a2c6e7c4f31ad871bb9bd1be8f0388cbfee028098fa0b998aa8c0a165088636d56ba7c4cad95852864940641aebb472c152aaa8", 0x95}, {&(0x7f0000000580)="9f8911845f1403d733cc0b9d2f11b955d82933a2ec94ce31ab2f28fd80efd40a6587c89acd511e8ac4674ba258fa428b5154fc9a59c53a1c94c48673a3d4f918bd0496e35c5a2861e92ca8f4848afbda3390209861f998368859cecdee5783e3369bee0cbb34c47ef9495a197f008cda122e22393efec8ff19af71b574c8e3262365de0def9e9675600965a8d64a57ad8b2ecdf3c97ef27ddbf62e675ad8d156c35d9c2120aa00b0320326e06f9075c0333b9f61420c06ca134529e5be33384dd7c874dcdff34fd570b233d5001ed3c5b94f985795c4b93a003ebe5b6418d7a65f", 0xe1}, {&(0x7f0000000080)="788893efff970a7a", 0x8}], 0x3, &(0x7f0000000680)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x200}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5b0d6ba}}], 0x60}}, {{&(0x7f0000000700)={0xa, 0x4e24, 0x401, @local, 0x9}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000740)="8a1fcfac6eff1f9624a4bec7a9b7cf8e0a4587d81cd545e0c0023ee505503f95fe8b77c07599ff10dd662a92b510669d4ac113f0681067858c6af76bdc71330b1558fcd236fbf84041dd04141a13e696e6f67aab4850569f3a20b8d65ae41fa355e4c0f6ea69f1a278759e", 0x6b}, {&(0x7f00000007c0)="b9f8735f42f792706cde118091aa152c9a8d3c7ff6478d2728b6c81eb627303883", 0x21}, {&(0x7f0000000800)="758d97c6699ab14aaece068e1d2e42fd23aca2a0fb98bbd315dee0351056dd6312419d5979ecfcb523145f7cfdb9b5ef6f9a2c3c35b825df591ff97eba8618fad78473b9a7ac9164aeb7c9a7a17ed53e9d258251c9b92cd4c9a9e6e7b19ab48c6e32", 0x62}, {&(0x7f0000000880)="a658ba87225ff4f471b7e5a4210dd661a5a62bc6bd7c4e12ac28a608bfe5fbbf0d98a43db9d24341784eacaa8f5e52abb08884cc173d57d789d562a56274e75b52ba855c357455997821a9d616c89bdd7223bb7bb1c0b59a67ad02eccb04e12a213dc1cdd91f809baf30b44899360db8a24193", 0x73}, {&(0x7f0000000900)="ab381b3daeaafa137e2e78151b4a97f01d2650dbcfba6b597b9c15d3950a8d8449bcba269e788f7e1580f783b7753a0a66d4729bea973a0b9110c3b3314b3ba819bc3f6880fbecacbb506c4d309cf804039aef64cd02a8b6fd63df94d2007bc2eaab", 0x62}, {&(0x7f0000000980)="6d61170833632080b82a75bddb56a739a5d835a5bdcd8c01f42478fce340e0184ba4ef9696f39fea0801f7beaf26779380be07dc28a77c59d95be718438cc94daa5e5c0e141f010a449e64dbf199b4a12e9baee493ca87defe5cbb1a30fe1d51098e96908d1c475c18f1398325c1520e57edb2907de8117e747b01f24cc72f", 0x7f}, {&(0x7f0000000a00)="ed41d38ce9af8943a8b32025867daf5bcb23774ec6fb897790ef0fa6f5b88c646f7bed78a48079204ba24037a7b46e1f93128f0bdf40ae00a756bb7012eec0227cc001297fcb00e7feb754d2122370ae8a7755c1d588cb904ef1fdba681695e08b62304be46c07a51fc7bd12242877e6559d5ec8e2ec08fc1abefc0e4fa6c5941823dc745f267c16a75d78e74aa3c6fa8940befc82d7a7e863f94c09b91dc63d9e9e406e173acffbb2952b253e03", 0xae}, {&(0x7f0000000ac0)="eb2e52c7b5c8e83607158d8989d51d1781c8245da06e39d8e4d2f97b38e8d69b91c73aff5a2a3d1c1e6209938c26a1555691252f3695c7035c98063dbb778cdf604ab9f011", 0x45}, {&(0x7f0000000b40)}], 0x9, &(0x7f0000000c40)=[@tclass={{0x14, 0x29, 0x43, 0x4}}, @hopopts={{0x50, 0x29, 0x36, {0x87, 0x7, '\x00', [@enc_lim, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @pad1, @ra={0x5, 0x2, 0x6}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5b}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x67, 0x8, 0x2, 0x1, 0x0, [@mcast1, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @remote}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x0, 0xa, 0x1, 0x2, 0x0, [@private0, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00']}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}}}], 0x158}}, {{&(0x7f0000000dc0)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x5}, 0x1c, &(0x7f0000000e80)=[{&(0x7f0000000e00)="58d2ceaf61f39f627677156fd594a639ef70a995577c8263aeccecd1f6795b8c318c1b7b615df75e1b312383af7f78e89affdecff5e8bab785a0faf7750a4339655c4712231d26235b0ec4e69d781e885f", 0x51}], 0x1, &(0x7f0000000ec0)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x3b, 0x0, '\x00', [@pad1, @pad1]}}}], 0x20}}, {{&(0x7f0000000f00)={0xa, 0x4e22, 0x37, @empty, 0x7}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000f40)="84fc4ed1e1825415ebfa2aeb79ea54b9edf15f7076ead085af5b2dde7c443774d11663d13a9de47d24f13aca7383d876c806b77714a208ff40a296f3ca91e61cd46e3e2474bdbda57f845ab99807035f8f0c1af1da208f96e5fb151e47dbbda8f25820b20c918f8aaf2fedb69df48ff6b4922d2b4fd5b120c69f2b8ede12deb77a0b52b1b9b4362ac2f671bcbc66cb0cca7f885fa44cf2d4fe8a32e334fefa455fa608953fd281fabd1e20450e075d3a688a5fc88ae8df461f20214aaff7f0c1837474c38e9c6bf9223fe323409dcb77bf629fe99947012e280a7703fa87803a58f51f0ea4f00b", 0xe7}, {&(0x7f0000001040)="76a55151c71b9e6ce14905d3169b1e43ec97ca68ae2a549eb6cd6dbfacfc65392ecd726cd46c42ae3a6af0438ce8a2129c7f410a0f83ef83b863cc0ef10e4027e70c3ec6fe2885d7163cbc5977323e65b49cf0ab5a7b1069da276c78a6b5d3c5391b41b00a9fcd4074cfe0d5078934bc18b143ca17f6624468d4c3427ee2362de6cc397351ba1a890f98d538a729d7c613f4a6023e21322ab4826d1eb3cb08cc27e9e81137c3b2f7ccef4ad8b70b2ab06c017255f94faf2b6a9a48467a6185ad5620283870da45c61158ed22cd42c8e0a885c9257b4167ec837a0999c0be4f313e31", 0xe2}, {&(0x7f0000001140)="fa2b3675d427a63bf1bc5584f32d77df7e6fd114ee20052ef57f80dc45b35c7b1f9dce6d347d7984b1156c53203aa9cd4a7f4c38cd1bfc4c712750cf07122cc5a58970cfd9511c3e25e500390d9c68548e24c74e3562654dcf21076ee392642835a74b917c496a871097a08e0a8293b0a22098d5d4c5ceeee501bdae5426bd5f8af805f2c7daeea5f80d05a7deb5ae988e9b1b12555234eaf2835ea7929b988304e7c2b4debf94", 0xa7}, {&(0x7f0000001200)="640c621071e723d17d5b4936bab5cc1b119087777e790727eaa1c924761df36e9fbff27ace2e0c31f11b41ac087e36908569050976b4885bc91c44bad8", 0x3d}, {&(0x7f0000001240)="9acc9efce5e1633265791dea7cad7c72b697467a591b2fd39418d24fbbba865d7ac01d44de9f22067de82f895ed1fde82d124059f984aafdf830b83b13d92d80b1641044aea2dac6a563ac07ff7441cf35b2612797e436d4df15c3b5", 0x5c}], 0x5, &(0x7f0000001340)=[@hopopts_2292={{0x38, 0x29, 0x36, {0xb379099ab6a5bcdb, 0x3, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0xce, 0x3, [0x1]}}, @jumbo={0xc2, 0x4, 0x8000}, @pad1]}}}], 0x38}}, {{&(0x7f0000001380)={0xa, 0x4e22, 0x81, @private1}, 0x1c, &(0x7f0000003680)=[{&(0x7f00000013c0)="b328aed25f8687eb0b323cd31a4b891bda3cd6860298de1c8c051fdee89daa1c7288a02581edb0a2085625714a290f996dfbe7b917a2aeecf431cfad8132d2f9897101110d41cb2bf0b9a8bb01a2846dfb4ca5c0fb17b391b2f2a837adcf206c17ccc49de08639ba138e436606114d9ffbed41fe4e5691a6844385aa3d49b87b4e5a881785f00387c2538564a82f7ca15119d26c3308406afbae542f8495524833d5679279ffb5745fdbd6d28c49b588e8a1d8fe51ced4423c2278bb7c86a3d94b2258591f5d75b9919dd07a9a66a5fd197f8fd25b04b1aed1b6e8bb52f18ae64fe505b2d2edab5a", 0xe8}, {&(0x7f00000014c0)="debec6e7323d4f99fcd6aff1075c71462e808a29932d9b47cffdd6f34e915df7f468a5817a7124f788247cc5acd00b6c497082a0183fa28a0ce967e6ad3e937303704dc5e0c3bd1a1d6fec75c03aa9e430f3ddd9b1ba05d0bb7fe69193eeb2e024d43f915cf28e63c9ecfce6c439f6608671b03b1309175ffb123001a615119a3bd245522554d981a35c754d68f8779aa67777f9707078488b34090b5ec196d40c22bbc2c0a238fb513cfb0ef6f5621377de765d88d2", 0xb6}, {&(0x7f0000001580)="193b8677fa80185938fa49dba4fdf2ac4c52db16", 0x14}, {&(0x7f00000015c0)="74ce712b18ba4e1af5e9ce7b51b4f3b9bf35d5a2d3ade03a2aa9da17fc160c5deebf7805c8039767bf5cbad5af96ffc828144b7634e44716beeee5c7d8dac55ac6236c69c1f9e3b34503d62333d79223a756176e5f680db00b84f8185fe0daf875f36a93ca946f5755fee09126109930e6f4d961b409035372884dfb5b87d79edd6f83ed450c8a17508ac43279b448eec48c3d8c27c0bce7aa625b509ebbdb075ae0a9274584a0", 0xa7}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="fb10ca7164d60ced0b82d6ee32570686e65718c5487612c5e8d9bc6b0b14d4762500285897f5f27b2f9ea1a7907dde101c91b07afe891aaf84769c820723227919e0c636574d038270eb3a311f03851a4a16a8fc0387e59a768faeac4d3946085912c8dfa010d9ec5f83f17dc9ab5884efd5f5b3266ec30b747960b7d127a3561fc826b825a4e2065737fcaa0be8dbd233ecf0efb938ed5c730f2aecb30f93e7e41b0b0cb76a8257dd34eb30cea6d13631394b19b8addc48db500d4bd3d8f6877e97e2e5ad7437a129ce82574e24cb71e5b617ebe235be622598fd2addf6302dd67f337007f8acd5488259825539ff3b40842bf44c752fcf37f30cf4cb7769efebe8c1f304b0149b74485679a6b4c63dfb7e12dd6932594dc3371102f8423e1491bcbca63c1a467b30843a58eb3786a3bedeb93211c0f2ae0fbdbd922430439e647a23ab0718c40171e6f934c2e087dcc2af1e325921f768c34880b3f96cde6c6ddd4f081b330ec75d704c823324f19fe411d939eed70cc5aadf5e90a2a7750d94fac0455501da4d6e3725adff4f2b348a1d68e655cd42b2730d8be2db5354a03713c03b44f55a88d818f2a762a1cf463a4aab716eed631094042899c3ce622fab0f9120858486a293edbfc678f020159280b09c5ca178155a159a0f0ed40d669aff1f0037ee4a1470d4f02cda17622b9ca10b7049444981e010f4350cf9d471c50e5a59ecb734923ca3526929625f36715b0f58db65a8d48acdef356f31ce6f16b34392e3af280dcfb7115423dada79ba8ea42d9e8759be145b4ea5273b553ccaa81e8ed1c4419e4c4fb8126550be87dc738d6dc2e2f9a94c08819cb2eccb83ec8d208308660e03eb9936b20afff3c4c486a3977f2ef9f6a11adc5796079b169f0c6a702fe0533b644b86ef0d80b7929e4574bfce70b15ec30bb92dd122c845155154c0345950b39dad3eaae6606e9eb6df10c3c22a8fd01787c43fe0a8a9295803294c8147d9c2948682f2451c525104a1c2b78f498ffb1bf4a590ed1b4640ddb939d6413fa7d04c57c0a6f7eaa741538befd939244bbd239bc1a33c6dfe4746a7aec3dacb9b27b6cb41c3dbde2f05aa10271307c9ff10e34aee264120e9dece5341bccc1206d2a30c243e5a3aa2b3262e9e26c8a1114ea5cde2ef4a5407b0f9edfeab254a5ca2416ddea3df277696c1f59c6b04019479915943848acf40a96f9e66911ed67d6ef1a2812851782ac601ff6b8ab662b3d13bfc9c2ff549148581812cdfb1c5a9297adb72c78e1cab5af4583f7b31228f62f921ddab20501e1c0cc2f07cd793712345bd3f7b0d58fe8bf43483ade12bc113fb1d613817c5cddb7c05e82cf7d1f2ed416309f864d1478d3b313d17248e0d83a1f3162499bb29e74bc5e618b96996fe3241a2a4df194fd15e469f8fa383f11bddd8399bf94b8ade5513c734ce93ac23d5164223440cb43991f2191cb03ddc302bde6505913d0ddb153b31ac978e6c93fea211661662357c5f7fef9e5e452860e83d1b331367a03db3462ed61412b5822396f9bc06ad7fa452055e48f06fcb3cb235a3eb9cb3983ba41c4f89223894d11ce3c26de6e906b1057ef642f7c7ab083ce1d7f0591fe8417a45914e39df6f82894c50c009d0c2ce1326aeca670a84bd85c9819a03e459750213e7104073c1dbb1b23443fcdfd8fb90992fb35fd13cbd2bc659f168d9dceb1815b78b14f02facad32d06c370a8a91621f9d685af1c793071dbba0ffffe8e79aa6a26df877c971cf28e224a5514ec82cc084b5896ac85a09eb6f73c7a75e6522b206d3e8f3368fc91c8320fc68ea41be65d7895e5e64c4aa9a5522ccee350d3cba3f9b64890070b6aed0aa21e48f127cd8f3c1f5268a8887a333fe825ca21335985530dd061574b7a8e4131ebaa9f3c9a21f67fa5fcfd91de539362a05f4c64b00c838148b968207f4f87fc9ccb9434ccc2f57532249771b0b0a038ecfc7d505463bc354fd994f156120312bfcd30e6f196b59ef4b2d15506b3c9b141181bbbc12d2d415c3adc52b646c60c2797a1b6a9f7eeb12d4ec5234f536be133c89479af72b4d89dc3f2d60adefab6a939fddea839f6deec7c16aa94a61c6b54b8f0b128eff4e2d041b426e7ae549bdaa5add40d922d38f87d9c393add30375c36e5a8a1d3c5b48fa8d0d1749677dccc5325299a560e8ffaa0732ad2b549ae5c9446746a791cf5b504ba527b492baf4137c703e7ad26329720da163cdd26a654accdbd763f1ad2a8c25bcc929481218d12d005ad427f9b4cf22f24df144de5ea899fe0790d6eefba783a5ef5f097e42de3f85b9651d7876f0bcc2606df98abdd6a8cf7f7e78c6e6bfb5471a2c722066c44c2654f5e599097c5e828c31943399cc3a86549eef806ca5cd51ab4a28424894b5d3c11b5ac244e1ff60fbcf4f09135bb51f38ba29a124a6a50836f7631ca819ee8ec69139231435e57b0f379d48ca53d519237cd2d94d5d4a4bb7f90a6b97781aa332c1596659b1c2a00bf014e82e171f5df027ea624651638b75c8f0d0e24dbffef4b9d09b2c85b8b9d4703bd056a8b14b68503174d82f57b4647d978ca5705ba686e40fecc022e453c3e25492badcfb1617e0e7cadaf2e3ddc946f177bcb313f99b5c197a17f3e62fa8399c0fba76374fb361a80fedeb5eeb0fd012414649e95863df1a354c5f6b2d404582d56c77eb7b40f80082027660727031171b6f4ce824a7733f6eed70473deb4d2bf47c08d881beaa26c39f1ef1162b7144b2ee42c003287405eadf3c7fea36e58052483c5b01d489536e4edb630754f44e19d6cd9e02eb67117cc36d1ec11440faf2ec6feff4d501558d20ae84fbdc2f69c9459d6145338ed6c1257b739ab6f3951f7c1834d7b504966e290677ee047850d762a8328afc6f12fc3732a39881ac87030d6b955af520075a786cb31866c31ca564f6869bce08be1f3c9a9a00fec6444dd7347c6d3486333df1db6553cea82c113d14b93bf039b37752b3b6778a9d49663b2a0e9d17d8b76275a500fd7810b669d5ecc9d0f51349a7baf41d0b17636af80a8ab030fff5ae7586980593e1d3ff77e9e9e82af6125b29f41017c43f439c7d663c28c08899206afa132c1166336043c6aa093355e6a4da92c1113f086f4fa35b8740c793fe62009163e16f4a3f63c23187c21466f201c95f0a9dc4754e7f0bef7e9c1e80642ef83b79b538ee866161b7389643e9bb9b5e0a7f30112c716202957f24b6e3220f4267f2cc1ee5df36ddb331ecf5f210c7db4f296672bd5482633218c86b44261037a2dd3bda8fe5c82f1dfbfa5beb2e431b8f5ee8c250040ce6f83910a918a0e10c7c86e551fa0931dbc5f2d8ae2f8dec8deeb37c7143e3905b285d71aa63da9cfac8b53f2c3f7a6d2cb4fb290357e773e4e72e5fd56eb3e00d1186383121268722d611a98289aeef0f68653137140fe16f986aecc8763665b953e4ffff0bdddc351cd8ede10a31bb58307935c31ca114385de142d54a03431abafdfabc94fef691c6f1ad200f1ab096ec45e0a4a7ae34af60fd9022b5cc15d03a1d03020c66740440bf7c0ef58c6aef58d8a34491bfd31c6883b6a086197ade6a90b955ee0f7e3b7cfc955b827124514456824c2ae90cef7ee7dd030365327e1a0e32c07e467f15b6b331bb660b6d5831d01ab3d256a2d3a5c19f4f1b8ad7b59f0cf0d05d40bc64c91459c5f2b9ce52845a7e4338ee620687f0219c458f28aef3faca8eb3c6fc169366a181ea93baf3035be76e1976d7d32c6c4ec0d8c67e7a9749551f245e42ec519a47c5988a59450398220639e046c3bc7011a749cefbc744e4d365bd484cd24afdbdba71a348a3ce0d20f038bf542ee9d34f777f5397f6833f174c9cd40389dd5edebbe5016d180783cdefd0dea5b086e4fdc4847a12bb209d76df995523ba47659172f5b443feb92248f914689068145883bc51910ad02b80992bddb229ce3095941dd4e65d418873c30f3b92ea11fd8e3b9dcbd2147fd9851e164b8dea9e526056274267286306dc2298b28010de1f5377a60ae5175dd6cdef9a18014ede4c5af98dd67deb8fed3550d98bf89ec7e3fa25863755bc64d1a81062654731caf9530e067b7b6ddbdfdff0bc9e7aa14b3ffad85ed66cf7ec0bccc62c9529ad7ab16847dda6a1f69c7692a5414d6779d24a3a5d98caa571527e13413aa71becc34aa2c20cb07ba9c1b91c9303f3a9d53b86c66e009d01fe71003fb783cbd4b91ce429ff8ff2ec7f4cf2ad426e3410b8eab83d334d6fc50e7e9e3fb5ee1658007cc12f668773748a7b2152d48bef7ac4bc24332e08a85a6e97e2b92253d7f19ead4102398eed0cea3b4a6144b5cdf1ea86af736ade211700173e8230570d3224b002aaaf4bb87c6801c5b929c5c57f3c4a9ce3820cf45737628109de2fff2785509e9c626c3374d56f367a11815aeb1eb66103fb7fa6515b551fa78a3fe90a331bc47956a8f75ba600ba54f53b4b7136b0b1d756126cadfa87e912a06e031e8f57fe71b63f6a43c528bd2580998237fc523b50b763677d5695a8666302810acc43e6a4ff4f5198f7f6adfd567a290a2273b36b3f089cd8299dbc83aa46c9efbf69a12748589457f502cce7aed1f9a2a8e68933e9d7557167179547cc67cc77fc0a85ff02ccd7c90a1117c046efcf5c1cbdedd3d7af556f3bce60f5b792d33b4d0fb9e2ee9fabf1fd3ca503a95b132b208780907ab8e185036e7a61aee089d17bc8e48e2e4fdf8e2f079a0b720135b3e2aa94006f33c5cb38889e3b99c21be83a84b02d5578c03756f185ca02f39890909aa82259b3fe3d4500f0cfa6ee3383b94e4bf621cf660392e3c9e2b6c5d1d31b31a90017227a0bdb7f85d86b40c93510881108ff9979941100630cab53ef13fdafab7518c02582a19cf5acc0989bd01649ad34dd8ee0530d44caf940effa20d1b03e0b2a36a40dfcc99fbe5fbcc15ad41cc6c172bb8409b4097dac4049c16b3bff637a861ec58b4300ce931443faa71c5a4ed0108f784b0dddaa3a8819ce46494744e297cd71491c892458fbed0abb1f665fb0e0872bff31f5ebf4f9ab3ba876d3d628e38ba1aa62fe7c5c867430cc4804b17f1f6da561d1f51bbdcfe3f042bc330518db9e15ee0dce474ffa88593630a4d9fb87e3a84f4659db73c7883cdfa55eb8de36fed32fcf39aaa71ddae4363dd19ce2b047c0e9788f61348573e01e0a69c2b6d443e6661ad066fa3ac4f8f6841edc584bcf9fe20da038ae9e30c00680ac6b9414f3f1b0f7930a423cab7b74639b4c0de24c34faf1d816072d1a84ba87784da8b484df3ba82ceb543829f92e3c952994b421924a0eb71d94f9aa2ef80a86f31dd3de697e919e1b1e1b436750c23a711abaf1628ab400264f2d967bf7f957ab0633780dcfe1b6440d3c0a249b8a2feb4331e966693fc9867bd224f72d2ed2d29fb87c60549ded79953ac29bfb1117fa1e8077e296ac2fe52b2e8017d9b3d1379a5675de0c78673de7249c5aed4c413308e4b3671fff248f8d3fc9e475f31e78b0abdd52e31ea74f93059ac38aef5e40a67de1efd06c743c5403310504bebd61179b92cdc457f3f110140f445be7eff7f005b4d1166eb5dcd8fb7078daa0191e4b8c119ad76bacdcd271b919fa8a30dac10cd52b47a17c5d0d36d43b0b0e0cbea5c1e18a7afbe1a8bcf6619d3d08d36e6f781a88711f710fa21a0afd155fe69540b72e2d6dca948f88d5c2e03e801b8ef2b74d727b7ff4abc7720a5764006eb08adadf730426aaace7e7c9", 0x1000}], 0x6, &(0x7f0000003700)=[@tclass={{0x14, 0x29, 0x43, 0x1}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0xbc, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @dstopts={{0xb8, 0x29, 0x37, {0x62, 0x13, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x38, {0x3, 0xc, 0x20, 0x0, [0x5, 0x6, 0x2, 0x0, 0x3, 0x6]}}, @jumbo={0xc2, 0x4, 0xfffffffb}, @generic={0x5, 0x3e, "4143395dc58624321e8c51cfe9d1c2c833fe4e096f3c818440f39eba73b0c0f30551008fed07d28f1aa2dfe5b505d66155a6a87f7a14a62e3461e1314620"}, @ra={0x5, 0x2, 0x40}, @hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0xc3}, @enc_lim={0x4, 0x1, 0x20}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x1d, 0xc, 0x2, 0x9, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, @private2, @ipv4={'\x00', '\xff\xff', @local}, @mcast2]}}}], 0x188}}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f00000038c0)="0e8937e772ed7fbb004c7b93d60fda65dc3cb1da016b83ef0a8e50410e734e7347fe00e8aef666688c745def370c20061a50738191658c89523d136822c3bb17b37a3ab4fe474cf1116c8f4b729fd0b726bdcaf090eb20218bdf07d5c0389ea2a22e30dfd1268e6cd3", 0x69}], 0x1, &(0x7f0000003980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x2434}}, @hopopts={{0x58, 0x29, 0x36, {0x29, 0x7, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0xad, 0x4, [0x4, 0x8, 0x7]}}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x76cd25f8}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0xa0}}, {{&(0x7f0000003a40)={0xa, 0x4e24, 0xd3c6, @loopback, 0x4de}, 0x1c, &(0x7f0000004d80)=[{&(0x7f0000003a80)="ea8bf2afb0716ebda027acec1fc9353fc28a01b94622f6fb6d2a3c743267979dbb8ff78476f0591e5e67badfeda19b5287cbf3aa2d7ce7ead5b4e7d2915390c4aebc7811f09fe66b966ebcadf98dc7bff13c746089d54784f9a83b9fa98cc278fdc85c96e56de557a01bf2ac0cc64e21b5141e6579ea9aa9d9494471a30da5e030cab5953e3b0c5e41acbf55ac4c5fc2f66a2be6a3f661d2a4b2", 0x9a}, {&(0x7f0000003b40)="61c817689be88c54b24e52b32d16fd1cd9350f354f2bad9ff21cd516d7e52e3fc1a96bf34dc45baf89960a0e7ed239b037cae3da214d9e3a4cb443ae8427691340b3c28a3562b84f378ea8be5cc83ff1262f668ecc43837be3c682ffbe8e254aa7ed955064966104f28924c918678257964ea3be1caa7e017f5a3f7f69", 0x7d}, {&(0x7f0000003bc0)="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", 0x1000}, {&(0x7f0000004bc0)="69333397e80011ca6cdf9de46a515a5030de469323076f8144b56e5b521d80239748c3f55917f61deca8b9194d", 0x2d}, {&(0x7f0000004c00)="c64a5d19935653841f938345b845a9fff0786be399a0b028e5ebc6f577a1b86c2036b8a69f5a46306e17d480483e5b05037f158fa10151a1d6f8091edc34081dfb73d2dd3edf99545fb68b87255e3c4985809849e7e066d819800e201b933b4e8b913f26eec90d626a3fb35b32f0a93de2be32b40c793f8c58218035f777d8d4f89fbb198fc52304cdbf2c979231eb03ec8079f4f045459d746d1f0d25c2b7c009bbd8ed141a05799480e2a523f7c682fa4e83dd3d9b16e8d59851807306be4ecb3452b613bf9db0e6798808baf370c0f7bae9f6f8", 0xd5}, {&(0x7f0000004d00)="3c282a9c6f4f8888353bc8ccb48a44c01eb2429787e4c694fe8e6bdd6fa3b61600eb60ea455e25a6a1b7bbb7ba820c975d7a4dcd350eb16d627661e5b1a5a558f9eb513dde0798f2c3bcbace4651b120d3c89f9c931c8f59714afa", 0x5b}], 0x6, &(0x7f0000004e00)=[@dstopts={{0x38, 0x29, 0x37, {0x0, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x18, {0x2, 0x4, 0x5, 0x1, [0x100, 0x4]}}]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x2f, 0x3, '\x00', [@ra={0x5, 0x2, 0xff}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @enc_lim={0x4, 0x1, 0x35}]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x2b, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xd}, @enc_lim, @pad1]}}}, @hopopts_2292={{0x88, 0x29, 0x36, {0xc4, 0xd, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @calipso={0x7, 0x40, {0x3, 0xe, 0x2, 0xfff9, [0xfffffffffffff384, 0x3ff, 0x5, 0x38b6c1bd, 0x1400000, 0x4000000000, 0x5]}}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0xf}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x3, 0x4, "ae4eeaed"}, @enc_lim={0x4, 0x1, 0x62}, @enc_lim={0x4, 0x1, 0x7}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfff00000}}, @dstopts={{0x60, 0x29, 0x37, {0x6, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x1c000}, @calipso={0x7, 0x40, {0x0, 0xe, 0x5, 0x7, [0x2, 0x2, 0x100, 0x200, 0x800, 0x1000, 0x100]}}]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x0, 0x10, 0x1, 0x7, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @private0, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}]}}}, @hopopts={{0x168, 0x29, 0x36, {0x0, 0x2a, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @pad1, @generic={0x1, 0xf8, "0aa07ba0004803f59210afa29f9eb4be6f53924d4be2b2914eda0022dc2f925052937036c65f731f9da0286da53ae6317ff144c9c50a575b321b390f16fa76cf36679025bb27ac5c52d38a97437fb7dd3b229320736e393218f1fd922bd22d8aee33778614878cad2f6131565f306961f6c34bfed067df45a57e2ad06552e71db9daf1cf97f5ae981e1edfbb693deec3082d13193ad0420934eeb5816b4da3954cc1482adf4401ae278c2776546e1cb2b6d8373825711a4a82faffdeceb5aa217eb1d599d761d67bab7d155ee685884236a93deb275b41e90c7a32858664ffe434c73dcd709fed4881d451e3b10ca3debf8bb60fecdbc698"}, @pad1, @calipso={0x7, 0x40, {0x2, 0xe, 0x6, 0x7, [0x2, 0x9, 0x63b8, 0x6, 0x2, 0x7, 0x5]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x28, 0x29, 0x39, {0xff, 0x2, 0x1, 0xfd, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}], 0x3c0}}, {{&(0x7f00000051c0)={0xa, 0x4e23, 0x80000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f00000062c0)=[{&(0x7f0000005200)="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", 0x1000}, {&(0x7f0000006200)="94a336a891b5b51317ef3e695aeb9404d7ffa61e224671996efc18707de4472a4a1a7a83ede41cc9f9d18ea24d5ad89a89d17b9502fa0ed2776fe33670b1f41a9ba0a003856dca765a0e5441de3e49032a7e04dca11f6c3ec4903df38282fc31be1ec3b6e99e6e83decb7de0b74c377861ae3588e1b5ed3be7bf17c1dc5b86b91bb5dc9709d67c7e8a5a1b16b8a3d03a", 0x90}], 0x2, &(0x7f0000006540)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x33, 0x4, 0x0, 0x5, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0]}}}, @rthdr={{0x78, 0x29, 0x39, {0x0, 0xc, 0x0, 0x6, 0x0, [@remote, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @hopopts={{0x128, 0x29, 0x36, {0x5e, 0x21, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0x9}, @generic={0x9, 0xf3, "6db961c5df3eaf6fb6c44b7658aaa65d0e14982cb1f35da56efde5d941996831ff634e1019a4c93b9b6daedabdbd98d74072c7538fe8d45aaee65ccbe58729f90ec6b10c94a590206498c0cdab426c2abe1e752646203ff6969628f01b496ebf29c0fbc35ca963c2a976de8943ebad1c0649607df6c7e9c005567ea3df0da892876522a253b4afcd6884f55c578767a10f08b29748c6c7f012b693285fa626246075b3940470ba350de2181873be0318464ada080ba1816853182d1305d121cd3d327481c067380503e8b7e99be828a05c34972741fbc1b6f0f526416e78fc8e4599ccde90977f4061f0aa5c3586bbd9547fb8"}, @enc_lim, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r3}}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r4}}}], 0x228}}, {{&(0x7f00000067c0)={0xa, 0x4e22, 0x1, @remote, 0x4}, 0x1c, &(0x7f0000007c80)=[{&(0x7f0000006800)="d3cf270ceefbc977ace55e421727922dc89206458e6f22607555ec0b53698eb713a71cb4d6eba387db1b6d1ad2bb9c13e67d8935b6792bef5ed376d69895119638ad86382699ac85abbf94bd115abc111ba5330d473b6ea47edc0301a4fc7de436f338ee3b0c6e8ae2a43d6203e93b2cb2ea4f2ef121524bf316fd2568ce41bd1bdb7d3e6a27a433a41a8a04204fce5f7ba13932188a9d5c9f8c66db880e01f38cf49572b0877797b3656ffe086647713b3a490d332bf1c75c738f2f27ae4ee24c30069d02ea0d", 0xc7}, {&(0x7f0000006900)="003c556fa83d43059f21cdf371ffe14e0d51856a86d814d3d942a0e701c4491adb6f1ad0de72203a819d41d3021b3ad1881eba538a831136ca305ec7d6da76c70aabe1355da08778bb45e0ee1c2680070ce28d442790203618567e7ca0b38f6f296b0ae45634a6d3e518f594f9c7d83b0699e443e3b14f61b4503eaa94320a98e5311bec2415125c8d98508f11bbe60d80e16145e5ddae37774baf9e1c025918f900ccfc2a165ff6ded04365f5582df7e50f984a0c463b550359f9225328a0b10cf89127520d1613d93744c17106c9ce10ff69d0ea102abf5050a6e0aed0", 0xde}, {&(0x7f0000006a00)="1d934b33f0f0f2eb3f209161a2b3ebb7dcbe46dbb0776ca57af55420303f3c63fae58167c3cd755e2c4f608df22098ab5d2dad50113d8d99f23a780f6a0f820abf4d3c97db427c829438aeea7ae828377ffd52423280a1a33fb7325f8ff24be744bfa28843f6263bb97f", 0x6a}, {&(0x7f0000006a80)="3156ca09a4533db105a80c51c0ea76f95ddfe1eb96644564dc80cecfffec23d05ef311ee2e74860faf12c015b6db1ae82b7c50202daa300ab4720dc19b5187f2099a97aabb96b4f8e43a687b941906bea1454f9708f373ae70b57d05bad2", 0x5e}, {&(0x7f0000006b00)="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", 0x1000}, {&(0x7f0000007b00)="eea8187f01da559542163937924a0ab1802039dfc07d83bfe20f0fa72d803483eab7090b79c120efc6d274b1c4d676b489", 0x31}, {&(0x7f0000007b40)}, {&(0x7f0000007b80)="6fa301aab56d69e782e1b68755d6935fa4d5aa3d6ba75dd338b34186948bf036d60d5c9a19a86538", 0x28}, {&(0x7f0000007bc0)="e814f4eea779e7a90034a5a441dd3c01db3d8f66709ff41e43b4b77a61c5c607f25f8233f4ae7fe644417813fac29e8e35a78866733182098358b4cd310d052627fb9a6d521f8a2312cc467390cdda0ad445f98c04b0e47cbbdc5ee179eb9c5e38226f56df3d4db00ec0c5c425365e7d0353551f3b5448a80bca4168f4801c32a260f30fd70cd42d1d4920cac7b1ff3cf30ca582ed36913f76eb0db1591fc873d0c2a0093a77a9b31bb93f1a8d7fe62cc8c08110005babd6e62a45", 0xbb}], 0x9, &(0x7f0000007d40)=[@tclass={{0x14, 0x29, 0x43, 0x3a}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0xac, 0x4, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x6, 0x70, [0x4, 0xa]}}]}}}], 0x58}}, {{&(0x7f0000007dc0)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f00000082c0)=[{&(0x7f0000007e00)="2809e4c14364c2f91f4926558f8056fed97ec8df81c011dbae12f3a63c24e8bb775adf3f8989bf8f39b14ff3268b5292781883262ee9856efc0291538615edd21964733c31533fe5c7e703f092fc89fb44494c50f244443d38d826fef0c6c8555540dd669e939b0dc6915ea9743a531d5c8f79479fc5ed7d24f2a92875872bd609b07b80a3be47892d4524808f5adedbecd80994496155485114", 0x9a}, {&(0x7f0000007ec0)="00504e055108620030075a044949f9892b9b048fa2421b22bc9a985c2e7354b5ac998e8946a8f63d881c0ebfb440ff94f4cd66b041183c81519f5982b71b607b7f9efec3d7793ebf38832fce7be87499d307f0d91128f558772386312d5b45b4203e2b532e11a4e67c2c8d4e1b79fa37de6ef985df12f03b0485b1c0f1bed71a66f70b88f75a7660bee8807fb0bda814a60b6a9c2ee135161ce86464e4eeba9b845e8a45", 0xa4}, {&(0x7f0000007f80)="b21f1f5b7c599daafceb4eb4cdd44d88301ffbb8cd71e838", 0x18}, {&(0x7f0000007fc0)="6737452489df58b5e431571cdbb66a278e1c5d323ce8d188498cadd6a022873416bcebc520cf05381fff2e7601dc43b939db2fd7761a111067135057f0c7", 0x3e}, {&(0x7f0000008000)="b6f6ad4f8ed666052cced05e3c857a3bea638a2bd2570f45a7b45809bf4d51d2620da5957042f7eee1053a3e961ea11aaabce808e94d6029e3edd28a1f5ebc7e65ed3425e2043ed5eac22e066d2cd9bec736a83bdec872fad98197a2b4b36086d605dae87668787f320714868aa599d435910cdfc66ec75660e3c4bd424c1d439a83f85094adb7970f3924ee4ca30edde8b6f050ed8c51fe9aa5e03218d292747a12857e02080bff857107", 0xab}, {&(0x7f00000080c0)="576b6209e09dc1808b2cc5ce62fbe4728677bdb296", 0x15}, {&(0x7f0000008100)="191a02f3c678b8ec3417e60025a649f03464f725fd59ff9e269ee8fb9cbcc6a860c2fbdba0fd2b7419ad2e3f11f30a557435229181fc17ca15d29e4f6b08ca59f6d84e1741e9ed51fe2ff502479f94d2139fde52cdc12404dbcf7bc8c928be6e64d5d7055ecc43136aad61dc55455b5dbf1ce08a2db0c6c1f4aaca263c8bc631d68d6e076e61e4fe3aa8576f817e86374c90ea6c9fd207be7bde0fcf99a96ce6237744227b20cd4fb7f0291821fca51101d5aea55bc9332334221add874a68e37c870ba1e359b20fb3ce84b2c07aa233073a4f2a9a9f6eeba2d1b561f4af8871bc1f7a821a79061fc36b86a207def6268f3d", 0xf2}, {&(0x7f0000008200)="bce42c40ab9974adc71aed0dd9483ec999da536b0b56cfa3d19671a3da0cc0cae1deb0f8bd0e417686643271b314b4ce12ff0b09c2ccc930b3d9af0cc5a7e9963c8189ff5e67cd58c3132ab0f08ebf3b7ee8657ee3a7ecd79c28c612c349374fd7202bb835751a8b27f749b745f6fb2e832c4b93f72cae05b2fa46b8f083ada68053782a269926fc254a947dbf4a578c09f37ffbd0daa29d579cd798eadec5f73563cfaaf09f04be1054ed3d785ebacadb5881fa66419a", 0xb7}], 0x8, &(0x7f0000008340)=[@rthdrdstopts={{0x50, 0x29, 0x37, {0x29, 0x6, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0xb, 0x9, [0x9e, 0x0, 0x200, 0xcc, 0x1]}}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x32, 0x4, 0x1, 0x37, 0x0, [@remote, @ipv4={'\x00', '\xff\xff', @broadcast}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2c, 0x0, '\x00', [@pad1]}}}], 0xa8}}], 0xa, 0x8008801) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 47.444226963s ago: executing program 3 (id=3112): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) (async) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)='G', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000540)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="84010000100001000000000000000000fc0000000000000000000000000000010000000000000000000000000000000000006159000200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x184}}, 0x0) (async) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="84010000100001000000000000000000fc0000000000000000000000000000010000000000000000000000000000000000006159000200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x184}}, 0x0) ptrace$cont(0x20, r4, 0x0, 0x20000000) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}, {@userxattr}, {@uuid_off}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}, {@userxattr}, {@uuid_off}]}) chdir(&(0x7f00000003c0)='./bus\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}, {}], 0xa, "64c2b4b7027efbeb20ab949f5807070ebbd4f7e0842e325411df41b26d0766c497af46f8f40a2b5b8c7d39b34f85d90fc99cc95e26210d22901b0783dc90b76a8b24c8bc8ea3abe6bb749eedfc0c94ddf15b74adffcaaba0378f6cf7bcbc0ec0c0"}, 0x81) lseek(r9, 0x40203, 0x4) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000074d564b4e7040b67dd849f33998781b13d5904f1ff6a599f5ef427d9344fd"]) (async) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000074d564b4e7040b67dd849f33998781b13d5904f1ff6a599f5ef427d9344fd"]) splice(r1, 0x0, r3, 0x0, 0x2000000002ffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @local}, @loopback, @local, 0xe7, 0x3, 0x9, 0x100, 0xe, 0xc0000, r10}) (async) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @local}, @loopback, @local, 0xe7, 0x3, 0x9, 0x100, 0xe, 0xc0000, r10}) 47.302340474s ago: executing program 3 (id=3114): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000020315000000000000000000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="20ebffff000337f9d5e401004d733df901", @ANYRESDEC=r1], 0x20}}, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xc}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xc}, @flat=@handle={0x73682a85, 0x101, 0x7}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000020315000000000000000000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) (async) ioctl$TIOCSWINSZ(r4, 0x5414, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="20ebffff000337f9d5e401004d733df901", @ANYRESDEC=r1], 0x20}}, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) (async) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xc}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xc}, @flat=@handle={0x73682a85, 0x101, 0x7}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) (async) 47.261114298s ago: executing program 3 (id=3115): madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x1, 0x0, &(0x7f0000000040)) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd, 0x400}) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x9614, 0x0) setpriority(0x2, 0x0, 0xd2f4) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) capget(&(0x7f0000000000)={0x99c01a1}, &(0x7f0000000040)={0x4, 0x100, 0x4, 0x7, 0x200, 0x73303f08}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r2, 0xff, 0x1, 0x0, &(0x7f0000000040)) (async) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd, 0x400}) (async) pipe(&(0x7f0000001300)) (async) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x9614, 0x0) (async) setpriority(0x2, 0x0, 0xd2f4) (async) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) (async) capget(&(0x7f0000000000)={0x99c01a1}, &(0x7f0000000040)={0x4, 0x100, 0x4, 0x7, 0x200, 0x73303f08}) (async) 47.168679365s ago: executing program 3 (id=3116): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4000080}, 0x14004084) syz_clone3(&(0x7f00000003c0)={0x1000000, &(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180), {0x1e}, &(0x7f0000000480)=""/138, 0x8a, &(0x7f00000001c0)=""/118, &(0x7f0000000280)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) prlimit64(r2, 0xc, &(0x7f00000002c0)={0x8, 0x9}, &(0x7f0000000340)) r3 = socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x62040200) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @remote}, 0x3}}, 0x2e) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf25190000000c00018008c1a9000100000064000180080003000300000008000100", @ANYRES32], 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x40008d4) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) 47.167899295s ago: executing program 34 (id=3116): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4000080}, 0x14004084) syz_clone3(&(0x7f00000003c0)={0x1000000, &(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180), {0x1e}, &(0x7f0000000480)=""/138, 0x8a, &(0x7f00000001c0)=""/118, &(0x7f0000000280)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) prlimit64(r2, 0xc, &(0x7f00000002c0)={0x8, 0x9}, &(0x7f0000000340)) r3 = socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x62040200) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @remote}, 0x3}}, 0x2e) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf25190000000c00018008c1a9000100000064000180080003000300000008000100", @ANYRES32], 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x40008d4) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) 4.434350714s ago: executing program 4 (id=3989): clock_nanosleep(0x1, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'vxcan1\x00', 0x2912}) ioctl$TUNSETNOCSUM(r1, 0x400454cc, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x16, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) r5 = socket$netlink(0x10, 0x3, 0x8000000004) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8880, 0x85) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 4.340726882s ago: executing program 4 (id=3991): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0x4e22, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000440)={@private=0xa010100, @loopback, @multicast1}, 0xc) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.097229731s ago: executing program 4 (id=4022): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x81, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) 2.340678712s ago: executing program 6 (id=4035): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/235, 0xeb, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x1e}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0)=0x1, 0x4) 2.334497022s ago: executing program 6 (id=4037): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x7f) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000000)=0x80000000, 0x4) sendto$unix(r2, 0x0, 0x803e, 0x0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x40000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x4, 0x7fffffffffffffff}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @private2, 0x10b}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f000085c000/0x3000)=nil, 0x3000) munlockall() ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000708000/0x2000)=nil, 0x2000}}) getdents(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x13) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1/file2\x00', 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, 0xffffffffffffffff) getdents(r5, &(0x7f0000001840)=""/4138, 0x102a) openat(r1, &(0x7f0000000180)='./file1\x00', 0x4ff38779f8822c8d, 0x8) sendmsg$netlink(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYRES16=r3], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) 2.276611487s ago: executing program 6 (id=4039): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x7ff, 0x913d, 0x0, 0x6, 0xf42, 0x7}, {0x0, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2}, {{@in6=@loopback, 0x0, 0x33}, 0x0, @in6=@empty, 0xfffffffd, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r2, 0x8ee49000) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x34, r4, 0x308, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x80}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4080) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.996376269s ago: executing program 6 (id=4047): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x180, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x12, r0, 0x56a31000) bind$packet(0xffffffffffffffff, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000000)="580000001500add40500000000e5000002117ffffdff81004e230e227f0000000001e809100000ffffe74fd200000000000000020000000000000000000000000000000000079ad148d4ee0000b9cb25bba2968253ea1c03", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x3c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x82710}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@mcast2, 0x6a, r6}) getrandom(0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap(&(0x7f0000323000/0x1000)=nil, 0x1000, 0x9, 0x8010, r0, 0x5419e000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.86518556s ago: executing program 6 (id=4048): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x294c01, 0x10, 0x4}, 0x18) openat$incfs(r1, &(0x7f0000000200)='.log\x00', 0xc0080, 0x100) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x80, 0x0, &(0x7f0000000140)=[@exit_looper, @clear_death, @increfs_done={0x40106308, 0x2}, @free_buffer, @exit_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@flat=@weak_handle={0x77682a85, 0x10a, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @fd}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @exit_looper], 0x0, 0x0, 0x0}) 1.808643254s ago: executing program 6 (id=4051): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) unshare(0x20040600) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r1, r1, 0x21) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000c40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b070b, [{{0x9, 0x2, 0x2d}}]}}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x2403}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mount$bind(&(0x7f0000000140)='\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1a800, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f00000002c0)=0x1000) connect$unix(r3, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ppoll(&(0x7f0000000100)=[{r2, 0x4}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000000500)={[0xfdc1]}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 1.553291775s ago: executing program 4 (id=4053): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='freezer.self_freezing\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000002380)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x8000, 0x2, 0x12) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000100)=0x6, 0x4) 1.539489796s ago: executing program 4 (id=4054): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') (async) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) (async) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) (async) 1.157416617s ago: executing program 0 (id=4064): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0x10, 0xa, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x0, 0x8000, 0x0, 0x402226, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 1.156599727s ago: executing program 5 (id=4065): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) r1 = socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1.156230257s ago: executing program 0 (id=4066): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in6=@loopback, 0x4e20, 0x5, 0x4e21, 0x8, 0xa, 0x90, 0xa0, 0xc}, {0x1, 0xf, 0x40000000, 0x4, 0xffffffffffffffff, 0x9, 0x7, 0x8}, {0x80, 0x7, 0x1, 0x81}, 0x662a, 0x6e6bba, 0x1, 0x1, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x32}, 0x2, @in6=@mcast1, 0x3503, 0x2, 0x2, 0xd, 0x9, 0x5, 0x2}}, 0xe8) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) fcntl$setlease(r3, 0x400, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xc}, @flat=@handle={0x73682a85, 0x101}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 1.092764102s ago: executing program 0 (id=4067): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x2}]}}}], 0x18}}], 0x2, 0x0) (async) shutdown(r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x1000, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.090653362s ago: executing program 0 (id=4068): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x400, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0x179}, {0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0xffffffffffffffff, {[0x8, 0x4, 0x6, 0x6e, 0xfffffc01, 0x2, 0x6, 0x7]}}, 0x5c) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x82f18000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='ip6gre0\x00', 0x10) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x3, 0x13, r0, 0x85b83000) 1.044017396s ago: executing program 0 (id=4069): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) sendmsg$key(r1, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020afc000700000028bd7000fecef970dbdf2505001a0000000000000000000000000000000000640101000000000000000000000000002c003000"], 0x38}}, 0x40408c0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x20000008b}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x6, 0x24, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0xc0085508, &(0x7f0000000180)=0xffffff7f) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1e5240, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008009}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004100010500010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x20000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000001040500020000000000000000000001"], 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x20000000) ioctl$KVM_RUN(r6, 0xae80, 0x0) prlimit64(0xffffffffffffffff, 0xa, &(0x7f0000000080)={0x1, 0x7}, &(0x7f0000000100)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x26}, @flat=@weak_binder={0x77622a85, 0x1001, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 1.021969348s ago: executing program 5 (id=4070): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000001c0)=""/215) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) 964.711732ms ago: executing program 5 (id=4071): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) syz_clone3(&(0x7f0000000480)={0x80000200, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff], 0x1}, 0x58) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 231.015421ms ago: executing program 0 (id=4072): mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000000)='./cgroup/file0\x00', &(0x7f00000000c0)='ext3\x00', 0x200022, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x1c, &(0x7f0000000040)="88d0a4332ca430eb314853fe5cef77c890ddaf6e26", 0x15) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/262, 0x106}], 0x1) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000140)={0x1, r4}) close_range(0xffffffffffffffff, r0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r5, 0x29, 0x1c, &(0x7f0000000080)=0x2, 0x4) 134.200109ms ago: executing program 5 (id=4073): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f00000000c0)={r1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffbc, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f0000000000)={0x1, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f00000000c0)={r1}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffbc, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f0000000000)={0x1, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 1.84056ms ago: executing program 5 (id=4074): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1, 0x1, 0x1}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000540)={@mcast2, r1}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="390000001300034700ab65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0xb1, 0x9, 0x0, 0x3334}, {0x20, 0x1, 0x0, 0xbffff038}, {0x6, 0x6, 0x0, 0x5}]}, 0x10) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0x9ffc) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000580), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$incfs(r6, &(0x7f0000000000)='.pending_reads\x00', 0x4401, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0xc0386723, &(0x7f00000000c0)) writev(r2, &(0x7f00000001c0), 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x1, 0x12, r8, 0x0) ioctl$ASHMEM_SET_NAME(r8, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r8, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83\x1b\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x1d\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbzE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\x02\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x02\x16\xf5\xe6\x7f\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\x18g8j\x0eT\xbe\xa1\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35\xef\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00\xfel\xf1\xc8\x0f8\xdb%W\x87\xd0\xbc\xbf\x97\xa9\x97\v\xbe%\x81\xbf[\x05\x9d\xed\'\"( \x15\x8bA\x19\xa8\xbcF%\x17#[\xbb\x99U\x92\'\xb6\xbe6\x8f\xc9%\xd9\xce\x91r\xfch\xf5\xf5*h\x1e\x0e\xbcD\xc4\xb9\x93e\x84\xb11\xae\xb8\x06\x81\x96g\x17h\a\x02\xfe\xa0\x1a\xfd\xb3e8\xa5\xd0\xb1\xa1\x8c\xd2\x9f\xd3\xc3?\xb6\x0e\xfe\x1f\x1bG31\xf9J\xf4\x85\xa9L\x1b\x18\x01A\x18\xae\xc9B\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xb9\xc2\xdd\x9d\x8d5B\xaf\xe2\xf3\t\x97_uaJ|z\xec\x11\xb6\xd2\"U?cH[\xe5\xcf\xe0b&^\xbd\x15\xaecx@`\xe8\x1c\xfe\x9e\x17L\xa0\xe2l\xfa\xf1 \t\x0fG\xcd\xc3\xbc\x96z\x0e\xe9w\xc9y\x11\xf31\x8cc\xe2\xcd+\n\xcb\x05\x7f*2\x1c\xde\xb5\xd53x\xbd\xe5\x157l\xf1\x15y^\xbf4\x05\x94\xda\xd9\x04\x1b\x1dP\x1d\xbb1\xc8<*\xfb\v\b\xaf \xae\xea\xa4\x8b\x18\xefc\x90[\xe4\x8a\x03\xe3\x9e\xb9]\x8a~z\x9e\xc7qLY\xa0\xce\xdd0\a\x19\xe3\xd6\xeeV\x93\b~{\\\xa4\xe1\xc7d\x9c\f\xed\a&m\a\x9f7\x03]C\xed\xb4\x80>?/3\xc2\x14r}\xe0\xdd\xab\xc8\xb1\xb3\xdbu\x86\xa6Xo\xc7\xf4\xcc\xdf\xb9\x92W\x02JL=F\xd6a\xef') writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000080)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c504}, 0x0) r9 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(r9, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000847000/0x1000)=nil, 0x1000}, 0x1}) 994.16µs ago: executing program 4 (id=4075): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60e80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r0, 0xa0e51000) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 5 (id=4076): r0 = fsopen(&(0x7f0000000140)='romfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) fchdir(r1) r3 = open(&(0x7f0000000180)='./file0\x00', 0x41000, 0x100) lseek(r3, 0x1, 0x1) getdents(r3, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x468a00, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f00000000c0)={0xffffff01, 0x10002, 0x4, 0x3, 0x18, "48b4299abf3991c75ba90fd2ee13ed2ee2f419"}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000040)=0x5) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000026c0)=0x5) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000000)={0xffffffef, 0xee3, 0x9, 0x7ffd, 0x90, "9900010000000000008000"}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000010c0)=ANY=[@ANYRES64=r6], 0x24}], 0x1}, 0x40904) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x10, r4, 0xe6683000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1800, 0x20005, 0x3}, 0x20) ftruncate(r4, 0x3) futex(&(0x7f000000cffc)=0x1, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000200)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): idge_slave_1: entered promiscuous mode [ 172.471339][ T8197] rust_binder: Error while translating object. [ 172.471379][ T8197] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 172.482618][ T8197] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127 [ 172.551184][ T8159] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.570272][ T8159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.577681][ T8159] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.584852][ T8159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.612574][ T8223] Invalid logical block size (-23228) [ 172.618136][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.627000][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.646455][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.653572][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.661468][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.668557][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.696684][ T8159] veth0_vlan: entered promiscuous mode [ 172.710275][ T8159] veth1_macvtap: entered promiscuous mode [ 172.837502][ T36] audit: type=1400 audit(2000000081.474:492): avc: denied { append } for pid=8233 comm="syz.4.2585" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 172.971185][ T8241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.979880][ T8241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.072652][ T8244] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2588'. [ 173.074059][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 173.084891][ T8244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4114 sclass=netlink_route_socket pid=8244 comm=syz.5.2588 [ 173.102975][ T8244] 9pnet_fd: Insufficient options for proto=fd [ 173.130625][ T8248] netlink: 'syz.5.2590': attribute type 1 has an invalid length. [ 173.139384][ T8248] netlink: 352 bytes leftover after parsing attributes in process `syz.5.2590'. [ 173.187939][ T8254] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 173.214084][ T552] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 173.233951][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 173.240517][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.252202][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.262417][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 173.271973][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.281421][ T10] usb 5-1: config 0 descriptor?? [ 173.370215][ T552] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.378930][ T8270] netlink: 'syz.5.2599': attribute type 4 has an invalid length. [ 173.381515][ T552] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.399434][ T552] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 1.00 [ 173.402612][ T8270] netlink: 'syz.5.2599': attribute type 4 has an invalid length. [ 173.408856][ T552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.430770][ T552] usb 1-1: config 0 descriptor?? [ 173.439128][ T552] usbhid 1-1:0.0: can't add hid device: -22 [ 173.445337][ T552] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 173.477150][ T8274] binder: Bad value for 'stats' [ 173.689303][ T10] hid-picolcd 0003:04D8:F002.000A: unknown main item tag 0x0 [ 173.699002][ T10] hid-picolcd 0003:04D8:F002.000A: unknown main item tag 0x0 [ 173.706678][ T10] hid-picolcd 0003:04D8:F002.000A: unknown main item tag 0x0 [ 173.714316][ T10] hid-picolcd 0003:04D8:F002.000A: unknown main item tag 0x0 [ 173.721815][ T10] hid-picolcd 0003:04D8:F002.000A: unknown main item tag 0x0 [ 173.723131][ T7881] usb 1-1: USB disconnect, device number 19 [ 173.784655][ T10] hid-picolcd 0003:04D8:F002.000A: No report with id 0xf3 found [ 173.792363][ T10] hid-picolcd 0003:04D8:F002.000A: No report with id 0xf4 found [ 173.899934][ T7881] usb 5-1: USB disconnect, device number 9 [ 173.944037][ T64] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 174.083350][ T8291] veth1: entered allmulticast mode [ 174.093803][ T8292] veth1: left allmulticast mode [ 174.095099][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.108590][ T64] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 174.118194][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.127308][ T64] usb 4-1: config 0 descriptor?? [ 174.312835][ T8309] overlayfs: failed to resolve './bus/file0': -2 [ 174.421981][ T8312] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 174.537806][ T64] lenovo 0003:17EF:6047.000B: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 174.697321][ T8337] rust_binder: Write failure EFAULT in pid:30 [ 174.722647][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 174.722687][ T36] audit: type=1400 audit(2000000083.354:495): avc: denied { listen } for pid=8338 comm="syz.4.2622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 174.755501][ T8339] rust_binder: Write failure EFAULT in pid:32 [ 174.774519][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2623'. [ 174.817009][ T36] audit: type=1400 audit(2000000083.454:496): avc: denied { map } for pid=8342 comm="syz.4.2624" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 174.903314][ T8347] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2624'. [ 174.965439][ T64] lenovo 0003:17EF:6047.000B: Failed to switch middle button: -71 [ 174.976333][ T64] lenovo 0003:17EF:6047.000B: Fn-lock setting failed: -71 [ 174.986721][ T64] lenovo 0003:17EF:6047.000B: Sensitivity setting failed: -71 [ 175.002735][ T64] usb 4-1: USB disconnect, device number 17 [ 175.026046][ T8351] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.041353][ T8350] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.048157][ T8351] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 175.062238][ T8350] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 175.099058][ T8352] rust_binder: Error while translating object. [ 175.099103][ T8352] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 175.105701][ T8352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:40 [ 175.227474][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2631'. [ 175.414460][ T36] audit: type=1400 audit(2000000084.054:497): avc: denied { create } for pid=8364 comm="syz.5.2632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 175.511570][ T8382] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 175.520437][ T8382] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 175.529599][ T8382] overlayfs: missing 'lowerdir' [ 175.753902][ T64] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 175.883909][ T64] usb 4-1: device descriptor read/64, error -71 [ 175.989894][ T8394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=8394 comm=syz.4.2643 [ 176.134158][ T64] usb 4-1: device descriptor read/64, error -71 [ 176.263942][ T7881] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 176.345088][ T8405] overlayfs: failed to resolve './file1': -2 [ 176.373942][ T64] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 176.415444][ T7881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.425293][ T7881] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 176.434373][ T7881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.443032][ T7881] usb 5-1: config 0 descriptor?? [ 176.503916][ T64] usb 4-1: device descriptor read/64, error -71 [ 176.743917][ T64] usb 4-1: device descriptor read/64, error -71 [ 176.851865][ T7881] lenovo 0003:17EF:6047.000C: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 176.870013][ T64] usb usb4-port1: attempt power cycle [ 177.213908][ T64] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 177.234935][ T64] usb 4-1: device descriptor read/8, error -71 [ 177.252406][ T7881] lenovo 0003:17EF:6047.000C: Failed to switch middle button: -71 [ 177.262984][ T7881] lenovo 0003:17EF:6047.000C: Fn-lock setting failed: -71 [ 177.270696][ T7881] lenovo 0003:17EF:6047.000C: Sensitivity setting failed: -71 [ 177.282732][ T7881] usb 5-1: USB disconnect, device number 10 [ 177.364980][ T64] usb 4-1: device descriptor read/8, error -71 [ 177.603966][ T64] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 177.624936][ T64] usb 4-1: device descriptor read/8, error -71 [ 177.756347][ T64] usb 4-1: device descriptor read/8, error -71 [ 177.836885][ T36] audit: type=1326 audit(2000000086.474:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.0.2664" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f46b8ebe9 code=0x0 [ 177.864157][ T64] usb usb4-port1: unable to enumerate USB device [ 178.000575][ T36] audit: type=1400 audit(2000000086.634:499): avc: denied { append } for pid=8457 comm="syz.4.2665" name="pfkey" dev="proc" ino=4026533025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 178.032092][ T36] audit: type=1400 audit(2000000086.664:500): avc: denied { associate } for pid=8457 comm="syz.4.2665" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 178.054498][ T8458] rust_binder: Write failure EFAULT in pid:56 [ 178.532273][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 178.677404][ T36] audit: type=1400 audit(2000000087.314:501): avc: denied { listen } for pid=8470 comm="syz.0.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 178.697465][ T36] audit: type=1400 audit(2000000087.314:502): avc: denied { accept } for pid=8470 comm="syz.0.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 178.903984][ T64] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 178.976985][ T8473] netlink: 'syz.4.2670': attribute type 1 has an invalid length. [ 179.033925][ T64] usb 4-1: device descriptor read/64, error -71 [ 179.134512][ T8479] tipc: Enabling of bearer rejected, failed to enable media [ 179.142856][ T8480] tipc: Enabling of bearer rejected, failed to enable media [ 179.227822][ T36] audit: type=1326 audit(2000000087.864:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8493 comm="syz.4.2677" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe361f8ebe9 code=0x0 [ 179.273918][ T64] usb 4-1: device descriptor read/64, error -71 [ 179.513926][ T64] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 179.643892][ T64] usb 4-1: device descriptor read/64, error -71 [ 179.791811][ T8513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2682'. [ 179.893960][ T64] usb 4-1: device descriptor read/64, error -71 [ 180.004031][ T64] usb usb4-port1: attempt power cycle [ 180.081722][ T8525] usb usb9: check_ctrlrecip: process 8525 (syz.4.2687) requesting ep 01 but needs 81 [ 180.091386][ T8525] usb usb9: usbfs: process 8525 (syz.4.2687) did not claim interface 0 before use [ 180.102853][ T8525] overlayfs: missing 'lowerdir' [ 180.343908][ T64] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 180.364958][ T64] usb 4-1: device descriptor read/8, error -71 [ 180.494986][ T64] usb 4-1: device descriptor read/8, error -71 [ 180.553931][ T837] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 180.553983][ T838] Bluetooth: hci0: command 0x1003 tx timeout [ 180.688076][ T8550] fuse: Bad value for 'fd' [ 180.733937][ T64] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 180.774911][ T64] usb 4-1: device descriptor read/8, error -71 [ 180.856096][ T8574] fuseblk: Bad value for 'fd' [ 180.861595][ T8574] /dev/loop0: Can't lookup blockdev [ 180.914902][ T64] usb 4-1: device descriptor read/8, error -71 [ 181.033998][ T64] usb usb4-port1: unable to enumerate USB device [ 181.316312][ T8602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8602 comm=syz.5.2711 [ 181.928081][ T8643] netlink: 'syz.0.2724': attribute type 46 has an invalid length. [ 181.936077][ T8643] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2724'. [ 181.945579][ T8644] netlink: 'syz.0.2724': attribute type 46 has an invalid length. [ 181.953736][ T8644] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2724'. [ 181.973900][ T64] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 181.985707][ T8646] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 182.081416][ T8653] tipc: Started in network mode [ 182.086516][ T8653] tipc: Node identity ac14140f, cluster identity 4711 [ 182.093510][ T8653] tipc: New replicast peer: 255.255.255.255 [ 182.100880][ T8656] overlayfs: failed to clone lowerpath [ 182.106915][ T8653] tipc: Enabled bearer , priority 10 [ 182.112121][ T8658] rust_binder: Error while translating object. [ 182.113277][ T8658] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 182.119621][ T8658] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:117 [ 182.125079][ T64] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 182.159401][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.172829][ T64] usb 4-1: config 0 descriptor?? [ 182.178682][ T36] audit: type=1326 audit(2000000090.804:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.5.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10db8ebe9 code=0x7ffc0000 [ 182.202085][ T36] audit: type=1326 audit(2000000090.804:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.5.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10db8ebe9 code=0x7ffc0000 [ 182.225567][ T36] audit: type=1326 audit(2000000090.804:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.5.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb10db8ebe9 code=0x7ffc0000 [ 182.226464][ T8666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8666 comm=syz.4.2730 [ 182.250157][ T36] audit: type=1326 audit(2000000090.804:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.5.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10db8ebe9 code=0x7ffc0000 [ 182.285181][ T36] audit: type=1326 audit(2000000090.804:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.5.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10db8ebe9 code=0x7ffc0000 [ 182.308695][ T36] audit: type=1326 audit(2000000090.804:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.5.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10db8ebe9 code=0x7ffc0000 [ 182.332297][ T36] audit: type=1326 audit(2000000090.804:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.5.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10db8ebe9 code=0x7ffc0000 [ 182.356089][ T36] audit: type=1326 audit(2000000090.804:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.5.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10db8ebe9 code=0x7ffc0000 [ 182.379784][ T36] audit: type=1326 audit(2000000090.804:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.5.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb10db8ebe9 code=0x7ffc0000 [ 182.403397][ T36] audit: type=1326 audit(2000000090.804:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.5.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10db8ebe9 code=0x7ffc0000 [ 182.430088][ T8669] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 182.438982][ T8669] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 182.480197][ T8678] overlayfs: failed to clone upperpath [ 182.763945][ T870] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 182.833513][ T64] usb 4-1: Cannot read MAC address [ 182.839046][ T64] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 182.851785][ T64] usb 4-1: USB disconnect, device number 26 [ 182.913891][ T870] usb 5-1: Using ep0 maxpacket: 8 [ 182.921260][ T870] usb 5-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 182.943928][ T870] usb 5-1: New USB device found, idVendor=0403, idProduct=7150, bcdDevice=eb.e0 [ 182.953142][ T870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.967043][ T870] ftdi_sio 5-1:254.0: Ignoring interface reserved for JTAG [ 183.165361][ T64] usb 5-1: USB disconnect, device number 11 [ 183.233903][ T9] tipc: Node number set to 2886997007 [ 183.249687][ T8715] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 184.033181][ T8738] netlink: 'syz.5.2755': attribute type 1 has an invalid length. [ 184.169958][ T8750] netlink: 'syz.3.2760': attribute type 4 has an invalid length. [ 184.178625][ T8751] netlink: 'syz.3.2760': attribute type 4 has an invalid length. [ 184.204436][ T8751] netlink: 'syz.3.2760': attribute type 4 has an invalid length. [ 184.229554][ T8751] netlink: 'syz.3.2760': attribute type 4 has an invalid length. [ 184.384479][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 185.278817][ T8778] loop5: detected capacity change from 0 to 16384 [ 185.664121][ T8824] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.807742][ T8848] overlayfs: failed to clone upperpath [ 185.953921][ T870] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 186.083903][ T870] usb 5-1: device descriptor read/64, error -71 [ 186.323937][ T870] usb 5-1: device descriptor read/64, error -71 [ 186.393933][ T837] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 186.393932][ T838] Bluetooth: hci0: command 0x1003 tx timeout [ 186.493498][ T8864] overlayfs: failed to clone upperpath [ 186.583905][ T870] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 186.713897][ T870] usb 5-1: device descriptor read/64, error -71 [ 186.973971][ T870] usb 5-1: device descriptor read/64, error -71 [ 187.082313][ T8917] overlayfs: failed to clone upperpath [ 187.089020][ T870] usb usb5-port1: attempt power cycle [ 187.233896][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 187.383905][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 187.390406][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 187.398922][ T10] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 187.407124][ T10] usb 4-1: config 0 has no interface number 0 [ 187.413277][ T10] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 187.424284][ T10] usb 4-1: config 0 interface 88 has no altsetting 0 [ 187.433264][ T10] usb 4-1: string descriptor 0 read error: -22 [ 187.439959][ T10] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 187.443930][ T870] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 187.449045][ T10] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 187.465470][ T10] usb 4-1: config 0 descriptor?? [ 187.472672][ T10] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input8 [ 187.495482][ T870] usb 5-1: device descriptor read/8, error -71 [ 187.625079][ T870] usb 5-1: device descriptor read/8, error -71 [ 187.674443][ T10] usb 4-1: USB disconnect, device number 27 [ 187.848812][ T8957] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2831'. [ 187.848808][ T8956] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2831'. [ 187.848873][ T8956] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2831'. [ 187.876135][ T870] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 187.876716][ T8957] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2831'. [ 187.904965][ T870] usb 5-1: device descriptor read/8, error -71 [ 188.034973][ T870] usb 5-1: device descriptor read/8, error -71 [ 188.144052][ T870] usb usb5-port1: unable to enumerate USB device [ 188.333054][ T8983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:190 [ 188.338075][ T552] rust_binder: 8982: removing orphan mapping 0:24 [ 188.356728][ T552] rust_binder: 0: removing orphan mapping 24:1112 [ 188.547517][ T9014] rust_binder: validate_parent_fixup: new_min_offset=58, sg_entry.length=0 [ 188.547539][ T9014] rust_binder: Error while translating object. [ 188.556481][ T9014] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 188.562708][ T9014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:209 [ 188.680940][ T9023] binder: Unknown parameter '' [ 188.725049][ T9029] rust_binder: 153: no such ref 1 [ 188.775003][ T9039] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.775029][ T9039] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.804158][ T9040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:158 [ 188.804248][ T9039] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.840449][ T9039] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.840487][ T9039] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.895351][ T9047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.895609][ T9047] rust_binder: Failed to allocate buffer. len:10771147061988852024, is_oneway:false [ 188.904288][ T9047] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 188.917787][ T9047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:166 [ 188.952170][ T9049] netlink: 'syz.4.2861': attribute type 7 has an invalid length. [ 188.969415][ T9049] netlink: 'syz.4.2861': attribute type 5 has an invalid length. [ 188.978794][ T9049] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2861'. [ 188.993947][ T9049] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 189.103479][ T9059] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 189.134712][ T36] kauditd_printk_skb: 74 callbacks suppressed [ 189.134732][ T36] audit: type=1400 audit(2000000097.774:588): avc: denied { relabelto } for pid=9056 comm="syz.4.2866" name="file0" dev="tmpfs" ino=317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 189.168081][ T36] audit: type=1400 audit(2000000097.774:589): avc: denied { associate } for pid=9056 comm="syz.4.2866" name="file0" dev="tmpfs" ino=317 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_lib_t:s0" [ 189.213885][ T36] audit: type=1400 audit(2000000097.844:590): avc: denied { unlink } for pid=8159 comm="syz-executor" name="file0" dev="tmpfs" ino=317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 189.260538][ T36] audit: type=1400 audit(2000000097.874:591): avc: denied { execute } for pid=9066 comm="syz.4.2868" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.288386][ T9075] vcan0: entered promiscuous mode [ 189.293740][ T9075] vcan0: entered allmulticast mode [ 189.304396][ T9074] 9pnet: Unknown protocol version 9 [ 189.459385][ T9084] rust_binder: Write failure EINVAL in pid:216 [ 189.466646][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2875'. [ 189.493933][ T9085] bridge_slave_1: left allmulticast mode [ 189.509922][ T9085] bridge_slave_1: left promiscuous mode [ 189.515711][ T9085] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.528222][ T9085] bridge_slave_0: left allmulticast mode [ 189.540769][ T9085] bridge_slave_0: left promiscuous mode [ 189.546547][ T9085] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.733941][ T870] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 189.753930][ T552] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 189.798085][ T9095] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2879'. [ 189.809357][ T9095] overlayfs: failed to clone upperpath [ 189.884998][ T870] usb 4-1: config 1 interface 0 altsetting 252 bulk endpoint 0x1 has invalid maxpacket 32 [ 189.895211][ T870] usb 4-1: config 1 interface 0 has no altsetting 0 [ 189.903669][ T870] usb 4-1: New USB device found, idVendor=03f0, idProduct=0014, bcdDevice= 0.40 [ 189.913065][ T870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.913912][ T552] usb 5-1: Using ep0 maxpacket: 8 [ 189.921368][ T870] usb 4-1: Product: syz [ 189.928194][ T552] usb 5-1: unable to get BOS descriptor or descriptor too short [ 189.930456][ T870] usb 4-1: Manufacturer: syz [ 189.939319][ T552] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 189.942755][ T870] usb 4-1: SerialNumber: syz [ 189.951347][ T552] usb 5-1: config 0 has no interface number 0 [ 189.957274][ T9087] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 189.964621][ T552] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 189.980034][ T552] usb 5-1: config 0 interface 88 has no altsetting 0 [ 189.988898][ T552] usb 5-1: string descriptor 0 read error: -22 [ 189.995333][ T552] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 190.004463][ T552] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 190.013518][ T552] usb 5-1: config 0 descriptor?? [ 190.020218][ T552] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input9 [ 190.153343][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2881'. [ 190.219870][ T64] usb 5-1: USB disconnect, device number 16 [ 190.226880][ T9088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2875'. [ 190.286193][ T870] usb 4-1: USB disconnect, device number 28 [ 190.311231][ T9109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2883'. [ 190.713762][ T36] audit: type=1400 audit(2000000099.344:592): avc: denied { map } for pid=9114 comm="syz.0.2886" path="socket:[30922]" dev="sockfs" ino=30922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.926015][ T9130] rust_binder: Write failure EINVAL in pid:225 [ 190.941135][ T36] audit: type=1400 audit(2000000099.574:593): avc: denied { create } for pid=9133 comm="syz.3.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 191.213926][ T552] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 191.375148][ T552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.385137][ T552] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 191.394379][ T552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.403135][ T552] usb 4-1: config 0 descriptor?? [ 191.610426][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.610460][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.617539][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.626570][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.630534][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.637121][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.647677][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.652976][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.658825][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.665565][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.672224][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.678733][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.693389][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.693413][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.701961][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.708724][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.715530][ T9157] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 191.722098][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.748874][ T9157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:190 [ 191.755682][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.765432][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.772078][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.788871][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.803231][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.816271][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.832766][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.835618][ T552] lenovo 0003:17EF:6047.000D: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 191.853968][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.857071][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.867557][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.875220][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.881813][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.893136][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.902244][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.909027][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.916256][ T9151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.951517][ T9175] netlink: 'syz.5.2908': attribute type 6 has an invalid length. [ 191.966115][ T9175] netlink: 'syz.5.2908': attribute type 5 has an invalid length. [ 191.973917][ T9175] netlink: 'syz.5.2908': attribute type 4 has an invalid length. [ 192.234069][ T9136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.242736][ T9136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.252482][ T552] lenovo 0003:17EF:6047.000D: Failed to switch middle button: -71 [ 192.260595][ T552] lenovo 0003:17EF:6047.000D: Fn-lock setting failed: -71 [ 192.267995][ T552] lenovo 0003:17EF:6047.000D: Sensitivity setting failed: -71 [ 192.277654][ T552] usb 4-1: USB disconnect, device number 29 [ 192.629811][ T9198] overlayfs: failed to clone upperpath [ 192.833523][ T9204] rust_binder: Write failure EFAULT in pid:236 [ 193.153925][ T64] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 193.313976][ T64] usb 4-1: Using ep0 maxpacket: 8 [ 193.320356][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 193.331777][ T64] usb 4-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00 [ 193.333936][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 193.340883][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.357162][ T64] usb 4-1: config 0 descriptor?? [ 193.495152][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.505027][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 193.514595][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.523311][ T9] usb 5-1: config 0 descriptor?? [ 193.765997][ T64] apple 0003:05AC:021C.000E: unknown main item tag 0x0 [ 193.772956][ T64] apple 0003:05AC:021C.000E: unknown main item tag 0x0 [ 193.779992][ T64] apple 0003:05AC:021C.000E: unknown main item tag 0x0 [ 193.787009][ T64] apple 0003:05AC:021C.000E: unknown main item tag 0x0 [ 193.793945][ T64] apple 0003:05AC:021C.000E: unknown main item tag 0x0 [ 193.801609][ T64] apple 0003:05AC:021C.000E: hidraw0: USB HID v0.00 Device [HID 05ac:021c] on usb-dummy_hcd.3-1/input0 [ 193.933662][ T9] lenovo 0003:17EF:6047.000F: hidraw1: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 193.973800][ T9214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.982582][ T9214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.000095][ T9241] 9pnet_fd: Insufficient options for proto=fd [ 194.026035][ T64] usb 4-1: USB disconnect, device number 30 [ 194.534267][ T9] lenovo 0003:17EF:6047.000F: Fn-lock setting failed: -71 [ 194.543771][ T9] lenovo 0003:17EF:6047.000F: Sensitivity setting failed: -71 [ 194.558843][ T9] usb 5-1: USB disconnect, device number 17 [ 194.659878][ T9287] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 194.659918][ T9287] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:244 [ 194.682064][ T9289] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 194.700263][ T9289] overlayfs: missing 'lowerdir' [ 194.705693][ T9290] tmpfs: Bad value for 'huge' [ 194.801794][ T9305] __nla_validate_parse: 4 callbacks suppressed [ 194.801819][ T9305] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2960'. [ 195.152064][ T9314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.152434][ T9314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 195.159047][ T9314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:210 [ 195.184613][ T9318] /dev/md0: Can't lookup blockdev [ 195.222781][ T9320] binder: Unknown parameter '' [ 195.573937][ T64] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 195.646077][ T9353] fuse: Bad value for 'user_id' [ 195.651045][ T9353] fuse: Bad value for 'user_id' [ 195.693916][ T7881] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 195.725418][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.735307][ T64] usb 5-1: New USB device found, idVendor=07ef, idProduct=6047, bcdDevice= 0.00 [ 195.745440][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.754050][ T64] usb 5-1: config 0 descriptor?? [ 195.843904][ T7881] usb 4-1: Using ep0 maxpacket: 8 [ 195.850537][ T7881] usb 4-1: unable to get BOS descriptor or descriptor too short [ 195.859235][ T7881] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 195.867449][ T7881] usb 4-1: config 0 has no interface number 0 [ 195.873612][ T7881] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 195.884686][ T7881] usb 4-1: config 0 interface 88 has no altsetting 0 [ 195.893620][ T7881] usb 4-1: string descriptor 0 read error: -22 [ 195.899969][ T7881] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 195.909091][ T7881] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 195.917936][ T7881] usb 4-1: config 0 descriptor?? [ 195.924701][ T7881] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input10 [ 196.017368][ T9366] /dev/rnullb0: Can't lookup blockdev [ 196.022923][ T9366] /dev/rnullb0: Can't lookup blockdev [ 196.023431][ T9367] overlayfs: failed to clone upperpath [ 196.076361][ T9376] netlink: 'syz.5.2989': attribute type 7 has an invalid length. [ 196.084232][ T9376] netlink: 'syz.5.2989': attribute type 5 has an invalid length. [ 196.092644][ T9376] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2989'. [ 196.126699][ T552] usb 4-1: USB disconnect, device number 31 [ 196.190149][ T64] hid-generic 0003:07EF:6047.0010: hidraw0: USB HID v0.00 Device [HID 07ef:6047] on usb-dummy_hcd.4-1/input0 [ 196.964674][ T64] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 197.018019][ T36] audit: type=1400 audit(2000000105.654:594): avc: denied { module_load } for pid=9400 comm="syz.0.2997" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=31561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 197.051464][ T9405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2999'. [ 197.061098][ T9405] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2999'. [ 197.061835][ T9407] /dev/loop0: Can't lookup blockdev [ 197.123899][ T64] usb 4-1: Using ep0 maxpacket: 8 [ 197.130201][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 197.141899][ T64] usb 4-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00 [ 197.151477][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.160591][ T64] usb 4-1: config 0 descriptor?? [ 197.573144][ T64] apple 0003:05AC:021C.0011: unknown main item tag 0x0 [ 197.580153][ T64] apple 0003:05AC:021C.0011: unknown main item tag 0x0 [ 197.587090][ T64] apple 0003:05AC:021C.0011: unknown main item tag 0x0 [ 197.594708][ T64] apple 0003:05AC:021C.0011: unknown main item tag 0x0 [ 197.601605][ T64] apple 0003:05AC:021C.0011: unknown main item tag 0x0 [ 197.609837][ T64] apple 0003:05AC:021C.0011: hidraw1: USB HID v0.00 Device [HID 05ac:021c] on usb-dummy_hcd.3-1/input0 [ 197.778269][ T9389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.788212][ T9389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.816775][ T9] usb 4-1: USB disconnect, device number 32 [ 198.216871][ T9453] 9p: Unknown Cache mode or invalid value mbinderfs/binder1 [ 198.263142][ T9455] netlink: 2885 bytes leftover after parsing attributes in process `syz.0.3018'. [ 198.353679][ T9461] netlink: 'syz.3.3019': attribute type 4 has an invalid length. [ 198.363204][ T9462] netlink: 'syz.3.3019': attribute type 4 has an invalid length. [ 198.371218][ T9461] netlink: 'syz.3.3019': attribute type 4 has an invalid length. [ 198.385733][ T9] usb 5-1: USB disconnect, device number 18 [ 198.398945][ T9464] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.401323][ T9464] rust_binder: Write failure EFAULT in pid:229 [ 198.432409][ T9471] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.491048][ T9472] rust_binder: Write failure EINVAL in pid:231 [ 198.491076][ T9477] rust_binder: Write failure EINVAL in pid:231 [ 198.657702][ T9485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9485 comm=syz.5.3027 [ 198.679021][ T36] audit: type=1400 audit(2000000107.314:595): avc: denied { add_name } for pid=9483 comm="syz.5.3027" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.701094][ T36] audit: type=1400 audit(2000000107.314:596): avc: denied { create } for pid=9483 comm="syz.5.3027" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 198.743008][ T9476] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 198.743050][ T9476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:261 [ 199.154578][ T36] audit: type=1400 audit(2000000107.794:597): avc: denied { map } for pid=9501 comm="syz.3.3033" path="socket:[32796]" dev="sockfs" ino=32796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 199.301546][ T36] audit: type=1400 audit(2000000107.934:598): avc: denied { load_policy } for pid=9511 comm="syz.4.3038" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 199.915154][ T552] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 199.924929][ T9533] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.925072][ T9533] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 199.931624][ T9533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:243 [ 199.973743][ T9537] rust_binder: 248: no such ref 3 [ 200.063914][ T552] usb 4-1: device descriptor read/64, error -71 [ 200.303927][ T552] usb 4-1: device descriptor read/64, error -71 [ 200.383931][ T551] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 200.513940][ T551] usb 5-1: device descriptor read/64, error -71 [ 200.543908][ T552] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 200.673915][ T552] usb 4-1: device descriptor read/64, error -71 [ 200.753930][ T551] usb 5-1: device descriptor read/64, error -71 [ 200.807027][ T9559] overlayfs: failed to clone lowerpath [ 200.860591][ T9570] 9pnet: Could not find request transport: fd-rfdno= j%dVv1 YB݌^i\P!F_rƎĖupYJgE￘:O 6[&l0x0000000000000006 [ 200.913938][ T552] usb 4-1: device descriptor read/64, error -71 [ 200.993933][ T551] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 201.024001][ T552] usb usb4-port1: attempt power cycle [ 201.123911][ T551] usb 5-1: device descriptor read/64, error -71 [ 201.363951][ T552] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 201.371605][ T551] usb 5-1: device descriptor read/64, error -71 [ 201.395165][ T552] usb 4-1: device descriptor read/8, error -71 [ 201.430960][ T36] audit: type=1326 audit(2000000110.064:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9582 comm="syz.0.3062" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f46b8ebe9 code=0x0 [ 201.484031][ T551] usb usb5-port1: attempt power cycle [ 201.525093][ T552] usb 4-1: device descriptor read/8, error -71 [ 201.763903][ T552] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 201.784943][ T552] usb 4-1: device descriptor read/8, error -71 [ 201.823938][ T551] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 201.845118][ T551] usb 5-1: device descriptor read/8, error -71 [ 201.915186][ T552] usb 4-1: device descriptor read/8, error -71 [ 201.975059][ T551] usb 5-1: device descriptor read/8, error -71 [ 202.024059][ T552] usb usb4-port1: unable to enumerate USB device [ 202.213940][ T551] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 202.234937][ T551] usb 5-1: device descriptor read/8, error -71 [ 202.365226][ T551] usb 5-1: device descriptor read/8, error -71 [ 202.475257][ T551] usb usb5-port1: unable to enumerate USB device [ 202.793569][ T9670] netlink: 124 bytes leftover after parsing attributes in process `syz.5.3086'. [ 203.215026][ T9676] 9pnet_fd: Insufficient options for proto=fd [ 203.236083][ T9678] netlink: 'syz.4.3090': attribute type 4 has an invalid length. [ 203.249143][ T9678] netlink: 'syz.4.3090': attribute type 4 has an invalid length. [ 203.312129][ T9683] FAT-fs (rnullb0): bogus number of reserved sectors [ 203.319134][ T9683] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 203.350446][ T36] audit: type=1326 audit(2000000111.984:600): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9694 comm="syz.5.3094" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb10db8ebe9 code=0x0 [ 203.548220][ T9699] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3095'. [ 203.591905][ T36] audit: type=1400 audit(2000000112.224:601): avc: granted { setsecparam } for pid=9703 comm="syz.3.3097" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 203.699002][ T9711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3099'. [ 203.746094][ T9711] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551610) [ 203.746117][ T9711] rust_binder: Error while translating object. [ 203.758706][ T9711] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 203.764951][ T9711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:310 [ 203.943901][ T9557] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 204.114953][ T9557] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.125982][ T9557] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.136022][ T9557] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 204.145271][ T9557] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.154523][ T9557] usb 5-1: config 0 descriptor?? [ 204.561746][ T9557] elo 0003:04E7:0030.0012: item fetching failed at offset 3/7 [ 204.569452][ T9557] elo 0003:04E7:0030.0012: parse failed [ 204.575236][ T9557] elo 0003:04E7:0030.0012: probe with driver elo failed with error -22 [ 204.696746][ T9728] overlayfs: failed to clone upperpath [ 204.836064][ T9753] __vm_enough_memory: pid: 9753, comm: syz.3.3113, bytes: 18014402804453376 not enough memory for the allocation [ 204.865325][ T9754] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3113'. [ 204.876279][ T9753] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3113'. [ 204.893348][ T9754] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 204.901651][ T9753] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 204.918778][ T45] usb 5-1: USB disconnect, device number 23 [ 204.999367][ T9758] rust_binder: Error while translating object. [ 204.999406][ T9758] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 205.005738][ T9758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:337 [ 205.015864][ T9759] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.209086][ T292] bridge_slave_1: left allmulticast mode [ 205.221363][ T292] bridge_slave_1: left promiscuous mode [ 205.227126][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.234661][ T292] bridge_slave_0: left allmulticast mode [ 205.240311][ T292] bridge_slave_0: left promiscuous mode [ 205.246048][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.306074][ T9763] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.313155][ T9763] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.320316][ T9763] bridge_slave_0: entered allmulticast mode [ 205.326956][ T9763] bridge_slave_0: entered promiscuous mode [ 205.334362][ T9763] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.341687][ T9763] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.341852][ T9770] fuse: Unknown parameter '^rootmode' [ 205.349205][ T9763] bridge_slave_1: entered allmulticast mode [ 205.362314][ T9763] bridge_slave_1: entered promiscuous mode [ 205.379954][ T292] veth1_macvtap: left promiscuous mode [ 205.385608][ T292] veth0_vlan: left promiscuous mode [ 205.546655][ T9763] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.553739][ T9763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.561022][ T9763] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.568074][ T9763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.589950][ T505] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.597488][ T505] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.607240][ T505] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.614336][ T505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.624281][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.631471][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.656665][ T9763] veth0_vlan: entered promiscuous mode [ 205.668943][ T9763] veth1_macvtap: entered promiscuous mode [ 206.003772][ T9810] netlink: 'syz.0.3132': attribute type 1 has an invalid length. [ 206.573956][ T45] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 206.723932][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 206.730661][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 206.742024][ T45] usb 5-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00 [ 206.751470][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.756865][ T9844] rust_binder: Write failure EFAULT in pid:19 [ 206.762771][ T45] usb 5-1: config 0 descriptor?? [ 206.798380][ T9850] binder: Bad value for 'max' [ 207.103669][ T9860] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 207.103708][ T9860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:35 [ 207.177096][ T45] apple 0003:05AC:021C.0013: unknown main item tag 0x0 [ 207.193122][ T45] apple 0003:05AC:021C.0013: unknown main item tag 0x0 [ 207.200866][ T45] apple 0003:05AC:021C.0013: unknown main item tag 0x0 [ 207.209030][ T45] apple 0003:05AC:021C.0013: unknown main item tag 0x0 [ 207.216518][ T45] apple 0003:05AC:021C.0013: unknown main item tag 0x0 [ 207.228399][ T45] apple 0003:05AC:021C.0013: hidraw0: USB HID v0.00 Device [HID 05ac:021c] on usb-dummy_hcd.4-1/input0 [ 207.232786][ T9864] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 207.250880][ T9864] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 207.369376][ T9867] netlink: 'syz.6.3152': attribute type 2 has an invalid length. [ 207.414610][ T551] usb 5-1: USB disconnect, device number 24 [ 208.040250][ T9890] overlayfs: failed to clone upperpath [ 208.085135][ T36] audit: type=1400 audit(2000000116.714:602): avc: denied { lock } for pid=9896 comm="syz.4.3162" path="socket:[34902]" dev="sockfs" ino=34902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 208.109581][ T36] audit: type=1400 audit(2000000116.724:603): avc: denied { relabelfrom } for pid=9898 comm="syz.5.3163" name="" dev="pipefs" ino=34909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 208.136824][ T9904] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3164'. [ 208.138734][ T9907] tmpfs: Unknown parameter 'hug' [ 208.146617][ T9904] devpts: called with bogus options [ 208.210746][ T9920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:51 [ 208.275344][ T9929] fuseblk: Unknown parameter 'blksie00000000400' [ 208.355731][ T9934] x_tables: unsorted underflow at hook 4 [ 208.362232][ T36] audit: type=1326 audit(2000000116.994:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.5.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10db8ebe9 code=0x7fc00000 [ 208.490477][ T36] audit: type=1400 audit(2000000117.124:605): avc: denied { module_load } for pid=9957 comm="syz.6.3183" path="/bus" dev="ramfs" ino=35081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 208.493725][ T9958] Invalid ELF header magic: != ELF [ 208.522822][ T9958] overlayfs: failed to resolve './file0': -2 [ 208.529608][ T36] audit: type=1400 audit(2000000117.154:606): avc: denied { mounton } for pid=9957 comm="syz.6.3183" path="/bus" dev="ramfs" ino=35081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 208.678289][ T9974] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 209.065513][ T36] audit: type=1400 audit(2000000117.704:607): avc: denied { setattr } for pid=9998 comm="syz.0.3195" path="/" dev="configfs" ino=2519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 209.138377][T10006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.147552][T10006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.162672][ T36] audit: type=1400 audit(2000000117.794:608): avc: denied { ioctl } for pid=9998 comm="syz.0.3195" path="/" dev="configfs" ino=2519 ioctlcmd=0xaece scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 209.358278][T10009] FAT-fs (rnullb0): bogus number of reserved sectors [ 209.365159][T10009] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 209.412597][ T36] audit: type=1326 audit(2000000118.044:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9971 comm="syz.5.3187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10db8ebe9 code=0x7fc00000 [ 209.431762][T10017] tc_dump_action: action bad kind [ 210.211691][T10049] bpf: Bad value for 'mode' [ 210.377170][T10065] exFAT-fs (rnullb0): invalid boot record signature [ 210.383910][T10065] exFAT-fs (rnullb0): failed to read boot sector [ 210.390270][T10065] exFAT-fs (rnullb0): failed to recognize exfat type [ 210.466475][T10070] IPv6: NLM_F_CREATE should be specified when creating new route [ 210.495845][T10070] fuse: Bad value for 'fd' [ 210.500967][T10070] FAT-fs (rnullb0): bogus number of reserved sectors [ 210.507745][T10070] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 210.585668][T10076] rust_binder: 326: no such ref 3 [ 210.746367][T10080] 9pnet_fd: Insufficient options for proto=fd [ 210.833908][ T45] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 210.983886][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 210.990278][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.001310][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.011143][ T45] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 211.020352][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.029317][ T45] usb 5-1: config 0 descriptor?? [ 211.237840][ T45] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 211.249099][ T45] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 211.256923][ T45] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 211.257873][T10089] binder: Bad value for 'stats' [ 211.264733][ T45] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 211.277072][ T36] audit: type=1400 audit(2000000119.904:610): avc: denied { mounton } for pid=10088 comm="syz.4.3224" path="/proc/331/ns/cgroup" dev="proc" ino=35358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lnk_file permissive=1 [ 211.300789][ T45] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 211.363917][ T45] hid-picolcd 0003:04D8:F002.0014: No report with id 0xf3 found [ 211.371662][ T45] hid-picolcd 0003:04D8:F002.0014: No report with id 0xf4 found [ 211.392525][ T45] usb 5-1: USB disconnect, device number 26 [ 211.413463][T10104] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 211.459300][T10114] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false [ 211.479492][T10116] rust_binder: Write failure EFAULT in pid:341 [ 211.489464][T10117] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.530509][T10123] incfs: Error accessing: ./file0. [ 211.535710][T10123] incfs: mount failed -20 [ 211.609422][T10135] SELinux: security_context_str_to_sid () failed with errno=-22 [ 211.617878][T10134] SELinux: security_context_str_to_sid () failed with errno=-22 [ 211.666022][T10144] rust_binder: Error while translating object. [ 211.666080][T10144] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 211.673419][T10144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:143 [ 211.982623][T10153] veth1: mtu less than device minimum [ 211.997684][T10153] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.254011][T10187] cgroup: Invalid name [ 212.413884][ T45] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 212.573892][ T45] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 212.593913][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 212.606037][ T45] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.626779][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.636497][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.646531][ T45] usb 5-1: Product: syz [ 212.650804][ T45] usb 5-1: Manufacturer: syz [ 212.664558][ T45] usb 5-1: SerialNumber: syz [ 212.995526][ T45] cdc_mbim 5-1:1.0: CDC Union missing and no IAD found [ 213.002456][ T45] cdc_mbim 5-1:1.0: bind() failure [ 213.009200][ T45] usb 5-1: USB disconnect, device number 27 [ 213.024109][T10201] cgroup2: Unknown parameter 'net_cls' [ 213.234774][ T36] audit: type=1400 audit(2000000121.874:611): avc: denied { watch } for pid=10202 comm="syz.5.3262" path="/390/file0" dev="tmpfs" ino=2140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 213.342888][ T36] audit: type=1400 audit(2000000121.974:612): avc: denied { map } for pid=10210 comm="syz.6.3266" path="socket:[37097]" dev="sockfs" ino=37097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 213.610430][T10233] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 213.611444][T10233] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 213.670449][T10248] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 213.677300][T10248] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 213.686790][T10248] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:372 [ 213.724625][T10251] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3283'. [ 213.756887][T10255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10255 comm=syz.6.3285 [ 213.787981][T10258] cannot load conntrack support for proto=3 [ 214.203929][ T7881] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 214.373900][ T7881] usb 7-1: Using ep0 maxpacket: 16 [ 214.380419][ T7881] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 214.389518][ T7881] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.400929][ T7881] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.411793][ T7881] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.421195][ T7881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.429439][ T7881] usb 7-1: Product: syz [ 214.433734][ T7881] usb 7-1: Manufacturer: syz [ 214.438634][ T7881] usb 7-1: SerialNumber: syz [ 214.744081][ T551] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 214.844325][T10310] overlayfs: failed to clone upperpath [ 214.850258][ T7881] usb 7-1: 0:2 : does not exist [ 214.850984][T10310] overlayfs: failed to clone lowerpath [ 214.893905][ T551] usb 5-1: Using ep0 maxpacket: 8 [ 214.900227][ T551] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 214.911725][ T551] usb 5-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00 [ 214.921276][ T551] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.930446][ T551] usb 5-1: config 0 descriptor?? [ 215.194140][T10345] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3317'. [ 215.203526][T10345] netlink: 'syz.0.3317': attribute type 12 has an invalid length. [ 215.212089][T10345] overlayfs: failed to clone upperpath [ 215.233291][ T36] audit: type=1400 audit(2000000123.864:613): avc: denied { map } for pid=10346 comm="syz.0.3318" path="pipe:[37431]" dev="pipefs" ino=37431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 215.295520][T10353] /dev/loop0: Can't lookup blockdev [ 215.339137][ T551] apple 0003:05AC:021C.0015: unknown main item tag 0x0 [ 215.346096][ T551] apple 0003:05AC:021C.0015: unknown main item tag 0x0 [ 215.353064][ T551] apple 0003:05AC:021C.0015: unknown main item tag 0x0 [ 215.360323][ T551] apple 0003:05AC:021C.0015: unknown main item tag 0x0 [ 215.367284][ T551] apple 0003:05AC:021C.0015: unknown main item tag 0x0 [ 215.375821][ T551] apple 0003:05AC:021C.0015: hidraw0: USB HID v0.00 Device [HID 05ac:021c] on usb-dummy_hcd.4-1/input0 [ 215.510468][T10372] netlink: 'syz.0.3327': attribute type 1 has an invalid length. [ 215.546562][ T551] usb 5-1: USB disconnect, device number 28 [ 215.572305][ T36] audit: type=1400 audit(2000000124.204:614): avc: denied { listen } for pid=10381 comm="syz.0.3330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 215.659944][ T7881] usb 7-1: USB disconnect, device number 2 [ 216.306445][T10407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.316126][T10407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.339407][T10412] netlink: 'syz.5.3340': attribute type 4 has an invalid length. [ 216.543896][ T552] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 216.668245][T10462] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 216.668245][T10464] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 216.703937][ T552] usb 7-1: Using ep0 maxpacket: 8 [ 216.711046][T10407] rust_binder: Error in use_page_slow: ESRCH [ 216.711068][T10407] rust_binder: use_range failure ESRCH [ 216.717426][T10407] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 216.722941][T10407] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 216.731379][T10407] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:201 [ 216.744244][ T552] usb 7-1: unable to get BOS descriptor or descriptor too short [ 216.763066][ T552] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 216.773913][ T552] usb 7-1: can't read configurations, error -71 [ 217.221307][T10479] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10479 comm=syz.0.3360 [ 217.260603][T10485] overlayfs: failed to clone upperpath [ 217.357993][T10493] overlayfs: missing 'workdir' [ 217.648055][ T36] audit: type=1400 audit(2000000126.284:615): avc: denied { setattr } for pid=10518 comm="syz.6.3374" name="HIDP" dev="sockfs" ino=37601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 217.791992][ T36] audit: type=1400 audit(2000000126.424:616): avc: denied { validate_trans } for pid=10525 comm="syz.6.3377" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 217.866660][T10538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3382'. [ 218.017832][T10568] rust_binder: Write failure EFAULT in pid:402 [ 218.025716][T10571] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3392'. [ 218.080955][T10578] netlink: 'syz.4.3395': attribute type 15 has an invalid length. [ 218.195018][T10588] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 218.196530][T10588] rust_binder: Failed copying remainder into alloc: EFAULT [ 218.203304][T10588] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 218.210968][T10588] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 218.219415][T10588] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:416 [ 218.466258][ T36] audit: type=1400 audit(2000000127.104:617): avc: denied { listen } for pid=10595 comm="syz.6.3400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 218.506274][T10599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 218.506909][T10598] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 218.513356][T10598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:261 [ 218.553911][ T7881] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 218.687518][T10611] netlink: 'syz.5.3406': attribute type 27 has an invalid length. [ 218.715544][ T7881] usb 5-1: unable to get BOS descriptor or descriptor too short [ 218.725440][ T7881] usb 5-1: config 221 has an invalid descriptor of length 24, skipping remainder of the config [ 218.737658][ T7881] usb 5-1: config 221 has 0 interfaces, different from the descriptor's value: 1 [ 218.750709][ T7881] usb 5-1: string descriptor 0 read error: -22 [ 218.758252][ T7881] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=96.31 [ 218.767698][ T7881] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 218.774131][ T329] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 218.793154][T10622] veth1_vlan: mtu greater than device maximum [ 218.933926][ T329] usb 7-1: Using ep0 maxpacket: 16 [ 218.940248][ T329] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 218.951974][ T329] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 218.964849][ T329] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 218.974173][ T329] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.982195][ T329] usb 7-1: Product: syz [ 218.986404][ T7881] usb 5-1: USB disconnect, device number 29 [ 218.992775][ T329] usb 7-1: Manufacturer: syz [ 218.997632][ T329] usb 7-1: SerialNumber: syz [ 219.003456][ T329] usb 7-1: config 0 descriptor?? [ 219.210234][T10601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.218959][T10601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.227397][T10601] futex_wake_op: syz.6.3402 tries to shift op by 144; fix this program [ 219.238691][ T329] usb 7-1: USB disconnect, device number 5 [ 219.513153][T10656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.515299][T10656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:423 [ 219.534814][T10658] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.618626][T10662] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 219.625341][T10662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 219.633581][T10662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:425 [ 219.794635][T10672] rust_binder: Write failure EFAULT in pid:437 [ 219.813290][T10668] rust_binder: Error while translating object. [ 219.820288][T10668] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 219.826721][T10668] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 219.836690][T10668] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:266 [ 220.012722][ T870] rust_binder: 0: removing orphan mapping 0:24 [ 220.063928][ T552] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 220.213987][ T552] usb 5-1: Using ep0 maxpacket: 8 [ 220.220434][ T552] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 220.231836][ T552] usb 5-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00 [ 220.241064][ T552] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.249793][ T552] usb 5-1: config 0 descriptor?? [ 220.657774][ T552] apple 0003:05AC:021C.0016: unknown main item tag 0x0 [ 220.664770][ T552] apple 0003:05AC:021C.0016: unknown main item tag 0x0 [ 220.671688][ T552] apple 0003:05AC:021C.0016: unknown main item tag 0x0 [ 220.678652][ T552] apple 0003:05AC:021C.0016: unknown main item tag 0x0 [ 220.685568][ T552] apple 0003:05AC:021C.0016: unknown main item tag 0x0 [ 220.693160][ T552] apple 0003:05AC:021C.0016: hidraw0: USB HID v0.00 Device [HID 05ac:021c] on usb-dummy_hcd.4-1/input0 [ 220.831865][ T36] audit: type=1326 audit(2000000129.464:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10715 comm="syz.5.3441" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb10db8ebe9 code=0x0 [ 220.862849][ T7881] usb 5-1: USB disconnect, device number 30 [ 220.935350][T10739] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 220.959856][T10748] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 220.983442][T10757] netlink: 'syz.5.3453': attribute type 6 has an invalid length. [ 221.049752][T10775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=10775 comm=syz.0.3460 [ 221.143889][ T552] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 221.191822][T10792] /dev/loop0: Can't lookup blockdev [ 221.198228][T10792] /dev/loop0: Can't lookup blockdev [ 221.293900][ T552] usb 7-1: Using ep0 maxpacket: 16 [ 221.300183][ T552] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.310475][ T552] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.321045][ T552] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 221.330175][ T552] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.338278][ T552] usb 7-1: Product: syz [ 221.342465][ T552] usb 7-1: Manufacturer: syz [ 221.347159][ T552] usb 7-1: SerialNumber: syz [ 221.384096][T10807] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 221.545252][T10813] SELinux: security_context_str_to_sid () failed with errno=-22 [ 221.553740][T10726] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3444'. [ 221.616330][T10726] rust_binder: Error while translating object. [ 221.616361][T10726] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 221.622573][T10726] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 221.632455][T10726] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:288 [ 221.648880][ T552] usb 7-1: 0:2 : does not exist [ 221.666910][ T552] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 221.694503][ T552] usb 7-1: USB disconnect, device number 6 [ 221.711195][ T6385] udevd[6385]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 221.817642][T10831] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.818712][T10831] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 221.834404][T10831] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 221.834430][T10831] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 221.842441][T10831] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:458 [ 222.096921][T10871] sit0: entered promiscuous mode [ 222.112967][T10871] netlink: 'syz.5.3489': attribute type 1 has an invalid length. [ 222.121729][T10871] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3489'. [ 222.155610][ T870] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 222.166539][ T7881] rust_binder: 0: removing orphan mapping 0:24 [ 222.315068][ T870] usb 5-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=cf.a5 [ 222.325588][ T870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.335655][ T870] usb 5-1: config 0 descriptor?? [ 222.804067][ T870] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 222.814181][ T870] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 222.825242][ T870] asix 5-1:0.0: probe with driver asix failed with error -71 [ 222.832989][ T36] audit: type=1400 audit(2000000131.464:619): avc: denied { unmount } for pid=9763 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 222.844134][ T870] usb 5-1: USB disconnect, device number 31 [ 222.885703][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3501'. [ 223.173936][ T64] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 223.303927][ T64] usb 7-1: device descriptor read/64, error -71 [ 223.526756][T10925] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3510'. [ 223.553956][ T64] usb 7-1: device descriptor read/64, error -71 [ 223.580665][T10931] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 223.791527][T10959] tmpfs: Bad value for 'huge' [ 223.805447][T10959] netlink: 'syz.0.3524': attribute type 16 has an invalid length. [ 223.813295][T10959] netlink: 'syz.0.3524': attribute type 2 has an invalid length. [ 223.813915][ T64] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 223.821478][T10959] netlink: 64086 bytes leftover after parsing attributes in process `syz.0.3524'. [ 223.953914][ T64] usb 7-1: device descriptor read/64, error -71 [ 224.193915][ T64] usb 7-1: device descriptor read/64, error -71 [ 224.303984][ T64] usb usb7-port1: attempt power cycle [ 224.440135][T10977] binder: Bad value for 'stats' [ 224.474602][T10984] fuseblk: Bad value for 'rootmode' [ 224.480572][T10984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3533'. [ 224.503964][ T36] audit: type=1400 audit(2000000133.144:620): avc: denied { map } for pid=10986 comm="syz.4.3534" path="/proc/475/net/tcp6" dev="proc" ino=4026533005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 224.504215][T10987] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.530433][T10987] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 224.537096][T10987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 224.545380][T10987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:475 [ 224.569302][ T36] audit: type=1326 audit(2000000133.204:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10988 comm="syz.4.3535" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe361f8ebe9 code=0x0 [ 224.653933][ T64] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 224.674959][ T64] usb 7-1: device descriptor read/8, error -71 [ 224.804989][ T64] usb 7-1: device descriptor read/8, error -71 [ 225.043947][ T64] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 225.065122][ T64] usb 7-1: device descriptor read/8, error -71 [ 225.195142][ T64] usb 7-1: device descriptor read/8, error -71 [ 225.304015][ T64] usb usb7-port1: unable to enumerate USB device [ 225.468563][ T36] audit: type=1400 audit(2000000134.104:622): avc: denied { write } for pid=11001 comm="syz.4.3540" name="file0" dev="tmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 225.491166][ T36] audit: type=1400 audit(2000000134.104:623): avc: denied { open } for pid=11001 comm="syz.4.3540" path="/158/file0" dev="tmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 225.534284][T11004] rust_binder: Write failure EFAULT in pid:485 [ 225.834830][ T64] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 225.864198][T11026] devpts: called with bogus options [ 226.003887][ T64] usb 5-1: Using ep0 maxpacket: 8 [ 226.015239][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 226.027858][ T64] usb 5-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00 [ 226.038987][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.051419][ T64] usb 5-1: config 0 descriptor?? [ 226.459290][ T64] apple 0003:05AC:021C.0017: unknown main item tag 0x0 [ 226.470725][ T64] apple 0003:05AC:021C.0017: unknown main item tag 0x0 [ 226.478425][ T64] apple 0003:05AC:021C.0017: unknown main item tag 0x0 [ 226.485757][ T64] apple 0003:05AC:021C.0017: unknown main item tag 0x0 [ 226.504015][ T64] apple 0003:05AC:021C.0017: unknown main item tag 0x0 [ 226.516773][ T64] apple 0003:05AC:021C.0017: hidraw0: USB HID v0.00 Device [HID 05ac:021c] on usb-dummy_hcd.4-1/input0 [ 226.520663][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3573'. [ 226.583318][T11098] rust_binder: Error while translating object. [ 226.583358][T11098] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 226.589822][T11098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:319 [ 226.614815][T11100] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:321 [ 226.670018][ T329] usb 5-1: USB disconnect, device number 32 [ 226.757840][T11104] rust_binder: inc_ref_done called when no active inc_refs [ 226.810572][T11110] netlink: 'syz.6.3580': attribute type 16 has an invalid length. [ 226.848849][ T36] audit: type=1400 audit(2000000135.484:624): avc: denied { lock } for pid=11114 comm="syz.6.3581" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 226.888652][T11117] rust_binder: Write failure EFAULT in pid:338 [ 226.889736][T11117] rust_binder: Write failure EFAULT in pid:338 [ 226.910833][T11122] binder: Unknown parameter 'context' [ 226.910833][T11123] binder: Unknown parameter 'context' [ 227.158451][T11145] syz.0.3589 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 227.270672][T11170] overlayfs: failed to clone upperpath [ 227.313446][T11174] 9pnet_fd: Insufficient options for proto=fd [ 227.788591][ T870] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 227.801480][ T36] audit: type=1400 audit(2000000136.434:625): avc: denied { watch_reads } for pid=11198 comm="syz.5.3603" path="/524/file0" dev="tmpfs" ino=2852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 227.819348][T11202] usb usb8: usbfs: process 11202 (syz.6.3605) did not claim interface 0 before use [ 227.943897][ T870] usb 5-1: Using ep0 maxpacket: 16 [ 227.950663][ T870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 227.961686][ T870] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 227.974653][ T870] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 227.993155][ T870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.007017][ T870] usb 5-1: config 0 descriptor?? [ 228.018448][ T870] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 228.219285][T11196] binder: Binderfs stats mode cannot be changed during a remount [ 228.227623][ T870] usb 5-1: USB disconnect, device number 33 [ 228.268147][ T36] audit: type=1400 audit(2000000136.904:626): avc: denied { bind } for pid=11240 comm="syz.6.3615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 228.344907][T11248] netlink: 8568 bytes leftover after parsing attributes in process `syz.6.3617'. [ 228.370589][T11250] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 228.449464][T11258] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 228.629761][T11269] fuseblk: Unknown parameter 'vd' [ 228.666616][ T36] audit: type=1400 audit(2000000137.304:627): avc: denied { associate } for pid=11272 comm="syz.0.3627" name="memory.events" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 228.714162][ T552] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 228.809426][ T36] audit: type=1400 audit(2000000137.444:628): avc: denied { setattr } for pid=11281 comm="syz.4.3631" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 228.866209][T11291] rust_binder: Write failure EFAULT in pid:511 [ 228.869290][ T552] usb 7-1: not running at top speed; connect to a high speed hub [ 228.884684][ T552] usb 7-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 228.890273][T11294] rust_binder: Write failure EFAULT in pid:513 [ 228.897754][ T552] usb 7-1: config 1 interface 0 altsetting 5 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 228.921705][ T552] usb 7-1: config 1 interface 0 has no altsetting 0 [ 228.936022][ T552] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.945599][ T552] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.953938][ T552] usb 7-1: Product: Г [ 228.959942][ T552] usb 7-1: Manufacturer: ⠯ꗭ緪럽␺ꇁ␞♏ᇆ뗁ᯠ幵ƀ㻎ﮐ馵悰蔊픣䬀轰፠짢滃䝺⣿脎ዳꮋ涺挰漢鷸퍺嶉깼ᘇ㦙ꄐ﹍Ʝ⪺ᑽ꒚쬼쮔磏疨凷谴鹟侑ꜞ豍ଵst蕆휯ߢ潧蜄ѣ㆛탓鴅엻蓢昭킽銂씔辅麯ⳤ톐晲
䛕ﯬ璨놿̙툙땽忏⹄꩗ꦄƀ㊜왈擽돤邈❖ꄅ⳴ᬺ퓉瞌攁Ϗ逡ᅢשׁ믷⎯㏛쾐 [ 228.995391][ T552] usb 7-1: SerialNumber: ї [ 229.004617][T11267] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 229.011907][T11267] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 229.051703][ T36] audit: type=1326 audit(2000000137.684:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11313 comm="syz.5.3643" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb10db8ebe9 code=0x0 [ 229.052094][T11315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=11315 comm=syz.5.3643 [ 229.203917][ T64] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 229.271011][T11337] overlayfs: failed to clone upperpath [ 229.357089][ T64] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 229.366323][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.374519][ T64] usb 5-1: Product: syz [ 229.378991][ T64] usb 5-1: Manufacturer: syz [ 229.383637][ T64] usb 5-1: SerialNumber: syz [ 229.422125][ T36] audit: type=1400 audit(2000000138.054:630): avc: denied { setattr } for pid=11266 comm="syz.6.3624" name="NETLINK" dev="sockfs" ino=40543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 229.446499][ T552] usb 7-1: bad CDC descriptors [ 229.452624][ T552] usb 7-1: USB disconnect, device number 11 [ 229.983930][T11399] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3672'. [ 230.090781][T11406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:389 [ 230.703136][T11419] rust_binder: Error while translating object. [ 230.712764][T11419] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 230.719424][T11419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:401 [ 230.819515][T11428] rust_binder: Write failure EFAULT in pid:405 [ 230.956178][T11440] Falling back ldisc for ptm0. [ 231.012628][ T36] audit: type=1400 audit(2000000139.644:631): avc: denied { map } for pid=11444 comm="syz.6.3688" path="socket:[40813]" dev="sockfs" ino=40813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 231.205580][T11452] netlink: 'syz.6.3691': attribute type 4 has an invalid length. [ 231.217474][T11452] Invalid ELF header magic: != ELF [ 231.223079][T11452] netlink: 'syz.6.3691': attribute type 4 has an invalid length. [ 231.363120][T11468] netlink: 'syz.6.3698': attribute type 12 has an invalid length. [ 231.372568][T11468] input: syz1 as /devices/virtual/input/input12 [ 231.407797][T11473] /dev/rnullb0: Can't open blockdev [ 231.723894][ T552] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 231.873881][ T552] usb 7-1: Using ep0 maxpacket: 32 [ 231.880286][ T552] usb 7-1: config 1 has an invalid interface number: 152 but max is 0 [ 231.888669][ T552] usb 7-1: config 1 has no interface number 0 [ 231.894831][ T552] usb 7-1: config 1 interface 152 altsetting 3 endpoint 0xD has an invalid bInterval 64, changing to 7 [ 231.905920][ T552] usb 7-1: config 1 interface 152 has no altsetting 0 [ 231.916219][ T552] usb 7-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice=d4.ef [ 231.925491][ T552] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.933538][ T552] usb 7-1: Product: syz [ 231.937869][ T552] usb 7-1: Manufacturer: syz [ 231.942571][ T552] usb 7-1: SerialNumber: syz [ 231.964232][ T551] usb 5-1: USB disconnect, device number 34 [ 232.005066][ T36] audit: type=1400 audit(2000000140.644:632): avc: denied { setattr } for pid=11503 comm="syz.4.3710" name="timer" dev="devtmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 232.067415][T11510] overlayfs: failed to resolve './file1/file0': -2 [ 232.114232][T11515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.114735][T11514] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 232.121412][T11514] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 232.130054][T11514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:529 [ 232.154994][ T552] usbhid 7-1:1.152: couldn't find an input interrupt endpoint [ 232.185295][T11532] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 232.190050][ T552] usb 7-1: USB disconnect, device number 12 [ 232.358872][T11546] binder: Bad value for 'max' [ 232.533873][ T552] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 232.623930][ T551] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 232.683881][ T552] usb 7-1: Using ep0 maxpacket: 32 [ 232.690616][ T552] usb 7-1: unable to get BOS descriptor or descriptor too short [ 232.699523][ T552] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 232.708050][ T552] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 232.718689][ T552] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 232.727988][ T552] usb 7-1: config 128 has no interface number 0 [ 232.734833][ T552] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 232.746533][ T552] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.757010][ T552] usb 7-1: config 128 interface 127 has no altsetting 0 [ 232.766081][ T552] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 232.775514][ T552] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.783883][ T551] usb 5-1: Using ep0 maxpacket: 8 [ 232.789103][ T552] usb 7-1: Product: syz [ 232.793296][ T552] usb 7-1: Manufacturer: syz [ 232.798357][ T552] usb 7-1: SerialNumber: syz [ 232.803924][ T551] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 232.815550][ T551] usb 5-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00 [ 232.826284][ T551] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.839686][ T551] usb 5-1: config 0 descriptor?? [ 232.880037][T11565] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3729'. [ 232.937871][T11575] overlayfs: failed to clone upperpath [ 233.235463][ T36] audit: type=1326 audit(2000000141.874:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.0.3740" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f46b8ebe9 code=0x0 [ 233.260640][ T551] usbhid 5-1:0.0: can't add hid device: -71 [ 233.269759][ T551] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 233.282027][ T551] usb 5-1: USB disconnect, device number 35 [ 234.162359][ T36] audit: type=1400 audit(2000000142.794:634): avc: denied { name_bind } for pid=11608 comm="syz.5.3745" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 234.411860][T11636] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 234.413367][T11636] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 234.420305][T11636] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 234.428721][T11636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:551 [ 234.464114][T11645] fuseblk: Bad value for 'fd' [ 235.201239][ T552] usb 7-1: USB disconnect, device number 13 [ 235.217959][ T6385] udevd[6385]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 235.360813][T11679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3765'. [ 235.464638][T11692] SELinux: security_context_str_to_sid () failed with errno=-22 [ 235.487491][T11698] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 235.487811][T11698] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 235.491590][T11700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 235.528385][T11700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:566 [ 235.546102][T11707] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3889405060 (497843847680 ns) > initial count (482886417536 ns). Using initial count to start timer. [ 235.656094][T11709] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.3777'. [ 235.834044][ T552] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 235.866482][ T36] audit: type=1326 audit(2000000144.504:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11713 comm="syz.5.3780" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb10db8ebe9 code=0x0 [ 235.937458][T11730] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:578 [ 235.938170][ T36] audit: type=1400 audit(2000000144.574:636): avc: denied { setattr } for pid=11729 comm="syz.4.3784" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 235.939897][T11730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.980024][T11730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.014981][ T552] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 236.026452][ T36] audit: type=1326 audit(2000000144.664:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11669 comm="syz.0.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f46b8ebe9 code=0x7fc00000 [ 236.049914][ T552] usb 7-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 236.053135][ T36] audit: type=1326 audit(2000000144.664:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11669 comm="syz.0.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f46b8ebe9 code=0x7fc00000 [ 236.063923][ T552] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.083700][ T36] audit: type=1326 audit(2000000144.664:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11669 comm="syz.0.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f46b8ebe9 code=0x7fc00000 [ 236.115243][ T36] audit: type=1326 audit(2000000144.664:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11669 comm="syz.0.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f46b8ebe9 code=0x7fc00000 [ 236.115689][ T552] usb 7-1: config 0 descriptor?? [ 236.149091][ T552] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 236.183915][ T45] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 236.333901][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 236.340188][ T45] usb 5-1: config 3 has an invalid interface number: 199 but max is 0 [ 236.348470][ T45] usb 5-1: config 3 has no interface number 0 [ 236.354649][ T45] usb 5-1: config 3 interface 199 has no altsetting 0 [ 236.362929][ T45] usb 5-1: New USB device found, idVendor=12d1, idProduct=6855, bcdDevice=90.b2 [ 236.372029][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.380321][ T45] usb 5-1: Product: syz [ 236.384527][ T45] usb 5-1: Manufacturer: Р [ 236.389227][ T45] usb 5-1: SerialNumber: syz [ 236.596251][T11730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.604865][T11730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.629943][ T45] usb 5-1: USB disconnect, device number 36 [ 236.797876][T11786] rust_binder: Write failure EFAULT in pid:592 [ 236.887951][T11791] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 237.002617][T11810] rust_binder: 613: no such ref 3 [ 237.008361][T11810] rust_binder: 613: no such ref 1 [ 237.013451][T11810] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:613 [ 237.013760][T11810] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 237.030143][T11810] rust_binder: Write failure EINVAL in pid:613 [ 237.031432][ T36] audit: type=1326 audit(2000000145.664:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11809 comm="syz.4.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe361f8ebe9 code=0x7ffc0000 [ 237.067274][ T36] audit: type=1326 audit(2000000145.664:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11809 comm="syz.4.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe361f8ebe9 code=0x7ffc0000 [ 237.100430][ T36] audit: type=1326 audit(2000000145.664:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11809 comm="syz.4.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe361f8ebe9 code=0x7ffc0000 [ 237.124272][ T36] audit: type=1326 audit(2000000145.674:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.4.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe361fc14a5 code=0x7ffc0000 [ 237.151574][ T36] audit: type=1326 audit(2000000145.674:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11809 comm="syz.4.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe361f8ebe9 code=0x7ffc0000 [ 237.175718][ T36] audit: type=1326 audit(2000000145.674:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11809 comm="syz.4.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fe361f8ebe9 code=0x7ffc0000 [ 237.200023][ T36] audit: type=1326 audit(2000000145.674:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11809 comm="syz.4.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe361f8ebe9 code=0x7ffc0000 [ 237.224515][ T36] audit: type=1326 audit(2000000145.674:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11809 comm="syz.4.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe361f8ebe9 code=0x7ffc0000 [ 237.248156][ T36] audit: type=1326 audit(2000000145.674:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11809 comm="syz.4.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe361f8ebe9 code=0x7ffc0000 [ 237.272066][ T36] audit: type=1326 audit(2000000145.674:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11809 comm="syz.4.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe361f8ebe9 code=0x7ffc0000 [ 237.499474][T11833] IPv6: NLM_F_CREATE should be specified when creating new route [ 237.612505][T11838] sock: sock_timestamping_bind_phc: sock not bind to device [ 237.809679][T11846] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.817213][T11846] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.824645][T11846] bridge_slave_0: entered allmulticast mode [ 237.831296][T11846] bridge_slave_0: entered promiscuous mode [ 237.838341][T11846] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.845500][T11846] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.852598][T11846] bridge_slave_1: entered allmulticast mode [ 237.858929][T11846] bridge_slave_1: entered promiscuous mode [ 237.884023][ T45] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 237.944124][T11846] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.951374][T11846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.958749][T11846] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.965857][T11846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.988739][ T505] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.996631][ T505] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.006143][ T46] veth1_macvtap: left promiscuous mode [ 238.011817][ T46] veth0_vlan: left promiscuous mode [ 238.055062][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.065529][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.077847][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.084922][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.093878][ T45] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.095699][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.113795][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.115440][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.133145][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.141233][ T45] usb 5-1: Product: syz [ 238.146637][ T45] usb 5-1: Manufacturer: syz [ 238.156721][ T45] usb 5-1: SerialNumber: syz [ 238.158286][T11846] veth0_vlan: entered promiscuous mode [ 238.177963][T11846] veth1_macvtap: entered promiscuous mode [ 238.460266][T11878] rust_binder: Write failure EFAULT in pid:14 [ 238.462983][T11879] rust_binder: Write failure EFAULT in pid:14 [ 238.541838][ T329] usb 7-1: USB disconnect, device number 14 [ 238.631474][T11899] netlink: 'syz.5.3836': attribute type 58 has an invalid length. [ 238.643781][T11899] netlink: 'syz.5.3836': attribute type 58 has an invalid length. [ 238.686185][T11903] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 238.737693][T11905] rust_binder: 11903 RLIMIT_NICE not set [ 238.831900][T11921] __vm_enough_memory: pid: 11921, comm: syz.5.3845, bytes: 18014402804453376 not enough memory for the allocation [ 238.840996][ T64] rust_binder: 0: removing orphan mapping 0:4256 [ 238.875747][T11925] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=11925 comm=syz.6.3844 [ 238.888864][T11925] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=11925 comm=syz.6.3844 [ 238.962048][T11924] kvm_intel: kvm [11923]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 239.130109][T11931] 9pnet_fd: Insufficient options for proto=fd [ 239.178857][ T45] cdc_ncm 5-1:1.0: bind() failure [ 239.185927][ T45] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 239.194537][ T45] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 239.204085][ T45] usb 5-1: USB disconnect, device number 37 [ 239.373570][T11956] netlink: 679 bytes leftover after parsing attributes in process `syz.0.3857'. [ 239.531268][T11972] fuse: Bad value for 'fd' [ 239.683209][T11977] rust_binder: Error in use_page_slow: ESRCH [ 239.683290][T11977] rust_binder: use_range failure ESRCH [ 239.690712][T11977] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 239.703477][T11977] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 239.726626][T11977] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:507 [ 239.763987][T11985] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 239.797405][T11985] rust_binder: Write failure EINVAL in pid:631 [ 239.854385][T11985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11985 comm=syz.4.3867 [ 239.876343][T11988] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 239.884250][T11988] rust_binder: Write failure EINVAL in pid:631 [ 240.356493][T11996] rust_binder: Write failure EFAULT in pid:512 [ 240.408198][T12006] netlink: 288 bytes leftover after parsing attributes in process `syz.0.3874'. [ 240.426911][T12011] binder: Bad value for 'stats' [ 240.496991][T12021] TCP: out of memory -- consider tuning tcp_mem [ 240.557958][T12035] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 240.567502][T12036] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 240.599924][T12042] rust_binder: Error while translating object. [ 240.599982][T12042] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 240.606447][T12042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 240.697429][T12051] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12051 comm=syz.6.3885 [ 240.719935][T12051] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=12051 comm=syz.6.3885 [ 240.766246][T12058] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 240.766286][T12058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:91 [ 241.083915][ T551] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 241.223916][ T551] usb 7-1: device descriptor read/64, error -71 [ 241.463952][ T551] usb 7-1: device descriptor read/64, error -71 [ 241.569296][T12078] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 241.569333][T12078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97 [ 241.703920][ T551] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 241.728581][T12097] netlink: 'syz.4.3899': attribute type 27 has an invalid length. [ 241.766533][T12097] vcan0: left promiscuous mode [ 241.772671][T12110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.772701][T12110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.779307][T12097] vcan0: left allmulticast mode [ 241.851413][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3899'. [ 241.860483][ T551] usb 7-1: device descriptor read/64, error -71 [ 242.003581][T12122] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 242.003616][T12122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:123 [ 242.103899][ T551] usb 7-1: device descriptor read/64, error -71 [ 242.224099][ T551] usb usb7-port1: attempt power cycle [ 242.583902][ T551] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 242.604935][ T551] usb 7-1: device descriptor read/8, error -71 [ 242.735020][ T551] usb 7-1: device descriptor read/8, error -71 [ 242.763922][ T7881] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 242.913954][ T7881] usb 6-1: Using ep0 maxpacket: 8 [ 242.920948][ T7881] usb 6-1: unable to get BOS descriptor or descriptor too short [ 242.929602][ T7881] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 242.937777][ T7881] usb 6-1: config 0 has no interface number 0 [ 242.944013][ T7881] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 242.956404][T12176] rust_binder: Error while translating object. [ 242.956439][T12176] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 242.960625][ T7881] usb 6-1: config 0 interface 88 has no altsetting 0 [ 242.963210][T12176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:660 [ 242.979015][ T551] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 242.982792][ T7881] usb 6-1: string descriptor 0 read error: -22 [ 243.004908][ T551] usb 7-1: device descriptor read/8, error -71 [ 243.009122][ T7881] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 243.020220][ T7881] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 243.037436][ T7881] usb 6-1: config 0 descriptor?? [ 243.044001][T12181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.045060][ T7881] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input13 [ 243.062519][T12181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.135683][ T551] usb 7-1: device descriptor read/8, error -71 [ 243.245788][ T551] usb usb7-port1: unable to enumerate USB device [ 243.253280][ T7881] usb 6-1: USB disconnect, device number 11 [ 243.274130][ T329] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 243.423921][ T329] usb 5-1: Using ep0 maxpacket: 16 [ 243.430490][ T329] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 243.440756][ T329] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 243.450815][ T329] usb 5-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 243.465136][ T329] usb 5-1: config 1 interface 0 has no altsetting 0 [ 243.472541][ T329] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.481664][ T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 243.489734][ T329] usb 5-1: SerialNumber: syz [ 243.495375][T12182] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 243.502630][T12182] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 243.710151][T12181] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 243.717426][T12181] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 243.925508][T12181] rust_binder: Error while translating object. [ 243.925559][T12181] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 243.931965][T12181] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:664 [ 243.942285][ T329] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 243.961036][ T329] usb 5-1: USB disconnect, device number 38 [ 244.013946][ T552] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 244.163915][ T552] usb 6-1: Using ep0 maxpacket: 16 [ 244.170351][ T552] usb 6-1: config 9 has an invalid interface number: 75 but max is 1 [ 244.178555][ T552] usb 6-1: config 9 has an invalid interface number: 33 but max is 1 [ 244.186769][ T552] usb 6-1: config 9 has an invalid interface number: 56 but max is 1 [ 244.195015][ T552] usb 6-1: config 9 has 3 interfaces, different from the descriptor's value: 2 [ 244.204043][ T551] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 244.211694][ T552] usb 6-1: config 9 has no interface number 0 [ 244.217898][ T552] usb 6-1: config 9 has no interface number 1 [ 244.224202][ T552] usb 6-1: config 9 has no interface number 2 [ 244.230440][ T552] usb 6-1: config 9 interface 75 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 244.241267][ T552] usb 6-1: config 9 interface 75 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 244.251903][ T552] usb 6-1: config 9 interface 75 altsetting 2 bulk endpoint 0xB has invalid maxpacket 32 [ 244.261764][ T552] usb 6-1: config 9 interface 75 altsetting 2 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 244.272572][ T552] usb 6-1: config 9 interface 75 altsetting 2 endpoint 0xD has invalid wMaxPacketSize 0 [ 244.282421][ T552] usb 6-1: config 9 interface 75 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 244.293059][ T552] usb 6-1: config 9 interface 75 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 244.303970][ T552] usb 6-1: config 9 interface 75 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 244.314797][ T552] usb 6-1: config 9 interface 75 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 244.325454][ T552] usb 6-1: too many endpoints for config 9 interface 33 altsetting 19: 86, using maximum allowed: 30 [ 244.336459][ T552] usb 6-1: config 9 interface 33 altsetting 19 has a duplicate endpoint with address 0xD, skipping [ 244.347223][ T552] usb 6-1: config 9 interface 33 altsetting 19 has 1 endpoint descriptor, different from the interface descriptor's value: 86 [ 244.360327][ T552] usb 6-1: config 9 interface 56 altsetting 217 has a duplicate endpoint with address 0x5, skipping [ 244.371372][ T552] usb 6-1: config 9 interface 56 altsetting 217 has an invalid descriptor for endpoint zero, skipping [ 244.382411][ T552] usb 6-1: config 9 interface 56 altsetting 217 has a duplicate endpoint with address 0xB, skipping [ 244.393231][ T552] usb 6-1: config 9 interface 56 altsetting 217 has a duplicate endpoint with address 0x3, skipping [ 244.404123][ T552] usb 6-1: config 9 interface 56 altsetting 217 bulk endpoint 0x1 has invalid maxpacket 16 [ 244.414179][ T552] usb 6-1: config 9 interface 56 altsetting 217 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 244.425390][ T552] usb 6-1: config 9 interface 56 altsetting 217 has a duplicate endpoint with address 0x2, skipping [ 244.436374][ T552] usb 6-1: config 9 interface 56 altsetting 217 has a duplicate endpoint with address 0x7, skipping [ 244.447347][ T552] usb 6-1: config 9 interface 56 altsetting 217 has an invalid descriptor for endpoint zero, skipping [ 244.458648][ T552] usb 6-1: config 9 interface 56 altsetting 217 has a duplicate endpoint with address 0xD, skipping [ 244.469644][ T551] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.480498][ T552] usb 6-1: config 9 interface 56 altsetting 217 has a duplicate endpoint with address 0x7, skipping [ 244.491681][ T551] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 244.500894][ T552] usb 6-1: config 9 interface 56 altsetting 217 has a duplicate endpoint with address 0x1, skipping [ 244.512534][ T552] usb 6-1: config 9 interface 75 has no altsetting 0 [ 244.519824][ T552] usb 6-1: config 9 interface 33 has no altsetting 0 [ 244.520839][T12199] tmpfs: Unknown parameter ':;2SHDOkQ:ۘMck?3\7o+Y;W` zCU\v"I]:sUBr?ISY,8' [ 244.527071][ T552] usb 6-1: config 9 interface 56 has no altsetting 0 [ 244.539470][T12199] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.546140][T12199] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 244.546542][ T551] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.552799][T12199] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 244.561238][ T551] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.571258][T12199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:670 [ 244.579859][ T551] usb 7-1: Product: syz [ 244.601217][ T552] usb 6-1: New USB device found, idVendor=12d1, idProduct=2a5b, bcdDevice=be.70 [ 244.610996][ T552] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.615249][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 244.615278][ T36] audit: type=1326 audit(2000000153.244:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12201 comm="syz.4.3934" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe361f8ebe9 code=0x0 [ 244.619408][ T552] usb 6-1: Product: 띢ᆜ岌鹅軚緛沨㢉倵瓯ᕏ 墺媫ᵽ뀴跛팸⦸㶯䏠鰨똢쎱뻴Ӗ灞籯䙳訥վ왦鎊볶㷌陗굳垄ᐊ2즺璯阮㉤퓅롐晾돚袒繈鲻來釅ᝢ꒽᠎￝沣䠯豹濨姷㦟욐遯 [ 244.672345][ T551] usb 7-1: Manufacturer: syz [ 244.677210][ T551] usb 7-1: SerialNumber: syz [ 244.677657][T12204] /dev/rnullb0: Can't open blockdev [ 244.682962][ T552] usb 6-1: Manufacturer: ခ [ 244.692657][ T552] usb 6-1: SerialNumber: 靊⋀Ჯꦺ㴹郞雘閽줈腞ﵤ뿓▾蒪⌺클婷ၞ蠎䧐曱埫 [ 244.704432][T12191] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 244.711670][T12191] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 244.895144][ T551] usb 7-1: 0:2 : does not exist [ 244.901433][ T551] usb 7-1: cannot find UAC_HEADER [ 244.910820][ T551] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 244.927406][ T551] usb 7-1: USB disconnect, device number 19 [ 244.936624][ T6385] udevd[6385]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 244.943518][ T552] usb 6-1: USB disconnect, device number 12 [ 245.611575][T12228] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 245.611602][T12228] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:687 [ 246.115720][ T36] audit: type=1400 audit(2000000154.754:664): avc: denied { read } for pid=12242 comm="syz.5.3945" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 246.150829][T12243] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 246.153932][ T36] audit: type=1400 audit(2000000154.754:665): avc: denied { open } for pid=12242 comm="syz.5.3945" path="/46/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 246.186706][ T36] audit: type=1400 audit(2000000154.784:666): avc: denied { ioctl } for pid=12242 comm="syz.5.3945" path="/46/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 246.215305][T12245] /dev/rnullb0: Can't open blockdev [ 246.222754][T12245] /dev/rnullb0: Can't open blockdev [ 246.372923][ T36] audit: type=1326 audit(2000000155.004:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12187 comm="syz.0.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f46b8ebe9 code=0x7fc00000 [ 246.638027][T12271] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 246.645707][T12271] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 246.652233][T12271] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 246.660427][T12271] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:695 [ 246.663880][ T36] audit: type=1400 audit(2000000155.294:668): avc: denied { read write } for pid=12278 comm="syz.6.3958" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 246.702803][ T36] audit: type=1400 audit(2000000155.294:669): avc: denied { open } for pid=12278 comm="syz.6.3958" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 246.727867][ T36] audit: type=1400 audit(2000000155.314:670): avc: denied { map } for pid=12278 comm="syz.6.3958" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 246.751153][ T36] audit: type=1400 audit(2000000155.314:671): avc: denied { execute } for pid=12278 comm="syz.6.3958" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 247.117143][ T36] audit: type=1400 audit(2000000155.754:672): avc: denied { sys_module } for pid=12298 comm="syz.0.3966" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 247.323867][ T551] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 247.486396][ T551] usb 7-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 247.497847][ T551] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.506677][T12324] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:167 [ 247.508447][T12325] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 247.512179][ T551] usb 7-1: config 0 descriptor?? [ 247.530950][T12325] rust_binder: Write failure EINVAL in pid:167 [ 247.620383][T12333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.627215][T12333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.634154][T12333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.641437][T12333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.647518][T12333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.653942][T12333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.660399][T12333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.660420][T12333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.673380][T12333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.679805][T12333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.700587][T12338] SELinux: security_context_str_to_sid () failed with errno=-22 [ 247.738640][T12344] /dev/rnullb0: Can't open blockdev [ 247.868303][T12362] : renamed from bond_slave_0 [ 248.111800][T12375] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3992'. [ 248.133630][T12378] netlink: 324 bytes leftover after parsing attributes in process `syz.0.3993'. [ 248.203870][ T552] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 248.223193][T12394] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 248.312509][T12409] netlink: 'syz.0.4004': attribute type 4 has an invalid length. [ 248.353911][ T552] usb 5-1: Using ep0 maxpacket: 8 [ 248.361886][ T552] usb 5-1: unable to get BOS descriptor or descriptor too short [ 248.370655][ T552] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 248.379150][ T552] usb 5-1: config 0 has no interface number 0 [ 248.385672][ T552] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 248.397017][ T552] usb 5-1: config 0 interface 88 has no altsetting 0 [ 248.405610][ T552] usb 5-1: string descriptor 0 read error: -22 [ 248.411831][ T552] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 248.420941][ T552] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 248.429836][ T552] usb 5-1: config 0 descriptor?? [ 248.436695][ T552] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input15 [ 248.639154][ T7881] usb 5-1: USB disconnect, device number 39 [ 249.169197][T12460] binder: Bad value for 'defcontext' [ 249.262394][T12464] rust_binder: Fixups oob 164 166 363 196 [ 249.262424][T12464] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 249.282184][T12464] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 249.312781][T12464] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:219 [ 249.463880][ T329] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 249.674131][ T329] usb 5-1: Using ep0 maxpacket: 8 [ 249.682373][ T329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 249.733221][ T329] usb 5-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00 [ 249.776570][ T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.803329][ T329] usb 5-1: config 0 descriptor?? [ 249.914475][T12500] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 250.030718][T12117] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 250.047170][T12117] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 250.096898][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 250.096918][ T36] audit: type=1400 audit(2000000158.724:675): avc: denied { shutdown } for pid=12516 comm="syz.0.4041" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 250.225207][ T329] usbhid 5-1:0.0: can't add hid device: -71 [ 250.231249][ T329] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 250.262848][ T329] usb 5-1: USB disconnect, device number 40 [ 250.406781][T12540] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 250.423888][T12540] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:601 [ 250.476917][T12547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.505081][T12550] netlink: 'syz.0.4052': attribute type 3 has an invalid length. [ 250.512851][T12550] netlink: 944 bytes leftover after parsing attributes in process `syz.0.4052'. [ 250.529995][T12547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.744179][T12553] rust_binder: Write failure EFAULT in pid:713 [ 250.868868][ T36] audit: type=1400 audit(2000000159.504:676): avc: denied { remount } for pid=12556 comm="syz.5.4055" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 250.879712][T12557] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551610) [ 250.895389][T12557] rust_binder: Error while translating object. [ 250.907711][T12557] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 250.913962][T12557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:255 [ 250.941411][ T36] audit: type=1400 audit(2000000159.574:677): avc: denied { write } for pid=12558 comm="syz.5.4056" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 250.942308][T12559] overlayfs: failed to resolve './file0': -2 [ 250.993885][ T329] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 251.022654][T12563] netlink: 'syz.5.4058': attribute type 1 has an invalid length. [ 251.031098][T12563] fuse: Bad value for 'fd' [ 251.053786][T12566] rust_binder: Write failure EFAULT in pid:263 [ 251.069429][T12570] rust_binder: Write failure EFAULT in pid:268 [ 251.076136][T12571] rust_binder: Write failure EFAULT in pid:268 [ 251.104876][T12577] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 251.111212][T12577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:272 [ 251.164354][ T329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.184864][ T329] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 251.201984][ T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.204245][T12584] rust_binder: Error in use_page_slow: ESRCH [ 251.210013][T12584] rust_binder: use_range failure ESRCH [ 251.216210][T12584] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 251.221544][ T329] usb 5-1: config 0 descriptor?? [ 251.224111][T12584] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 251.235848][T12584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:274 [ 251.301027][T12596] syz.5.4071 (12596): attempted to duplicate a private mapping with mremap. This is not supported. [ 251.647377][ T329] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 251.659285][ T329] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0019/input/input16 [ 251.755308][ T329] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 251.936187][ T36] audit: type=1400 audit(2000000160.574:678): avc: denied { read } for pid=12599 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 252.177614][T12555] /dev/rnullb0: Can't open blockdev [ 252.186829][T12555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.190352][T12607] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 252.195298][T12607] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:280 [ 252.198802][T12555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.238894][T12614] netlink: 'syz.5.4074': attribute type 4 has an invalid length. [ 252.248435][ T329] usb 5-1: USB disconnect, device number 41 [ 252.264006][ T36] audit: type=1400 audit(2000000160.894:679): avc: denied { mount } for pid=12613 comm="syz.5.4074" name="/" dev="incremental-fs" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 252.294340][T11846] ------------[ cut here ]------------ Stopping sshd: [ 252.299874][T11846] WARNING: CPU: 1 PID: 11846 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 252.309483][T11846] Modules linked in: [ 252.313436][T11846] CPU: 1 UID: 0 PID: 11846 Comm: syz-executor Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 252.325352][T11846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.329804][ T36] audit: type=1400 audit(2000000160.904:680): avc: denied { append } for pid=12616 comm="syz.4.4075" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 252.335487][T11846] RIP: 0010:drop_nlink+0xce/0x110 [ 252.363502][T11846] Code: 04 00 00 be 08 00 00 00 e8 7f 46 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 80 a0 03 cc e8 32 19 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 252.383174][T11846] RSP: 0018:ffffc9000fef7c60 EFLAGS: 00010293 [ 252.389320][T11846] RAX: ffffffff81edcb0e RBX: ffff888130619e30 RCX: ffff888110e5a600 [ 252.397598][T11846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.405734][T11846] RBP: ffffc9000fef7c88 R08: 0000000000000003 R09: 0000000000000004 [ 252.413733][T11846] R10: dffffc0000000000 R11: fffff52001fdef7c R12: dffffc0000000000 stopped /usr/sbi[ 252.421795][T11846] R13: 1ffff110260c33cf R14: ffff888130619e78 R15: 0000000000000000 n/sshd (pid 201)[ 252.431293][T11846] FS: 000055556f00a500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 252.432982][ T36] audit: type=1400 audit(2000000160.914:681): avc: denied { unmount } for pid=11846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 252.441648][T11846] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.441670][T11846] CR2: 000055556f035528 CR3: 0000000126264000 CR4: 00000000003526b0 [ 252.441695][T11846] Call Trace: [ 252.441705][T11846] [ 252.441717][T11846] shmem_rmdir+0x5f/0x90 [ 252.441760][T11846] vfs_rmdir+0x3dd/0x560 [ 252.491432][T11846] incfs_kill_sb+0x109/0x230 [ 252.496106][T11846] deactivate_locked_super+0xd8/0x2a0 [ 252.501524][T11846] deactivate_super+0xb8/0xe0 OK[ 252.506282][T11846] cleanup_mnt+0x3f1/0x480 [ 252.510867][T11846] __cleanup_mnt+0x1d/0x40 [ 252.515432][T11846] task_work_run+0x1e3/0x250 [ 252.520160][T11846] ? __cfi_task_work_run+0x10/0x10 [ 252.525350][T11846] ? __x64_sys_umount+0x126/0x170 [ 252.530429][T11846] ? __cfi___x64_sys_umount+0x10/0x10 [ 252.535894][T11846] ? __kasan_check_read+0x15/0x20 [ 252.540958][T11846] resume_user_mode_work+0x36/0x50 [ 252.546148][T11846] syscall_exit_to_user_mode+0x64/0xb0 Stopping crond: [ 252.551636][T11846] do_syscall_64+0x64/0xf0 [ 252.557487][T11846] ? clear_bhb_loop+0x50/0xa0 [ 252.562206][T11846] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 252.568174][T11846] RIP: 0033:0x7f8f8cd8ff17 [ 252.572715][T11846] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 252.592697][T11846] RSP: 002b:00007ffd97dbffc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 252.601191][T11846] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8f8cd8ff17 stopped /usr/sbi[ 252.609238][T11846] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd97dc0080 n/crond (pid 193[ 252.618591][T11846] RBP: 00007ffd97dc0080 R08: 0000000000000000 R09: 0000000000000000 ) [ 252.628037][T11846] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd97dc1170 [ 252.636476][T11846] R13: 00007f8f8ce11c05 R14: 000000000003d960 R15: 00007ffd97dc2240 [ 252.644520][T11846] [ 252.647682][T11846] ---[ end trace 0000000000000000 ]--- OK[ 252.653315][T11846] ================================================================== [ 252.661506][T11846] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 252.667839][T11846] Write of size 4 at addr 0000000000000168 by task syz-executor/11846 [ 252.676029][T11846] [ 252.678542][T11846] CPU: 1 UID: 0 PID: 11846 Comm: syz-executor Tainted: G W syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 252.678584][T11846] Tainted: [W]=WARN [ 252.678592][T11846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.678608][T11846] Call Trace: [ 252.678616][T11846] [ 252.678625][T11846] __dump_stack+0x21/0x30 [ 252.678661][T11846] dump_stack_lvl+0x10c/0x190 [ 252.678692][T11846] ? __cfi_dump_stack_lvl+0x10/0x10 [ 252.678726][T11846] print_report+0x3d/0x70 [ 252.678751][T11846] kasan_report+0x163/0x1a0 [ 252.678777][T11846] ? ihold+0x24/0x70 [ 252.678802][T11846] ? _raw_spin_unlock+0x45/0x60 [ 252.678833][T11846] ? ihold+0x24/0x70 [ 252.678857][T11846] kasan_check_range+0x299/0x2a0 [ 252.678884][T11846] __kasan_check_write+0x18/0x20 Stopping dhcpcd.[ 252.678918][T11846] ihold+0x24/0x70 [ 252.678940][T11846] vfs_rmdir+0x26a/0x560 .. [ 252.678970][T11846] incfs_kill_sb+0x109/0x230 [ 252.679005][T11846] deactivate_locked_super+0xd8/0x2a0 [ 252.679037][T11846] deactivate_super+0xb8/0xe0 [ 252.679067][T11846] cleanup_mnt+0x3f1/0x480 [ 252.679094][T11846] __cleanup_mnt+0x1d/0x40 [ 252.679119][T11846] task_work_run+0x1e3/0x250 stopped /sbin/dh[ 252.679147][T11846] ? __cfi_task_work_run+0x10/0x10 [ 252.679174][T11846] ? __x64_sys_umount+0x126/0x170 [ 252.679206][T11846] ? __cfi___x64_sys_umount+0x10/0x10 p7d92 14047][)T 11846] ? __kasan_check_read+0x15/0x20 [ 252.679273][T11846] resume_user_mode_work+0x36/0x50 [ 252.679302][T11846] syscall_exit_to_user_mode+0x64/0xb0 [ 252.679329][T11846] do_syscall_64+0x64/0xf0 [ 252.679360][T11846] ? clear_bhb_loop+0x50/0xa0 [ 252.679386][T11846] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 252.679422][T11846] RIP: 0033:0x7f8f8cd8ff17 [ 252.679443][T11846] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 252.679464][T11846] RSP: 002b:00007ffd97dbffc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 252.679489][T11846] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8f8cd8ff17 [ 252.679506][T11846] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd97dc0080 [ 252.679522][T11846] RBP: 00007ffd97dc0080 R08: 0000000000000000 R09: 0000000000000000 [ 252.679538][T11846] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd97dc1170 [ 252.679556][T11846] R13: 00007f8f8ce11c05 R14: 000000000003d960 R15: 00007ffd97dc2240 [ 252.679577][T11846] [ 252.679587][T11846] ================================================================== [ 252.794371][ T551] usbhid 7-1:0.0: can't add hid device: -110 [ 252.797424][T11846] Disabling lock debugging due to kernel taint [ 252.797473][T11846] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 252.797486][T11846] #PF: supervisor write access in kernel mode [ 252.814997][ T36] audit: type=1400 audit(2000000161.434:682): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 252.819362][T11846] #PF: error_code(0x0002) - not-present page [ 252.819384][T11846] PGD 800000013da42067 P4D 800000013da42067 PUD 0 [ 252.819417][T11846] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI Stopping network: [ 252.819449][T11846] CPU: 1 UID: 0 PID: 11846 Comm: syz-executor Tainted: G B W syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 252.819492][T11846] Tainted: [B]=BAD_PAGE, [W]=WARN [ 252.830332][ T551] usbhid 7-1:0.0: probe with driver usbhid failed with error -110 [ 252.834528][T11846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.834548][T11846] RIP: 0010:ihold+0x2a/0x70 [ 252.834579][T11846] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d 10 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 3c 3d ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 252.834599][T11846] RSP: 0018:ffffc9000fef7ca0 EFLAGS: 00010246 [ 252.834625][T11846] RAX: ffff888110e5a600 RBX: 0000000000000000 RCX: ffff888110e5a600 [ 252.834644][T11846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.858777][ T36] audit: type=1400 audit(2000000161.434:683): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.869253][T11846] RBP: ffffc9000fef7cb0 R08: ffffffff8896a947 R09: 1ffffffff112d528 [ 252.869278][T11846] R10: dffffc0000000000 R11: fffffbfff112d529 R12: ffff888130619e3c [ 252.869296][T11846] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 252.869310][T11846] FS: 000055556f00a500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 252.869329][T11846] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.869346][T11846] CR2: 0000000000000168 CR3: 0000000126264000 CR4: 00000000003526b0 [ 252.869379][T11846] Call Trace: [ 252.869388][T11846] [ 252.946237][ T36] audit: type=1400 audit(2000000161.434:684): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.949445][T11846] vfs_rmdir+0x26a/0x560 [ 252.949483][T11846] incfs_kill_sb+0x109/0x230 [ 252.949522][T11846] deactivate_locked_super+0xd8/0x2a0 [ 253.190716][T11846] deactivate_super+0xb8/0xe0 [ 253.195444][T11846] cleanup_mnt+0x3f1/0x480 [ 253.199903][T11846] __cleanup_mnt+0x1d/0x40 [ 253.204357][T11846] task_work_run+0x1e3/0x250 [ 253.208994][T11846] ? __cfi_task_work_run+0x10/0x10 [ 253.214166][T11846] ? __x64_sys_umount+0x126/0x170 [ 253.219234][T11846] ? __cfi___x64_sys_umount+0x10/0x10 [ 253.224652][T11846] ? __kasan_check_read+0x15/0x20 [ 253.229727][T11846] resume_user_mode_work+0x36/0x50 [ 253.234903][T11846] syscall_exit_to_user_mode+0x64/0xb0 [ 253.240404][T11846] do_syscall_64+0x64/0xf0 [ 253.244858][T11846] ? clear_bhb_loop+0x50/0xa0 [ 253.249576][T11846] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 253.255524][T11846] RIP: 0033:0x7f8f8cd8ff17 [ 253.259967][T11846] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 253.279608][T11846] RSP: 002b:00007ffd97dbffc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 253.288078][T11846] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8f8cd8ff17 [ 253.296078][T11846] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd97dc0080 [ 253.304075][T11846] RBP: 00007ffd97dc0080 R08: 0000000000000000 R09: 0000000000000000 [ 253.312077][T11846] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd97dc1170 [ 253.320101][T11846] R13: 00007f8f8ce11c05 R14: 000000000003d960 R15: 00007ffd97dc2240 [ 253.328135][T11846] [ 253.331183][T11846] Modules linked in: [ 253.335134][T11846] CR2: 0000000000000168 [ 253.339319][T11846] ---[ end trace 0000000000000000 ]--- [ 253.344817][T11846] RIP: 0010:ihold+0x2a/0x70 [ 253.349364][T11846] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d 10 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 3c 3d ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 253.369103][T11846] RSP: 0018:ffffc9000fef7ca0 EFLAGS: 00010246 [ 253.375225][T11846] RAX: ffff888110e5a600 RBX: 0000000000000000 RCX: ffff888110e5a600 [ 253.383245][T11846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 253.391266][T11846] RBP: ffffc9000fef7cb0 R08: ffffffff8896a947 R09: 1ffffffff112d528 [ 253.399270][T11846] R10: dffffc0000000000 R11: fffffbfff112d529 R12: ffff888130619e3c [ 253.407302][T11846] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 253.415380][T11846] FS: 000055556f00a500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 253.424428][T11846] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.431057][T11846] CR2: 0000000000000168 CR3: 0000000126264000 CR4: 00000000003526b0 [ 253.439064][T11846] Kernel panic - not syncing: Fatal exception [ 253.445486][T11846] Kernel Offset: disabled [ 253.449815][T11846] Rebooting in 86400 seconds..