last executing test programs: 3m41.232338747s ago: executing program 1 (id=409): syz_usb_connect(0x0, 0x51, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000cc2e3f2063072110c08e000000010902"], 0x0) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) readv(r0, &(0x7f0000000e00)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1) (async) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x0}) sendto$packet(r2, &(0x7f0000000a40)='?', 0x1, 0x24048895, &(0x7f0000000240)={0xc9, 0x8100, r3, 0x1, 0x8, 0x6, @local}, 0x14) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ecryptfs\x00', 0x800808, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x20020, &(0x7f0000000300)=ANY=[]) stat(0x0, 0x0) (async) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x14, 0x4015, 0x800, 0x0, 0x0, {0xa}}, 0x14}}, 0x800) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) close(r9) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3m41.230517177s ago: executing program 1 (id=410): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r1 = syz_io_uring_setup(0x92f, &(0x7f0000000200)={0x0, 0x4d98, 0x1000, 0x0, 0x319}, &(0x7f0000000180), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x20010, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = accept(r5, &(0x7f00000007c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, &(0x7f0000000840)=0x80) bind$inet(r6, &(0x7f0000000880)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000023c0)={0x2c, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x9c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @free_buffer={0x40086303, r3}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/221, 0xdd, 0x1, 0x1c}, @fda={0x66646185, 0xa, 0x1, 0x8}, @fda={0x66646185, 0x7, 0x2, 0x39}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xf4, 0x0, &(0x7f00000006c0)=[@enter_looper, @exit_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/2, 0x2, 0x1, 0x32}, @flat=@weak_handle={0x77682a85, 0x100, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000500)={@flat=@handle={0x73682a85, 0x0, 0xfffffffe}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/234, 0xea, 0x0, 0x30}, @ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/122, 0x7a, 0x1, 0x18}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}}, @acquire_done={0x40106309, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fda={0x66646185, 0x4, 0x2, 0x9}, @fda={0x66646185, 0x1, 0x1, 0x9}, @fda={0x66646185, 0x4, 0x2, 0x3c}}, &(0x7f0000000680)={0x0, 0x20, 0x40}}}, @free_buffer={0x40086303, r3}], 0x53, 0x0, &(0x7f0000000100)="892a7863af87409b1b8fe4e183cc4e2c2eddca324f8c2a61fb078c81d7272d92b902bf051aacb6decd83ec368991a0d7599c3ce3f7bed9d8078ba649896475d964ddb0c6d4d498b0ef80a3f6170b75654851be"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) 3m40.39206479s ago: executing program 1 (id=425): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r2) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="9000001dd25900", @ANYRES16=r4, @ANYBLOB="21002cbd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4050) epoll_pwait(r3, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4, 0x8, &(0x7f00000001c0)={[0x6]}, 0x8) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) fsync(0xffffffffffffffff) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r9, 0xfffffffffffffffe, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0xffaf) socket$packet(0x11, 0x3, 0x300) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r4], 0x164}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 3m40.222017202s ago: executing program 1 (id=426): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000480), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="bf86b37515d0fe41dfa0331fb5943bf784cdc549f04aa63d579d759bc14d02b1ec12316701117ec88b4bdbda2f064d83e36da87d778cbc7fac3155f1d1f1b10e785430394c0645d678f42b97b571bf99f0749c538b5800f6a85bf6b398dce945c28561d0d02b7f763911e7969836089d5ae8613861bd8ea26391e1e544c7e7630375f792474d89b2147dcf1837ab796eb7d40186", 0x94}], 0x1}}], 0x1, 0x48080) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001800290200000000000000000a"], 0x20}}, 0x20010000) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000100)=@nullb, r3, &(0x7f0000000200)) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000500), 0x1ddc03, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = getpgrp(0x0) syz_pidfd_open(r7, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r8) ioctl$BLKFLSBUF(r4, 0x1261, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="05000000400800"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000001000040380200000246edc82ce55b5f1b2de20000000000000005dc8a19d9e2a6b06697f2f60a1a9eb36af20b85adb38ffbb7bcd880081ffe6a5a6f86fb13cee7f8529f2552182e"], 0x80}}, 0x0) syz_usb_connect$uac1(0x0, 0xb7, &(0x7f0000000000)=ANY=[@ANYBLOB="1201eb00000000106b1d01014000010203010902c7fd03010000000904000000010100000a24010000000201020d24060000030000000000000808240800000000500c2402000000000000000000132406000606000027000900000000000000000924030000000005003124080500"], 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) userfaultfd(0x80000) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000700)={0x10, 0x0, &(0x7f0000000540)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) unlinkat(r6, &(0x7f0000000640)='./file0\x00', 0x0) open(&(0x7f0000000600)='./file0/../file0\x00', 0x30380, 0x134) r10 = openat$cgroup_ro(r6, &(0x7f00000004c0)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$VHOST_SET_OWNER(r10, 0xaf01, 0x0) 3m39.68865865s ago: executing program 1 (id=438): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback, 0x5}, 0x1c) io_setup(0x4006, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x5, 0xf6b6, r0, 0x0}]) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)="547ed2af0ed62660022b7542ff7b78099eed00629385a1cb2644afc216b11764d54d0261409d47670d690a9770dc9e36782fb64f073f2e7b7a780da2067f280c63dd8948796c2cf22d37a7a926a62949a6f086c35f1500dafeff56809e7b72abe74eb5ebe0c692171163417a35306c77c941220f41c7be16ffcbc724fab94caaacff4e6a06deb3f523ca51b38d8ef3a4a871018f30d6a24fbffbd2b9f66c7551d71a2d2448bf01a503c254f63c36fba955430f", 0xb3}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x100010, r3, 0x99b37000) io_setup(0x4, &(0x7f0000000100)) 3m39.573392822s ago: executing program 1 (id=443): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300091000000000000000feffffff05000500000000000a004e22000000fffc000000000000000000000000000001f9060000635d91a405000600000000000a004e2200000081fc020000000000000000000000000001ff03fffd00000000020001000000000000000000000000000200130000"], 0x80}, 0x1, 0x7}, 0x10010000) 3m39.557372222s ago: executing program 32 (id=443): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300091000000000000000feffffff05000500000000000a004e22000000fffc000000000000000000000000000001f9060000635d91a405000600000000000a004e2200000081fc020000000000000000000000000001ff03fffd00000000020001000000000000000000000000000200130000"], 0x80}, 0x1, 0x7}, 0x10010000) 1.298095871s ago: executing program 2 (id=3235): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 1.2835473s ago: executing program 2 (id=3238): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/61, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb"], 0xf8}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.235879451s ago: executing program 2 (id=3239): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x380e2b6ea2bd9dc7, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2e22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x3a, 0x2, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000000)={0x67, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000040), 0x10) bind$can_raw(r3, &(0x7f0000000380)={0x1d, r4}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', r4, 0x29, 0x7f, 0xb, 0x8cf, 0x55, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x700, 0xffffffff, 0x7}}) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000440)={0x40, 0xc, 0x23, "aa6f5ffacee0c59b910879007f8b4d13d06019eeeb3611155017311e7125fad5f6f2fa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0xff06, &(0x7f0000000000)={@fd, @fd, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 973.620895ms ago: executing program 3 (id=3249): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x48, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x4}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_WOL_MODES={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x11, 0x4, "157cc60b4bfa014adbbed2076d"}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x8008770b, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x48, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x4}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_WOL_MODES={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x11, 0x4, "157cc60b4bfa014adbbed2076d"}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$ASHMEM_SET_NAME(r2, 0x8008770b, 0x0) (async) 946.296625ms ago: executing program 3 (id=3251): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xda6, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac17c55ab77d0fd2b7318207e91fd536b9fb7c994a9ad0769020b45bc05965f6dffb15fd462bb2e49632c788cfeb74472be3d9eaf3284719df7187a354b3915df2661363052a24baf8cc101728d302f75878515b436d1fbdb3fc5fc88e8745c56b1bd79dc2cc7e7b5be814275a3edfc67e923d199c97fd6a8b2d11d2923b688471fe8c1e771545d17bad44fc5f7a91cf43ba91b4627c9554a333b6e8ee1c457b54c30bccbbabdfed6158fed6e548cd54ad7409e0a03fb2f685f8987e98ee687a09a730c2a757d3b1595a1146d57230e178284ef3fed5553bbd1e82bd418a13c03f944421d013d96182302122d01c432e24c43a9dff19658a3680167297367a1ee7f70e0968ce28ca2bc8b8525c41f8d4f9cdcaaa25b2d0fea854626eba2e86ecb31e9be7b8e704287fe45ad3f169d7f67e798b0de3bf70f485f81ba5e9aef1ec5782c4c609ffdc93a3bdfeeb7e7cd05ea7023895be4a3f78f188fdbd83ded6dcdf1d429c12b1b250284110295e3515bfb117119839f13057ea2366d3c4b75b28f60afe17b195d04ff58dd2f3382bb57152f2928f9a91bbcc42057777ba13becb4552419caa2ffc325219a6995f5d1e9a193a1aede859834ef765009d6c242ad918ecf3fe62c8dfe2ff309cbce740950cdd05c8e0b7f75aa21731be678552b2d0024a4b3815fb52f056ba37f3f466afab6b5728def0fdef93655524121927df3a39af0845df7612e9ccdae25f406ac0ad7a0e4f980398597ab2c2291d87a1ed618b9e392f1d055d5290be67b6cec9e7505c41025d2aa6e82a4f693042989b5f4a9abfe0ec51fd9dcb972a054b80ee6a460fd422eaa971e2cb759c72e676e2877c667c6ce002be1ce6ba8380e6dd691590c84ba68d26f3284280dcacd082b42bf5aac71467b3fcd5d68ab1bc26cf48fe770ccff5f14ff8afafb18d3127a6d989b7d77665a7a9bf4cb488621c904acd0b073396ad8509c9ddb02eb1d23510a52289a5f0d7edba66d4ef271b9c6acc3bfa996b55f6808650236b0001132ef85fc5070b69144ff5fdd8d64f6c3e0dd22711f69a940ebdb4ab5ff6240da3160049d2047e6713d47ad0db40ec543c095ad67c8cbe438fb875927c98e265498b3da8d4ca54bac0e6efe759a2d4d4190e9fc8835599da8237f472411a71236bb930d28a26f49062d270f4087a6a709c005eebc9740ed54dd005c787c44badac9c720b0d424d0ded9bb8c24c0e842deedf386fc7714a31268292d3bcc53b1cf24b156445c8bf64336f742b1ba836eba0ae4a5aaa9a6f35d4f81734e16bce965795d5b1255609d1860fe11c9c536db078af94772830ba000c13e1d9383e3d862fa07f2199da148632c036bc19f6014eeb206a3654d390c78911deeabebf128def61122754e0a4696db82666a018f8d2f44b5aadc12809ade8bed1b1ba2adbb6e3e82180e26748dc30a8eda0edb21fcaa702632ed3fb4e89550c3e0e1fd2b5ecf1983d85bf9569b231e28155756bd97f1220cbc2b5b1c02dab88ee4a8970d4833b9e51529895afe5029823576297d4a917602fe08df57e1d7f63d050877ddf8e82a5383e15f313171b2d5618a1549f3dfced0732b887508ca5e134124d0ed0bd4b767115d1530f73504387e0364d73a2d3b114fcb49219b1c15e066c455b01672e49499995454a502236f5a5007895d3d1d8843007352a3ccc3f71d3e801efd0a6ef922bf39ead16e01ec20ebff2b1ce7cfd0984b26225cb1359b36efe9ad2ae1f6de4862c0faaa52f4d0eb4c13960ceb4aeaa10ae61a09a5abdb0c61661962a0aab14d465a8ae6f45826e1e66428cf8572eb53c98160df6613a62bb611c63f1ffb7a795a889fc16670f6302fd36ee4247bdd4282f1afb6042c832a4b0857cecae0a7090d9b11ae46d9186c710c8dd12911db573493329bea2c743734d86a577cf27aa01e4fc6c91f1fa34bba173d20b97ed8bb4bad43692df90bfd2b193b9e8b93a95ec0d0d42217395d89db511d2e9bbeb3ef47b7b2d81ab54b5c8faa760ef5c0493af13a9327c9432521ed6bfcb9d778d25031da41a983027fe7d794c26326053d38172444307d88501cdd26c3fdeafdf5f599d3dcfd39972f28ec3fb1fb40982615f5d71d6693a8774df072576834c69b89f209b458fad4671f0108fdfc8548a6fcf76a843369a3bca4d2974221ed9af224d151fa8aa73276ba65ca3d8bc98d6504f16bcac30c697f68cb1625b4f2259ee0c694951752845fa11c20fc4dda369d53918c3746918692ee2cda958612808b841b8d36ef3933f5340e1fc8fb10ac2ae97da921f6a67806831356d515c7a32468dfd3385c1ae2008448e5750c3a3d5733b4a2486788550e6353e9b12cc09750d5b9dcd2aedba61d0520e99a51e880d3dd78a2b502029deac1860cf50885f8bf5119491c6b1e06492e98ca64e5e32afbb3b0630cb35b58640afc2188a232f77968c18d2d0e8f91c974edcb3198b4520f530acacb12017216338cc479de3651e8f15f1672397c730e3ca2a189ca4cc85f35dd46aeb67b6a2eb7268a653b190d8ba670490d50f761c1fa25f1954d8fe6bcb15dbc23698c945262b991e6245b9a25b12b13c87bf8a8a06f51784007abd06e01a0c03ee80b236fabb5b22ce797c4d8a739ac96dcf16c93f454463d3631c4cdd2dea6732a486015dc9937ee4e6efbfff46bdd8887094ca4bd94d995f411421c7ef07f949fcc10132f58b7c99a871780d92464594c930b80596baab77b0d68a05d71ca8a1888f3128f12aebac362c4d80870ab3d9f2e77d51f9af16472faff98dda1e0133c8bc2510345d5eb1d64bce64761f4cc39ac6655902338bf1335dc55393995af4447ed1aa4c50bfacd576842560abca3e6c74dcea6dd03d36f9e7f8bda2cf33e3b7da195fba79f5a60421e19910f1fef31b9fa52064ce9ee8c415746a3cab47a8ad8477e9f21e9ee804a85dc568439b95c01bbbc3fa16a8c26bd81b01b8849795b2370f591e2a8e175cd465a600a541839bc734271b4b3afb2303dc1cf12bee00080ad10658c97672ad023e89f23d9301b5dbf1a7ba6d6c2b8dbd300f05f36a095f188b56fd3ba8e871aaf22e2128696e7232cb22f4f5404a3d1256a11665caaead326faad340031cafb99edbceba7bac44c7d2720aedba9cb708dae55b192a1e31835fae8756f062c151f6778b1d93c2d1f8b479ae9bbe1255abcef9beaa95b558fbbc9a979d46580aa85b10f160b438bea64f23b8e605ce34d2b46bbf8bfbfa683b10f55b3d30c58675dd1a524495e5d42c7d02dc60b853e8b3ed2caf41cd24a8a1d044e27d48b2184bac00730f7c20a1ba2bb6b6a5381a3d359d8e721504bbbce18ee49031b48c278a5730f31fb83f6cf32ac98326b722d3e2d7b38a7b80b94a3eb2b69fb1aefc8c0bbe431191f0ed76141a8365621e4f7118dd4465b4642bdb0af21d30c8cfb1d5201852c0428b1983d91f706e814c1395888b1c2a3516ea20a93d868e27c3c9b68a9cda4befc389b57661a4ff37137628ec96bcb625fd10324625ac1589c2918c66f811a323a19ab30bcf28fc20b64176e319d58f74578093e32ba9f51b255693dda9514ff43f6ef6010143554305073e94be322daa024cb7efcf405ea4924bfa72633b766365fee1d59d1a94717450657ff3b72853785e91f94ca1502b129eafa718633bec1557fb1e0ae2887e6e8c0fdd9f3f99de03c0af7364781766520d90c15b0e2a4c43613089dbecc4dd68be74204809f0270370097642d54388ccbb54b58be8b5796eac48ef5f17752eaa7301f075faee593aae71ee0e0ca1f45a22e7cede3597f14a344796ceec33e98b3b89e031c0d757e83d5093322d9afc9898f80b2e9bb17bc8b2b164d048c1b912f6cd92979df629efcb94968cca6e65b9b078677698fa4937a2ec23edd00971a5505ecc65fe150d3d00a34e52cc64951937fc79014b0df8d2c9c35f06209f45556278fa7ecfc70a92eca165bbd493686fb4c0cd607cec994657149a61da2e09414944c557be54908197724174247194d435b25bf78ec4cc164a574662eb4d1e4d784a6ea0c71dd1a16e53a7b8a27fcec679346afe90a05e06b276fe972d5e1d3486e0452d0a9a1636ab9c517f371a0592ef34513a9a4e961cd79c86891f460becb57f41e22b2a72ae175e29344184cde0b2beae00f90a6a79dc689da4b4b1da0e9758854d404a9cbcf725c68b6f2de865b2b5e12124d09f8745208b5cc544522f7c8bcfceb907422502f1641b600a60a5aef28be5a92ff71755efaf29e23c8ca52ad945bbdc4d6e7502adee312ea8d9338a80671f36309026c0d9c2ceb14da0b8beb087853b8014d30372f0d58448530f1bed15c4caaf8a844853030aab1ba6de9891678a16a2d9b9889d4a367753f0aacda03ce6fae1f62b34a3317a704527e65b18dc3186f32c5caa2d82f058066274e145f3cfe0bb5d40a77f54fb0de584d5f50de29d1c3aa29acea2363ef5c1e0592ef94370936df0152871396c13a89e56086f381862edb6f4bec0d937e94a689a8c5c87a51e073fdaa935591bbccff359e0805ded9ac71e3b295fdd05bc2b03d7af58a393778c9dfdfd8101b3503c86a6d9e2fdeb215be40f90bb7360a04e111d743207a8742275ee7df2508b909ea4d3a7af7886d3f26aa58943edbbcbd686bf9cf9a78b43dd9792bca97cda6508340"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64=r2], 0x58}, 0x1, 0x0, 0x0, 0x20040090}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/78, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/185, &(0x7f0000000140)=""/92, 0x3000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000ac0)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000023106a053103000000000001090224000100007e1109040002010300010009210000000122f80409058103"], 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x3, 0x9d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010002020000402505a1a440000102030109028b0002010590f70904000001020d0000052406000105240008000d240f010500000098ff05008006241af9ff1005240101091524121400a317a88b045e4f01a607c0ffcb7e392a1524120200a317a88b045e4f01a607c0ffcb7e392a0905810308000003040904010000020d00000904010102020d000009058202400009030209050302080007030b503612141f21065002e123845d4233686ae466fb04b73d9cae3ebb757f8df4990f9114a6a825f7a680d7a46f9f8f"], 0x0) (async) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 862.246657ms ago: executing program 4 (id=3252): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) 713.626009ms ago: executing program 4 (id=3256): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7}, @NL80211_ATTR_REG_RULES={0xd8, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3c}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x164ce}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x97d2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x73}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x800}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xd8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x54}]}, 0x104}}, 0xaf32d3505c61bb73) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40080) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000500)=0xe7, 0x4) writev(r0, &(0x7f0000001840)=[{&(0x7f0000000540)="71c6e0275ffd0869f7b61739f52ca5548ee2eccb1ba3f1a2dca4f4248b9d277d1ae2604f17cb3d87bd31c3fa5ea923942f840c281c18f5f31d71272af206297a1ac42e274c00364568779808385b907f8f039a0deeb4351d2e246171f9f210f1c2816f51a64adc62c8", 0x69}, {&(0x7f00000005c0)="fde0893cf293ebc4a208c63d5411e3fd2a4377ab99ac740f3d5faa5db718034972acf0aed4957f1a4fd92af818accf41df546b07851bde2ca02a486e20196f30cfa5c30603776fea51315b339c7a9f28b192c25964e20cfcc0a6713facab8a904e61f991ee975cdecac99df65c5d53337e813a60a1d8907a1547f5ebacfdc18c63980db617c41795640553b0005ddef02852ea0995d704", 0x97}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="b62495ce0b35121ec660d36f1cc87063076eb1db697e86d9144914fbd08388b7545d49b0e933", 0x26}, {&(0x7f00000016c0)="89472eb3a79a35fc134097379a1ed3238532f0fc4878ff5820b6e03e4503b583bb02a0e97aaab5c58091bfa1276b172ee8edcdd307124b52188050d6fc33062bc9fb3b9b6094e1758a833087fba9c2d9ff6f", 0x52}, {&(0x7f0000001740)="1a9c12c3f181d598b9d5f34ac84b21398e56d5b4f5d40f9a5b2f62bba4abc09850828314c6ce053604d693c32b576f3dc1dfe4636575b295dff22602d8109d23468de0ed62270f6c37ea89e03177ef8e94", 0x51}, {&(0x7f00000017c0)="cfd81c2fa051f797c17bda9a52f2fb94a3f56a96c85bef4ee5418831a4eb9dac5f77132089ee4c168cf8d9824097f50836924f5ab541b858b7e79efdd05809cff8bf66ecb4bd62741542767e2c774b", 0x4f}], 0x7) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000001a80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a40)={&(0x7f0000001940)={0xe0, r4, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:smartcard_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:load_policy_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:hald_sonypic_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000040}, 0x20044801) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000001ac0)={{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0xd}, 0x2}, {0xa, 0x4e22, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0xffffffffffffffff, {[0x5, 0x401, 0x3, 0x1, 0x9, 0x6, 0x8, 0x6]}}, 0x5c) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000001b40)) connect$unix(r0, &(0x7f0000001b80)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x78, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001d80), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x60, r5, 0x300, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7651}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4044014) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f00), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x24, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x14000880}, 0x800) r7 = socket$pppl2tp(0x18, 0x1, 0x1) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000002000), &(0x7f0000002040)={'L-', 0x100}, 0x16, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000020c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002140)={'gretap0\x00', &(0x7f0000002100)={'syztnl2\x00', 0x0, 0x8, 0x1, 0x5d65e3e, 0xf, {{0x7, 0x4, 0x0, 0x1, 0x1c, 0x67, 0x0, 0x81, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, {[@ssrr={0x89, 0x7, 0x8d, [@empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002200)={'tunl0\x00', &(0x7f0000002180)={'gre0\x00', 0x0, 0x20, 0x20, 0x3, 0x5, {{0x13, 0x4, 0x3, 0x1d, 0x4c, 0x65, 0x0, 0x1, 0x2f, 0x0, @empty, @local, {[@ra={0x94, 0x4}, @rr={0x7, 0x23, 0xe4, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @remote, @local, @rand_addr=0x64010102]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xe9, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000022c0)={'syztnl2\x00', &(0x7f0000002240)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x0, 0x0, 0x0, @loopback, @private0, 0x1, 0x20, 0x8826, 0x400}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002300)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002440)={'sit0\x00', &(0x7f0000002340)={'syztnl0\x00', 0x0, 0x1, 0x40, 0x7, 0x3, {{0x36, 0x4, 0x2, 0x6, 0xd8, 0x64, 0x0, 0x8, 0x0, 0x0, @multicast1, @remote, {[@timestamp_addr={0x44, 0x2c, 0x60, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@loopback, 0x10}, {@remote, 0x9}, {@local, 0xfff}, {@loopback, 0x2}]}, @timestamp_prespec={0x44, 0x44, 0x27, 0x3, 0x2, [{@remote, 0x3}, {@rand_addr=0x64010100, 0x7}, {@empty, 0xfffffbbd}, {@private=0xa010100, 0x1}, {@rand_addr=0x64010100, 0x1}, {@rand_addr=0x64010100, 0x40}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x6}, {@loopback, 0x7f}]}, @timestamp_prespec={0x44, 0x24, 0x36, 0x3, 0x6, [{@private=0xa010102}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x7}, {@local, 0x100}, {@remote, 0x3}]}, @end, @timestamp_addr={0x44, 0x2c, 0x8, 0x1, 0x5, [{@rand_addr=0x64010100, 0x9}, {@multicast1, 0x16}, {@empty, 0x7fffffff}, {@broadcast, 0xe94}, {@remote, 0x7ff}]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000002540)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002500)={&(0x7f0000002480)={0x78, r8, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c005}, 0x8040000) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000002580)={0x400, 0x8}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x10, r0, 0x3ff000) 691.000949ms ago: executing program 2 (id=3257): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) fadvise64(r0, 0x7, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) stat(0x0, 0x0) (async) stat(0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x47) (async) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x47) cachestat(r3, &(0x7f0000000040)={0x1, 0x8}, 0x0, 0x20) (async) cachestat(r3, &(0x7f0000000040)={0x1, 0x8}, 0x0, 0x20) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) (async) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) ioctl$ASHMEM_SET_NAME(r4, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') read(r0, &(0x7f0000000040)=""/106, 0x6a) (async) read(r0, &(0x7f0000000040)=""/106, 0x6a) 618.09907ms ago: executing program 4 (id=3258): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/61, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb"], 0xf8}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 616.34699ms ago: executing program 2 (id=3260): bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x3090001, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/238, 0xee) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000009c0)={'filter\x00', 0x7, 0x4, 0x438, 0x350, 0x240, 0x10010000, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffff00, 0x3, 0x0, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0xfffd, 'veth0_to_bridge\x00', 'veth1_macvtap\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="1758a179fe8f", @rand_addr=0x64010100, @multicast1, 0x2, 0xffffffff}}}, {{@arp={@rand_addr=0x64010101, @rand_addr, 0x0, 0x0, 0xc, 0x3, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x8a8cfb792f7af7f0]}}, 0x0, 0xfffc, 0x0, 0xa51, 0x0, 0x1000, 'team_slave_0\x00', 'veth0\x00', {0xff}}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x8, 0x5, 0x0, 0x0, "f245442f682c06144f1fb782d77bc38316214ca84d2f69b44810c3a40a495fa278a1728df4f6eaac07ddb7086bd6e732ed48ea39c4670df6527298897d41f42e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0xa010100, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x488) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSBRK(r4, 0x5409, 0xfd) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000001840)={0x44, &(0x7f0000001580)={0x20, 0x10, 0x6, "3f03b5b8342d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x40, 0x3, 0x3, "1191e8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = socket$nl_generic(0x10, 0x3, 0x10) setreuid(0x0, 0x0) fstat(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r8) r10 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x40800) fchown(r10, r8, r9) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x17, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x7405e000) 526.095312ms ago: executing program 0 (id=3261): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x143202, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) r2 = signalfd(r1, &(0x7f0000000080)={[0xf2ba]}, 0x8) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e21e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000040)=0xd, 0x4) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0xfffc, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}}}, 0x108) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffeffffffff7fb) (async) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x4010, r0, 0x4758f000) 517.892792ms ago: executing program 0 (id=3262): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x161000, 0x0) read(r0, &(0x7f0000000040)=""/106, 0x6a) r1 = userfaultfd(0x80001) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x31ea94835b4dd1c3}) 489.040083ms ago: executing program 0 (id=3263): r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/35, 0x29}], 0x10000200, 0xfffffff5, 0x6) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) (async) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0x7f, 0x4) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 458.650952ms ago: executing program 4 (id=3264): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x3, 0x100000000, 0x2, 0x3, 0x10000, 0x8c93, 0xae, 0x3}, &(0x7f00000001c0)={0xada, 0x7f, 0xa, 0x6e0, 0xffffffffffffff05, 0xffff, 0x3, 0x9}, &(0x7f0000000200)={0x5, 0x8, 0xffff, 0x0, 0x9, 0x800, 0x40d, 0xa2}, &(0x7f0000000240)={0x77359400}) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000e40)={0xbfa, 0x3, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) copy_file_range(r2, &(0x7f0000000040)=0x8, r3, 0x0, 0x9, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x11, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r7], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}, @clear_death={0x400c6313}], 0x0, 0x0, 0x0}) 410.069343ms ago: executing program 0 (id=3265): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) dup(r1) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'}) r2 = syz_pidfd_open(0xffffffffffffffff, 0x0) (async) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x10, 0x0) fcntl$dupfd(r2, 0x0, r3) (async, rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) (rerun: 32) read(r4, &(0x7f0000000080)=""/1, 0x1) socket(0x1d, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4048002) (async, rerun: 64) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) write(r5, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) (async) r6 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x402480, 0x100, 0x6c}, 0x18) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc2, 0x0, 0xfffffffffffffffe}]}) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000001040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (rerun: 32) quotactl_fd$Q_QUOTAON(r6, 0xffffffff80000201, r10, &(0x7f00000000c0)='./file0\x00') 392.814574ms ago: executing program 3 (id=3266): unshare(0x62040200) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x58020000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) getpid() mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000000)={'batadv0\x00', 0x9}) 353.495704ms ago: executing program 4 (id=3267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000240)) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="6d61783d30303030303030303030303030303030303030303030312c736174733d676c6f62436c2c73746174733d676c4f62616c2c6d61783d30303030303030303030303030303030303030303030332c6d61783d303030303001303030303030303030303030303030313a2c736f6f74636f6e746578743d00"]) 301.967145ms ago: executing program 0 (id=3268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) setrlimit(0x4, &(0x7f0000000080)={0x0, 0x7}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x8, 0xb, 0x6, 0x9, 0x5, 0x1, 0x0, 0x7, 0xe, 0x2, 0xfa, 0x8, 0x7, 0x3, 0x60, 0x3}}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB="010027bd7000fedbdf253b0000000c009900040000001200925c080026006c090000050019010f0000000400870004006c000800cd0005000400080026006c090000080027000200000008009f000400000004008e001000cd0000000800ff0005000800040008009f00070000000800040002000000080026008a09000008009f0000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000008) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x2, 0x3, 0xeffffdff, 0x0, [{0x0, 0x90}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0x7}, {0x77}, {0x0, 0x85, 0xbe}, {0x0, 0xc2}, {0x0, 0x2, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfa, '\x00', 0x42}, {0x0, 0x5}, {0x0, 0x50, 0x0, '\x00', 0x1}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x4e, 0x0, '\x00', 0xd}, {0x2, 0x2, 0x4, '\x00', 0x9}, {}, {0x1, 0xfd, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x4, 0x7, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x70}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0x10, 0x83, 0xe, '\x00', 0x3}]}}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, &(0x7f0000000500)}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) r8 = socket$inet_icmp(0x2, 0x2, 0x1) write(r8, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000340)="0f01d13e0f90a700000f01c92e0f0f9c1c3897660fc736f50011cd3e0f001fb86e008ed866b9fa0800000f3275e7", 0x2e}], 0x1, 0x5c, &(0x7f0000000840), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000d40)) ioctl$PPPIOCSNPMODE(r9, 0x4008744b, &(0x7f00000010c0)={0x21}) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async) ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f0000000300)={0x5, [0x8, 0x4fa, 0x3, 0x3, 0x100000001]}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 265.783586ms ago: executing program 3 (id=3269): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x60f00, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffeffffffff7fb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x20000000007, 0x80, 0x2, 0x4000000000800002, 0xfffffffffffffffd, 0x7, 0x3e, 0x6, 0x2, 0x1000040000, 0x5, 0xfdb, 0x10000000009, 0x1, 0x400], 0x10000, 0xe9053}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0xe0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') pwritev(r6, 0x0, 0x0, 0x43b, 0xf) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000300)={&(0x7f000099a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/212, 0xd4, 0x0, &(0x7f0000000080)=""/14, 0xe}, &(0x7f0000000340)=0x40) write(0xffffffffffffffff, &(0x7f00000002c0)=')\x00\x00', 0x3) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x13, r0, 0x4758f000) 213.253186ms ago: executing program 4 (id=3270): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6313}], 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) timer_create(0x3, &(0x7f00000011c0)={0x0, 0x3a, 0x0, @thr={&(0x7f0000000100)="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", &(0x7f0000001100)="6263829228a8f6824acbb42b46b63684e0039f323754f807f36ae3e5fe5e4c075820778e6e72fb1a49858da8fc50258c9cbaf0fa4660f5063bc65a4c5b6b5975ca49610b185e4b49dbcd5b3f357a4346626cca27d302bbdb64dfcad0aba5f86fb678beefa8c5c66b6f8aaac02867b7146f8cf51289959cb6a5a06ce3098df6a9b93f77f9"}}, &(0x7f0000001200)) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="b805000000b9b30000000f01d9640f01d9c4e27d0f06362e0f01c466baf80cb897bb4d8eef66bafc0cec66b8f8008ed80f0f009064df0ac4e3b95cf6310fe1dc", 0x40}], 0x1, 0x8, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 133.996408ms ago: executing program 3 (id=3271): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000002ac0), 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x42, r2}) r3 = socket(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0785, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r6]) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000000203030400000000000000000a0000030800010003000016"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r7]) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x200000080, 0x3, 0x7, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x5, 0x8b45, 0x2, 0x6, 0x8, 0x0, 0x200004], 0xeeee0000, 0x80400}) ioctl$KVM_INTERRUPT(r11, 0x4004ae86, &(0x7f0000000040)=0x5) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x3]}, &(0x7f0000000080), 0x8) ioctl$KVM_RUN(r11, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file2\x00', 0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)) 108.027568ms ago: executing program 3 (id=3272): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/61, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb"], 0xf8}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 100.736958ms ago: executing program 0 (id=3273): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000000000000b0000040"]) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000003, 0x810, r0, 0x0) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000003, 0x810, r0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7fff0000) (async) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7fff0000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) io_setup(0x3, &(0x7f0000000200)) (async) io_setup(0x3, &(0x7f0000000200)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r6, 0x5a, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x3, 0x1, r7, 0x0, 0x52}]) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x2046) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') 0s ago: executing program 2 (id=3274): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000019640)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x4}, @ETHTOOL_A_WOL_MODES={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xef, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0xe9b}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x9, 0x3, 0xb}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0x10, 0xeb, 0xa, 0x8, 0xb}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x12, &(0x7f0000000380)=@string={0x12, 0x3, "9e8aca0f3a1d11f8567fcfaa8b66584e"}}, {0x85, &(0x7f00000003c0)=@string={0x85, 0x3, "1477091ce8ea5071dabf67f13ef570136d87c58d7c89da35f90b4fdcddff2d328a5c0d9feff3103806c3f5b645e6bc81ba8fea377dcf83f11e1a4e27c9ed76c66b9c5e732ae0203f5a34b8dc0f481e346ba61d06892c6f8e2ab94153a14701bc043cd1611682e48d05dde7e10dbc68bd2b3f2bf60aec5dc6dddd7963d08f23a194cb7b"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x411}}, {0x79, &(0x7f0000000500)=@string={0x79, 0x3, "0a9c42e1a58d4c481513c92a5cae8893583bc462b1573605d75388d8665d204c9a9ca15f7661cc79d3fdaa6518cb4cd6f4586ca2557ba960e8057ed6a322f85129868e0fee18c3a31b3c48bfef8eb7948616e8a1a18b4bc01055a2a52b94f47a8fcb0bf2b02d651cfad311235e58b0537827a195606d1e"}}, {0x1c, &(0x7f0000000580)=@string={0x1c, 0x3, "0f256275fe03af3ccf7b3435fc97fa89322dba2ed48d0c1f140b"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x100c}}]}) (rerun: 32) openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) fsetxattr$security_selinux(r2, &(0x7f0000000100), &(0x7f0000000180)='system_u:object_r:systemd_logind_var_run_t:s0\x00', 0x2e, 0x3) (async) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x9250) (async, rerun: 64) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r2, 0x0) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000080)={0x1, 0x2, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}]}) kernel console output (not intermixed with test programs): ust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1003 [ 171.094891][ T683] ipheth 1-1:0.196: Unable to find endpoints [ 171.116785][ T683] usb 1-1: USB disconnect, device number 41 [ 171.161339][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2015'. [ 171.304649][ T6197] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26 [ 171.306704][ T6197] rust_binder: Read failure Err(EFAULT) in pid:26 [ 171.316271][ T6196] TCP: out of memory -- consider tuning tcp_mem [ 171.582753][ T6213] overlayfs: failed to clone upperpath [ 171.590000][ T683] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 171.622451][ T6212] rust_binder: Failed to allocate buffer. len:18446744073709551544, is_oneway:false [ 171.622476][ T6212] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 171.632583][ T6212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:249 [ 171.752338][ T683] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 171.771445][ T683] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.785242][ T683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 171.796545][ T683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 171.807839][ T683] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.821351][ T683] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.830770][ T683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.845769][ T683] usb 4-1: config 0 descriptor?? [ 171.862321][ T6200] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 172.109960][ T64] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 172.261746][ T64] usb 1-1: config 5 has an invalid interface number: 221 but max is 2 [ 172.270008][ T64] usb 1-1: config 5 has an invalid interface number: 239 but max is 2 [ 172.278195][ T64] usb 1-1: config 5 has an invalid interface number: 216 but max is 2 [ 172.287617][ T683] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd [ 172.295034][ T64] usb 1-1: config 5 has an invalid interface number: 33 but max is 2 [ 172.303161][ T683] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 172.310575][ T64] usb 1-1: config 5 has an invalid interface number: 181 but max is 2 [ 172.319014][ T683] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 172.329814][ T64] usb 1-1: config 5 has 5 interfaces, different from the descriptor's value: 3 [ 172.338802][ T683] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 172.346227][ T64] usb 1-1: config 5 has no interface number 0 [ 172.352366][ T683] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 172.359745][ T64] usb 1-1: config 5 has no interface number 1 [ 172.366036][ T683] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 172.373575][ T64] usb 1-1: config 5 has no interface number 2 [ 172.379672][ T64] usb 1-1: config 5 has no interface number 3 [ 172.385975][ T683] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 172.399917][ T64] usb 1-1: config 5 has no interface number 4 [ 172.406228][ T64] usb 1-1: config 5 interface 221 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 172.422747][ T683] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 172.435118][ T64] usb 1-1: config 5 interface 221 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 172.447547][ T64] usb 1-1: config 5 interface 221 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 172.460730][ T64] usb 1-1: too many endpoints for config 5 interface 239 altsetting 213: 74, using maximum allowed: 30 [ 172.478048][ T64] usb 1-1: config 5 interface 239 altsetting 213 has an invalid descriptor for endpoint zero, skipping [ 172.509482][ T64] usb 1-1: config 5 interface 239 altsetting 213 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 172.529932][ T64] usb 1-1: config 5 interface 239 altsetting 213 has an invalid descriptor for endpoint zero, skipping [ 172.550832][ T352] usb 4-1: USB disconnect, device number 21 [ 172.557295][ T64] usb 1-1: config 5 interface 239 altsetting 213 has a duplicate endpoint with address 0xF, skipping [ 172.575740][ T6227] fido_id[6227]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 172.609907][ T64] usb 1-1: config 5 interface 239 altsetting 213 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 172.631362][ T64] usb 1-1: config 5 interface 239 altsetting 213 has 5 endpoint descriptors, different from the interface descriptor's value: 74 [ 172.646841][ T64] usb 1-1: config 5 interface 33 altsetting 127 has a duplicate endpoint with address 0xF, skipping [ 172.668075][ T64] usb 1-1: config 5 interface 33 altsetting 127 has a duplicate endpoint with address 0x2, skipping [ 172.688995][ T64] usb 1-1: config 5 interface 33 altsetting 127 bulk endpoint 0x5 has invalid maxpacket 32 [ 172.719376][ T64] usb 1-1: config 5 interface 33 altsetting 127 has a duplicate endpoint with address 0x5, skipping [ 172.743661][ T64] usb 1-1: config 5 interface 33 altsetting 127 has a duplicate endpoint with address 0xF, skipping [ 172.763569][ T64] usb 1-1: config 5 interface 33 altsetting 127 has a duplicate endpoint with address 0x7, skipping [ 172.792377][ T64] usb 1-1: config 5 interface 33 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 172.815560][ T64] usb 1-1: config 5 interface 33 altsetting 127 endpoint 0x9 has invalid maxpacket 463, setting to 64 [ 172.839892][ T64] usb 1-1: config 5 interface 33 altsetting 127 has a duplicate endpoint with address 0x9, skipping [ 172.856529][ T64] usb 1-1: config 5 interface 33 altsetting 127 has a duplicate endpoint with address 0x9, skipping [ 172.874134][ T64] usb 1-1: config 5 interface 33 altsetting 127 has a duplicate endpoint with address 0xF, skipping [ 172.895724][ T64] usb 1-1: too many endpoints for config 5 interface 181 altsetting 220: 99, using maximum allowed: 30 [ 172.916911][ T64] usb 1-1: config 5 interface 181 altsetting 220 has 0 endpoint descriptors, different from the interface descriptor's value: 99 [ 172.946864][ T64] usb 1-1: config 5 interface 221 has no altsetting 0 [ 172.956783][ T64] usb 1-1: config 5 interface 239 has no altsetting 0 [ 172.964338][ T64] usb 1-1: config 5 interface 216 has no altsetting 0 [ 172.971647][ T64] usb 1-1: config 5 interface 33 has no altsetting 0 [ 172.978405][ T64] usb 1-1: config 5 interface 181 has no altsetting 0 [ 173.006749][ T64] usb 1-1: New USB device found, idVendor=14b2, idProduct=3c22, bcdDevice=a3.e6 [ 173.016557][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.025313][ T64] usb 1-1: Product: syz [ 173.039603][ T64] usb 1-1: SerialNumber: syz [ 173.141966][ T36] kauditd_printk_skb: 874 callbacks suppressed [ 173.141982][ T36] audit: type=1400 audit(2000000002.220:14467): avc: denied { read } for pid=6278 comm="syz.3.2042" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 173.172262][ T36] audit: type=1400 audit(2000000002.220:14468): avc: denied { create } for pid=6279 comm="syz.4.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.192530][ T36] audit: type=1400 audit(2000000002.220:14469): avc: denied { connect } for pid=6279 comm="syz.4.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.213676][ T36] audit: type=1400 audit(2000000002.220:14470): avc: denied { connect } for pid=6279 comm="syz.4.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.235747][ T36] audit: type=1400 audit(2000000002.220:14471): avc: denied { create } for pid=6279 comm="syz.4.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.244573][ T6281] audit: audit_backlog=65 > audit_backlog_limit=64 [ 173.256599][ T6220] audit: audit_backlog=65 > audit_backlog_limit=64 [ 173.270742][ T6281] audit: audit_lost=35 audit_rate_limit=0 audit_backlog_limit=64 [ 173.278483][ T6281] audit: backlog limit exceeded [ 173.285145][ T6281] audit: audit_backlog=65 > audit_backlog_limit=64 [ 173.343940][ T64] usb 1-1: USB disconnect, device number 42 [ 173.383973][ T6288] SELinux: ebitmap: truncated map [ 173.396545][ T6288] SELinux: failed to load policy [ 173.550455][ T6297] rust_binder: Error while translating object. [ 173.550497][ T6297] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 173.556771][ T6297] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:282 [ 173.591076][ T6299] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 173.875930][ T352] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 174.030031][ T6318] random: crng reseeded on system resumption [ 174.052199][ T352] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 174.066943][ T352] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.081497][ T352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.094310][ T352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 174.106230][ T352] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.120064][ T352] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.129329][ T352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.158296][ T352] usb 3-1: config 0 descriptor?? [ 174.169433][ T6302] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 174.482741][ T6345] binder: Unknown parameter '01777777777777777777777' [ 174.499957][ T6346] binder: Unknown parameter '01777777777777777777777' [ 174.583026][ T352] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 174.609803][ T352] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 174.630511][ T352] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 174.648206][ T352] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 174.688487][ T352] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 174.850694][ T352] usb 3-1: USB disconnect, device number 6 [ 175.008171][ T6368] 9pnet_fd: Insufficient options for proto=fd [ 175.327065][ T6391] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 175.421799][ T6395] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 175.429185][ T6395] rust_binder: Write failure EINVAL in pid:65 [ 175.433909][ T6395] batadv_slave_1: entered promiscuous mode [ 175.447156][ T6395] rust_binder: Write failure EFAULT in pid:65 [ 175.447310][ T6393] batadv_slave_1: left promiscuous mode [ 175.502927][ T6398] fuse: Unknown parameter '00000000000000000000007' [ 175.620927][ T6386] netlink: 83 bytes leftover after parsing attributes in process `syz.4.2077'. [ 175.649752][ T306] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 175.715930][ T6400] fuse: Unknown parameter '00000000000000000000fd' [ 175.820792][ T306] usb 3-1: Using ep0 maxpacket: 8 [ 175.833264][ T306] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 175.841934][ T306] usb 3-1: config 179 has no interface number 0 [ 175.848198][ T306] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 175.864874][ T306] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 175.876217][ T306] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 175.891259][ T306] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 175.902764][ T306] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 175.959760][ T306] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 175.968810][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.022475][ T6396] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 176.238200][ T64] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 176.252107][ T306] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input20 [ 176.393294][ T64] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 176.409927][ T64] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.431824][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 176.443875][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 176.455667][ T64] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 176.459424][ T6396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.469401][ T64] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.486238][ T6396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.496087][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.506516][ T64] usb 4-1: config 0 descriptor?? [ 176.517613][ T6413] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 176.569719][ T683] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 176.720255][ T306] usb 3-1: USB disconnect, device number 7 [ 176.720291][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 176.720318][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 176.726243][ T683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.736005][ T306] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 176.753383][ T683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.773916][ T683] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 176.783021][ T683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.795053][ T683] usb 1-1: config 0 descriptor?? [ 176.955130][ T64] plantronics 0003:047F:FFFF.000F: unknown main item tag 0xd [ 176.962765][ T64] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 176.970185][ T64] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 176.977682][ T64] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 176.988624][ T64] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 177.172430][ T6446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2100'. [ 177.217602][ T683] lua 0003:1E7D:2C2E.0010: hidraw1: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.0-1/input0 [ 177.235108][ T306] usb 4-1: USB disconnect, device number 22 [ 177.328395][ T6452] rust_binder: Error while translating object. [ 177.328420][ T6452] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 177.349668][ T6452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:291 [ 177.483221][ T6469] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 177.503442][ T6469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=6469 comm=syz.2.2108 [ 177.516042][ T6469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6469 comm=syz.2.2108 [ 177.528648][ T6469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=6469 comm=syz.2.2108 [ 177.541246][ T6469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=6469 comm=syz.2.2108 [ 177.789159][ T6474] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 178.249465][ T36] kauditd_printk_skb: 2070 callbacks suppressed [ 178.249481][ T36] audit: type=1400 audit(2000000007.320:16457): avc: denied { create } for pid=6501 comm="syz.4.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.275549][ T36] audit: type=1400 audit(2000000007.330:16458): avc: denied { getopt } for pid=6501 comm="syz.4.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.280817][ T6505] netlink: 'syz.4.2120': attribute type 3 has an invalid length. [ 178.295990][ T36] audit: type=1400 audit(2000000007.350:16459): avc: denied { create } for pid=6503 comm="syz.4.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 178.303509][ T6504] netlink: 'syz.4.2120': attribute type 3 has an invalid length. [ 178.324064][ T36] audit: type=1400 audit(2000000007.350:16460): avc: denied { create } for pid=6503 comm="syz.4.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 178.351686][ T36] audit: type=1400 audit(2000000007.350:16461): avc: denied { write } for pid=6503 comm="syz.4.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 178.372584][ T36] audit: type=1400 audit(2000000007.350:16462): avc: denied { read } for pid=6503 comm="syz.4.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 178.393405][ T36] audit: type=1400 audit(2000000007.350:16463): avc: denied { read } for pid=6503 comm="syz.4.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 178.402509][ T6511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2122'. [ 178.414479][ T36] audit: type=1400 audit(2000000007.350:16464): avc: denied { create } for pid=6503 comm="syz.4.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 178.442462][ T36] audit: type=1400 audit(2000000007.360:16465): avc: denied { bind } for pid=6503 comm="syz.4.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 178.462496][ T36] audit: type=1400 audit(2000000007.360:16466): avc: denied { write } for pid=6503 comm="syz.4.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.169555][ T339] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 179.299558][ T339] usb 4-1: device descriptor read/64, error -71 [ 179.337690][ T306] usb 1-1: USB disconnect, device number 43 [ 179.539538][ T339] usb 4-1: device descriptor read/64, error -71 [ 179.679695][ T306] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 179.779508][ T339] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 179.829537][ T306] usb 1-1: Using ep0 maxpacket: 16 [ 179.836508][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.847417][ T306] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 179.856578][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.865891][ T306] usb 1-1: config 0 descriptor?? [ 179.909501][ T339] usb 4-1: device descriptor read/64, error -71 [ 180.149477][ T339] usb 4-1: device descriptor read/64, error -71 [ 180.259564][ T339] usb usb4-port1: attempt power cycle [ 180.279737][ T306] kye 0003:0458:5016.0011: control desc unexpectedly large [ 180.289250][ T306] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0011/input/input21 [ 180.303347][ T306] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0011/input/input22 [ 180.344237][ T306] kye 0003:0458:5016.0011: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 180.482915][ T6549] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 180.482940][ T6549] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 180.491756][ T6549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1073 [ 180.502616][ T306] usb 1-1: USB disconnect, device number 44 [ 180.599492][ T339] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 180.621478][ T339] usb 4-1: device descriptor read/8, error -71 [ 180.751297][ T339] usb 4-1: device descriptor read/8, error -71 [ 180.989467][ T339] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 181.031088][ T339] usb 4-1: device descriptor read/8, error -71 [ 181.171792][ T339] usb 4-1: device descriptor read/8, error -71 [ 181.279834][ T339] usb usb4-port1: unable to enumerate USB device [ 181.336721][ T6594] rust_binder: Write failure EFAULT in pid:1079 [ 181.365747][ T6596] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 181.398082][ T6596] rust_binder: Error in use_page_slow: ESRCH [ 181.398098][ T6596] rust_binder: use_range failure ESRCH [ 181.404109][ T6596] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 181.409585][ T6596] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 181.417563][ T6596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1082 [ 181.611717][ T6604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1086 [ 181.687420][ T6616] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 181.696716][ T6616] rust_binder: Error while translating object. [ 181.707283][ T6616] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 181.714283][ T6616] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1088 [ 181.918727][ T6637] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 182.299486][ T306] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 182.357544][ T6653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=6653 comm=syz.3.2170 [ 182.381842][ T6653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6653 comm=syz.3.2170 [ 182.395059][ T6653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=6653 comm=syz.3.2170 [ 182.408696][ T6653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=6653 comm=syz.3.2170 [ 182.471872][ T306] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 182.480032][ T306] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 182.494909][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 182.509117][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 182.520925][ T306] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 182.533834][ T306] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 182.542875][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.551832][ T306] usb 1-1: config 0 descriptor?? [ 182.558038][ T6646] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 182.649476][ T683] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 182.799467][ T683] usb 4-1: Using ep0 maxpacket: 32 [ 182.808978][ T683] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=ac.b4 [ 182.818089][ T683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.826139][ T683] usb 4-1: Product: syz [ 182.830328][ T683] usb 4-1: Manufacturer: syz [ 182.834950][ T683] usb 4-1: SerialNumber: syz [ 182.841109][ T683] usb 4-1: config 0 descriptor?? [ 182.970210][ T306] plantronics 0003:047F:FFFF.0012: unknown main item tag 0xd [ 182.978824][ T306] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 182.989753][ T306] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 183.134146][ T6681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=6681 comm=syz.4.2181 [ 183.147032][ T6681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6681 comm=syz.4.2181 [ 183.160679][ T6681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=6681 comm=syz.4.2181 [ 183.176608][ T9] usb 1-1: USB disconnect, device number 45 [ 183.183093][ T6681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=6681 comm=syz.4.2181 [ 183.260127][ T352] usb 4-1: USB disconnect, device number 27 [ 183.260694][ T36] kauditd_printk_skb: 613 callbacks suppressed [ 183.260708][ T36] audit: type=1400 audit(2000000012.340:17080): avc: denied { create } for pid=6685 comm="syz.2.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 183.297830][ T36] audit: type=1400 audit(2000000012.340:17081): avc: denied { setopt } for pid=6685 comm="syz.2.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 183.320389][ T36] audit: type=1400 audit(2000000012.370:17082): avc: denied { map } for pid=6685 comm="syz.2.2182" path="socket:[34220]" dev="sockfs" ino=34220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 183.342114][ T6688] audit: audit_backlog=65 > audit_backlog_limit=64 [ 183.344632][ T36] audit: type=1400 audit(2000000012.370:17083): avc: denied { read } for pid=6685 comm="syz.2.2182" path="socket:[34220]" dev="sockfs" ino=34220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 183.350335][ T6688] audit: audit_lost=65 audit_rate_limit=0 audit_backlog_limit=64 [ 183.374655][ T36] audit: type=1400 audit(2000000012.390:17084): avc: denied { create } for pid=6685 comm="syz.2.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.381847][ T6688] audit: backlog limit exceeded [ 183.402960][ T36] audit: type=1400 audit(2000000012.390:17085): avc: denied { write } for pid=6685 comm="syz.2.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.408850][ T6688] audit: audit_backlog=65 > audit_backlog_limit=64 [ 183.462920][ T6690] incfs: Error accessing: ./file0. [ 183.468094][ T6690] incfs: mount failed -20 [ 183.705792][ T6715] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2194'. [ 183.726106][ T6715] overlayfs: failed to clone upperpath [ 183.800558][ T6719] can: request_module (can-proto-0) failed. [ 183.920060][ T6724] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock [ 184.079489][ T45] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 184.219472][ T45] usb 1-1: device descriptor read/64, error -71 [ 184.269466][ T352] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 184.399477][ T352] usb 4-1: device descriptor read/64, error -71 [ 184.459466][ T45] usb 1-1: device descriptor read/64, error -71 [ 184.640058][ T352] usb 4-1: device descriptor read/64, error -71 [ 184.699487][ T45] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 184.839474][ T45] usb 1-1: device descriptor read/64, error -71 [ 184.879560][ T352] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 184.972384][ T6776] overlayfs: missing 'workdir' [ 185.019463][ T352] usb 4-1: device descriptor read/64, error -71 [ 185.089467][ T45] usb 1-1: device descriptor read/64, error -71 [ 185.199915][ T45] usb usb1-port1: attempt power cycle [ 185.259455][ T352] usb 4-1: device descriptor read/64, error -71 [ 185.369537][ T352] usb usb4-port1: attempt power cycle [ 185.539467][ T45] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 185.562137][ T45] usb 1-1: device descriptor read/8, error -71 [ 185.691239][ T45] usb 1-1: device descriptor read/8, error -71 [ 185.709490][ T352] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 185.739908][ T352] usb 4-1: device descriptor read/8, error -71 [ 185.871835][ T352] usb 4-1: device descriptor read/8, error -71 [ 185.880789][ T6806] overlay: ./file0 is not a directory [ 185.929449][ T45] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 185.951446][ T45] usb 1-1: device descriptor read/8, error -71 [ 186.081528][ T45] usb 1-1: device descriptor read/8, error -71 [ 186.109479][ T352] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 186.131337][ T352] usb 4-1: device descriptor read/8, error -71 [ 186.189815][ T45] usb usb1-port1: unable to enumerate USB device [ 186.261149][ T352] usb 4-1: device descriptor read/8, error -71 [ 186.372140][ T352] usb usb4-port1: unable to enumerate USB device [ 186.717894][ T6843] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 186.726650][ T6843] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 186.735120][ T6843] overlayfs: missing 'lowerdir' [ 186.742729][ T6843] /dev/rnullb0: Can't lookup blockdev [ 186.874824][ T6849] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock [ 187.056518][ T6860] rust_binder: Error while translating object. [ 187.056567][ T6860] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 187.067874][ T6860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1115 [ 187.397802][ T6877] rust_binder: Error in use_page_slow: ESRCH [ 187.434045][ T6877] rust_binder: use_range failure ESRCH [ 187.460682][ T6877] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 187.472424][ T6877] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 187.480550][ T6877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:112 [ 187.649612][ T339] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 187.676872][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.687292][ T6906] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 187.698113][ T6906] rust_binder: Write failure EINVAL in pid:118 [ 187.712071][ T6906] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 187.725428][ T6906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:118 [ 187.849458][ T339] usb 1-1: Using ep0 maxpacket: 32 [ 187.885076][ T339] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 187.910469][ T339] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 187.928035][ T339] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=3f.5a [ 187.948409][ T339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.957514][ T339] usb 1-1: Product: syz [ 187.969454][ T339] usb 1-1: Manufacturer: syz [ 187.974100][ T339] usb 1-1: SerialNumber: syz [ 188.005663][ T6933] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 188.275097][ T36] kauditd_printk_skb: 870 callbacks suppressed [ 188.275128][ T36] audit: type=1400 audit(2000000000.000:17954): avc: denied { read write } for pid=6071 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.316324][ T36] audit: type=1400 audit(2000000000.030:17955): avc: denied { read write open } for pid=6071 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.342401][ T36] audit: type=1400 audit(2000000000.030:17956): avc: denied { ioctl } for pid=6071 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.391845][ T36] audit: type=1400 audit(2000000000.040:17957): avc: denied { create } for pid=6944 comm="syz.4.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.414148][ T36] audit: type=1400 audit(2000000000.060:17958): avc: denied { create } for pid=6944 comm="syz.4.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 188.435301][ T36] audit: type=1400 audit(2000000000.060:17959): avc: denied { write } for pid=6944 comm="syz.4.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 188.468623][ T36] audit: type=1400 audit(2000000000.060:17960): avc: denied { read } for pid=6944 comm="syz.4.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 188.511158][ T36] audit: type=1400 audit(2000000000.060:17961): avc: denied { read } for pid=6944 comm="syz.4.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 188.532156][ T36] audit: type=1400 audit(2000000000.070:17962): avc: denied { create } for pid=6944 comm="syz.4.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 188.552354][ T36] audit: type=1400 audit(2000000000.070:17963): avc: denied { write } for pid=6944 comm="syz.4.2280" path="socket:[35764]" dev="sockfs" ino=35764 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 188.726644][ T6972] batadv_slave_1: entered promiscuous mode [ 188.807508][ T6971] batadv_slave_1: left promiscuous mode [ 188.859468][ T339] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 189.022111][ T339] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 189.030832][ T339] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.043192][ T339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 189.054534][ T339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 189.069337][ T339] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 189.083053][ T339] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 189.092850][ T339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.107761][ T6979] lo: entered promiscuous mode [ 189.119637][ T339] usb 4-1: config 0 descriptor?? [ 189.126072][ T6962] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 189.143103][ T6978] lo: left promiscuous mode [ 189.256261][ T6992] netlink: 'syz.4.2296': attribute type 4 has an invalid length. [ 189.544316][ T339] plantronics 0003:047F:FFFF.0013: unknown main item tag 0xd [ 189.552947][ T339] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 189.563776][ T339] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 189.702368][ T7027] bpf: Bad value for 'mode' [ 189.708706][ T7029] bpf: Bad value for 'mode' [ 189.733100][ T7032] overlayfs: failed to clone upperpath [ 189.800019][ T9] usb 4-1: USB disconnect, device number 32 [ 189.916542][ T7043] lo: entered promiscuous mode [ 189.928752][ T7042] lo: left promiscuous mode [ 190.140018][ T7050] netlink: 'syz.2.2313': attribute type 12 has an invalid length. [ 190.171518][ T7053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=7053 comm=syz.2.2314 [ 190.184184][ T7053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7053 comm=syz.2.2314 [ 190.196913][ T7053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=7053 comm=syz.2.2314 [ 190.209614][ T7053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=7053 comm=syz.2.2314 [ 190.224813][ T7052] fuse: Bad value for 'fd' [ 190.422633][ T45] usb 1-1: USB disconnect, device number 50 [ 190.541832][ T7068] rust_binder: Write failure EFAULT in pid:147 [ 190.949477][ T683] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 191.109458][ T683] usb 1-1: Using ep0 maxpacket: 32 [ 191.117347][ T683] usb 1-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 191.128360][ T683] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.139472][ T683] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 191.153124][ T683] usb 1-1: config 0 interface 0 has no altsetting 0 [ 191.154283][ T7094] wg2: entered promiscuous mode [ 191.161429][ T683] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 191.166079][ T7094] wg2: entered allmulticast mode [ 191.177949][ T683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.190958][ T683] usb 1-1: config 0 descriptor?? [ 191.607820][ T683] zeroplus 0003:0C12:0030.0014: item fetching failed at offset 3/7 [ 191.616047][ T683] zeroplus 0003:0C12:0030.0014: parse failed [ 191.622148][ T683] zeroplus 0003:0C12:0030.0014: probe with driver zeroplus failed with error -22 [ 191.841604][ T339] usb 1-1: USB disconnect, device number 51 [ 191.983604][ T7124] lo: entered promiscuous mode [ 192.027777][ T7123] lo: left promiscuous mode [ 192.066230][ T7132] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7132 comm=syz.2.2347 [ 192.071106][ T7134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=7134 comm=syz.4.2348 [ 192.092259][ T7134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7134 comm=syz.4.2348 [ 192.105499][ T7134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=7134 comm=syz.4.2348 [ 192.271300][ T7160] /dev/rnullb0: Can't lookup blockdev [ 192.488260][ T7184] overlayfs: failed to resolve './file0': -2 [ 193.013387][ T7210] fuse: Bad value for 'fd' [ 193.241993][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2375'. [ 193.339470][ T683] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 193.359762][ T36] kauditd_printk_skb: 548 callbacks suppressed [ 193.359776][ T36] audit: type=1400 audit(2000000234.094:18512): avc: denied { ioctl } for pid=7211 comm="syz.0.2373" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.429452][ T36] audit: type=1400 audit(2000000234.094:18513): avc: denied { ioctl } for pid=7211 comm="syz.0.2373" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.489458][ T36] audit: type=1400 audit(2000000234.094:18514): avc: denied { ioctl } for pid=7211 comm="syz.0.2373" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.516072][ T36] audit: type=1400 audit(2000000234.164:18515): avc: denied { ioctl } for pid=7211 comm="syz.0.2373" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.519476][ T683] usb 1-1: Using ep0 maxpacket: 8 [ 193.583936][ T36] audit: type=1400 audit(2000000234.164:18516): avc: denied { create } for pid=7221 comm="syz.4.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 193.630337][ T683] usb 1-1: config 2 has an invalid interface number: 83 but max is 0 [ 193.633952][ T36] audit: type=1400 audit(2000000234.164:18517): avc: denied { write } for pid=7221 comm="syz.4.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 193.638433][ T683] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 193.638454][ T683] usb 1-1: config 2 has no interface number 0 [ 193.694361][ T36] audit: type=1400 audit(2000000234.164:18518): avc: denied { read } for pid=7221 comm="syz.4.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 193.729463][ T683] usb 1-1: config 2 interface 83 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 193.743072][ T36] audit: type=1400 audit(2000000234.164:18519): avc: denied { read } for pid=7221 comm="syz.4.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 193.759441][ T683] usb 1-1: config 2 interface 83 altsetting 1 bulk endpoint 0x7 has invalid maxpacket 0 [ 193.792842][ T36] audit: type=1400 audit(2000000234.194:18520): avc: denied { create } for pid=7221 comm="syz.4.2376" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 193.799448][ T683] usb 1-1: config 2 interface 83 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 193.844321][ T36] audit: type=1400 audit(2000000234.194:18521): avc: denied { map } for pid=7221 comm="syz.4.2376" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 193.877448][ T683] usb 1-1: config 2 interface 83 has no altsetting 0 [ 193.899021][ T683] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.b5 [ 193.909508][ T683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.917506][ T683] usb 1-1: Product: syz [ 193.922347][ T683] usb 1-1: Manufacturer: syz [ 193.926940][ T683] usb 1-1: SerialNumber: syz [ 194.219609][ T683] usb 1-1: USB disconnect, device number 52 [ 195.149457][ T339] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 195.169513][ T7289] overlayfs: failed to clone upperpath [ 195.311344][ T339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 195.322346][ T339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.332097][ T339] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 195.341144][ T339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.352212][ T339] usb 1-1: config 0 descriptor?? [ 195.770652][ T339] lua 0003:1E7D:2C2E.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.0-1/input0 [ 195.786639][ T7311] lo: entered promiscuous mode [ 195.802386][ T7310] lo: left promiscuous mode [ 195.926005][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2408'. [ 195.935002][ T7319] bridge_slave_1: left allmulticast mode [ 195.940760][ T7319] bridge_slave_1: left promiscuous mode [ 195.946436][ T7319] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.954110][ T7319] bridge_slave_0: left allmulticast mode [ 195.959820][ T7319] bridge_slave_0: left promiscuous mode [ 195.965421][ T7319] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.380212][ T7346] lo: entered promiscuous mode [ 196.389479][ T7345] lo: left promiscuous mode [ 197.058614][ T7367] lo: entered promiscuous mode [ 197.067836][ T7366] lo: left promiscuous mode [ 197.487160][ T7382] overlayfs: failed to clone upperpath [ 197.726134][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2438'. [ 197.786536][ T339] usb 1-1: USB disconnect, device number 53 [ 198.279500][ T683] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 198.367364][ T7453] fuse: Bad value for 'rootmode' [ 198.373601][ T36] kauditd_printk_skb: 663 callbacks suppressed [ 198.373616][ T36] audit: type=1400 audit(2000000239.104:19185): avc: denied { create } for pid=7452 comm="syz.4.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.401641][ T36] audit: type=1400 audit(2000000239.104:19186): avc: denied { setopt } for pid=7452 comm="syz.4.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.422297][ T36] audit: type=1400 audit(2000000239.104:19187): avc: denied { mounton } for pid=7452 comm="syz.4.2456" path="/475/file0" dev="tmpfs" ino=2562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 198.448561][ T36] audit: type=1400 audit(2000000239.104:19188): avc: denied { create } for pid=7452 comm="syz.4.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 198.459462][ T683] usb 1-1: Using ep0 maxpacket: 32 [ 198.469664][ T36] audit: type=1400 audit(2000000239.114:19189): avc: denied { ioctl } for pid=7423 comm="syz.0.2445" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 198.488457][ T683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.499698][ T36] audit: type=1400 audit(2000000239.134:19190): avc: denied { read } for pid=7446 comm="syz.2.2453" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=36555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 198.513150][ T683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.535487][ T36] audit: type=1400 audit(2000000239.134:19191): avc: denied { ioctl } for pid=7446 comm="syz.2.2453" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=36555 ioctlcmd=0xaa02 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 198.544722][ T683] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 198.576725][ T36] audit: type=1400 audit(2000000239.154:19192): avc: denied { create } for pid=7446 comm="syz.2.2453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.579645][ T683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.600078][ T36] audit: type=1400 audit(2000000239.174:19193): avc: denied { write } for pid=7446 comm="syz.2.2453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.608644][ T683] usb 1-1: config 0 descriptor?? [ 198.633087][ T36] audit: type=1400 audit(2000000239.184:19194): avc: denied { create } for pid=7458 comm="syz.4.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 198.654946][ T683] hub 1-1:0.0: USB hub found [ 198.856332][ T683] hub 1-1:0.0: 1 port detected [ 199.061918][ T683] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 199.071430][ T683] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 199.080490][ T683] usbhid 1-1:0.0: can't add hid device: -71 [ 199.088159][ T683] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 199.113802][ T7466] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 199.121441][ T683] usb 1-1: USB disconnect, device number 54 [ 199.183934][ T7470] overlayfs: failed to clone upperpath [ 199.606045][ T7483] FAT-fs (rnullb0): bogus number of reserved sectors [ 199.612854][ T7483] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 199.901832][ T7509] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2478'. [ 199.931840][ T7509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7509 comm=syz.2.2478 [ 200.090489][ T7540] overlayfs: failed to clone upperpath [ 200.224046][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2491'. [ 200.709032][ T7568] netlink: 'syz.3.2497': attribute type 4 has an invalid length. [ 200.720291][ T7568] netlink: 'syz.3.2497': attribute type 4 has an invalid length. [ 200.765469][ T7571] syzkaller0: entered promiscuous mode [ 200.771070][ T7571] syzkaller0: entered allmulticast mode [ 200.808196][ T7573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=7573 comm=syz.3.2499 [ 200.820848][ T7573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61952 sclass=netlink_route_socket pid=7573 comm=syz.3.2499 [ 200.834178][ T7573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=7573 comm=syz.3.2499 [ 201.003053][ T7585] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1185 [ 201.027006][ T7587] can: request_module (can-proto-0) failed. [ 201.073799][ T7589] rust_binder: Error while translating object. [ 201.073840][ T7589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 201.080699][ T7589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1187 [ 201.265904][ T7609] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 201.434927][ T7613] rust_binder: Read failure Err(EAGAIN) in pid:1204 [ 201.435267][ T7615] rust_binder: Write failure EINVAL in pid:1204 [ 201.580369][ T7632] overlayfs: failed to clone upperpath [ 202.942044][ T7690] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.951286][ T7690] =: renamed from lo [ 208.801839][ T1049] bridge_slave_1: left allmulticast mode [ 208.807478][ T1049] bridge_slave_1: left promiscuous mode [ 208.813085][ T1049] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.820529][ T1049] bridge_slave_0: left allmulticast mode [ 208.826149][ T1049] bridge_slave_0: left promiscuous mode [ 208.831743][ T1049] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.940535][ T1049] tipc: Disabling bearer [ 208.945571][ T1049] tipc: Left network mode [ 208.950832][ T1049] veth1_macvtap: left promiscuous mode [ 208.956302][ T1049] veth0_vlan: left promiscuous mode [ 220.352272][ T36] kauditd_printk_skb: 671 callbacks suppressed [ 220.352290][ T36] audit: type=1400 audit(2000000261.074:19866): avc: denied { read } for pid=7697 comm="syz.0.2544" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.434031][ T36] audit: type=1400 audit(2000000261.084:19867): avc: denied { read open } for pid=7697 comm="syz.0.2544" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.461724][ T7710] cgroup: Need name or subsystem set [ 220.463299][ T36] audit: type=1400 audit(2000000261.084:19868): avc: denied { ioctl } for pid=7697 comm="syz.0.2544" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.512343][ T36] audit: type=1400 audit(2000000261.084:19869): avc: denied { map } for pid=7697 comm="syz.0.2544" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.556009][ T36] audit: type=1400 audit(2000000261.084:19870): avc: denied { read } for pid=7697 comm="syz.0.2544" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.579299][ T36] audit: type=1400 audit(2000000261.084:19871): avc: denied { ioctl } for pid=7697 comm="syz.0.2544" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.603914][ T36] audit: type=1400 audit(2000000261.084:19872): avc: denied { ioctl } for pid=7697 comm="syz.0.2544" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.628495][ T36] audit: type=1400 audit(2000000261.084:19873): avc: denied { ioctl } for pid=7697 comm="syz.0.2544" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.653100][ T36] audit: type=1400 audit(2000000261.084:19874): avc: denied { ioctl } for pid=7697 comm="syz.0.2544" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.677668][ T36] audit: type=1400 audit(2000000261.084:19875): avc: denied { ioctl } for pid=7697 comm="syz.0.2544" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.515137][ T7767] netlink: 'syz.2.2565': attribute type 4 has an invalid length. [ 221.524973][ T7767] netlink: 'syz.2.2565': attribute type 4 has an invalid length. [ 221.846266][ T7791] cgroup: Need name or subsystem set [ 221.862500][ T7793] netlink: 'syz.2.2575': attribute type 6 has an invalid length. [ 221.873453][ T7793] overlayfs: failed to clone upperpath [ 223.076100][ T7897] overlayfs: failed to clone upperpath [ 223.373285][ T7943] lo: entered promiscuous mode [ 223.383608][ T7943] lo: left promiscuous mode [ 223.698579][ T7957] binder: Unknown parameter 'm¨x' [ 223.879853][ T7968] rust_binder: Write failure EINVAL in pid:1245 [ 224.120241][ T7995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=7995 comm=syz.3.2647 [ 224.139130][ T7995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7995 comm=syz.3.2647 [ 224.151872][ T7995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=7995 comm=syz.3.2647 [ 224.290564][ T8005] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2651'. [ 224.478421][ T8028] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 224.607666][ T8042] lo: entered promiscuous mode [ 224.615562][ T8043] lo: left promiscuous mode [ 224.749096][ T8056] overlayfs: failed to clone upperpath [ 225.607097][ T36] kauditd_printk_skb: 655 callbacks suppressed [ 225.607112][ T36] audit: type=1400 audit(2000000266.334:20531): avc: denied { create } for pid=8075 comm="syz.3.2674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 225.670917][ T36] audit: type=1400 audit(2000000266.404:20532): avc: denied { create } for pid=8081 comm="syz.2.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 225.728150][ T36] audit: type=1400 audit(2000000266.414:20533): avc: denied { mounton } for pid=8083 comm="syz.3.2677" path="/165/file0" dev="tmpfs" ino=900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 225.777283][ T36] audit: type=1400 audit(2000000266.424:20534): avc: denied { mount } for pid=8083 comm="syz.3.2677" name="/" dev="incremental-fs" ino=900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 225.782584][ T8087] incfs: Error accessing: ./file0. [ 225.809576][ T8087] incfs: mount failed -20 [ 225.814012][ T36] audit: type=1400 audit(2000000266.424:20535): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 225.835711][ T36] audit: type=1400 audit(2000000266.424:20536): avc: denied { create } for pid=8081 comm="syz.2.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 225.883061][ T36] audit: type=1400 audit(2000000266.424:20537): avc: denied { ioctl } for pid=8081 comm="syz.2.2676" path="socket:[38553]" dev="sockfs" ino=38553 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 225.912435][ T36] audit: type=1400 audit(2000000266.424:20538): avc: denied { bind } for pid=8081 comm="syz.2.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 225.943372][ T8091] rust_binder: Error while translating object. [ 225.943395][ T8091] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 225.953768][ T8091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1261 [ 225.954553][ T36] audit: type=1400 audit(2000000266.424:20539): avc: denied { execmem } for pid=8083 comm="syz.3.2677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 225.993170][ T36] audit: type=1400 audit(2000000266.434:20540): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 226.089143][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2688'. [ 226.290343][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2693'. [ 226.485802][ T8143] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 226.502617][ T8142] overlayfs: failed to clone lowerpath [ 227.411581][ T8190] overlayfs: failed to resolve '/nsparent_hugepage/khugepaged/scan_sleep_millisecs': -2 [ 227.489461][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 227.534274][ T8210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=8210 comm=syz.3.2720 [ 227.546927][ T8210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8210 comm=syz.3.2720 [ 227.559578][ T8210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8210 comm=syz.3.2720 [ 227.573056][ T8210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=8210 comm=syz.3.2720 [ 227.651813][ T9] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 227.657489][ T8225] /dev/rnullb0: Can't lookup blockdev [ 227.664670][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 227.678053][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 227.697915][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 227.710149][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.723577][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.733139][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.746057][ T9] usb 1-1: config 0 descriptor?? [ 227.756335][ T8187] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 228.058366][ T8250] overlayfs: failed to clone upperpath [ 228.136902][ T8256] incfs: Error accessing: /dev/loop0. [ 228.142465][ T8256] incfs: mount failed -2 [ 228.170283][ T9] plantronics 0003:047F:FFFF.0016: unknown main item tag 0xd [ 228.178959][ T9] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 228.202033][ T9] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 228.397311][ T8271] batadv_slave_1: entered promiscuous mode [ 228.411388][ T8270] batadv_slave_1: left promiscuous mode [ 228.541136][ T306] usb 1-1: USB disconnect, device number 55 [ 228.596830][ T8280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8280 comm=syz.3.2744 [ 228.610530][ T8280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8280 comm=syz.3.2744 [ 228.707461][ T8296] can: request_module (can-proto-0) failed. [ 228.888018][ T8309] IPv6: syztnl1: Disabled Multicast RS [ 228.967431][ T8321] overlayfs: failed to resolve 'index=off': -2 [ 229.099938][ T8329] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 229.114525][ T8329] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 229.358498][ T8356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=8356 comm=syz.0.2767 [ 229.372058][ T8356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8356 comm=syz.0.2767 [ 229.385756][ T8356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8356 comm=syz.0.2767 [ 229.398559][ T8356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=8356 comm=syz.0.2767 [ 229.543870][ T8390] overlayfs: failed to clone upperpath [ 229.680018][ T8413] overlayfs: failed to clone upperpath [ 229.697730][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2784'. [ 229.765471][ T8418] overlayfs: failed to resolve './bus': -2 [ 230.008153][ T8445] overlay: Unknown parameter 'mounts' [ 230.013972][ T8445] overlay: Unknown parameter 'mounts' [ 230.020344][ T8445] overlay: Unknown parameter 'mounts' [ 230.026210][ T8445] overlay: Unknown parameter 'mounts' [ 230.032348][ T8445] overlay: Unknown parameter 'mounts' [ 230.038175][ T8445] overlay: Unknown parameter 'mounts' [ 230.044125][ T8445] overlay: Unknown parameter 'mounts' [ 230.049924][ T8445] overlay: Unknown parameter 'mounts' [ 230.055667][ T8445] overlay: Unknown parameter 'mounts' [ 230.061620][ T8445] overlay: Unknown parameter 'mounts' [ 230.067399][ T8445] overlay: Unknown parameter 'mounts' [ 230.073579][ T8445] overlay: Unknown parameter 'mounts' [ 230.079361][ T8445] overlay: Unknown parameter 'mounts' [ 230.085521][ T8445] overlay: Unknown parameter 'mounts' [ 230.091423][ T8445] overlay: Unknown parameter 'mounts' [ 230.097239][ T8445] overlay: Unknown parameter 'mounts' [ 230.103177][ T8445] overlay: Unknown parameter 'mounts' [ 230.109142][ T8445] overlay: Unknown parameter 'mounts' [ 230.115089][ T8445] overlay: Unknown parameter 'mounts' [ 230.120862][ T8445] overlay: Unknown parameter 'mounts' [ 230.126649][ T8445] overlay: Unknown parameter 'mounts' [ 230.132585][ T8445] overlay: Unknown parameter 'mounts' [ 230.138345][ T8445] overlay: Unknown parameter 'mounts' [ 230.144294][ T8445] overlay: Unknown parameter 'mounts' [ 230.150105][ T8445] overlay: Unknown parameter 'mounts' [ 230.155871][ T8445] overlay: Unknown parameter 'mounts' [ 230.161807][ T8445] overlay: Unknown parameter 'mounts' [ 230.167598][ T8445] overlay: Unknown parameter 'mounts' [ 230.173547][ T8445] overlay: Unknown parameter 'mounts' [ 230.179375][ T8445] overlay: Unknown parameter 'mounts' [ 230.185335][ T8445] overlay: Unknown parameter 'mounts' [ 230.395596][ T8456] cgroup2: Unknown parameter 'memory_recurZÞ·òÊsi‰R9îèòë2“rÞ±:_¶Ï~ùÿöY¡gZÔà8Á$¯ç1Úƒ¼ÚÝW#h>€ô„G+½8Ô®n6^oS}L¦‘Æq¦åh-´º·‡£ [ 230.395596][ T8456] 8Õ†Ö¡Ðááü­mî¡ ƒ?ÖùÁ¿þ£cð®Sé<>ÏJ…/7²«õ>²ÐL>kž wd·ÆÚ>_·ÒXU‡U½8-ë' [ 230.424476][ T8456] /dev/rnullb0: Can't lookup blockdev [ 230.479458][ T683] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 230.619492][ T683] usb 1-1: device descriptor read/64, error -71 [ 230.730485][ T36] kauditd_printk_skb: 635 callbacks suppressed [ 230.730503][ T36] audit: type=1400 audit(2000000271.464:21176): avc: denied { ioctl } for pid=8449 comm="syz.0.2797" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 230.775630][ T36] audit: type=1400 audit(2000000271.474:21177): avc: denied { ioctl } for pid=8449 comm="syz.0.2797" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 230.813550][ T36] audit: type=1400 audit(2000000271.474:21178): avc: denied { ioctl } for pid=8449 comm="syz.0.2797" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 230.838770][ T36] audit: type=1400 audit(2000000271.474:21179): avc: denied { ioctl } for pid=8449 comm="syz.0.2797" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 230.863908][ T36] audit: type=1400 audit(2000000271.474:21180): avc: denied { ioctl } for pid=8449 comm="syz.0.2797" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 230.869460][ T683] usb 1-1: device descriptor read/64, error -71 [ 230.888992][ T36] audit: type=1400 audit(2000000271.474:21181): avc: denied { ioctl } for pid=8449 comm="syz.0.2797" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 230.920200][ T36] audit: type=1400 audit(2000000271.474:21182): avc: denied { ioctl } for pid=8449 comm="syz.0.2797" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 230.945188][ T36] audit: type=1400 audit(2000000271.544:21183): avc: denied { ioctl } for pid=8449 comm="syz.0.2797" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 231.009958][ T36] audit: type=1400 audit(2000000271.744:21184): avc: denied { ioctl } for pid=8449 comm="syz.0.2797" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 231.034917][ T36] audit: type=1400 audit(2000000271.744:21185): avc: denied { ioctl } for pid=8449 comm="syz.0.2797" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 231.139465][ T683] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 231.269519][ T683] usb 1-1: device descriptor read/64, error -71 [ 231.509510][ T683] usb 1-1: device descriptor read/64, error -71 [ 231.619823][ T683] usb usb1-port1: attempt power cycle [ 231.959481][ T683] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 231.981286][ T683] usb 1-1: device descriptor read/8, error -71 [ 232.111387][ T683] usb 1-1: device descriptor read/8, error -71 [ 232.349500][ T683] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 232.371736][ T683] usb 1-1: device descriptor read/8, error -71 [ 232.501372][ T683] usb 1-1: device descriptor read/8, error -71 [ 232.609546][ T683] usb usb1-port1: unable to enumerate USB device [ 249.824893][ T36] kauditd_printk_skb: 54 callbacks suppressed [ 249.824911][ T36] audit: type=1400 audit(2000000290.554:21240): avc: denied { create } for pid=8471 comm="syz.2.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 249.869457][ T36] audit: type=1400 audit(2000000290.554:21241): avc: denied { ioctl } for pid=8471 comm="syz.2.2809" path="socket:[40973]" dev="sockfs" ino=40973 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 249.919570][ T36] audit: type=1400 audit(2000000290.554:21242): avc: denied { create } for pid=8474 comm="syz.3.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 249.940026][ T36] audit: type=1400 audit(2000000290.554:21243): avc: denied { create } for pid=8471 comm="syz.2.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 249.967331][ T36] audit: type=1400 audit(2000000290.554:21244): avc: denied { setopt } for pid=8474 comm="syz.3.2810" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 250.007570][ T36] audit: type=1400 audit(2000000290.554:21245): avc: denied { setopt } for pid=8471 comm="syz.2.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 250.028664][ T36] audit: type=1400 audit(2000000290.564:21246): avc: denied { read write } for pid=8469 comm="syz.0.2807" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 250.059952][ T36] audit: type=1400 audit(2000000290.564:21247): avc: denied { read write open } for pid=8469 comm="syz.0.2807" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 250.090703][ T36] audit: type=1400 audit(2000000290.564:21248): avc: denied { ioctl } for pid=8469 comm="syz.0.2807" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 250.117239][ T36] audit: type=1400 audit(2000000290.564:21249): avc: denied { read write } for pid=8469 comm="syz.0.2807" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 250.176015][ T8501] rust_binder: Write failure EFAULT in pid:1302 [ 250.671140][ T8531] overlayfs: failed to clone upperpath [ 250.683703][ T8533] binder: Unknown parameter 'fowner>00000000000000000000' [ 250.860619][ T8546] 9pnet_fd: Insufficient options for proto=fd [ 250.871304][ T8546] 9pnet_fd: Insufficient options for proto=fd [ 250.907697][ T8557] overlayfs: failed to clone upperpath [ 250.922430][ T8557] fuse: Bad value for 'fd' [ 250.989487][ T306] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 251.136248][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2844'. [ 251.139452][ T306] usb 1-1: Invalid ep0 maxpacket: 16 [ 251.274347][ T8592] overlayfs: failed to clone upperpath [ 251.279482][ T306] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 251.439452][ T306] usb 1-1: Invalid ep0 maxpacket: 16 [ 251.455089][ T306] usb usb1-port1: attempt power cycle [ 251.799477][ T306] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 251.830357][ T306] usb 1-1: Invalid ep0 maxpacket: 16 [ 251.959492][ T306] usb 1-1: new low-speed USB device number 63 using dummy_hcd [ 251.990628][ T306] usb 1-1: Invalid ep0 maxpacket: 16 [ 251.998222][ T306] usb usb1-port1: unable to enumerate USB device [ 252.045454][ T8659] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8 sclass=netlink_xfrm_socket pid=8659 comm=syz.2.2868 [ 252.397037][ T8699] sit0: entered promiscuous mode [ 252.403239][ T8699] netlink: 'syz.2.2883': attribute type 1 has an invalid length. [ 252.412867][ T8699] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2883'. [ 252.452148][ T8704] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2884'. [ 252.607735][ T8726] /dev/rnullb0: Can't lookup blockdev [ 253.067574][ T8740] fuse: Bad value for 'group_id' [ 253.072604][ T8740] fuse: Bad value for 'group_id' [ 253.088313][ T8740] overlayfs: failed to clone upperpath [ 253.242830][ T8747] fuse: Bad value for 'user_id' [ 253.247757][ T8747] fuse: Bad value for 'user_id' [ 253.296922][ T8754] overlayfs: failed to clone upperpath [ 253.324843][ T8756] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2901'. [ 253.765548][ T8778] rust_binder: Write failure EFAULT in pid:1334 [ 253.984208][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2915'. [ 254.008408][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2915'. [ 254.550377][ T683] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 254.722978][ T683] usb 1-1: Using ep0 maxpacket: 32 [ 254.740485][ T683] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.761822][ T683] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.811528][ T683] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 254.832060][ T683] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 254.849446][ T683] usb 1-1: Product: syz [ 254.859449][ T683] usb 1-1: Manufacturer: syz [ 254.874314][ T36] kauditd_printk_skb: 606 callbacks suppressed [ 254.874328][ T36] audit: type=1400 audit(2000000295.604:21856): avc: denied { create } for pid=8833 comm="syz.3.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 255.010154][ T683] hub 1-1:4.0: USB hub found [ 255.014836][ T36] audit: type=1400 audit(2000000295.644:21857): avc: denied { bind } for pid=8833 comm="syz.3.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 255.129546][ T36] audit: type=1400 audit(2000000295.644:21858): avc: denied { create } for pid=8833 comm="syz.3.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 255.210551][ T683] hub 1-1:4.0: 9 ports detected [ 255.231684][ T683] hub 1-1:4.0: insufficient power available to use all downstream ports [ 255.237044][ T36] audit: type=1400 audit(2000000295.644:21859): avc: denied { bind } for pid=8833 comm="syz.3.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 255.259547][ T36] audit: type=1400 audit(2000000295.644:21860): avc: denied { setopt } for pid=8833 comm="syz.3.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 255.279114][ T36] audit: type=1400 audit(2000000295.644:21861): avc: denied { create } for pid=8833 comm="syz.3.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 255.298715][ T36] audit: type=1400 audit(2000000295.644:21862): avc: denied { bind } for pid=8833 comm="syz.3.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 255.318165][ T36] audit: type=1400 audit(2000000295.644:21863): avc: denied { create } for pid=8833 comm="syz.3.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 255.327788][ T683] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 255.344801][ T36] audit: type=1400 audit(2000000295.644:21864): avc: denied { write } for pid=8833 comm="syz.3.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 255.369745][ T683] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 255.409620][ T36] audit: type=1400 audit(2000000295.734:21865): avc: denied { ioctl } for pid=8815 comm="syz.0.2925" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 255.411048][ T683] usb 1-1: USB disconnect, device number 64 [ 255.514225][ T8855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 255.535981][ T8857] binder: Unknown parameter 'b ' [ 255.552013][ T8855] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 255.620551][ T8860] rust_binder: Error while translating object. [ 255.648706][ T8860] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 255.668875][ T8860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1353 [ 255.729921][ T8867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2940'. [ 256.478627][ T8893] input: syz0 as /devices/virtual/input/input27 [ 256.550680][ T8897] netlink: 'syz.3.2950': attribute type 4 has an invalid length. [ 256.563563][ T8897] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2950'. [ 256.949467][ T306] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 257.101607][ T306] usb 1-1: config 1 interface 0 altsetting 210 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 257.112880][ T306] usb 1-1: config 1 interface 0 altsetting 210 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 257.125943][ T306] usb 1-1: config 1 interface 0 has no altsetting 0 [ 257.135090][ T306] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.144210][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.152202][ T306] usb 1-1: Product: syz [ 257.156369][ T306] usb 1-1: Manufacturer: syz [ 257.160961][ T306] usb 1-1: SerialNumber: syz [ 257.168550][ T8908] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 257.380162][ T306] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 257.402786][ T306] usb 1-1: USB disconnect, device number 65 [ 257.502547][ T1052] bridge_slave_1: left allmulticast mode [ 257.508212][ T1052] bridge_slave_1: left promiscuous mode [ 257.514319][ T1052] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.524048][ T1052] bridge_slave_0: left allmulticast mode [ 257.529813][ T1052] bridge_slave_0: left promiscuous mode [ 257.535670][ T1052] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.616279][ T8925] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.623358][ T8925] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.630746][ T8925] bridge_slave_0: entered allmulticast mode [ 257.637042][ T8925] bridge_slave_0: entered promiscuous mode [ 257.644689][ T8925] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.651751][ T8925] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.658840][ T8925] bridge_slave_1: entered allmulticast mode [ 257.665140][ T8925] bridge_slave_1: entered promiscuous mode [ 257.671100][ T1052] tipc: Left network mode [ 257.682127][ T1052] veth1_macvtap: left promiscuous mode [ 257.687679][ T1052] veth0_vlan: left promiscuous mode [ 257.780531][ T8925] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.787578][ T8925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.794832][ T8925] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.801862][ T8925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.841022][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.848508][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.860933][ T1049] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.867985][ T1049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.877871][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.884929][ T1050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.943859][ T8925] veth0_vlan: entered promiscuous mode [ 257.971145][ T8925] veth1_macvtap: entered promiscuous mode [ 258.309464][ T683] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 258.449465][ T683] usb 5-1: device descriptor read/64, error -71 [ 258.689464][ T683] usb 5-1: device descriptor read/64, error -71 [ 258.857612][ T8964] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 258.929460][ T683] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 259.053344][ T8968] rust_binder: Error in use_page_slow: ESRCH [ 259.053366][ T8968] rust_binder: use_range failure ESRCH [ 259.059488][ T683] usb 5-1: device descriptor read/64, error -71 [ 259.061571][ T8968] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 259.071217][ T8968] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 259.079186][ T8968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1386 [ 259.160040][ T8975] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=8975 comm=syz.0.2974 [ 259.182759][ T8975] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1389 [ 259.264998][ T8987] overlayfs: failed to resolve './file0': -2 [ 259.312632][ T8990] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 259.320948][ T683] usb 5-1: device descriptor read/64, error -71 [ 259.429882][ T683] usb usb5-port1: attempt power cycle [ 259.519598][ T306] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 259.671348][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.682349][ T306] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.695170][ T306] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 259.704211][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.713561][ T306] usb 1-1: config 0 descriptor?? [ 259.779487][ T683] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 259.801667][ T683] usb 5-1: device descriptor read/8, error -71 [ 259.922495][ T36] kauditd_printk_skb: 929 callbacks suppressed [ 259.922512][ T36] audit: type=1400 audit(2000000300.654:22795): avc: denied { ioctl } for pid=8982 comm="syz.0.2977" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 259.931860][ T683] usb 5-1: device descriptor read/8, error -71 [ 259.954147][ T36] audit: type=1400 audit(2000000300.654:22796): avc: denied { ioctl } for pid=8982 comm="syz.0.2977" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 259.984996][ T36] audit: type=1400 audit(2000000300.664:22797): avc: denied { ioctl } for pid=8938 comm="syz.4.2960" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 260.010838][ T36] audit: type=1400 audit(2000000300.664:22798): avc: denied { ioctl } for pid=8938 comm="syz.4.2960" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 260.036484][ T36] audit: type=1400 audit(2000000300.664:22799): avc: denied { ioctl } for pid=8938 comm="syz.4.2960" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 260.062125][ T36] audit: type=1400 audit(2000000300.664:22800): avc: denied { ioctl } for pid=8938 comm="syz.4.2960" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 260.087762][ T36] audit: type=1400 audit(2000000300.664:22801): avc: denied { ioctl } for pid=8938 comm="syz.4.2960" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 260.113301][ T36] audit: type=1400 audit(2000000300.694:22802): avc: denied { ioctl } for pid=8938 comm="syz.4.2960" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 260.138585][ T36] audit: type=1400 audit(2000000300.784:22803): avc: denied { execmem } for pid=9018 comm="syz.2.2989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 260.152362][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.161193][ T36] audit: type=1400 audit(2000000300.784:22804): avc: denied { execute } for pid=9018 comm="syz.2.2989" path=2F6D656D66643A76A6F56C6A362C72AFE8102FEC67EDE36880B821793677DADDB90A52E84099B98A0F5A09908B70108486748ABAC6FBD20CEF26ADA84DE808B023AC29811E8A0C1144E36C875C1548647E5C1195F8E6A7C3BC182B92924E07A77F4E9B4CF8EB517302F9AD698F0FFF026E9D85EA1A2A1B49D81CE89B5953251D1086A00BEAD989DAA75764A445758C736DA12ED1B2491AB2FD419816CA8379F91AE706680776A8D8CE59C0E676B5F59DBEA538B432D85624E6C81CAF8EA1EF61B12FEE313DBF4DEA770CA2871C281A2DEBFB56EB34D4435DC77B74F9D560495A0348D986E1324E1FD87BF57A40E0202864656C6574656429 dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 260.169463][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.236340][ T683] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 260.245794][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.261713][ T683] usb 5-1: device descriptor read/8, error -71 [ 260.271541][ T9024] overlayfs: missing 'lowerdir' [ 260.277551][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.286473][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.294107][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.301520][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.315918][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.323579][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.334120][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.341483][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.348405][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.356118][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.364361][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.371733][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.378677][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.386725][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.394534][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.395682][ T683] usb 5-1: device descriptor read/8, error -71 [ 260.402742][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.419527][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.426606][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.434233][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.443506][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.467252][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.475343][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.482744][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.490125][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.497033][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.504622][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.511971][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.518855][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.519859][ T683] usb usb5-port1: unable to enumerate USB device [ 260.526683][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.538919][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.545786][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.552667][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.559565][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.566417][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.573327][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.580202][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.587035][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.593906][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.600792][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.607634][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.614520][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.621422][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.631286][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.638155][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.645055][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.651960][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.658832][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.665707][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.672605][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.679484][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.686331][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.693184][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.700064][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.706901][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.713773][ T306] ortek 0003:1223:3F07.0017: unknown main item tag 0x0 [ 260.723960][ T306] ortek 0003:1223:3F07.0017: hidraw0: USB HID v0.00 Device [HID 1223:3f07] on usb-dummy_hcd.0-1/input0 [ 260.740052][ T306] usb 1-1: USB disconnect, device number 66 [ 260.773471][ T9049] fido_id[9049]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 261.229450][ T683] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 261.406816][ T683] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 261.422954][ T683] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 261.446184][ T683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 261.458032][ T9082] __vm_enough_memory: pid: 9082, comm: syz.4.3007, bytes: 279172874240 not enough memory for the allocation [ 261.471132][ T683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 261.482905][ T683] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 261.496408][ T683] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 261.511036][ T683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.522045][ T683] usb 1-1: config 0 descriptor?? [ 261.528326][ T9051] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 261.750203][ T9087] binder: Unknown parameter 'defcontext01777777777777777777777' [ 261.856227][ T9117] /dev/rnullb0: Can't lookup blockdev [ 262.092482][ T9144] netlink: 'syz.3.3023': attribute type 12 has an invalid length. [ 262.189461][ T306] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 262.213948][ T9051] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2998'. [ 262.281855][ T683] usbhid 1-1:0.0: can't add hid device: -71 [ 262.287824][ T683] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 262.302908][ T683] usb 1-1: USB disconnect, device number 67 [ 262.359464][ T306] usb 5-1: Using ep0 maxpacket: 8 [ 262.372668][ T306] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.388671][ T306] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 262.402120][ T306] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 262.413667][ T306] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 262.424794][ T306] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 262.433846][ T306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.445400][ T306] hub 5-1:1.0: bad descriptor, ignoring hub [ 262.453576][ T306] hub 5-1:1.0: probe with driver hub failed with error -5 [ 262.461540][ T306] cdc_wdm 5-1:1.0: skipping garbage [ 262.466746][ T306] cdc_wdm 5-1:1.0: skipping garbage [ 262.479544][ T306] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 262.486058][ T306] cdc_wdm 5-1:1.0: Unknown control protocol [ 262.749561][ T306] usb 5-1: USB disconnect, device number 42 [ 262.863019][ T9176] FAT-fs (rnullb0): bogus number of reserved sectors [ 262.869762][ T9176] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 263.089464][ T306] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 263.132172][ T9180] /dev/rnullb0: Can't lookup blockdev [ 263.165587][ T9186] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3037'. [ 263.244054][ T306] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.252296][ T9194] netlink: 'syz.3.3040': attribute type 19 has an invalid length. [ 263.254217][ T306] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 263.270883][ T306] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 263.281997][ T306] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 263.291056][ T306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.301973][ T9126] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 263.310978][ T306] hub 5-1:1.0: bad descriptor, ignoring hub [ 263.316884][ T306] hub 5-1:1.0: probe with driver hub failed with error -5 [ 263.324441][ T306] cdc_wdm 5-1:1.0: skipping garbage [ 263.329658][ T306] cdc_wdm 5-1:1.0: skipping garbage [ 263.336340][ T306] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 263.342264][ T306] cdc_wdm 5-1:1.0: Unknown control protocol [ 263.929459][ T9223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1406 [ 263.930626][ T9223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1406 [ 264.552087][ T9242] rust_binder: Error while translating object. [ 264.569496][ T9242] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 264.583556][ T9242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1413 [ 264.609075][ T9277] lo: entered promiscuous mode [ 264.631877][ T9276] lo: left promiscuous mode [ 264.682096][ T9283] overlayfs: failed to clone upperpath [ 264.934103][ T36] kauditd_printk_skb: 1090 callbacks suppressed [ 264.934120][ T36] audit: type=1400 audit(2000000305.664:23895): avc: denied { mounton } for pid=9292 comm="syz.3.3070" path="/286/bus" dev="tmpfs" ino=1574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 264.981539][ T9293] overlayfs: failed to clone upperpath [ 265.017365][ T9297] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 265.022628][ T36] audit: type=1400 audit(2000000305.674:23896): avc: denied { read write } for pid=8925 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.066796][ T339] usb 5-1: USB disconnect, device number 43 [ 265.095494][ T36] audit: type=1400 audit(2000000305.674:23897): avc: denied { read write open } for pid=8925 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.161243][ T36] audit: type=1400 audit(2000000305.674:23898): avc: denied { ioctl } for pid=8925 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.261211][ T36] audit: type=1400 audit(2000000305.694:23899): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.325309][ T9310] 9pnet_fd: Insufficient options for proto=fd [ 265.335760][ T36] audit: type=1400 audit(2000000305.694:23900): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.367161][ T9310] overlay: Unknown parameter 'appraise' [ 265.407344][ T36] audit: type=1400 audit(2000000305.694:23901): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.439465][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 265.459438][ T36] audit: type=1400 audit(2000000305.744:23902): avc: denied { mounton } for pid=9294 comm="syz.4.3072" path="/8/file0" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 265.519459][ T36] audit: type=1400 audit(2000000305.744:23903): avc: denied { mount } for pid=9294 comm="syz.4.3072" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 265.559447][ T36] audit: type=1400 audit(2000000305.744:23904): avc: denied { create } for pid=9296 comm="syz.0.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 265.610525][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 265.620260][ T9319] binder: Bad value for 'max' [ 265.630428][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.653701][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 265.662773][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.679201][ T9] usb 5-1: config 0 descriptor?? [ 265.949488][ T339] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 266.089475][ T339] usb 1-1: device descriptor read/64, error -71 [ 266.108473][ T9] arvo 0003:1E7D:30D4.0018: unknown main item tag 0x0 [ 266.115325][ T9] arvo 0003:1E7D:30D4.0018: unknown main item tag 0x0 [ 266.122128][ T9] arvo 0003:1E7D:30D4.0018: unknown main item tag 0x0 [ 266.128953][ T9] arvo 0003:1E7D:30D4.0018: unknown main item tag 0x0 [ 266.135735][ T9] arvo 0003:1E7D:30D4.0018: unknown main item tag 0x0 [ 266.143658][ T9] arvo 0003:1E7D:30D4.0018: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 266.319496][ T9] arvo 0003:1E7D:30D4.0018: couldn't init struct arvo_device [ 266.327636][ T9] arvo 0003:1E7D:30D4.0018: couldn't install keyboard [ 266.335437][ T9] arvo 0003:1E7D:30D4.0018: probe with driver arvo failed with error -71 [ 266.340277][ T339] usb 1-1: device descriptor read/64, error -71 [ 266.346784][ T9] usb 5-1: USB disconnect, device number 44 [ 266.548987][ T9346] tmpfs: Unknown parameter 'appraise_type' [ 266.599476][ T339] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 266.701898][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3092'. [ 266.739465][ T339] usb 1-1: device descriptor read/64, error -71 [ 266.989468][ T339] usb 1-1: device descriptor read/64, error -71 [ 267.099932][ T339] usb usb1-port1: attempt power cycle [ 267.397916][ T9404] overlayfs: failed to clone upperpath [ 267.439769][ T339] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 267.476923][ T339] usb 1-1: device descriptor read/8, error -71 [ 267.509771][ T9415] netlink: 'syz.3.3115': attribute type 4 has an invalid length. [ 267.587620][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x6 [ 267.601924][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.609359][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.617441][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.621457][ T339] usb 1-1: device descriptor read/8, error -71 [ 267.624983][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.643289][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.653770][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.661184][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.668598][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.679882][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.686630][ T9425] 9pnet_fd: Insufficient options for proto=fd [ 267.687272][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.701202][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.711417][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.719494][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.726916][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.734353][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.741845][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.749231][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.756663][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.764105][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.771780][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.779281][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.786717][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.794117][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.801592][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.808985][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.816565][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.824122][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.831562][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.838943][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.847019][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.854406][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.861794][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.869160][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.876553][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.879476][ T339] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 267.883954][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.898839][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.906329][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.913725][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.921129][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.922102][ T339] usb 1-1: device descriptor read/8, error -71 [ 267.928503][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.928531][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.950670][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.958054][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.965433][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.972822][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.980197][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.987566][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 267.994947][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.002348][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.009738][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.017107][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.024489][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.031880][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.039238][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.046615][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.054008][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.061393][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.068761][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.076151][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x6 [ 268.081975][ T339] usb 1-1: device descriptor read/8, error -71 [ 268.083590][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x3 [ 268.097046][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.104425][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.111809][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.119175][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.126566][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.133944][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.141333][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.148700][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.156079][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.163456][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.170839][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.178206][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.185593][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.192971][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.200348][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.207769][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.209888][ T339] usb usb1-port1: unable to enumerate USB device [ 268.215156][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.228834][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.236219][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.243623][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.251002][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.258368][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.265742][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.273122][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.280500][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.287865][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.295256][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.302642][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.310029][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.317395][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.324973][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.332364][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.339742][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.347107][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.354482][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.361869][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.369236][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.376610][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.383990][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.391366][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.398730][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.406137][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.413648][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.421037][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.428403][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.435777][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.443159][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.450550][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.457924][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.465324][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.472720][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.480143][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.487535][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.494936][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.502440][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.509960][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.517338][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.524869][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.532540][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.540033][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.547816][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.555232][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.562630][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.570040][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.577534][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.584947][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.592347][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.599762][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.607149][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.614561][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.621956][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.629334][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.636736][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.644134][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.651536][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.658917][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.666332][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.673731][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.681136][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.691485][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.699053][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.706678][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.714186][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.739467][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.746865][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.764651][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.784134][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.796741][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.814332][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.829460][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.849460][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.860910][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.868306][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.882661][ T9455] overlayfs: failed to clone upperpath [ 268.892388][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.909456][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.916849][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.930910][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.938891][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.947515][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.958462][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.966605][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 268.974827][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.007401][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.016362][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.024863][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.032955][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.043883][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.052086][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.060413][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.079459][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.087700][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.095513][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.104074][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.112117][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.120192][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.131941][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.145970][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.154578][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.162600][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.170639][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.178029][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.186396][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.199299][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.207339][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.215522][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.224034][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.232038][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.240032][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.247423][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.266763][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.274368][ T683] hid-generic 01FF:0004:0400.0019: unknown main item tag 0x0 [ 269.286674][ T683] hid-generic 01FF:0004:0400.0019: hidraw0: HID v0.05 Device [syz0] on syz1 [ 269.392858][ T9477] fido_id[9477]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 269.434792][ T9487] FAT-fs (rnullb0): bogus number of reserved sectors [ 269.449457][ T9487] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 269.959454][ T36] kauditd_printk_skb: 483 callbacks suppressed [ 269.959470][ T36] audit: type=1400 audit(2000000310.664:24388): avc: denied { create } for pid=9499 comm="syz.2.3142" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 270.002229][ T9502] /dev/rnullb0: Can't lookup blockdev [ 270.014278][ T36] audit: type=1400 audit(2000000310.664:24389): avc: denied { ioctl } for pid=9499 comm="syz.2.3142" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=43636 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 270.099447][ T36] audit: type=1400 audit(2000000310.664:24390): avc: denied { ioctl } for pid=9499 comm="syz.2.3142" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=43636 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 270.203196][ T36] audit: type=1400 audit(2000000310.684:24391): avc: denied { create } for pid=9501 comm="syz.3.3143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 270.329273][ T36] audit: type=1400 audit(2000000310.684:24392): avc: denied { create } for pid=9501 comm="syz.3.3143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 270.406346][ T36] audit: type=1400 audit(2000000310.714:24393): avc: denied { name_bind } for pid=9501 comm="syz.3.3143" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 270.457966][ T36] audit: type=1400 audit(2000000310.714:24394): avc: denied { node_bind } for pid=9501 comm="syz.3.3143" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 270.523351][ T36] audit: type=1400 audit(2000000310.724:24395): avc: denied { ioctl } for pid=9499 comm="syz.2.3142" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=43636 ioctlcmd=0xaa01 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 270.549754][ T36] audit: type=1400 audit(2000000310.724:24396): avc: denied { getattr } for pid=9499 comm="syz.2.3142" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=43636 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 270.574817][ T36] audit: type=1400 audit(2000000310.724:24397): avc: denied { create } for pid=9499 comm="syz.2.3142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 270.794819][ T9529] binder: Bad value for 'max' [ 270.796338][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3154'. [ 270.812434][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3154'. [ 270.819517][ T9531] binder: Bad value for 'max' [ 270.952170][ T9547] syz_tun: tun_net_xmit 62 [ 271.141184][ T9556] rust_binder: 9554 RLIMIT_NICE not set [ 271.282546][ T9567] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 271.309448][ T9567] rust_binder: Write failure EINVAL in pid:63 [ 271.942175][ T9608] rust_binder: Failed to allocate buffer. len:144, is_oneway:true [ 272.233805][ T9618] SELinux: security_context_str_to_sid () failed with errno=-22 [ 272.958077][ T9662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 272.958106][ T9662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1479 [ 273.263474][ T9678] rust_binder: Write failure EINVAL in pid:92 [ 273.456957][ T9701] overlay: ./file0 is not a directory [ 273.474367][ T9700] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock [ 273.585155][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3210'. [ 273.587984][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3210'. [ 273.648282][ T683] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 273.810082][ T683] usb 5-1: too many configurations: 240, using maximum allowed: 8 [ 273.832470][ T683] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 273.843846][ T683] usb 5-1: can't read configurations, error -61 [ 274.929481][ T683] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 274.969208][ T9741] SELinux: failed to load policy [ 274.974968][ T36] kauditd_printk_skb: 771 callbacks suppressed [ 274.974984][ T36] audit: type=1400 audit(2000000315.704:25169): avc: denied { getopt } for pid=9737 comm="syz.0.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 275.000985][ T36] audit: type=1400 audit(2000000315.704:25170): avc: denied { write } for pid=9737 comm="syz.0.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 275.021813][ T36] audit: type=1400 audit(2000000315.754:25171): avc: denied { ioctl } for pid=9694 comm="syz.4.3206" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 275.046817][ T36] audit: type=1400 audit(2000000315.754:25172): avc: denied { mount } for pid=9739 comm="syz.3.3222" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 275.090842][ T36] audit: type=1400 audit(2000000315.824:25173): avc: denied { create } for pid=9743 comm="syz.3.3223" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 275.100375][ T683] usb 5-1: too many configurations: 240, using maximum allowed: 8 [ 275.112319][ T36] audit: type=1400 audit(2000000315.834:25174): avc: denied { ioctl } for pid=9694 comm="syz.4.3206" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 275.123168][ T683] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 275.144997][ T36] audit: type=1400 audit(2000000315.834:25175): avc: denied { ioctl } for pid=9694 comm="syz.4.3206" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 275.153758][ T683] usb 5-1: can't read configurations, error -61 [ 275.178539][ T36] audit: type=1400 audit(2000000315.854:25176): avc: denied { ioctl } for pid=9694 comm="syz.4.3206" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 275.184516][ T683] usb usb5-port1: attempt power cycle [ 275.209528][ T36] audit: type=1400 audit(2000000315.854:25177): avc: denied { ioctl } for pid=9694 comm="syz.4.3206" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 275.238894][ T36] audit: type=1400 audit(2000000315.854:25178): avc: denied { ioctl } for pid=9694 comm="syz.4.3206" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 275.331609][ T9755] 9pnet_fd: Insufficient options for proto=fd [ 275.549502][ T683] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 275.571118][ T683] usb 5-1: too many configurations: 240, using maximum allowed: 8 [ 275.581938][ T683] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 275.591008][ T683] usb 5-1: can't read configurations, error -61 [ 275.719475][ T683] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 275.740777][ T683] usb 5-1: too many configurations: 240, using maximum allowed: 8 [ 275.750638][ T683] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 275.758207][ T683] usb 5-1: can't read configurations, error -61 [ 275.764573][ T683] usb usb5-port1: unable to enumerate USB device [ 275.926435][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3234'. [ 275.935445][ T9778] bridge_slave_1: left allmulticast mode [ 275.941187][ T9778] bridge_slave_1: left promiscuous mode [ 275.946924][ T9778] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.954617][ T9778] bridge_slave_0: left allmulticast mode [ 275.960448][ T9778] bridge_slave_0: left promiscuous mode [ 275.966066][ T9778] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.603340][ T9798] binder: Bad value for 'stats' [ 276.630880][ T9800] overlayfs: failed to clone upperpath [ 276.672642][ T9800] overlayfs: failed to clone upperpath [ 276.718903][ T1049] tipc: Subscription rejected, illegal request [ 276.849280][ T9825] rust_binder: Error while translating object. [ 276.849319][ T9825] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 276.860016][ T9825] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111 [ 276.883302][ T9828] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 276.940506][ T9833] rust_binder: Error while translating object. [ 276.940537][ T9833] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 276.946758][ T9833] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1527 [ 277.299727][ T9860] can: request_module (can-proto-0) failed. [ 277.479769][ T9868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1549 [ 277.584692][ T9879] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 277.592382][ T9881] overlayfs: missing 'lowerdir' [ 277.602282][ T9879] rust_binder: Write failure EINVAL in pid:126 [ 277.607822][ T9879] rust_binder: Write failure EFAULT in pid:126 [ 277.701435][ T9883] ------------[ cut here ]------------ [ 277.713099][ T9883] WARNING: CPU: 0 PID: 9883 at mm/page_alloc.c:5157 __alloc_pages_noprof+0xe4/0x6c0 [ 277.722680][ T9883] Modules linked in: [ 277.726743][ T9883] CPU: 0 UID: 0 PID: 9883 Comm: syz.0.3273 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 277.740235][ T9883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.750324][ T9883] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 [ 277.756402][ T9883] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 84 3a ee 05 00 0f 85 c4 00 00 00 c6 05 77 3a ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 277.776055][ T9883] RSP: 0018:ffffc9000e69f680 EFLAGS: 00010246 [ 277.782346][ T9883] RAX: 0000000000000000 RBX: 1ffff92001cd3ed4 RCX: 0000000000000000 [ 277.790347][ T9883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e69f728 [ 277.798321][ T9883] RBP: ffffc9000e69f7a8 R08: ffffc9000e69f727 R09: 0000000000000000 [ 277.798962][ T9892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9892 comm=syz.2.3274 [ 277.806322][ T9883] R10: ffffc9000e69f710 R11: fffff52001cd3ee5 R12: ffffc9000e69f6c0 [ 277.806339][ T9883] R13: 0000000000000010 R14: dffffc0000000000 R15: 0000000000000000 [ 277.834594][ T9883] FS: 00007ffadd88f6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 277.843560][ T9883] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.850161][ T9883] CR2: 0000200000002000 CR3: 000000011375c000 CR4: 00000000003526b0 [ 277.858135][ T9883] Call Trace: [ 277.861460][ T9883] [ 277.864388][ T9883] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 277.870132][ T9883] ? kasan_save_alloc_info+0x40/0x50 [ 277.875421][ T9883] ? __kasan_slab_alloc+0x73/0x90 [ 277.880489][ T9883] ? __hashtab_insert+0x5d/0x1b0 [ 277.885440][ T9883] ? hashtab_init+0xdb/0x1f0 [ 277.890056][ T9883] ___kmalloc_large_node+0x9c/0x1d0 [ 277.895256][ T9883] ? symtab_insert+0x243/0x2b0 [ 277.900045][ T9883] ? hashtab_init+0xdb/0x1f0 [ 277.904638][ T9883] __kmalloc_large_node_noprof+0x1e/0xe0 [ 277.910296][ T9883] ? hashtab_init+0xdb/0x1f0 [ 277.914891][ T9883] __kmalloc_noprof+0x26d/0x450 [ 277.919867][ T9883] hashtab_init+0xdb/0x1f0 [ 277.924290][ T9883] ? policydb_read+0x86f/0x28c0 [ 277.929138][ T9883] symtab_init+0x44/0x70 [ 277.933418][ T9883] policydb_read+0x8fe/0x28c0 [ 277.938097][ T9883] ? kasan_save_alloc_info+0x40/0x50 [ 277.943408][ T9883] ? __cfi_policydb_read+0x10/0x10 [ 277.948525][ T9883] ? security_load_policy+0x128/0x12f0 [ 277.954028][ T9883] security_load_policy+0x162/0x12f0 [ 277.959322][ T9883] ? irqentry_exit+0x4a/0x60 [ 277.963941][ T9883] ? exc_page_fault+0x66/0xc0 [ 277.968627][ T9883] ? asm_exc_page_fault+0x2b/0x30 [ 277.973689][ T9883] ? __cfi_security_load_policy+0x10/0x10 [ 277.979450][ T9883] ? rep_movs_alternative+0x4a/0xa0 [ 277.984652][ T9883] sel_write_load+0x298/0x5e0 [ 277.989308][ T9883] ? __cfi_sel_write_load+0x10/0x10 [ 277.994516][ T9883] ? kasan_save_alloc_info+0x40/0x50 [ 277.999842][ T9883] ? bpf_lsm_file_permission+0xd/0x20 [ 278.005214][ T9883] ? __cfi_sel_write_load+0x10/0x10 [ 278.010413][ T9883] vfs_write+0x3c3/0xe80 [ 278.014661][ T9883] ? asm_exc_page_fault+0x2b/0x30 [ 278.019701][ T9883] ? __cfi_vfs_write+0x10/0x10 [ 278.024460][ T9883] ? __kasan_check_write+0x18/0x20 [ 278.029576][ T9883] ? mutex_lock+0x92/0x1c0 [ 278.033988][ T9883] ? __cfi_mutex_lock+0x10/0x10 [ 278.038819][ T9883] ? __fget_files+0x2c5/0x340 [ 278.043506][ T9883] ksys_write+0x141/0x250 [ 278.047833][ T9883] ? xfd_validate_state+0x68/0x150 [ 278.052948][ T9883] ? __cfi_ksys_write+0x10/0x10 [ 278.057800][ T9883] ? __kasan_check_write+0x18/0x20 [ 278.062914][ T9883] ? fpregs_restore_userregs+0x11d/0x260 [ 278.068541][ T9883] __x64_sys_write+0x7f/0x90 [ 278.073136][ T9883] x64_sys_call+0x271c/0x2ee0 [ 278.077815][ T9883] do_syscall_64+0x58/0xf0 [ 278.082253][ T9883] ? clear_bhb_loop+0x50/0xa0 [ 278.086925][ T9883] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 278.092823][ T9883] RIP: 0033:0x7ffadc98e929 [ 278.097244][ T9883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.116888][ T9883] RSP: 002b:00007ffadd88f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 278.125321][ T9883] RAX: ffffffffffffffda RBX: 00007ffadcbb5fa0 RCX: 00007ffadc98e929 [ 278.133316][ T9883] RDX: 0000000000002046 RSI: 0000200000000000 RDI: 0000000000000008 [ 278.141326][ T9883] RBP: 00007ffadca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 278.149296][ T9883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.157268][ T9883] R13: 0000000000000000 R14: 00007ffadcbb5fa0 R15: 00007ffff6f6eb68 [ 278.165259][ T9883] [ 278.168270][ T9883] ---[ end trace 0000000000000000 ]--- [ 278.173867][ T9883] SELinux: failed to load policy